$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft File: ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft (raw, json) Hash identifier: uffQtRBOwmTXtIA+M2o1ZPSSR7dQ2UnEe8oMUJJrSME= Subject key identifier: 67:8D:56:34:DB:2C:DD:52:8E:72:62:8B:42:AA:77:C7:36:D4:79:24 Authority key identifier: 79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79 Certificate issuer: /CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79 Certificate serial: 0718 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft Manifest number: 070F Signing time: Sat 18 Oct 2025 23:18:27 +0000 Manifest this update: Sat 18 Oct 2025 23:18:27 +0000 Manifest next update: Sat 25 Oct 2025 23:18:26 +0000 Files and hashes: 1: ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl (hash: 1kB+p6geAmB4Q/mhLhE6Gi2ri+Bso9te1LbFjCYlFIs=) 2: FE4992F25C3411EBA2B9004DC4F9AE02.roa (hash: 90yd6nVAhznOwqzLDkzWSurW9sg0NSgWSjPCpe+6AKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1816 (0x718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5FA2, serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79 Validity Not Before: Oct 18 23:18:27 2025 GMT Not After : Oct 25 23:18:26 2025 GMT Subject: CN=68f42043-5dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:a6:38:bb:81:26:ff:76:f3:12:df:72:b2: cc:d3:d1:68:a9:69:0e:58:60:e0:5e:3b:d3:cb:7a: b4:bd:23:f9:c8:3a:82:7a:19:b9:54:ec:fb:e8:2c: 34:32:9b:8f:f5:ca:e6:c7:bf:34:8e:a9:46:6a:c7: eb:ef:d4:08:e5:58:81:64:4b:fe:e6:43:f2:cb:96: 26:e5:7b:d3:c1:f5:14:64:bd:53:33:5d:4d:0e:ad: a6:13:71:c0:b4:a5:24:b6:a0:b3:72:7c:f5:3f:ca: 56:32:6e:a4:9d:b4:02:d6:e7:8b:e3:90:09:a1:66: fd:7f:96:31:b0:fe:ed:42:3a:f7:7a:e1:be:46:f7: e2:83:1a:b9:08:74:b2:17:6d:5d:dd:79:48:81:b0: ed:8f:80:2a:1f:fc:f5:de:18:e3:29:82:83:58:c9: 09:8d:79:aa:12:81:4a:0f:a3:91:63:da:e7:25:24: 42:a2:b5:6c:3e:6e:da:06:e3:93:3e:89:72:a7:ea: bb:e8:8c:b7:43:09:2e:19:7d:fc:47:ec:3d:df:01: f9:a4:c0:24:e5:a2:b3:8f:af:35:dd:a5:f9:57:b8: 9d:16:0d:3c:30:5c:76:15:09:8a:78:52:d4:33:17: d9:f3:d0:c3:e1:2b:5b:f0:9e:6c:88:ff:b5:0e:d1: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8D:56:34:DB:2C:DD:52:8E:72:62:8B:42:AA:77:C7:36:D4:79:24 X509v3 Authority Key Identifier: keyid:79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6d:a7:89:20:80:34:17:18:a6:32:31:31:07:e2:ed:d6:84: 59:16:8a:0e:7e:1e:a8:be:cc:f7:b7:ae:2d:6a:88:85:c9:d0: 1c:b7:aa:a4:7f:c4:61:4b:f0:ac:77:98:31:10:28:54:25:81: 89:c8:c9:e1:75:a5:00:8e:6a:ca:45:64:93:e9:e5:e6:9f:e1: a6:94:1e:57:99:5f:9a:62:13:b3:d6:c6:86:f1:3c:1d:d2:ef: 1d:f7:9b:53:dd:d0:ef:f2:5e:85:ee:80:c9:66:08:45:db:52: 85:4d:4e:a4:6a:8f:7c:70:07:6a:78:49:40:cc:35:80:28:2c: c7:36:29:92:2a:a6:49:9e:a2:dd:35:57:bf:04:0f:f2:35:41: 28:1b:cc:12:56:38:d3:51:74:0a:98:57:a9:40:58:14:48:8f: b9:ec:9b:42:35:8e:df:7f:3b:66:8c:4c:a6:f7:8b:bf:54:cd: d5:79:c7:aa:73:92:22:13:94:07:22:7e:dd:2f:c6:83:05:ab: b6:f7:12:77:69:70:75:86:57:07:50:38:e3:86:56:0d:1b:bb: 64:d5:1c:61:95:94:d3:94:43:31:94:12:91:90:04:ab:0a:2a: 9d:74:1b:82:ba:ef:fb:70:9a:e0:e7:9d:06:5a:62:0e:2b:c6: 71:6c:1d:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVGQTIxMTAvBgNVBAUTKDc5QTk0RDI4RTU0MjQ3MzgwOTEzODNENUY0OTc1QkZE QkNFQUFFNzkwHhcNMjUxMDE4MjMxODI3WhcNMjUxMDI1MjMxODI2WjAYMRYwFAYD VQQDEw02OGY0MjA0My01ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBKmOLuBJv928xLfcrLM09FoqWkOWGDgXjvTy3q0vSP5yDqCehm5VOz76Cw0 MpuP9crmx780jqlGasfr79QI5ViBZEv+5kPyy5Ym5XvTwfUUZL1TM11NDq2mE3HA tKUktqCzcnz1P8pWMm6knbQC1ueL45AJoWb9f5YxsP7tQjr3euG+Rvfigxq5CHSy F21d3XlIgbDtj4AqH/z13hjjKYKDWMkJjXmqEoFKD6ORY9rnJSRCorVsPm7aBuOT Polyp+q76Iy3QwkuGX38R+w93wH5pMAk5aKzj6813aX5V7idFg08MFx2FQmKeFLU MxfZ89DD4Stb8J5siP+1DtHwaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeNVjTb LN1SjnJii0Kqd8c21HkkMB8GA1UdIwQYMBaAFHmpTSjlQkc4CROD1fSXW/286q55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUZBMi8wMzI1NDQ0MDVD MzIxMUVCOTdCRjdDNDVDNEY5QUUwMi9lYWxOS09WQ1J6Z0pFNFBWOUpkYl9ienFy bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VhbE5LT1ZDUnpnSkU0UFY5SmRiX2J6cXJuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUZBMi8wMzI1NDQ0MDVDMzIxMUVCOTdCRjdDNDVDNEY5QUUwMi9lYWxOS09WQ1J6 Z0pFNFBWOUpkYl9ienFybmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDbaeJIIA0FximMjExB+Lt1oRZFooOfh6ovsz3t64taoiFydAct6qk f8RhS/Csd5gxEChUJYGJyMnhdaUAjmrKRWST6eXmn+GmlB5XmV+aYhOz1saG8Twd 0u8d95tT3dDv8l6F7oDJZghF21KFTU6kao98cAdqeElAzDWAKCzHNimSKqZJnqLd NVe/BA/yNUEoG8wSVjjTUXQKmFepQFgUSI+57JtCNY7ffztmjEym94u/VM3Veceq c5IiE5QHIn7dL8aDBau29xJ3aXB1hlcHUDjjhlYNG7tk1RxhlZTTlEMxlBKRkASr CiqddBuCuu/7cJrg550GWmIOK8ZxbB3a -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:19 2025 by rpki-client