$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft File: EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json) Hash identifier: +Km5iXhx0YPF+0s3dBzg6kG/IqoyXE8PllQY964QAR8= Subject key identifier: 1B:92:64:89:F0:FF:69:7E:27:CC:11:FA:BA:03:5F:B1:15:4A:3D:B9 Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Certificate serial: 11E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft Manifest number: 11D5 Signing time: Wed 22 Oct 2025 17:33:48 +0000 Manifest this update: Wed 22 Oct 2025 17:33:48 +0000 Manifest next update: Wed 29 Oct 2025 17:33:48 +0000 Files and hashes: 1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: HLoSUyiARZkxmtcmhB1JQtVQ2cggb4hxLg4ydxQwfxI=) 2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: DIX09IMqDwhYz9qe1Nv5iQBk3kT+S7TLOQSBMI/PtT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4577 (0x11e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Validity Not Before: Oct 22 17:33:48 2025 GMT Not After : Oct 29 17:33:48 2025 GMT Subject: CN=68f9157c-90f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:b4:83:66:16:80:83:b3:5f:3c:8a:9c:ea: 31:62:3c:ab:c0:ab:5e:9d:be:c8:ac:10:e0:83:24: 1f:e9:09:6a:c9:d0:5d:b4:53:76:25:48:4f:ee:dd: 92:7d:8a:39:37:4c:27:51:b9:57:d9:6d:1d:0c:bf: ad:04:f6:90:d9:6e:b3:72:77:3f:ad:f3:92:f4:de: 83:b7:0d:7d:b1:c5:01:80:55:78:c8:04:66:05:9f: 05:9e:bd:9a:64:d5:b4:34:08:67:ba:a4:77:e7:0c: a4:60:ba:89:fd:0b:df:34:70:2b:a7:37:59:dd:8e: 1c:ee:71:e8:fa:81:2e:b4:15:26:23:f1:fb:44:ec: 91:be:a4:a0:82:12:79:d6:f3:d3:ba:be:91:a4:6d: 44:0b:91:75:3d:2d:bf:a2:d4:7a:45:bb:9b:56:03: 17:bb:52:ef:4c:82:84:27:78:fd:1b:09:91:f4:8c: 00:0c:67:1d:e7:44:a6:f0:d3:b6:44:a5:41:54:5d: 6f:e5:05:ca:bf:79:96:a2:0c:8b:26:ee:0f:fb:f3: 79:eb:b3:ed:e0:b9:4d:db:94:48:38:26:82:d2:7e: d4:5c:0d:46:65:db:a6:cc:c0:6a:2e:73:ec:a8:9d: d4:b0:2c:a3:9d:22:89:18:3c:b3:32:ea:0d:66:28: 85:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:92:64:89:F0:FF:69:7E:27:CC:11:FA:BA:03:5F:B1:15:4A:3D:B9 X509v3 Authority Key Identifier: keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c4:e8:e9:1a:8f:37:7c:9c:5c:41:b0:73:c4:6b:df:a3:2a: 22:f5:6f:b8:40:66:87:c4:49:2d:a5:c3:d1:97:45:bf:82:34: 4e:71:cd:03:f9:54:fd:86:ef:5b:48:91:20:f2:bb:99:85:01: d9:41:06:75:17:5f:8f:bc:4c:d8:5d:96:b9:54:fd:64:90:7e: 0d:0f:3d:92:f4:f5:41:15:e9:e5:ac:d1:ab:94:df:bd:3c:c7: b9:7b:d1:91:25:2c:6e:f0:66:19:f2:d4:50:21:82:f6:c7:de: ac:66:6f:72:50:e9:5a:33:f9:89:50:24:97:d8:4f:44:a3:8f: 0f:c6:c3:af:10:42:de:ff:6e:2c:0f:40:67:46:68:a4:82:d0: 12:99:70:f0:02:1c:13:59:91:fb:35:8f:78:a8:7f:1f:b8:21: 2b:e1:9d:05:7b:95:13:85:4d:e8:14:8a:f4:18:bf:0e:00:27: 3c:1a:f8:d9:64:6d:c2:fb:33:ba:8c:78:f6:a5:f6:b5:f3:d4: 84:de:93:32:e2:ef:de:7b:d5:3a:ce:57:3b:1d:e9:cd:b9:5d: 4c:2c:03:8b:a3:31:30:9f:d5:ac:dc:0f:51:27:f3:ac:52:38: 27:59:81:00:92:34:c3:e8:a9:bb:69:32:92:de:72:4d:38:3d: bb:30:6f:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBDREUxMTAvBgNVBAUTKDExNkY5MjBGODczMDY2NzQ3QThDRUREQUZGRTg0QkNG QkRCMDM1MUEwHhcNMjUxMDIyMTczMzQ4WhcNMjUxMDI5MTczMzQ4WjAYMRYwFAYD VQQDEw02OGY5MTU3Yy05MGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGS0g2YWgIOzXzyKnOoxYjyrwKtenb7IrBDggyQf6QlqydBdtFN2JUhP7t2S fYo5N0wnUblX2W0dDL+tBPaQ2W6zcnc/rfOS9N6Dtw19scUBgFV4yARmBZ8Fnr2a ZNW0NAhnuqR35wykYLqJ/QvfNHArpzdZ3Y4c7nHo+oEutBUmI/H7ROyRvqSgghJ5 1vPTur6RpG1EC5F1PS2/otR6RbubVgMXu1LvTIKEJ3j9GwmR9IwADGcd50Sm8NO2 RKVBVF1v5QXKv3mWogyLJu4P+/N567Pt4LlN25RIOCaC0n7UXA1GZdumzMBqLnPs qJ3UsCyjnSKJGDyzMuoNZiiFswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuSZInw /2l+J8wR+roDX7EVSj25MB8GA1UdIwQYMBaAFBFvkg+HMGZ0eozt2v/oS8+9sDUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMENERS8yM0Q4NTY2RUZC REIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1puUjZqTzNhXy1oTHo3MndO Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VXLVNENGN3Wm5SNmpPM2FfLWhMejcyd05Sby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MENERS8yM0Q4NTY2RUZCREIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1pu UjZqTzNhXy1oTHo3MndOUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMxOjpGo83fJxcQbBzxGvfoyoi9W+4QGaHxEktpcPRl0W/gjROcc0D +VT9hu9bSJEg8ruZhQHZQQZ1F1+PvEzYXZa5VP1kkH4NDz2S9PVBFenlrNGrlN+9 PMe5e9GRJSxu8GYZ8tRQIYL2x96sZm9yUOlaM/mJUCSX2E9Eo48PxsOvEELe/24s D0BnRmikgtASmXDwAhwTWZH7NY94qH8fuCEr4Z0Fe5UThU3oFIr0GL8OACc8GvjZ ZG3C+zO6jHj2pfa189SE3pMy4u/ee9U6zlc7HenNuV1MLAOLozEwn9Ws3A9RJ/Os UjgnWYEAkjTD6Km7aTKS3nJNOD27MG9w -----END CERTIFICATE-----Generated at Thu Oct 23 16:17:57 2025 by rpki-client