$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json) Hash identifier: jgIypQxMBfaTxaoFKBfa/tcWsYGpiCMC+sP3OwpjBYE= Subject key identifier: FB:93:1D:32:94:06:E8:C0:AA:D6:D0:8C:91:5B:38:7D:07:B3:0F:0C Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft Manifest number: EE Signing time: Sun 19 Oct 2025 08:17:51 +0000 Manifest this update: Sun 19 Oct 2025 08:17:50 +0000 Manifest next update: Sun 26 Oct 2025 08:17:50 +0000 Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: sKszGS5MC3CzxRURX2n90LK78GWf7w20JDUwf4+JsoI=) 2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Validity Not Before: Oct 19 08:17:50 2025 GMT Not After : Oct 26 08:17:50 2025 GMT Subject: CN=68f49eaf-f2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:32:2a:c7:9f:99:06:1f:0a:65:92:0c:49: 7e:cf:d0:5b:42:a1:d5:16:72:f6:8f:ce:48:0f:67: c8:64:e5:04:b9:99:ab:7e:87:66:a7:7d:59:a2:3c: 92:b6:8a:dc:e6:86:20:5d:8e:17:bc:03:87:a4:34: 10:33:c3:d1:14:46:01:03:af:f3:d0:d3:82:79:8c: 5a:c2:56:a5:f2:ad:ff:97:da:89:9b:ee:a0:3e:e6: 2b:7b:23:c9:5a:88:c6:42:dc:53:60:43:81:dc:79: 27:52:59:b8:02:b8:82:bd:4d:d3:2a:7a:cf:c8:61: 49:dd:86:ea:f1:be:bb:27:3c:0a:9c:db:be:90:c0: 5f:9b:d7:09:53:23:98:23:ff:2a:38:fb:8c:c5:fc: f5:7c:6f:42:26:b4:76:52:66:b5:11:08:bd:86:1a: be:81:ce:40:92:31:7b:df:26:6a:c4:39:92:2f:fa: 91:46:ae:e3:9b:cf:85:a6:70:9a:ac:87:96:ee:2f: a8:0f:d9:91:7a:ae:cf:64:5b:48:a5:ca:0f:31:52: 25:ed:09:83:9b:7d:09:28:58:14:fa:56:f8:6a:b7: 6a:e6:9d:4c:eb:e4:0a:10:c6:fe:6a:5e:f0:42:d6: d5:c7:5b:f7:e5:6e:26:6d:ee:33:0e:eb:51:11:18: 78:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:93:1D:32:94:06:E8:C0:AA:D6:D0:8C:91:5B:38:7D:07:B3:0F:0C X509v3 Authority Key Identifier: keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:5a:48:ba:50:f6:d1:b3:25:d9:37:93:6f:2e:a8:87:e7:54: 3f:2a:59:7e:dd:28:89:55:bb:90:46:1e:d6:af:71:6f:32:34: 0b:22:66:1b:81:01:63:5e:51:81:c2:c2:2f:cf:8c:ce:99:7a: 79:70:c3:1f:ad:0f:fb:ce:0d:53:49:30:46:44:b8:86:74:c6: d8:64:b6:05:7a:f1:a5:47:2d:05:43:74:73:cd:d3:a5:70:d2: 1a:17:a4:d5:30:5b:48:53:65:71:ad:1b:88:96:39:0a:99:f1: e1:3b:7d:9b:b6:27:14:67:0e:02:3a:7e:bf:6c:c1:53:94:a9: 83:1a:e1:40:6f:3d:a3:1e:9b:3f:0e:12:7e:1d:00:de:a3:5e: 42:96:1e:8f:e7:cb:f7:e1:f2:53:b8:fb:00:3e:7e:1b:0c:98: 7f:c0:5e:c8:f5:e3:24:8f:fb:50:fc:c1:cb:37:9c:4b:a5:9b: a7:4e:3d:26:79:ba:fd:22:0d:32:04:87:cc:97:87:b3:e1:ae: c2:64:c5:2b:f4:a5:15:a9:95:26:07:b5:45:b6:91:ba:95:31: 77:20:9d:e7:1a:59:5e:7b:0c:b3:ba:8e:ba:bd:78:0f:18:8b: 75:45:e9:bf:bd:cd:51:bc:8c:09:2b:2f:6c:23:ef:b2:7d:00: ff:3c:fe:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5 M0RFQTIzNzUwHhcNMjUxMDE5MDgxNzUwWhcNMjUxMDI2MDgxNzUwWjAYMRYwFAYD VQQDEw02OGY0OWVhZi1mMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgAyKsefmQYfCmWSDEl+z9BbQqHVFnL2j85ID2fIZOUEuZmrfodmp31ZojyS torc5oYgXY4XvAOHpDQQM8PRFEYBA6/z0NOCeYxawlal8q3/l9qJm+6gPuYreyPJ WojGQtxTYEOB3HknUlm4AriCvU3TKnrPyGFJ3Ybq8b67JzwKnNu+kMBfm9cJUyOY I/8qOPuMxfz1fG9CJrR2Uma1EQi9hhq+gc5AkjF73yZqxDmSL/qRRq7jm8+FpnCa rIeW7i+oD9mReq7PZFtIpcoPMVIl7QmDm30JKFgU+lb4ardq5p1M6+QKEMb+al7w QtbVx1v35W4mbe4zDutRERh40QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuTHTKU BujAqtbQjJFbOH0Hsw8MMB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG amZ4S01vVkE4Yk9UM3FJM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnWki6UPbRsyXZN5NvLqiH51Q/Kll+3SiJVbuQRh7Wr3FvMjQLImYb gQFjXlGBwsIvz4zOmXp5cMMfrQ/7zg1TSTBGRLiGdMbYZLYFevGlRy0FQ3RzzdOl cNIaF6TVMFtIU2VxrRuIljkKmfHhO32bticUZw4COn6/bMFTlKmDGuFAbz2jHps/ DhJ+HQDeo15Clh6P58v34fJTuPsAPn4bDJh/wF7I9eMkj/tQ/MHLN5xLpZunTj0m ebr9Ig0yBIfMl4ez4a7CZMUr9KUVqZUmB7VFtpG6lTF3IJ3nGlleewyzuo66vXgP GIt1Rem/vc1RvIwJKy9sI++yfQD/PP6A -----END CERTIFICATE-----Generated at Mon Oct 20 04:03:39 2025 by rpki-client