$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft File: ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json) Hash identifier: o0bXxpI+gFsOQUBjJENg75kCn7wIThejPLIvWHyvkf4= Subject key identifier: 06:97:8C:33:9B:65:52:8F:50:D2:6B:28:CE:60:C1:85:64:BA:FD:E6 Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05 Certificate issuer: /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft Manifest number: 0433 Signing time: Wed 05 Nov 2025 00:24:05 +0000 Manifest this update: Wed 05 Nov 2025 00:24:05 +0000 Manifest next update: Wed 12 Nov 2025 00:24:05 +0000 Files and hashes: 1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: +Afp7rGPIDE1Mr5xChSrn+wihh8sHVQegz5H85EkEZA=) 2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: yxgOM7Alp9+Etb0L7ZdDdvPfWsF/rS6M3JXXFnzbA5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105 Validity Not Before: Nov 5 00:24:05 2025 GMT Not After : Nov 12 00:24:05 2025 GMT Subject: CN=690a9925-da1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:8f:ad:88:8b:0e:f1:e1:ef:1d:84:9c:d5: 31:d4:36:7c:4b:89:82:71:c4:a5:0f:79:a5:bd:cc: 4e:b5:6a:dc:c2:e1:4e:8d:db:e1:ce:e3:36:85:df: 89:91:e7:6c:f5:55:95:a4:4c:7f:9d:96:26:d7:98: 51:78:5d:e8:5f:0e:74:c3:cb:3d:a0:81:02:a8:f1: 0e:d9:87:82:1a:da:db:1f:ac:ec:37:07:c3:42:61: fd:a6:d7:d4:a9:76:ff:78:b2:96:d6:65:21:57:25: 35:15:2f:08:35:31:eb:ea:a2:86:84:dc:1a:ef:3e: a7:fd:a0:1a:6d:9d:30:e7:1e:34:02:9c:8c:c1:9c: da:4f:72:10:37:94:35:6b:6d:32:37:f7:af:0e:7a: 29:ee:91:ac:59:9b:ba:79:57:67:68:6e:56:71:c7: 13:40:91:a5:57:61:fb:3c:7a:50:ba:58:75:2d:c1: 19:34:7d:e1:21:38:65:04:18:a2:98:9f:45:5e:c2: 3d:3a:21:c8:3a:be:c7:59:f1:ca:f7:f0:3b:3a:5b: 0e:a1:36:3d:18:ec:b5:78:e5:df:21:60:e0:f3:12: 1c:2e:22:7c:40:bc:b0:46:35:e4:42:ae:d2:32:35: 09:17:69:4a:78:c6:6c:78:fb:1c:55:b0:4b:ce:b1: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:97:8C:33:9B:65:52:8F:50:D2:6B:28:CE:60:C1:85:64:BA:FD:E6 X509v3 Authority Key Identifier: keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:47:f6:fa:b1:2b:c9:33:a8:d7:43:60:57:b1:cf:fb:d5:b5: ad:fb:e6:06:93:a1:a7:eb:96:90:08:3b:12:25:83:d7:b9:fb: e9:ea:1f:6c:92:7b:a5:4a:1b:8d:ea:7a:62:dd:81:69:59:36: f3:d8:a8:1c:b1:00:7e:6f:a9:ef:3a:1e:77:27:d0:b2:ba:21: 58:84:67:f7:84:31:c8:24:f1:48:9f:d4:d5:5d:22:30:90:d0: c0:3b:44:de:5c:45:28:7f:31:53:af:0e:8b:8e:40:36:a4:4d: 75:9f:62:8e:6d:02:72:70:72:6c:5b:de:e0:8b:52:8d:f2:69: ea:ee:f5:3b:6a:9f:f2:34:e7:17:3a:c8:03:b7:be:61:82:06: e1:95:b7:0b:bd:2a:a9:a3:e3:5b:f8:73:75:a3:b3:fc:2a:e5: e7:14:83:cd:1b:3c:72:d0:f4:d1:11:7a:d4:ab:d1:66:9f:5f: 4e:05:a0:a9:55:42:40:fe:43:b3:b5:f7:79:61:c8:20:72:c5: 09:15:b7:72:60:ba:31:5f:1b:44:3e:d6:f8:4c:08:0e:87:d8: 3f:50:32:88:e7:d5:81:fe:fd:43:8f:60:66:27:00:61:6a:05: 30:4f:a0:5c:5e:0f:18:6c:72:ef:a2:a8:6f:d0:fc:6d:af:78: e2:9e:c4:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE4OUQxMTAvBgNVBAUTKDEwQjQwQkRCRDE4Mzk0MTdEN0FEMTIzMzJCMEJFNkY5 RkM2RTgxMDUwHhcNMjUxMTA1MDAyNDA1WhcNMjUxMTEyMDAyNDA1WjAYMRYwFAYD VQQDEw02OTBhOTkyNS1kYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwqPrYiLDvHh7x2EnNUx1DZ8S4mCccSlD3mlvcxOtWrcwuFOjdvhzuM2hd+J keds9VWVpEx/nZYm15hReF3oXw50w8s9oIECqPEO2YeCGtrbH6zsNwfDQmH9ptfU qXb/eLKW1mUhVyU1FS8INTHr6qKGhNwa7z6n/aAabZ0w5x40ApyMwZzaT3IQN5Q1 a20yN/evDnop7pGsWZu6eVdnaG5WcccTQJGlV2H7PHpQulh1LcEZNH3hIThlBBii mJ9FXsI9OiHIOr7HWfHK9/A7OlsOoTY9GOy1eOXfIWDg8xIcLiJ8QLywRjXkQq7S MjUJF2lKeMZsePscVbBLzrFtXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaXjDOb ZVKPUNJrKM5gwYVkuv3mMB8GA1UdIwQYMBaAFBC0C9vRg5QX160SMysL5vn8boEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTg5RC9GNDRGNTZFMjgx QzcxMUVDOTk1MjMyNERDNEY5QUUwMi9FTFFMMjlHRGxCZlhyUkl6S3d2bS1meHVn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VMUUwyOUdEbEJmWHJSSXpLd3ZtLWZ4dWdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTg5RC9GNDRGNTZFMjgxQzcxMUVDOTk1MjMyNERDNEY5QUUwMi9FTFFMMjlHRGxC ZlhyUkl6S3d2bS1meHVnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFR/b6sSvJM6jXQ2BXsc/71bWt++YGk6Gn65aQCDsSJYPXufvp6h9s knulShuN6npi3YFpWTbz2KgcsQB+b6nvOh53J9CyuiFYhGf3hDHIJPFIn9TVXSIw kNDAO0TeXEUofzFTrw6LjkA2pE11n2KObQJycHJsW97gi1KN8mnq7vU7ap/yNOcX OsgDt75hggbhlbcLvSqpo+Nb+HN1o7P8KuXnFIPNGzxy0PTREXrUq9Fmn19OBaCp VUJA/kOztfd5YcggcsUJFbdyYLoxXxtEPtb4TAgOh9g/UDKI59WB/v1Dj2BmJwBh agUwT6BcXg8YbHLvoqhv0Pxtr3jinsT8 -----END CERTIFICATE-----Generated at Wed Nov 5 11:50:19 2025 by rpki-client