$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json) Hash identifier: CO1C8d7Rs4K7PwBXPSu0e1mI5TvyFxwJNdfNJRInIkU= Subject key identifier: AF:29:DB:D2:A4:94:DF:B1:A4:69:23:AB:D7:E1:E7:02:53:5A:D3:77 Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft Manifest number: C5 Signing time: Mon 03 Nov 2025 05:54:54 +0000 Manifest this update: Mon 03 Nov 2025 05:54:53 +0000 Manifest next update: Mon 10 Nov 2025 05:54:53 +0000 Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: cfRJpz8//Pw+X+ridU4r9+GRnoq61s1IQbLcmpEdkUI=) 2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: MvYbkMM7qX+K3Cl1XMK5DsKY9VO54145P/lZVkIO3Zo=) 3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CBRfaNleeLhQbkhZ9Y/Gyu8j+qS/vePZy+tfvqG3Iy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Validity Not Before: Nov 3 05:54:53 2025 GMT Not After : Nov 10 05:54:53 2025 GMT Subject: CN=690843ae-e3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:41:68:0e:be:aa:ad:51:6b:ec:52:6d:62: 7f:ee:4e:85:65:07:4c:8e:77:de:9c:d5:d3:b9:df: a8:2a:9d:aa:ee:7e:86:7c:1c:46:6e:99:ed:da:44: 1d:3f:91:59:c7:e2:0c:58:81:9b:76:71:c7:91:cb: 42:f0:48:12:18:42:2b:7d:52:44:31:2c:65:be:6c: 45:2b:a5:c0:f6:05:3f:3e:28:7e:3b:70:4f:ce:b2: 88:ce:53:a4:c0:2b:a7:e6:b9:42:81:3a:d3:23:2f: 90:88:1b:92:aa:95:2c:38:ee:ad:97:8f:98:c8:fa: 84:10:8b:5a:2b:08:1e:32:4a:5a:51:1a:65:9d:6f: a4:b8:9c:bd:a4:3d:9b:34:58:85:62:77:0f:36:ba: f9:b5:99:38:a3:56:7d:05:f5:a8:04:52:0a:9c:86: f6:42:f5:0e:c4:66:ce:3c:e5:5e:1a:d2:d8:c7:ec: f3:c2:eb:10:ef:70:1a:a7:9d:b0:da:cb:67:e5:ac: 63:35:74:8b:62:18:b5:55:79:a0:1f:d8:c9:b8:30: 3a:0c:d8:b5:d5:80:76:e4:f7:1f:ba:a9:60:2c:7b: ba:5b:ce:7b:49:ac:07:5c:0e:7a:97:a2:93:f5:e8: 3b:2b:58:1d:23:07:dd:c5:e9:db:a9:e5:a9:86:f0: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:29:DB:D2:A4:94:DF:B1:A4:69:23:AB:D7:E1:E7:02:53:5A:D3:77 X509v3 Authority Key Identifier: keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:19:f7:3f:9d:e4:44:c0:21:ba:97:93:c7:98:92:76:94:c6: 1d:65:ce:eb:fd:81:f9:8b:c4:9e:11:ee:cd:c4:6c:fa:d2:53: 59:8e:fd:8a:1c:0f:99:90:d6:62:64:f5:3e:2f:8d:66:96:45: 69:29:cb:9c:93:64:62:57:71:c8:3d:be:ca:5c:e3:e5:57:64: c7:88:0f:bd:72:84:7b:0e:f3:e5:c9:30:fe:a4:13:00:ee:b8: 83:eb:f1:ce:01:e8:36:5c:d6:d3:0f:c8:fa:f1:57:fa:70:e8: 99:da:93:16:dd:d6:7f:c9:dc:f0:f5:97:2e:9c:0d:be:ef:c3: ba:c8:82:c0:09:fa:ce:e5:29:34:84:0c:a7:e6:f7:d7:e1:a1: ce:18:22:c1:19:ce:66:e5:6e:60:02:8e:bd:56:f0:14:f2:0e: 9b:d6:d1:b3:4e:08:18:87:83:15:8d:25:df:61:31:83:3b:b4: 88:d7:53:ae:e3:fa:64:4f:fe:c5:61:47:0b:52:11:62:59:1f: c3:b5:bf:83:3e:b9:00:1e:b2:b9:b3:23:34:b6:bc:18:ad:1d: cc:6b:ba:71:e5:e6:75:b1:b5:91:50:6d:1b:89:ea:67:14:0f: f9:cc:92:b7:42:70:bb:c8:43:d3:4d:80:83:f6:07:81:8a:7a: f9:8b:0c:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTQxMTAvBgNVBAUTKDc5MjBGOENBODRFQzkxM0M2OUE5OEQ1NDM3MTIwOUI0 MzRDMzMxOTEwHhcNMjUxMTAzMDU1NDUzWhcNMjUxMTEwMDU1NDUzWjAYMRYwFAYD VQQDEw02OTA4NDNhZS1lM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkhBaA6+qq1Ra+xSbWJ/7k6FZQdMjnfenNXTud+oKp2q7n6GfBxGbpnt2kQd P5FZx+IMWIGbdnHHkctC8EgSGEIrfVJEMSxlvmxFK6XA9gU/Pih+O3BPzrKIzlOk wCun5rlCgTrTIy+QiBuSqpUsOO6tl4+YyPqEEItaKwgeMkpaURplnW+kuJy9pD2b NFiFYncPNrr5tZk4o1Z9BfWoBFIKnIb2QvUOxGbOPOVeGtLYx+zzwusQ73Aap52w 2stn5axjNXSLYhi1VXmgH9jJuDA6DNi11YB25PcfuqlgLHu6W857SawHXA56l6KT 9eg7K1gdIwfdxenbqeWphvAqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8p29Kk lN+xpGkjq9fh5wJTWtN3MB8GA1UdIwQYMBaAFHkg+MqE7JE8aamNVDcSCbQ0wzGR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1NC83OUY4OTk4Mjkz NTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tUeHBxWTFVTnhJSnREVERN WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1aRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1NC83OUY4OTk4MjkzNTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tU eHBxWTFVTnhJSnREVERNWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuGfc/neREwCG6l5PHmJJ2lMYdZc7r/YH5i8SeEe7NxGz60lNZjv2K HA+ZkNZiZPU+L41mlkVpKcuck2RiV3HIPb7KXOPlV2THiA+9coR7DvPlyTD+pBMA 7riD6/HOAeg2XNbTD8j68Vf6cOiZ2pMW3dZ/ydzw9ZcunA2+78O6yILACfrO5Sk0 hAyn5vfX4aHOGCLBGc5m5W5gAo69VvAU8g6b1tGzTggYh4MVjSXfYTGDO7SI11Ou 4/pkT/7FYUcLUhFiWR/Dtb+DPrkAHrK5syM0trwYrR3Ma7px5eZ1sbWRUG0biepn FA/5zJK3QnC7yEPTTYCD9geBinr5iwy0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:15 2025 by rpki-client