$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: 4azmv16VF10hdftdbmbhUgrdZd0yNXb7IOnXAFSe16o= Subject key identifier: 1A:54:DE:5C:85:A6:51:0E:32:5A:66:99:7D:72:DE:12:6A:D8:66:DE Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 0641 Signing time: Wed 22 Oct 2025 23:40:23 +0000 Manifest this update: Wed 22 Oct 2025 23:40:23 +0000 Manifest next update: Wed 29 Oct 2025 23:40:23 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: +20OuDKrd6OF2iWWHqQ5EMEGDD00m74mjtc77+TrUcE=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: OBNzTX6aR4jmrgmRDfzbRnwCFSG478b3wNooMI8zuUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: Oct 22 23:40:23 2025 GMT Not After : Oct 29 23:40:23 2025 GMT Subject: CN=68f96b67-fdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:0d:67:cb:2b:d5:5f:65:a1:d7:48:ac:ec: 2d:3f:97:03:d9:e6:9f:45:69:88:14:24:b2:f6:a8: e1:d2:cb:04:92:12:7e:f5:35:80:e1:e5:79:71:96: 81:aa:98:c1:e6:22:e0:56:7c:57:b5:6c:67:c6:1c: 97:f6:d1:88:9c:70:ec:6d:75:6e:ad:77:e5:d5:eb: 6b:52:f4:3b:ff:01:b9:84:cd:6b:f0:da:60:35:85: 65:de:3c:df:43:5d:40:5c:08:fa:73:d7:3d:d0:aa: ca:02:0b:31:d4:d0:86:42:cf:e3:27:e2:33:68:c8: cf:fd:ac:99:ac:17:d0:a6:4a:91:8b:1a:1c:20:61: 2d:1b:ee:8b:db:88:cc:7f:6f:59:42:ad:38:39:82: ee:f1:d1:56:3e:14:96:a4:d7:84:0a:f2:3f:00:1f: ff:3a:ab:5a:e2:6b:2e:ee:66:3b:00:30:a6:e0:ca: 82:54:a1:1f:89:1c:07:1e:25:dd:1f:b7:bf:6e:df: 11:a7:c7:4e:b4:68:1b:69:02:02:bb:d2:38:a5:f7: 81:ef:41:de:d5:1e:47:f6:37:ed:bc:c5:91:30:53: b9:26:03:4b:79:2e:8b:b5:be:27:7a:2c:86:78:6c: 46:54:0b:56:bf:a6:42:75:f8:38:89:b0:e3:0e:0f: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:54:DE:5C:85:A6:51:0E:32:5A:66:99:7D:72:DE:12:6A:D8:66:DE X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:6a:3a:c1:ac:6e:d7:ea:44:c8:ae:70:e4:3c:db:10:c9:5e: a4:02:36:63:30:6b:ad:0b:b1:bc:af:0a:84:d7:1b:ff:6a:02: 79:85:8e:05:69:28:7a:76:05:56:57:70:e3:57:a9:24:b2:ef: b5:42:1d:da:50:64:be:0f:ec:41:d0:28:a0:bb:f2:d6:0e:27: 15:97:d1:d4:9a:50:44:a0:55:f5:de:05:5c:ce:08:17:3e:4c: 8e:df:f6:9e:97:ad:2e:46:a6:db:40:cb:05:bf:95:7c:6b:a5: 5f:86:64:20:3d:63:53:e6:fa:90:a7:83:d6:33:77:3d:16:2e: 35:3e:76:fb:97:7d:1f:eb:8a:50:18:73:6b:8e:c2:41:f6:49: 9e:47:94:95:00:91:4b:06:70:f2:a0:c0:71:49:07:23:67:ad: 9b:55:e6:e6:f4:45:41:86:22:e8:db:a4:9f:0e:cc:1a:fb:df: ff:ac:18:23:9f:95:fb:a5:8e:a1:0b:7a:9a:51:b5:db:12:33: 93:ff:85:70:57:f1:03:8c:bb:78:14:20:d1:63:d7:05:b7:50: 1f:a6:c9:8b:ea:ff:e0:df:3a:1c:a0:ca:58:52:9e:ca:31:95: 2d:b5:cc:42:48:32:23:6c:f7:fc:58:eb:80:9a:e2:2b:45:4d: 61:72:c6:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjUxMDIyMjM0MDIzWhcNMjUxMDI5MjM0MDIzWjAYMRYwFAYD VQQDEw02OGY5NmI2Ny1mZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiQNZ8sr1V9loddIrOwtP5cD2eafRWmIFCSy9qjh0ssEkhJ+9TWA4eV5cZaB qpjB5iLgVnxXtWxnxhyX9tGInHDsbXVurXfl1etrUvQ7/wG5hM1r8NpgNYVl3jzf Q11AXAj6c9c90KrKAgsx1NCGQs/jJ+IzaMjP/ayZrBfQpkqRixocIGEtG+6L24jM f29ZQq04OYLu8dFWPhSWpNeECvI/AB//Oqta4msu7mY7ADCm4MqCVKEfiRwHHiXd H7e/bt8Rp8dOtGgbaQICu9I4pfeB70He1R5H9jftvMWRMFO5JgNLeS6Ltb4neiyG eGxGVAtWv6ZCdfg4ibDjDg96aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpU3lyF plEOMlpmmX1y3hJq2GbeMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiajrBrG7X6kTIrnDkPNsQyV6kAjZjMGutC7G8rwqE1xv/agJ5hY4F aSh6dgVWV3DjV6kksu+1Qh3aUGS+D+xB0Cigu/LWDicVl9HUmlBEoFX13gVczggX PkyO3/ael60uRqbbQMsFv5V8a6VfhmQgPWNT5vqQp4PWM3c9Fi41Pnb7l30f64pQ GHNrjsJB9kmeR5SVAJFLBnDyoMBxSQcjZ62bVebm9EVBhiLo26SfDswa+9//rBgj n5X7pY6hC3qaUbXbEjOT/4VwV/EDjLt4FCDRY9cFt1AfpsmL6v/g3zocoMpYUp7K MZUttcxCSDIjbPf8WOuAmuIrRU1hcsb0 -----END CERTIFICATE-----Generated at Fri Oct 24 06:15:38 2025 by rpki-client