$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft File: eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft (raw, json) Hash identifier: jDVcFSmmLytN3CSGG5ZcfKERB8QC9dsPfCkiLr/jvFw= Subject key identifier: FD:26:4F:EE:6E:B3:7B:A7:46:92:6B:56:AE:11:69:8D:14:68:14:14 Authority key identifier: 7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98 Certificate issuer: /CN=A91D0C18/serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft Manifest number: D8 Signing time: Sun 19 Oct 2025 08:38:57 +0000 Manifest this update: Sun 19 Oct 2025 08:38:57 +0000 Manifest next update: Sun 26 Oct 2025 08:38:57 +0000 Files and hashes: 1: eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl (hash: VFlj8kavvYE3+3bXM394uo+wckMg0UjzP7Yx++Poz+A=) 2: EF57F4D0646611EFA25D167EC4F9AE02.roa (hash: pbJq9Hwzg+Y00ha9CPERhZ1eVVAlCN5RZnZHCakXlK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C18, serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98 Validity Not Before: Oct 19 08:38:57 2025 GMT Not After : Oct 26 08:38:57 2025 GMT Subject: CN=68f4a3a1-2d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:7b:bd:bb:86:d8:e9:39:6f:94:e1:76:ce: 52:cc:c1:3c:5d:2e:08:cf:7f:96:ba:ae:0d:85:82: a5:ac:34:1e:5f:02:69:f6:50:75:37:95:d1:8a:17: 5c:6e:87:39:a6:52:28:da:47:7d:63:77:d1:92:11: 3b:83:d9:e0:d6:87:d0:58:02:98:fb:c8:5e:b0:15: e1:48:9f:c2:3b:60:d7:8f:33:7e:05:fa:c4:0d:e0: 00:bb:8a:83:2e:1b:1b:69:47:4d:2b:ec:69:e8:e7: 53:de:e1:cc:61:bf:ac:35:05:f3:2d:83:7e:f6:7d: d5:df:03:ad:37:9d:41:f7:34:28:af:8f:1f:f8:11: 6f:b7:b3:3e:2e:de:7e:0c:87:0e:0f:1c:87:ef:13: 0a:dc:79:1b:23:1a:00:9c:a1:37:c1:08:e3:5d:02: d2:e5:6c:4d:ba:73:97:f5:e2:29:94:9e:2e:b6:3e: ef:db:71:79:ab:77:02:3e:4f:d3:dc:a5:90:0f:a0: c8:af:0a:b0:b8:83:50:34:ae:36:4d:a5:70:a1:2d: d1:c0:a1:ed:27:95:a0:22:0d:8e:f0:dd:48:54:13: 6e:92:a5:e1:f7:90:c4:63:6e:3d:69:fe:82:97:34: 8a:54:71:00:3d:9f:b3:8d:9f:a4:08:72:da:6a:42: 9b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:26:4F:EE:6E:B3:7B:A7:46:92:6B:56:AE:11:69:8D:14:68:14:14 X509v3 Authority Key Identifier: keyid:7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:22:cf:4e:0e:b3:a2:f7:0c:c4:c8:34:09:a0:c7:1f:21:77: 9b:03:0d:c4:44:f8:95:d4:57:0a:9b:e0:93:b9:99:f4:b0:18: 1b:e0:ef:30:46:18:0c:76:1d:f6:14:d1:69:6a:8b:f9:b0:1b: 8d:30:df:93:34:71:bc:5a:49:53:d8:52:6d:55:5d:3f:33:c2: a3:fb:ac:2a:4d:61:56:47:80:66:88:55:6c:56:d7:a5:92:4d: 2f:17:c1:5c:0b:df:c4:4c:cb:49:d8:cc:21:33:95:23:26:9f: f5:9f:96:75:5a:92:a9:1f:02:87:5d:66:d2:be:23:0c:9e:cf: 44:a0:4e:81:dc:5b:4e:5b:50:b0:1c:ae:ae:a8:53:24:d3:56: c3:46:34:c5:f7:b8:cf:70:30:91:76:7f:27:2d:d3:9f:fe:ed: 0f:c7:79:fd:15:2e:34:80:97:16:cc:7f:19:7e:76:68:6b:b2: 17:f7:0d:df:29:1f:06:63:10:f8:a6:08:cf:c7:ea:29:da:f3: d5:b2:dd:2b:24:18:2a:2c:94:e5:f7:68:e1:ca:73:68:5d:ff: 2c:35:7f:2d:21:61:4e:15:ff:af:9a:ec:e9:36:89:95:1b:6a: 42:cb:82:bf:fa:08:f8:2f:5d:4e:cc:fc:e9:a9:19:8b:5b:03: 2a:03:43:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTgxMTAvBgNVBAUTKDdBMjgxNkU5Njk3OTc1Q0FEOTM0OUIyNkIyMEYxNEM4 MUE5MTRDOTgwHhcNMjUxMDE5MDgzODU3WhcNMjUxMDI2MDgzODU3WjAYMRYwFAYD VQQDEw02OGY0YTNhMS0yZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnK97vbuG2Ok5b5Thds5SzME8XS4Iz3+Wuq4NhYKlrDQeXwJp9lB1N5XRihdc boc5plIo2kd9Y3fRkhE7g9ng1ofQWAKY+8hesBXhSJ/CO2DXjzN+BfrEDeAAu4qD LhsbaUdNK+xp6OdT3uHMYb+sNQXzLYN+9n3V3wOtN51B9zQor48f+BFvt7M+Lt5+ DIcODxyH7xMK3HkbIxoAnKE3wQjjXQLS5WxNunOX9eIplJ4utj7v23F5q3cCPk/T 3KWQD6DIrwqwuINQNK42TaVwoS3RwKHtJ5WgIg2O8N1IVBNukqXh95DEY249af6C lzSKVHEAPZ+zjZ+kCHLaakKbLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0mT+5u s3unRpJrVq4RaY0UaBQUMB8GA1UdIwQYMBaAFHooFulpeXXK2TSbJrIPFMgakUyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxOC83MTJDRjBEODY0 NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9laWdXNldsNWRjclpOSnNtc2c4VXlCcVJU SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VpZ1c2V2w1ZGNyWk5Kc21zZzhVeUJxUlRKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxOC83MTJDRjBEODY0NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9laWdXNldsNWRj clpOSnNtc2c4VXlCcVJUSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbIs9ODrOi9wzEyDQJoMcfIXebAw3ERPiV1FcKm+CTuZn0sBgb4O8w RhgMdh32FNFpaov5sBuNMN+TNHG8WklT2FJtVV0/M8Kj+6wqTWFWR4BmiFVsVtel kk0vF8FcC9/ETMtJ2MwhM5UjJp/1n5Z1WpKpHwKHXWbSviMMns9EoE6B3FtOW1Cw HK6uqFMk01bDRjTF97jPcDCRdn8nLdOf/u0Px3n9FS40gJcWzH8ZfnZoa7IX9w3f KR8GYxD4pgjPx+op2vPVst0rJBgqLJTl92jhynNoXf8sNX8tIWFOFf+vmuzpNomV G2pCy4K/+gj4L11OzPzpqRmLWwMqA0NW -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:25 2025 by rpki-client