$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft File: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json) Hash identifier: 4g+CBvRjlLmUjzzVOPj1rIwSXO4HmLMr7lhlWgc3QxE= Subject key identifier: 19:88:47:D2:82:1C:BD:52:7D:06:6C:BA:41:69:27:CB:DF:E4:D8:25 Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft Manifest number: E8 Signing time: Sun 19 Oct 2025 08:23:09 +0000 Manifest this update: Sun 19 Oct 2025 08:23:08 +0000 Manifest next update: Sun 26 Oct 2025 08:23:08 +0000 Files and hashes: 1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: U+OaTZd2qW5NIJKjUciC4w/rTt+S6onaA5WZMOfz0Io=) 2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: tG+xEb4Bj22fmRv5Ap5El7N6H/BamXJAvudixhV4S5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Validity Not Before: Oct 19 08:23:08 2025 GMT Not After : Oct 26 08:23:08 2025 GMT Subject: CN=68f49fed-00a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:bd:05:17:58:3a:f0:45:b2:f1:2f:9c:bf: 93:12:f7:af:c2:95:a2:d4:9a:57:77:10:86:16:8e: d6:46:63:e5:11:03:9e:08:7e:10:4c:49:d8:12:be: 3a:08:2a:64:0b:75:5f:0f:a0:3e:62:87:a7:26:07: 16:00:44:93:0a:fc:d0:a1:ea:10:31:eb:bf:60:1e: ea:be:8b:0b:58:f6:8b:2b:5f:13:46:fb:8f:5d:72: 24:c9:9b:94:07:5c:ca:d4:e0:68:6d:db:9a:86:f3: 90:e7:01:45:40:87:e6:90:f8:75:da:24:fe:1c:29: 72:d0:5e:f2:46:5d:47:91:d9:8d:5e:f9:ed:f9:87: a6:32:d7:1d:08:95:f6:1e:97:91:1f:82:ac:b9:7f: 07:a2:b9:9d:dd:66:c5:ba:23:d2:3e:3d:8d:d7:21: 60:50:88:ad:c3:38:e6:3f:a9:96:43:8e:0e:de:c3: 84:a3:10:8b:3d:16:d1:04:da:72:dc:9c:e5:ee:0d: 83:70:16:bd:4e:51:61:41:70:f1:22:a2:5a:7f:40: 89:5d:dc:a1:20:16:3c:93:02:92:bb:24:9e:dd:70: ba:bc:68:dc:2b:ac:b1:6d:a3:f8:04:b1:d7:8a:4c: b0:6a:cc:1e:ae:aa:a3:5e:53:c0:8e:dd:70:25:b2: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:88:47:D2:82:1C:BD:52:7D:06:6C:BA:41:69:27:CB:DF:E4:D8:25 X509v3 Authority Key Identifier: keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:9b:21:8c:3c:f4:9d:0d:d5:7c:2f:f5:00:db:16:c6:e5:6e: 44:70:52:5d:d5:08:f4:0f:cb:eb:cf:41:26:72:1c:71:9c:b3: 63:e8:8a:f6:a7:85:50:64:d7:7d:94:47:85:d2:db:b5:2d:f0: 87:54:4a:a6:97:8e:22:4c:d0:8f:a3:34:a6:35:08:0d:3c:35: 9a:d3:47:e6:26:e3:2d:15:34:28:39:f6:b6:6a:9f:13:eb:f6: b1:ae:9a:d7:4d:75:5f:84:96:a6:75:5f:8a:03:7b:d6:93:27: e3:63:44:39:63:fa:55:9d:a7:1f:4a:01:c8:33:60:ad:eb:22: 62:80:51:02:27:da:89:18:dc:fa:0a:b1:04:fe:d5:29:57:55: 4b:c1:8f:77:bb:ad:33:c4:49:6f:49:6d:eb:81:e7:68:cb:a0: 7a:e6:8f:99:94:5f:2d:9b:1c:ca:45:0f:c1:51:5c:68:13:a8: ed:0e:1a:e2:af:fb:2e:d6:2c:73:d0:57:8e:ad:fd:33:46:7e: f9:32:14:7d:00:63:d2:ca:2c:76:e5:c4:30:e9:9f:6b:48:86: 82:87:d5:76:e0:1b:48:e2:f2:be:bb:70:b4:29:17:64:2f:f9: bf:00:fc:2e:46:6d:df:48:97:09:85:e7:d0:ed:36:07:58:93: 74:ac:b4:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTQxMTAvBgNVBAUTKDExOEQ5QkRFMzE3NTRGOTg1NENCNTU0NzQwQTI5OUYx MzdFMjQxRTIwHhcNMjUxMDE5MDgyMzA4WhcNMjUxMDI2MDgyMzA4WjAYMRYwFAYD VQQDEw02OGY0OWZlZC0wMGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzK9BRdYOvBFsvEvnL+TEvevwpWi1JpXdxCGFo7WRmPlEQOeCH4QTEnYEr46 CCpkC3VfD6A+YoenJgcWAESTCvzQoeoQMeu/YB7qvosLWPaLK18TRvuPXXIkyZuU B1zK1OBobduahvOQ5wFFQIfmkPh12iT+HCly0F7yRl1HkdmNXvnt+YemMtcdCJX2 HpeRH4KsuX8Hormd3WbFuiPSPj2N1yFgUIitwzjmP6mWQ44O3sOEoxCLPRbRBNpy 3Jzl7g2DcBa9TlFhQXDxIqJaf0CJXdyhIBY8kwKSuySe3XC6vGjcK6yxbaP4BLHX ikywaswerqqjXlPAjt1wJbK46wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmIR9KC HL1SfQZsukFpJ8vf5NglMB8GA1UdIwQYMBaAFBGNm94xdU+YVMtVR0CimfE34kHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxNC84QzU3RjE1QTRB MzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9FWTJiM2pGMVQ1aFV5MVZIUUtLWjhUZmlR ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZMmIzakYxVDVoVXkxVkhRS0taOFRmaVFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxNC84QzU3RjE1QTRBMzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9FWTJiM2pGMVQ1 aFV5MVZIUUtLWjhUZmlRZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWmyGMPPSdDdV8L/UA2xbG5W5EcFJd1Qj0D8vrz0EmchxxnLNj6Ir2 p4VQZNd9lEeF0tu1LfCHVEqml44iTNCPozSmNQgNPDWa00fmJuMtFTQoOfa2ap8T 6/axrprXTXVfhJamdV+KA3vWkyfjY0Q5Y/pVnacfSgHIM2Ct6yJigFECJ9qJGNz6 CrEE/tUpV1VLwY93u60zxElvSW3rgedoy6B65o+ZlF8tmxzKRQ/BUVxoE6jtDhri r/su1ixz0FeOrf0zRn75MhR9AGPSyix25cQw6Z9rSIaCh9V24BtI4vK+u3C0KRdk L/m/APwuRm3fSJcJhefQ7TYHWJN0rLT6 -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:12 2025 by rpki-client