$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft File: EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json) Hash identifier: DSZdfSE11Mw4wAkLVmLUeF8ZfN1P2b6/Ah7q/y6FV/8= Subject key identifier: A5:87:3E:F8:14:3C:AF:C9:4A:DC:21:25:5F:5C:37:20:90:60:21:B5 Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Certificate serial: 126B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft Manifest number: 125F Signing time: Fri 24 Oct 2025 17:32:06 +0000 Manifest this update: Fri 24 Oct 2025 17:32:05 +0000 Manifest next update: Fri 31 Oct 2025 17:32:05 +0000 Files and hashes: 1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: JvTx1ZOxb9MPpPV5lDEIIyIk6FAqp8elYV+q3t6frRo=) 2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: NX0Uu06g9kaFwSmmKkUW0sgMJpCNI4RFhei0HlK1wt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4715 (0x126b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Validity Not Before: Oct 24 17:32:05 2025 GMT Not After : Oct 31 17:32:05 2025 GMT Subject: CN=68fbb815-fb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:03:6b:13:72:9e:d7:03:d5:d2:d4:ac:bd: fd:f0:0f:2d:e5:99:0e:32:9a:0a:07:df:42:d8:ac: db:18:fd:15:06:3b:1f:ec:bd:c1:7f:71:01:1d:2c: 8a:4c:b0:59:82:a5:56:03:58:41:e4:9b:50:19:43: 28:46:bd:7d:0c:af:07:03:93:5f:f9:1c:c2:5b:57: 40:78:46:d5:c1:df:e4:f9:c5:b1:5d:8e:2a:aa:5a: 63:2a:c3:38:19:d2:e3:9d:4a:db:01:d1:fa:1d:38: 47:e2:e1:d2:fd:a3:60:2e:bc:c9:89:9e:4d:ab:d4: 2b:72:9e:4c:d4:02:b8:ef:fa:d0:1a:2c:06:c4:8c: 76:b1:de:f7:fa:1d:fd:d5:79:64:17:3f:5c:6a:11: 5a:79:33:cd:2c:bd:75:02:4b:4a:a3:ae:71:24:f3: 83:6c:9b:26:c7:1f:15:ca:24:c8:b0:1e:cc:b2:9f: 32:6f:01:81:81:dc:f9:70:98:55:9f:e9:47:9c:72: d0:b9:80:f5:82:e7:96:f8:9e:d9:cd:94:bd:33:93: b5:75:32:21:0f:33:b1:fd:0c:6e:e9:7f:19:39:d8: 03:27:c5:5a:1a:47:cd:c2:90:07:b5:e8:66:c7:9b: da:6c:89:09:2c:0e:b4:91:84:9e:63:66:ab:c4:86: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:87:3E:F8:14:3C:AF:C9:4A:DC:21:25:5F:5C:37:20:90:60:21:B5 X509v3 Authority Key Identifier: keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:72:c0:de:e4:41:3b:4b:0e:86:4c:74:51:30:43:b2:9e:19: a1:31:ac:c5:18:6d:20:e1:42:32:98:ca:80:f5:d6:58:5f:9d: e5:cf:08:03:7f:b2:cf:2e:e3:2e:c5:23:ec:f0:b5:41:d2:49: 63:a0:41:6a:0c:0c:2a:c5:60:d8:71:d8:6a:37:ea:27:0f:06: 2f:3b:9e:de:d4:8b:c5:98:1f:88:2c:fe:a6:64:51:4a:b0:4f: 17:a1:b1:63:4a:23:32:54:c7:1c:b6:c1:8f:48:be:13:dc:ac: be:1a:57:7a:e7:88:b0:15:4a:4e:a3:15:37:b1:7d:0d:25:2f: e2:d5:86:b6:e6:98:d4:2f:3b:6c:be:77:76:9f:df:8d:8b:b4: 48:89:26:38:78:70:66:81:f8:f3:1d:9e:49:9e:cb:97:ca:7b: 08:d7:f8:08:25:33:a4:f5:ae:3f:39:7b:87:9b:49:92:d1:f1: a1:98:1b:d7:0e:57:36:53:80:0a:fe:89:4d:a6:78:61:98:b9: 2c:b2:25:c3:b0:62:e5:5c:f2:fe:16:6c:a0:74:fe:c4:44:f3: 82:da:2a:7c:73:23:29:45:93:17:20:9a:07:d5:d3:f1:18:da: fb:3d:ec:aa:9b:5e:03:ac:a0:35:19:c2:7e:37:42:84:b2:e7: bb:10:96:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzRkYxMTAvBgNVBAUTKDEyMzI3REZDOUU4ODgzQ0RCQjZDNkVFRUIzOTI1RjJD OEMwRjdFNUUwHhcNMjUxMDI0MTczMjA1WhcNMjUxMDMxMTczMjA1WjAYMRYwFAYD VQQDEw02OGZiYjgxNS1mYjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dsDaxNyntcD1dLUrL398A8t5ZkOMpoKB99C2KzbGP0VBjsf7L3Bf3EBHSyK TLBZgqVWA1hB5JtQGUMoRr19DK8HA5Nf+RzCW1dAeEbVwd/k+cWxXY4qqlpjKsM4 GdLjnUrbAdH6HThH4uHS/aNgLrzJiZ5Nq9Qrcp5M1AK47/rQGiwGxIx2sd73+h39 1XlkFz9cahFaeTPNLL11AktKo65xJPODbJsmxx8VyiTIsB7Msp8ybwGBgdz5cJhV n+lHnHLQuYD1gueW+J7ZzZS9M5O1dTIhDzOx/Qxu6X8ZOdgDJ8VaGkfNwpAHtehm x5vabIkJLA60kYSeY2arxIaH7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWHPvgU PK/JStwhJV9cNyCQYCG1MB8GA1UdIwQYMBaAFBIyffyeiIPNu2xu7rOSXyyMD35e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNGRi8xNEVGRTdFNEUw N0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4MjdiRzd1czVKZkxJd1Bm bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VqSjlfSjZJZzgyN2JHN3VzNUpmTEl3UGZsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNGRi8xNEVGRTdFNEUwN0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4 MjdiRzd1czVKZkxJd1BmbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBcsDe5EE7Sw6GTHRRMEOynhmhMazFGG0g4UIymMqA9dZYX53lzwgD f7LPLuMuxSPs8LVB0kljoEFqDAwqxWDYcdhqN+onDwYvO57e1IvFmB+ILP6mZFFK sE8XobFjSiMyVMcctsGPSL4T3Ky+Gld654iwFUpOoxU3sX0NJS/i1Ya25pjULzts vnd2n9+Ni7RIiSY4eHBmgfjzHZ5JnsuXynsI1/gIJTOk9a4/OXuHm0mS0fGhmBvX Dlc2U4AK/olNpnhhmLkssiXDsGLlXPL+FmygdP7ERPOC2ip8cyMpRZMXIJoH1dPx GNr7Peyqm14DrKA1GcJ+N0KEsue7EJaI -----END CERTIFICATE-----Generated at Sat Oct 25 11:28:31 2025 by rpki-client