$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: BdOaLhDMbxQT8XH6lA3tVyHuI6GNs3MCi6jB3+R/vE0= Subject key identifier: 89:2B:B5:F2:30:F2:17:FB:0A:C3:70:87:B5:62:AD:A3:EB:FF:69:5A Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: BB Signing time: Fri 17 Oct 2025 09:18:41 +0000 Manifest this update: Fri 17 Oct 2025 09:18:40 +0000 Manifest next update: Fri 24 Oct 2025 09:18:40 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: bYzds2LCNfm3lWCr1ViK58BxxuRlTt6W52jMBySyEfU=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 09:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Oct 17 09:18:40 2025 GMT Not After : Oct 24 09:18:40 2025 GMT Subject: CN=68f209f0-8646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:a3:bc:69:ea:b1:b7:5c:88:32:09:fd:15: 7d:e5:c2:a2:68:4b:1c:71:8f:5f:05:b7:5a:db:e6: ac:6f:fd:4d:bb:65:ea:97:fc:27:ab:54:f3:61:9e: 2d:2e:cd:6f:a3:9d:4b:b2:9f:a0:43:8e:a4:36:44: c0:19:48:ae:c8:5f:5a:8a:60:28:99:51:90:49:f0: 01:f9:7e:74:51:47:24:a2:1a:fc:b1:94:b6:b8:3c: a9:b7:26:ad:80:cc:c8:a5:5c:30:15:70:48:ef:62: fc:ce:01:36:27:b7:ca:ae:27:5a:9b:a4:96:85:ca: ed:df:18:df:85:26:9c:2c:e4:e0:ea:d3:69:3e:20: e2:57:e7:e2:8c:56:31:bc:11:ea:cb:c2:7e:74:3c: 97:76:59:87:b8:18:24:ab:3e:f7:24:ec:1a:63:a0: e0:42:02:f3:8d:bd:b2:e3:f1:b5:2c:ab:f6:34:9e: fa:e3:df:ce:a3:26:f2:4a:ae:78:0b:78:e6:77:72: 05:71:17:c1:c1:b5:47:26:a6:22:da:3d:b5:18:38: 1f:13:76:63:4c:a2:da:89:84:8b:ff:43:8f:95:52: 62:69:a4:8a:ee:bd:e9:c5:d8:83:5b:91:4c:cc:2b: ac:9a:8a:1d:aa:78:7f:f5:9d:d1:5f:92:2c:d7:a9: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2B:B5:F2:30:F2:17:FB:0A:C3:70:87:B5:62:AD:A3:EB:FF:69:5A X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:18:4e:62:af:df:15:82:47:5b:4e:e5:7a:00:2c:11:4c:15: e1:1d:de:4f:e0:fb:cc:b1:d3:ff:3e:3f:a2:43:8d:df:69:a8: 7c:c8:fb:c0:01:3c:17:1f:8a:0c:4c:fe:9d:11:33:eb:01:88: 35:ee:02:05:ec:61:ea:cf:b8:97:62:7e:46:45:aa:61:82:82: 42:d1:a2:e1:7d:60:03:4d:1d:20:61:35:b7:32:e4:50:b3:fc: 4b:55:6e:84:6e:d1:9b:9a:8d:f7:b1:a6:12:0d:cb:50:00:de: c9:77:c3:79:64:4e:7d:2b:92:cc:25:7f:3c:2e:0a:78:f1:2f: cc:b4:b7:65:9f:20:e5:ea:5f:c9:bc:7c:23:f8:43:50:52:f7: 5f:91:90:a2:bb:ea:38:be:02:cd:fa:b9:10:cd:89:4e:d1:05: 4c:90:9f:19:d3:ad:5e:3f:8f:58:ff:0a:88:e7:35:1c:be:bc: 63:f1:fd:90:5a:2c:44:cc:35:2c:70:5f:1b:f6:41:a9:cd:4d: e2:3d:07:b7:70:cc:5a:4a:df:5b:48:82:39:ec:5f:30:04:21: 72:5d:53:54:c4:e7:b1:9d:cc:41:b3:db:6d:32:db:d9:f5:2c: eb:b0:01:3c:a8:44:86:a9:d9:20:76:cc:c8:02:9b:71:f9:30: 28:b8:bb:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2RTcxMTAvBgNVBAUTKDEyNDcwODFFOUJBOTdDMTNDN0REM0Q2OEU0NDNEMUY1 NDc5QjJBRkYwHhcNMjUxMDE3MDkxODQwWhcNMjUxMDI0MDkxODQwWjAYMRYwFAYD VQQDEw02OGYyMDlmMC04NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxOjvGnqsbdciDIJ/RV95cKiaEsccY9fBbda2+asb/1Nu2Xql/wnq1TzYZ4t Ls1vo51Lsp+gQ46kNkTAGUiuyF9aimAomVGQSfAB+X50UUckohr8sZS2uDyptyat gMzIpVwwFXBI72L8zgE2J7fKridam6SWhcrt3xjfhSacLOTg6tNpPiDiV+fijFYx vBHqy8J+dDyXdlmHuBgkqz73JOwaY6DgQgLzjb2y4/G1LKv2NJ7649/OoybySq54 C3jmd3IFcRfBwbVHJqYi2j21GDgfE3ZjTKLaiYSL/0OPlVJiaaSK7r3pxdiDW5FM zCusmoodqnh/9Z3RX5Is16mpvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkrtfIw 8hf7CsNwh7ViraPr/2laMB8GA1UdIwQYMBaAFBJHCB6bqXwTx909aORD0fVHmyr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTZFNy8wNjc5QUNGNDkx MjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZCUEgzVDFvNUVQUjlVZWJL djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTZFNy8wNjc5QUNGNDkxMjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZC UEgzVDFvNUVQUjlVZWJLdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEGE5ir98VgkdbTuV6ACwRTBXhHd5P4PvMsdP/Pj+iQ43faah8yPvA ATwXH4oMTP6dETPrAYg17gIF7GHqz7iXYn5GRaphgoJC0aLhfWADTR0gYTW3MuRQ s/xLVW6EbtGbmo33saYSDctQAN7Jd8N5ZE59K5LMJX88Lgp48S/MtLdlnyDl6l/J vHwj+ENQUvdfkZCiu+o4vgLN+rkQzYlO0QVMkJ8Z061eP49Y/wqI5zUcvrxj8f2Q WixEzDUscF8b9kGpzU3iPQe3cMxaSt9bSII57F8wBCFyXVNUxOexncxBs9ttMtvZ 9SzrsAE8qESGqdkgdszIAptx+TAouLv3 -----END CERTIFICATE-----Generated at Sat Oct 18 23:36:32 2025 by rpki-client