$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft File: eI-02WtgHbphbd3JnP5GXWDDjyE.mft (raw, json) Hash identifier: 2NmYLbI+9mgmaeulI1AqOkh00veegjo2OktfMP1B/b0= Subject key identifier: 28:B2:78:3D:EA:0C:9D:E4:88:6B:BF:66:B9:4F:78:C6:03:05:10:63 Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 Certificate issuer: /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft Manifest number: 06BE Signing time: Thu 23 Oct 2025 01:16:18 +0000 Manifest this update: Thu 23 Oct 2025 01:16:17 +0000 Manifest next update: Thu 30 Oct 2025 01:16:17 +0000 Files and hashes: 1: eI-02WtgHbphbd3JnP5GXWDDjyE.crl (hash: QHzWmZqqE5V+5rphh+5giw1D9FOCMu1A34AH3Cb4scs=) 2: 960BB902A6F111EF9E720A74C4F9AE02.roa (hash: B8sszNLunLsrUHs5D3APS7GKyh44CqzKcDt/4Ik4FRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363, serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Validity Not Before: Oct 23 01:16:17 2025 GMT Not After : Oct 30 01:16:17 2025 GMT Subject: CN=68f981e2-46d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:3b:0e:d2:7f:e2:3b:59:8b:3a:b6:d5:95: 1d:1b:db:c8:ec:e4:ba:a7:c9:ee:1e:b3:de:04:c7: 2a:d0:bd:86:5e:85:e7:d0:c3:a1:75:0d:ae:08:18: 67:cc:5c:bd:82:13:e5:fc:e6:76:11:ab:10:bc:b2: 25:ec:46:6e:f2:b6:00:99:f8:70:49:ee:80:a9:12: 24:97:3c:d5:c8:42:c8:a6:5a:2a:6b:f6:05:09:47: 59:b9:52:72:c2:62:cb:31:ec:bd:f2:f4:e0:91:b7: c1:78:ac:ae:45:41:15:eb:0a:38:00:ce:69:04:bd: 67:bd:90:af:46:66:08:b3:a2:12:89:65:88:e2:58: ac:43:f0:9b:9c:d3:79:92:29:c2:31:b4:24:ec:ea: 62:c7:7a:9e:a3:a6:70:67:20:bb:ec:e1:fc:73:ed: 43:a2:d5:ed:52:e7:6a:85:44:f4:5a:e5:f5:a6:35: 10:4b:fd:8b:b4:30:8b:55:6d:09:05:7b:ca:e5:08: 82:11:1e:46:8c:88:a5:f1:ac:de:84:c4:97:2c:74: 22:5c:39:e5:a4:f5:e8:19:72:f4:54:0d:25:94:ae: f2:dd:3f:96:40:3f:62:fb:ac:42:b7:3c:5b:9d:f7: 6b:1c:b4:88:13:15:7c:55:3c:7b:4d:89:12:b6:a5: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B2:78:3D:EA:0C:9D:E4:88:6B:BF:66:B9:4F:78:C6:03:05:10:63 X509v3 Authority Key Identifier: keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:36:6d:15:d3:00:bc:d2:ac:51:08:5b:a1:95:85:cd:9a:f0: a1:2d:53:69:98:00:dd:4f:d9:98:b2:e6:c8:2c:84:7d:4f:6e: 6b:60:05:e2:19:7b:96:0f:78:4d:14:19:54:7b:f9:16:1e:ae: c5:64:c6:ed:9d:1a:0b:3a:99:1f:9e:05:b7:8a:3a:86:28:9e: 08:e7:39:c6:24:22:76:52:d7:51:be:53:8d:4b:c2:d7:03:14: 4d:c2:4f:64:45:68:a9:35:66:f2:af:f2:5d:b6:84:b0:3a:54: 2b:46:f3:e9:2c:2d:46:80:4b:62:95:5a:7f:c5:d0:88:24:a9: 0f:20:c1:fa:3f:ff:b5:d7:59:e7:47:2c:4d:85:c4:3f:a7:4b: 57:a0:4b:2c:5c:3f:83:84:3f:79:b3:c6:c9:a6:98:57:e7:95: 98:89:35:b2:a4:50:3c:08:27:e1:c8:6c:f4:14:ff:4e:0b:5a: cc:fa:c3:2e:d1:84:11:a1:1b:97:d4:b5:29:25:9e:1a:2a:dd: 81:99:e2:c5:a4:a9:79:7d:1f:aa:1a:c7:78:34:8f:7a:52:2d: 1b:97:99:c0:d3:05:ce:6d:b9:01:89:0e:e4:5d:e3:61:08:cb: d1:bb:af:10:02:08:55:50:54:10:dc:55:50:fe:db:eb:b8:6a: 06:ff:14:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzNjMxMTAvBgNVBAUTKDc4OEZCNEQ5NkI2MDFEQkE2MTZERERDOTlDRkU0NjVE NjBDMzhGMjEwHhcNMjUxMDIzMDExNjE3WhcNMjUxMDMwMDExNjE3WjAYMRYwFAYD VQQDEw02OGY5ODFlMi00NmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XM7DtJ/4jtZizq21ZUdG9vI7OS6p8nuHrPeBMcq0L2GXoXn0MOhdQ2uCBhn zFy9ghPl/OZ2EasQvLIl7EZu8rYAmfhwSe6AqRIklzzVyELIploqa/YFCUdZuVJy wmLLMey98vTgkbfBeKyuRUEV6wo4AM5pBL1nvZCvRmYIs6ISiWWI4lisQ/CbnNN5 kinCMbQk7Opix3qeo6ZwZyC77OH8c+1DotXtUudqhUT0WuX1pjUQS/2LtDCLVW0J BXvK5QiCER5GjIil8azehMSXLHQiXDnlpPXoGXL0VA0llK7y3T+WQD9i+6xCtzxb nfdrHLSIExV8VTx7TYkStqU62QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiyeD3q DJ3kiGu/ZrlPeMYDBRBjMB8GA1UdIwQYMBaAFHiPtNlrYB26YW3dyZz+Rl1gw48h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD QkExMUVDOEFBMTNFMjRDNEY5QUUwMi9lSS0wMld0Z0hicGhiZDNKblA1R1hXRERq eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VJLTAyV3RnSGJwaGJkM0puUDVHWFdERGp5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi9lSS0wMld0Z0hi cGhiZDNKblA1R1hXRERqeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKNm0V0wC80qxRCFuhlYXNmvChLVNpmADdT9mYsubILIR9T25rYAXi GXuWD3hNFBlUe/kWHq7FZMbtnRoLOpkfngW3ijqGKJ4I5znGJCJ2UtdRvlONS8LX AxRNwk9kRWipNWbyr/JdtoSwOlQrRvPpLC1GgEtilVp/xdCIJKkPIMH6P/+111nn RyxNhcQ/p0tXoEssXD+DhD95s8bJpphX55WYiTWypFA8CCfhyGz0FP9OC1rM+sMu 0YQRoRuX1LUpJZ4aKt2BmeLFpKl5fR+qGsd4NI96Ui0bl5nA0wXObbkBiQ7kXeNh CMvRu68QAghVUFQQ3FVQ/tvruGoG/xTh -----END CERTIFICATE-----Generated at Thu Oct 23 10:00:10 2025 by rpki-client