$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json) Hash identifier: qX4PUhiwsvJbxIN09MWliD9GM0hNYslu5rmPj8+ldSk= Subject key identifier: 21:A3:44:9E:16:28:7F:92:D2:8C:35:E5:A3:C8:95:62:61:27:96:52 Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft Manifest number: 06AB Signing time: Sat 18 Oct 2025 23:40:21 +0000 Manifest this update: Sat 18 Oct 2025 23:40:20 +0000 Manifest next update: Sat 25 Oct 2025 23:40:20 +0000 Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: FxSnkpf4uxPcfUFoHz0k0+4CCOTSBMO+sp45BUO+7+k=) 2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=) 3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: sdo5dB4yf8kL9E/pHn7+OshW8DyNii5atqW56lYezBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Validity Not Before: Oct 18 23:40:20 2025 GMT Not After : Oct 25 23:40:20 2025 GMT Subject: CN=68f42565-e85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:99:1b:c0:f1:6d:36:29:5c:fc:3d:c0:6d: cc:bd:95:7e:5e:c8:ee:b9:98:fa:70:58:1c:95:5a: 91:5d:3c:c8:fe:87:df:bd:bf:e2:fd:be:d1:b7:d6: ed:24:a5:db:45:cf:19:58:7a:26:5b:67:03:08:8c: ab:75:2b:d5:0b:a8:eb:5f:35:7f:78:46:ac:a1:50: c2:f5:1a:7e:8e:c1:87:1a:ce:b3:68:8a:fe:aa:31: 43:7d:22:0e:17:71:0e:d2:bc:3e:b3:d9:4f:8f:9c: 23:3f:c1:14:7c:06:20:1a:d6:b2:17:84:11:e3:5a: 22:c1:aa:8b:b6:71:85:44:5b:a2:c2:44:3e:16:af: 05:5d:45:4a:3e:8e:0a:b5:8d:eb:d1:3b:14:5a:13: 75:e7:73:bd:28:af:27:04:cd:fb:72:ad:b0:be:50: fa:b3:c7:6d:37:6b:99:64:f9:a9:9a:33:75:d6:bd: 60:08:3b:1d:45:0b:51:55:65:32:d0:9c:79:33:e8: 91:3e:df:e6:e7:50:0a:79:6b:48:95:ec:58:f5:a4: e9:6f:ff:12:c7:c1:c4:05:a3:6c:a9:00:50:64:08: eb:66:33:ee:50:bd:30:3e:06:c5:94:ac:92:0a:d0: 3e:f7:87:b7:68:5e:0b:cf:6e:ed:7d:f2:17:ab:3a: f8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A3:44:9E:16:28:7F:92:D2:8C:35:E5:A3:C8:95:62:61:27:96:52 X509v3 Authority Key Identifier: keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:c9:2f:a2:45:61:de:7f:3e:82:76:85:40:06:b4:96:80:a7: af:64:7e:19:99:a2:53:16:b1:73:79:06:77:b1:51:79:6c:db: b9:97:01:e2:b9:24:5a:08:e0:05:94:84:8e:6b:09:21:f6:85: 23:f6:a9:9f:bf:b9:42:4c:0b:84:8c:92:22:0f:75:af:9a:49: 12:f7:2b:5a:ff:cd:1b:95:03:f8:cb:c2:34:91:a8:dd:21:ae: ed:2b:6a:85:0e:68:86:aa:e5:79:69:27:a9:68:c9:45:42:8e: 0f:1c:d8:56:ea:35:13:39:33:94:6f:bb:0c:b8:fa:ce:42:b3: 7f:3b:e6:70:55:8e:6b:59:6e:75:2a:52:05:55:2e:3d:22:e8: c0:9e:2d:fc:9d:bb:08:7b:6e:48:f4:4e:97:ac:7e:f0:99:34: 77:76:f0:55:94:58:dd:c9:f7:3e:97:43:09:2d:b4:bb:c2:bf: bf:48:62:c9:31:5c:9d:fd:b3:d9:10:9b:23:ef:a3:de:ea:f4: 68:38:2c:0c:4a:8e:52:fb:44:e2:6e:3e:55:28:d3:14:f3:f7: 85:dc:f0:cc:5a:23:cc:20:9e:9a:f3:f4:59:88:a9:75:95:bc: 3a:3a:12:72:97:30:c1:74:07:b9:72:74:85:c4:f4:c9:16:9a: 23:32:bb:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyMjIxMTAvBgNVBAUTKDExQjQ0NTU2Qjc5NjI3ODUzRjQwMzFFRDZERDU3Mjg0 MDU2RUZGNTMwHhcNMjUxMDE4MjM0MDIwWhcNMjUxMDI1MjM0MDIwWjAYMRYwFAYD VQQDEw02OGY0MjU2NS1lODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TiZG8DxbTYpXPw9wG3MvZV+XsjuuZj6cFgclVqRXTzI/offvb/i/b7Rt9bt JKXbRc8ZWHomW2cDCIyrdSvVC6jrXzV/eEasoVDC9Rp+jsGHGs6zaIr+qjFDfSIO F3EO0rw+s9lPj5wjP8EUfAYgGtayF4QR41oiwaqLtnGFRFuiwkQ+Fq8FXUVKPo4K tY3r0TsUWhN153O9KK8nBM37cq2wvlD6s8dtN2uZZPmpmjN11r1gCDsdRQtRVWUy 0Jx5M+iRPt/m51AKeWtIlexY9aTpb/8Sx8HEBaNsqQBQZAjrZjPuUL0wPgbFlKyS CtA+94e3aF4Lz27tffIXqzr4CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGjRJ4W KH+S0ow15aPIlWJhJ5ZSMB8GA1UdIwQYMBaAFBG0RVa3lieFP0Ax7W3VcoQFbv9T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzIyMi9DQTA3NjE1ODgw NzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0VV9RREh0YmRWeWhBVnVf MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ViUkZWcmVXSjRVX1FESHRiZFZ5aEFWdV8xTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzIyMi9DQTA3NjE1ODgwNzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0 VV9RREh0YmRWeWhBVnVfMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpyS+iRWHefz6CdoVABrSWgKevZH4ZmaJTFrFzeQZ3sVF5bNu5lwHi uSRaCOAFlISOawkh9oUj9qmfv7lCTAuEjJIiD3WvmkkS9yta/80blQP4y8I0kajd Ia7tK2qFDmiGquV5aSepaMlFQo4PHNhW6jUTOTOUb7sMuPrOQrN/O+ZwVY5rWW51 KlIFVS49IujAni38nbsIe25I9E6XrH7wmTR3dvBVlFjdyfc+l0MJLbS7wr+/SGLJ MVyd/bPZEJsj76Pe6vRoOCwMSo5S+0Tibj5VKNMU8/eF3PDMWiPMIJ6a8/RZiKl1 lbw6OhJylzDBdAe5cnSFxPTJFpojMru6 -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:07 2025 by rpki-client