$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: 8w4ZXtqzDazzPSmfeheczMEc2YVkeqc4oi4duz35Lu0= Subject key identifier: C4:5B:CE:BC:CA:1A:27:A7:CA:F4:AF:32:22:1B:4A:6B:E2:1F:E1:B6 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: B0 Signing time: Wed 05 Nov 2025 06:25:15 +0000 Manifest this update: Wed 05 Nov 2025 06:25:14 +0000 Manifest next update: Wed 12 Nov 2025 06:25:14 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: g7PJJ9I4xZM2Dbfu66PhVxf0XdnxPZR69Br3GdL0naU=) 2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: OH16X8GEk+h/u670xpKDKmtIszx6M9DvNarlNlVqoko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: Nov 5 06:25:14 2025 GMT Not After : Nov 12 06:25:14 2025 GMT Subject: CN=690aedca-e51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4a:ff:ba:04:e5:c7:8f:3e:aa:f5:aa:d9:40: 2e:09:c1:64:97:c3:21:ec:71:83:73:4a:0c:b2:44: 19:8b:b9:9d:6d:46:a9:db:7d:2d:de:81:44:04:f5: b4:6e:90:17:fe:5c:4a:fc:04:ba:4f:32:f4:7d:d5: e4:36:69:ef:81:31:1b:7a:7a:f1:d7:11:e4:b4:09: aa:31:62:cc:6c:09:aa:74:e6:c6:3f:fe:34:7f:2e: 39:c5:21:ea:ac:a0:19:a2:93:d6:a8:c9:3d:7d:bd: 81:bf:25:cc:54:a2:73:fc:f7:da:67:75:1c:88:11: 28:62:59:62:7a:c2:b1:71:e8:34:12:15:ee:1e:e0: ab:cf:ef:72:37:57:17:df:6a:0f:77:e1:64:2c:34: 19:12:88:a4:04:13:a5:e3:3e:f2:64:35:e7:fa:9e: 45:5a:d6:4c:69:01:4e:0a:f5:07:9a:2f:dc:c2:f4: d6:6c:a8:42:b8:05:15:7a:6b:e6:32:d2:16:50:95: 78:f4:7c:f2:43:01:02:d3:0e:d3:c0:f2:27:6f:52: ef:9c:a5:79:a8:d7:7e:e4:3d:41:4e:42:19:1b:81: 1d:40:fc:47:59:11:3a:99:52:e6:2a:8f:2d:44:21: aa:1f:e7:cc:96:87:bc:d4:e0:af:f6:e6:d0:2d:cc: b2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5B:CE:BC:CA:1A:27:A7:CA:F4:AF:32:22:1B:4A:6B:E2:1F:E1:B6 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:1b:2d:e6:9c:b5:ee:37:3b:fb:d0:69:c3:ea:f5:bb:e0:2a: fa:17:1a:4d:fb:48:d9:3e:4c:46:35:9c:bd:73:5e:08:1e:57: d5:ac:66:7b:e8:6f:c2:7b:16:51:80:9c:9e:f8:8c:8f:c9:a8: 96:9b:07:ac:19:c4:c3:7b:22:95:b2:81:9c:04:b9:1b:02:5b: da:fa:b0:29:6a:20:04:d2:aa:1a:18:16:0f:2c:c0:f1:43:88: 20:9a:ab:2b:0f:aa:da:3c:fd:24:51:5f:bf:76:c8:af:20:6c: 43:7b:46:d9:f0:58:f8:c0:3c:83:b4:ce:d7:05:1e:37:1c:c7: c2:cf:1b:4b:c4:84:7e:d2:6e:9a:0f:48:af:c7:b2:14:2f:e5: df:e2:b5:b9:88:72:69:50:b8:31:53:b8:01:32:e7:36:17:2e: d1:d7:84:de:bd:d0:11:0b:57:c6:48:e4:cd:00:51:19:46:2f: a4:3b:2d:a7:e2:73:48:23:01:a3:1b:0e:bc:7c:4a:dd:21:5a: 9e:e0:f8:ab:2d:6e:0b:a3:4e:9d:87:2e:b8:63:10:f1:f6:43: 5f:a0:82:18:31:6a:e7:fb:18:c1:44:03:ce:0a:83:40:58:10: 7a:48:e0:a4:5c:96:f6:8f:1b:e3:9f:05:f2:65:42:0e:03:14: 80:f9:cc:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MTgxMTAvBgNVBAUTKDc5QzdGQzVEMUE1RUVGMEIyOThFMDA3MjMyNkFCNzM2 ODZCREZFNzgwHhcNMjUxMTA1MDYyNTE0WhcNMjUxMTEyMDYyNTE0WjAYMRYwFAYD VQQDEw02OTBhZWRjYS1lNTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60r/ugTlx48+qvWq2UAuCcFkl8Mh7HGDc0oMskQZi7mdbUap230t3oFEBPW0 bpAX/lxK/AS6TzL0fdXkNmnvgTEbenrx1xHktAmqMWLMbAmqdObGP/40fy45xSHq rKAZopPWqMk9fb2BvyXMVKJz/PfaZ3UciBEoYlliesKxceg0EhXuHuCrz+9yN1cX 32oPd+FkLDQZEoikBBOl4z7yZDXn+p5FWtZMaQFOCvUHmi/cwvTWbKhCuAUVemvm MtIWUJV49HzyQwEC0w7TwPInb1LvnKV5qNd+5D1BTkIZG4EdQPxHWRE6mVLmKo8t RCGqH+fMloe81OCv9ubQLcyyyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRbzrzK GienyvSvMiIbSmviH+G2MB8GA1UdIwQYMBaAFHnH/F0aXu8LKY4AcjJqtzaGvf54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxOC84RUU3MTQ4NkI2 QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3c3BqZ0J5TW1xM05vYTlf bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9uZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzkxOC84RUU3MTQ4NkI2QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3 c3BqZ0J5TW1xM05vYTlfbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtGy3mnLXuNzv70GnD6vW74Cr6FxpN+0jZPkxGNZy9c14IHlfVrGZ7 6G/CexZRgJye+IyPyaiWmwesGcTDeyKVsoGcBLkbAlva+rApaiAE0qoaGBYPLMDx Q4ggmqsrD6raPP0kUV+/dsivIGxDe0bZ8Fj4wDyDtM7XBR43HMfCzxtLxIR+0m6a D0ivx7IUL+Xf4rW5iHJpULgxU7gBMuc2Fy7R14TevdARC1fGSOTNAFEZRi+kOy2n 4nNIIwGjGw68fErdIVqe4PirLW4Lo06dhy64YxDx9kNfoIIYMWrn+xjBRAPOCoNA WBB6SOCkXJb2jxvjnwXyZUIOAxSA+cx9 -----END CERTIFICATE-----Generated at Wed Nov 5 10:27:53 2025 by rpki-client