$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: qb+Zsqmbz7P9TVTAZjU4QT6XhxZjE//Df1L2BQO5wlA= Subject key identifier: FC:2D:86:66:6D:E7:BA:A2:90:6B:2E:64:20:F0:0D:63:A4:28:0D:9A Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0B31 Signing time: Sat 18 Oct 2025 20:11:59 +0000 Manifest this update: Sat 18 Oct 2025 20:11:59 +0000 Manifest next update: Sat 25 Oct 2025 20:11:59 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: IB19A8XmyKjXv9iVe2pwHehaD9taBHocZhwDM+sonbg=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: x6v+AqgjPFRVX68ne0JC+xRgXtO5WMJX4uQIZ5czHsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: Oct 18 20:11:59 2025 GMT Not After : Oct 25 20:11:59 2025 GMT Subject: CN=68f3f48f-860d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:da:1d:86:50:84:b6:85:b4:dc:b8:a4:3c: b4:7e:79:ee:f7:4e:b2:97:51:74:cc:e7:db:f7:45: 08:94:ed:25:2b:0d:bc:7d:49:56:98:a7:97:43:c7: 07:ba:b2:d2:43:3f:de:e0:de:2d:29:8b:a2:db:a7: 1d:8f:9a:ac:67:7b:f8:72:60:5b:6d:89:15:20:aa: 7e:6c:3b:31:0e:b3:e2:ae:48:60:ad:94:cb:de:62: a1:c2:46:cd:ed:2a:9d:c4:ee:cf:a1:03:d2:6a:e2: 46:39:ba:b1:61:3f:00:85:b5:f1:a6:b9:61:d3:dd: 1c:66:ea:aa:9e:bf:64:a3:96:2b:3c:4b:3c:a6:20: 40:e3:a0:24:5b:73:01:d9:98:cd:eb:8f:f3:b7:00: dd:9e:a1:06:f7:82:0b:71:59:54:4f:84:da:f2:6d: 93:22:57:34:c8:47:9c:0c:18:a6:cb:ce:9b:64:01: f0:f4:94:54:9f:e6:2f:df:13:37:01:5c:4c:b5:11: 72:bc:ac:cb:4c:c3:7f:dd:f7:e7:3c:59:63:73:f9: 82:e7:7a:9e:bc:b9:ca:dd:b5:4d:e4:1f:ce:6c:73: fa:7d:f9:88:d3:09:f0:1a:e1:aa:c6:ae:a4:3f:2e: 40:9d:45:32:28:67:e7:a1:0c:d3:fb:78:be:ad:bd: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2D:86:66:6D:E7:BA:A2:90:6B:2E:64:20:F0:0D:63:A4:28:0D:9A X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:67:56:ed:e3:b4:ef:f5:0a:97:55:9e:cf:fb:90:33:d3:60: 66:bf:a8:a1:42:4d:4e:c2:27:fb:83:94:bb:9c:94:55:bb:18: f9:22:59:65:0f:63:25:59:2d:37:3f:f3:a2:53:25:69:d8:e1: 8e:25:38:f0:4f:5c:a1:bd:a0:6c:9c:e2:31:91:e5:22:d7:9d: da:1e:c8:a2:4c:09:fc:45:e5:f2:65:d6:ad:54:eb:27:88:cf: 27:a4:3c:e6:26:bd:a4:3e:aa:96:54:f8:51:a8:e6:e4:50:99: 40:c2:bd:52:85:26:33:a0:66:b7:ec:0b:3a:f0:eb:75:4c:f5: 03:44:02:b8:64:03:15:ad:1c:0f:1f:31:af:69:2a:ea:05:a2: 52:32:fe:1f:f6:c8:f4:e6:24:a2:bd:5f:5c:60:95:74:f9:76: ac:e0:2b:60:16:15:39:93:e8:74:4e:e4:0c:ed:9f:25:cc:0f: 22:0e:1b:28:13:90:1c:04:b9:ea:ac:d4:45:0b:cc:93:08:51: 5f:72:73:24:23:94:38:0c:a7:49:15:f8:79:8d:26:9e:cb:96: f0:d9:4d:e4:05:2a:a6:a8:e0:a8:2c:63:f3:8f:9d:e0:e8:82: 62:ad:b2:0c:0e:46:0e:84:69:ac:24:d7:8a:c7:7c:e3:6d:61: 9b:f4:14:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjUxMDE4MjAxMTU5WhcNMjUxMDI1MjAxMTU5WjAYMRYwFAYD VQQDEw02OGYzZjQ4Zi04NjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGfaHYZQhLaFtNy4pDy0fnnu906yl1F0zOfb90UIlO0lKw28fUlWmKeXQ8cH urLSQz/e4N4tKYui26cdj5qsZ3v4cmBbbYkVIKp+bDsxDrPirkhgrZTL3mKhwkbN 7SqdxO7PoQPSauJGObqxYT8AhbXxprlh090cZuqqnr9ko5YrPEs8piBA46AkW3MB 2ZjN64/ztwDdnqEG94ILcVlUT4Ta8m2TIlc0yEecDBimy86bZAHw9JRUn+Yv3xM3 AVxMtRFyvKzLTMN/3ffnPFljc/mC53qevLnK3bVN5B/ObHP6ffmI0wnwGuGqxq6k Py5AnUUyKGfnoQzT+3i+rb0ntwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwthmZt 57qikGsuZCDwDWOkKA2aMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTZ1bt47Tv9QqXVZ7P+5Az02Bmv6ihQk1Owif7g5S7nJRVuxj5Illl D2MlWS03P/OiUyVp2OGOJTjwT1yhvaBsnOIxkeUi153aHsiiTAn8ReXyZdatVOsn iM8npDzmJr2kPqqWVPhRqObkUJlAwr1ShSYzoGa37As68Ot1TPUDRAK4ZAMVrRwP HzGvaSrqBaJSMv4f9sj05iSivV9cYJV0+Xas4CtgFhU5k+h0TuQM7Z8lzA8iDhso E5AcBLnqrNRFC8yTCFFfcnMkI5Q4DKdJFfh5jSaey5bw2U3kBSqmqOCoLGPzj53g 6IJirbIMDkYOhGmsJNeKx3zjbWGb9BQh -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:37 2025 by rpki-client