$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft File: ElYBj-blOMQA9j_H4SHDpwHy3qk.mft (raw, json) Hash identifier: MIgzIKYBf3M580JOZZs1W5QQWwqMiZ2C9+gfJOGmQZc= Subject key identifier: DE:3B:32:7E:1D:85:0A:C7:90:57:33:1B:47:6F:40:A1:12:C9:77:D3 Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9 Certificate issuer: /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9 Certificate serial: 0A2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft Manifest number: 0A23 Signing time: Sat 18 Oct 2025 20:47:18 +0000 Manifest this update: Sat 18 Oct 2025 20:47:18 +0000 Manifest next update: Sat 25 Oct 2025 20:47:18 +0000 Files and hashes: 1: ElYBj-blOMQA9j_H4SHDpwHy3qk.crl (hash: +72xkV7r5dq5Dr1HpTcE4DArduIhDtgZeq6izkv7Cg4=) 2: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (hash: h8TCOQAYkMWzOV4xPaOkVqyIiRzREyWEnJXkzl12ups=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2603 (0xa2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9 Validity Not Before: Oct 18 20:47:18 2025 GMT Not After : Oct 25 20:47:18 2025 GMT Subject: CN=68f3fcd6-dbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:4d:6e:72:a6:e9:21:3d:f0:d7:3e:2c:61: 98:2b:28:b4:d6:2e:03:7d:c2:84:4c:c5:b4:55:21: 06:e5:97:27:f0:91:c5:1d:b2:ad:37:81:b4:52:16: 26:d5:0c:18:80:7d:d5:ae:75:3a:ff:b4:5a:0f:cf: 06:1d:d7:8e:9e:76:90:c9:61:1a:1e:48:37:59:f6: 0a:87:57:14:07:ea:14:09:12:3c:4f:b1:a8:44:d0: a7:b9:c1:e2:94:f9:e6:49:b1:b4:67:3b:f6:23:32: d7:e8:df:2b:40:fa:f3:8f:92:38:64:28:f6:ef:ac: 8a:fa:30:8f:9b:ff:a8:c7:77:f4:1a:06:ec:09:16: 19:e5:8f:55:d4:99:b7:ea:fd:12:f7:b4:10:14:d2: ee:0e:e5:73:e6:a7:74:64:3f:11:6b:7c:7e:94:4c: ce:4d:2a:64:3d:0c:9c:fb:1e:85:b6:87:43:cb:72: ee:bc:ac:64:e6:7a:76:e9:29:e6:10:17:f0:35:31: b0:de:a2:c0:cd:c0:57:b6:3b:56:d4:34:78:a3:fa: a8:03:7e:ee:5a:2b:2f:3b:63:1b:07:12:8f:61:40: 5d:13:11:f4:22:5c:e7:86:37:33:9c:b6:f2:e4:60: bd:27:55:98:04:13:ab:a7:12:08:4a:b9:4f:2d:db: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3B:32:7E:1D:85:0A:C7:90:57:33:1B:47:6F:40:A1:12:C9:77:D3 X509v3 Authority Key Identifier: keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d8:01:41:24:e2:6a:10:88:64:4f:37:be:98:ff:64:7d:34: 70:df:c1:78:29:78:26:d0:38:11:a5:82:da:3c:1a:24:d6:07: d9:0d:b1:82:c9:12:10:67:89:6e:ed:bd:32:30:66:95:86:59: 39:f8:cb:1d:6f:ec:60:06:6c:30:e5:ae:a3:df:d6:ac:2d:38: 07:04:e5:24:e0:18:1e:c2:52:0f:89:ab:3d:92:11:1e:0f:40: 2d:6d:74:bd:52:16:b0:fc:83:89:bc:99:8a:2d:45:7a:ac:05: 56:f4:66:11:5a:69:bf:77:cc:5d:d7:38:64:34:1d:3a:f7:f8: 7d:51:4c:b5:47:45:22:d9:69:bb:52:01:12:6d:78:3e:a9:9a: 82:50:81:46:40:0a:52:cb:21:66:78:73:f9:2d:e8:4b:f1:4c: d8:41:c7:6a:f1:5c:f8:88:0a:b9:4d:0d:2e:af:64:9d:ed:6d: b6:a8:22:fd:0b:b2:7b:fe:2b:a0:c0:09:9a:33:b8:7c:2d:91: 6e:b3:3c:ac:45:29:49:f9:f3:4e:4f:71:c0:ab:af:82:5f:ba: af:66:29:1c:25:be:22:ec:04:56:8e:24:9c:c5:60:56:27:e9: f2:20:30:6e:b5:d8:39:15:dc:af:13:29:5f:4f:9a:42:c1:a0: 41:c5:a8:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDEyNTYwMThGRTZFNTM4QzQwMEY2M0ZDN0UxMjFDM0E3 MDFGMkRFQTkwHhcNMjUxMDE4MjA0NzE4WhcNMjUxMDI1MjA0NzE4WjAYMRYwFAYD VQQDEw02OGYzZmNkNi1kYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvNNbnKm6SE98Nc+LGGYKyi01i4DfcKETMW0VSEG5Zcn8JHFHbKtN4G0UhYm 1QwYgH3VrnU6/7RaD88GHdeOnnaQyWEaHkg3WfYKh1cUB+oUCRI8T7GoRNCnucHi lPnmSbG0Zzv2IzLX6N8rQPrzj5I4ZCj276yK+jCPm/+ox3f0GgbsCRYZ5Y9V1Jm3 6v0S97QQFNLuDuVz5qd0ZD8Ra3x+lEzOTSpkPQyc+x6FtodDy3LuvKxk5np26Snm EBfwNTGw3qLAzcBXtjtW1DR4o/qoA37uWisvO2MbBxKPYUBdExH0IlznhjcznLby 5GC9J1WYBBOrpxIISrlPLdtRLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN47Mn4d hQrHkFczG0dvQKESyXfTMB8GA1UdIwQYMBaAFBJWAY/m5TjEAPY/x+Ehw6cB8t6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81QzhDQjRENjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9NUUE5al9INFNIRHB3SHkz cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VsWUJqLWJsT01RQTlqX0g0U0hEcHdIeTNxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81QzhDQjRENjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9N UUE5al9INFNIRHB3SHkzcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk2AFBJOJqEIhkTze+mP9kfTRw38F4KXgm0DgRpYLaPBok1gfZDbGC yRIQZ4lu7b0yMGaVhlk5+Msdb+xgBmww5a6j39asLTgHBOUk4BgewlIPias9khEe D0AtbXS9Uhaw/IOJvJmKLUV6rAVW9GYRWmm/d8xd1zhkNB069/h9UUy1R0Ui2Wm7 UgESbXg+qZqCUIFGQApSyyFmeHP5LehL8UzYQcdq8Vz4iAq5TQ0ur2Sd7W22qCL9 C7J7/iugwAmaM7h8LZFuszysRSlJ+fNOT3HAq6+CX7qvZikcJb4i7ARWjiScxWBW J+nyIDButdg5FdyvEylfT5pCwaBBxaiG -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:02 2025 by rpki-client