$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: 6MhmdXQ7yXl0dbxVeUo7TRlyUjHvPUhQ/be44M6qtPE= Subject key identifier: B9:13:D4:C2:66:75:3E:2E:94:50:D5:21:A8:4A:11:BF:1C:0F:CD:D6 Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 021F Signing time: Sun 19 Oct 2025 04:19:46 +0000 Manifest this update: Sun 19 Oct 2025 04:19:46 +0000 Manifest next update: Sun 26 Oct 2025 04:19:46 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: +NCZ89D0QMmppHEJ852wZq5IX70ER0O1Vs9QgRBOvqg=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: Uh7B24TrfbcaCXXos+UCRzkq1ccagOkOy3EbQYTwo0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Oct 19 04:19:46 2025 GMT Not After : Oct 26 04:19:46 2025 GMT Subject: CN=68f466e2-4397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dc:ef:56:f8:35:22:20:93:10:38:b8:2c:f6: ef:cd:2b:6f:6a:e8:d0:04:88:e7:a3:27:bd:e9:4d: 32:28:43:cc:47:b8:c3:39:43:65:8e:e2:cc:78:95: 99:7f:19:38:e2:4b:07:d6:c3:43:58:66:b6:65:2e: 35:3f:f1:00:b6:09:cd:bf:e1:64:89:63:67:17:aa: 54:94:c5:ca:00:1f:63:13:f7:d6:34:2e:f3:45:45: 3a:d3:7d:9e:b7:40:5e:6b:70:28:a0:36:e3:5b:ff: e3:68:5b:ca:b1:1a:5c:31:75:6f:20:b9:66:10:ca: d2:e7:ed:3b:d5:ac:27:91:74:62:c2:0e:ca:72:11: b6:e6:0f:c9:1b:15:e9:35:45:cf:4e:72:82:88:a2: 0a:d7:28:c7:1d:e1:bb:59:28:54:63:78:14:43:ec: 7c:1d:60:ab:3b:af:c1:79:8f:89:1d:79:d2:ce:5a: b9:6c:a8:11:e8:11:f7:61:75:9f:b1:af:12:95:5a: 53:a3:2c:1a:4b:6c:e4:c1:34:35:e1:40:15:f1:78: 9b:09:be:e3:d4:c4:1b:e5:72:d2:db:4a:58:7b:c4: 07:b6:0d:33:21:58:70:72:bc:b8:5c:0a:ae:e7:6c: 0c:aa:6a:e8:c5:10:35:b1:4d:d6:4c:6d:84:77:72: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:13:D4:C2:66:75:3E:2E:94:50:D5:21:A8:4A:11:BF:1C:0F:CD:D6 X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:46:42:ac:24:1c:a1:44:9f:b7:ce:96:3e:bf:bd:74:a7:a8: 08:a3:01:92:16:a4:26:54:ad:a3:ee:d9:ae:2e:7f:81:9c:88: d0:2a:d0:74:bf:5f:b0:f6:ec:97:1d:d8:84:23:71:f7:0b:d1: 00:ce:15:1d:4e:1a:12:60:5d:41:23:ff:dd:b1:5c:b5:6f:f3: 02:81:db:c9:35:7b:56:80:3e:cb:4c:27:38:bd:fa:35:67:2f: 15:de:94:e9:f4:ba:90:e1:d6:c8:b1:cb:0f:ca:ec:72:45:d4: c1:ee:84:b1:b5:5e:ea:b6:74:b9:43:0c:39:1e:54:a9:09:78: 81:50:d0:1d:87:e0:34:4b:b0:f8:99:d7:f3:8a:7a:6d:f8:ba: c9:4a:af:bb:16:63:ed:db:10:14:82:63:e8:84:06:14:07:e4: 50:ea:b0:8c:c1:74:cb:6f:51:bd:9e:1f:27:42:f4:db:ba:41: 4d:f8:14:87:f9:c6:69:5b:a7:c3:9f:b0:28:5b:78:1c:b6:53: a3:9b:12:cd:78:19:cf:8f:38:a6:e2:f0:fb:bb:54:53:a0:cf: 8f:c4:6f:2e:21:41:fb:75:b8:e0:a7:f1:11:df:3e:8f:4e:3a: 8b:39:af:bf:a2:be:af:1e:c4:27:9e:69:19:48:c6:3a:1b:2e: 96:b1:50:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUxMDE5MDQxOTQ2WhcNMjUxMDI2MDQxOTQ2WjAYMRYwFAYD VQQDEw02OGY0NjZlMi00Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NzvVvg1IiCTEDi4LPbvzStvaujQBIjnoye96U0yKEPMR7jDOUNljuLMeJWZ fxk44ksH1sNDWGa2ZS41P/EAtgnNv+FkiWNnF6pUlMXKAB9jE/fWNC7zRUU6032e t0Bea3AooDbjW//jaFvKsRpcMXVvILlmEMrS5+071awnkXRiwg7KchG25g/JGxXp NUXPTnKCiKIK1yjHHeG7WShUY3gUQ+x8HWCrO6/BeY+JHXnSzlq5bKgR6BH3YXWf sa8SlVpToywaS2zkwTQ14UAV8XibCb7j1MQb5XLS20pYe8QHtg0zIVhwcry4XAqu 52wMqmroxRA1sU3WTG2Ed3KebQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkT1MJm dT4ulFDVIahKEb8cD83WMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQRkKsJByhRJ+3zpY+v710p6gIowGSFqQmVK2j7tmuLn+BnIjQKtB0 v1+w9uyXHdiEI3H3C9EAzhUdThoSYF1BI//dsVy1b/MCgdvJNXtWgD7LTCc4vfo1 Zy8V3pTp9LqQ4dbIscsPyuxyRdTB7oSxtV7qtnS5Qww5HlSpCXiBUNAdh+A0S7D4 mdfzinpt+LrJSq+7FmPt2xAUgmPohAYUB+RQ6rCMwXTLb1G9nh8nQvTbukFN+BSH +cZpW6fDn7AoW3gctlOjmxLNeBnPjzim4vD7u1RToM+PxG8uIUH7dbjgp/ER3z6P TjqLOa+/or6vHsQnnmkZSMY6Gy6WsVD9 -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:28 2025 by rpki-client