$ rpki-client -vvf rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft File: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft (raw, json) Hash identifier: CqvSyRDvJhoGEbyGTdyqjb9rW7fFWQgf3HkaG4eh3xA= Subject key identifier: CB:25:06:33:75:CC:08:65:2B:0B:43:68:FB:BA:A0:D4:5F:8F:F0:A8 Authority key identifier: 12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76 Certificate issuer: /CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft Manifest number: 01A3 Signing time: Sun 19 Oct 2025 05:47:59 +0000 Manifest this update: Sun 19 Oct 2025 05:47:58 +0000 Manifest next update: Sun 26 Oct 2025 05:47:58 +0000 Files and hashes: 1: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl (hash: ZkaR2pXQFIfzVxGdg0M2cdZSXiApRwaSsEhRQKjHJ7s=) 2: A60B75F62B7B11EEA4D0FA24C4F9AE02.roa (hash: QlGjMXDN4esCEiynluo/msiy33cpphW/TtlNsWHyAK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B778A, serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876 Validity Not Before: Oct 19 05:47:58 2025 GMT Not After : Oct 26 05:47:58 2025 GMT Subject: CN=68f47b8f-8b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:96:d5:ac:19:e0:60:8f:70:23:3c:eb:b3: b7:17:5e:0a:65:e5:ea:3b:d5:79:ec:69:04:fa:f5: 25:30:72:6a:7f:60:a9:cc:54:31:10:c2:d9:5c:63: d2:71:96:1b:29:e0:b0:63:6e:a1:67:d9:e7:76:b1: ad:04:55:af:e2:28:6f:6d:76:96:54:db:ad:07:6d: 73:70:3b:36:a8:0b:de:f8:ff:a4:f2:b7:43:68:70: d8:5a:d8:44:89:1b:59:35:00:50:e7:6e:52:86:2d: a5:b7:33:81:f4:7f:08:b0:3a:5f:3b:ce:ce:28:bc: 24:76:a3:00:d3:6b:d1:ea:77:f4:33:17:b5:62:a2: 81:55:87:5b:7d:04:2f:80:d1:e8:bd:ce:f3:b1:bb: ce:23:6e:51:e0:2a:a5:db:73:2d:3a:ae:b6:66:f5: 26:f1:62:4c:73:08:c1:0a:8c:83:cb:89:fc:71:14: d3:22:b9:0d:c1:98:13:06:55:ab:09:fc:29:d5:39: 25:86:e8:74:2b:de:51:18:60:2c:0f:4b:5c:0c:c1: 8d:cc:4d:82:e2:d1:59:72:bb:62:fa:7d:a0:ab:7b: 40:fc:66:33:f0:54:42:57:78:fc:86:f8:df:27:ff: cb:08:9c:b0:f5:da:b7:3b:a7:2a:74:81:0f:cd:5a: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:25:06:33:75:CC:08:65:2B:0B:43:68:FB:BA:A0:D4:5F:8F:F0:A8 X509v3 Authority Key Identifier: keyid:12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1f:23:95:85:8d:6b:26:1d:45:34:0a:c4:1e:0e:9b:28:4f: 8c:3a:9b:ab:e1:c8:4b:c6:78:29:c6:f9:f1:99:ed:cf:d1:5e: a6:63:e5:b2:97:8e:76:eb:35:ba:7f:c8:54:ed:65:9f:96:53: 3f:9c:cf:42:9c:c8:f2:2c:02:4f:79:a1:29:de:d9:88:79:1c: 23:dd:0d:10:7a:1c:b8:cf:3d:96:44:8d:83:9a:7e:89:39:08: ca:f4:1f:e9:9e:40:a6:be:82:d9:af:1d:9c:20:93:98:b8:6d: c4:00:cc:59:6e:c8:56:57:d1:65:a7:55:60:bf:cf:6f:e4:2f: 53:23:f1:e2:01:c4:4f:1b:c4:b7:f3:e9:19:af:59:2e:02:fb: 65:d5:54:f7:8e:bf:e5:96:46:f5:1f:12:82:30:68:a0:8f:b0: 9c:41:b9:b5:d9:a1:bf:f6:9b:ef:67:21:4c:5e:ef:8a:b2:04: dc:5a:fe:9c:a7:e2:17:fd:09:94:0a:7e:a6:6f:12:46:2e:88: c0:26:4e:b5:6d:86:ed:ac:3d:84:35:8e:b4:fd:41:17:cf:24: c0:97:73:39:31:3e:b6:f7:1d:2a:36:a8:b7:03:02:50:62:82: c3:d2:2a:3b:f0:69:ed:a1:11:4a:a4:07:c5:80:5a:72:50:74: ce:55:2a:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3OEExMTAvBgNVBAUTKDEyQUJCRTlENEU1OTk4NTg1OTgxMzQ5QTVGQTlCNzVG REFCQzU4NzYwHhcNMjUxMDE5MDU0NzU4WhcNMjUxMDI2MDU0NzU4WjAYMRYwFAYD VQQDEw02OGY0N2I4Zi04YjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY2W1awZ4GCPcCM867O3F14KZeXqO9V57GkE+vUlMHJqf2CpzFQxEMLZXGPS cZYbKeCwY26hZ9nndrGtBFWv4ihvbXaWVNutB21zcDs2qAve+P+k8rdDaHDYWthE iRtZNQBQ525Shi2ltzOB9H8IsDpfO87OKLwkdqMA02vR6nf0Mxe1YqKBVYdbfQQv gNHovc7zsbvOI25R4Cql23MtOq62ZvUm8WJMcwjBCoyDy4n8cRTTIrkNwZgTBlWr Cfwp1Tklhuh0K95RGGAsD0tcDMGNzE2C4tFZcrti+n2gq3tA/GYz8FRCV3j8hvjf J//LCJyw9dq3O6cqdIEPzVrQMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMslBjN1 zAhlKwtDaPu6oNRfj/CoMB8GA1UdIwQYMBaAFBKrvp1OWZhYWYE0ml+pt1/avFh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc4QS85MDJBQUU5ODJC NkYxMUVFQTRCQThGN0NDNEY5QUUwMi9FcXUtblU1Wm1GaFpnVFNhWDZtM1g5cThX SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxdS1uVTVabUZoWmdUU2FYNm0zWDlxOFdIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc4QS85MDJBQUU5ODJCNkYxMUVFQTRCQThGN0NDNEY5QUUwMi9FcXUtblU1Wm1G aFpnVFNhWDZtM1g5cThXSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFHyOVhY1rJh1FNArEHg6bKE+MOpur4chLxngpxvnxme3P0V6mY+Wy l4526zW6f8hU7WWfllM/nM9CnMjyLAJPeaEp3tmIeRwj3Q0Qehy4zz2WRI2Dmn6J OQjK9B/pnkCmvoLZrx2cIJOYuG3EAMxZbshWV9Flp1Vgv89v5C9TI/HiAcRPG8S3 8+kZr1kuAvtl1VT3jr/llkb1HxKCMGigj7CcQbm12aG/9pvvZyFMXu+KsgTcWv6c p+IX/QmUCn6mbxJGLojAJk61bYbtrD2ENY60/UEXzyTAl3M5MT629x0qNqi3AwJQ YoLD0io78GntoRFKpAfFgFpyUHTOVSpQ -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:59 2025 by rpki-client