$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft File: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json) Hash identifier: Mp9hZs5DQMxMTPadqerE8vY/fYyp16ucGDRiKAD7Gp8= Subject key identifier: A0:57:09:AB:5E:4D:36:32:46:2A:71:1C:18:35:07:EE:A9:17:93:2C Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft Manifest number: 0642 Signing time: Tue 04 Nov 2025 23:13:04 +0000 Manifest this update: Tue 04 Nov 2025 23:13:04 +0000 Manifest next update: Tue 11 Nov 2025 23:13:04 +0000 Files and hashes: 1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: 8ug9tfRXJEz9Y9RhPdJOTwJVGFDAAJWWPz75dIskCEo=) 2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: ijiCAPwBqro/NY/HWHS1Qe1Is15S0zP4v93++I4AYLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Validity Not Before: Nov 4 23:13:04 2025 GMT Not After : Nov 11 23:13:04 2025 GMT Subject: CN=690a8880-988d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:ef:9e:28:78:e1:88:9f:87:d5:2c:a3:3a: 5f:a6:f6:b4:d4:11:08:45:ad:80:3a:9e:26:0b:dd: 02:d9:ee:ab:f5:c7:6d:05:b3:5d:4f:5b:cf:06:10: 13:35:19:c6:02:dc:a6:0f:eb:36:5c:f7:61:ea:5c: 51:80:a8:bd:69:92:4f:9b:95:94:13:1c:ad:21:de: 37:ef:5d:96:0c:1a:a9:15:90:89:3f:44:fd:17:a7: 7e:b8:f1:eb:02:5a:e5:09:f7:11:35:32:3f:98:2e: 66:96:2c:2a:d5:f0:c1:0f:5c:a9:43:a2:56:86:2b: 36:72:aa:1b:7d:e9:8d:36:5c:8b:79:39:5c:52:9b: 74:ab:b4:60:23:d6:78:ae:c6:9b:10:37:8b:0f:a6: 25:94:e4:0e:fb:c0:ed:08:5e:d1:80:66:97:06:1d: 36:cd:5c:26:e3:87:35:77:7b:69:e9:4e:58:4c:1c: e9:e7:74:43:d0:66:8b:99:ca:19:90:aa:54:0f:0f: 9e:8e:10:e8:6c:d4:9f:4b:43:3d:4b:43:10:fa:60: 47:71:6f:c2:c1:e0:ec:5b:00:e8:a9:29:4e:e7:f7: 70:a0:87:9d:4c:27:33:f6:53:04:b0:aa:1f:84:99: ee:73:1c:8c:9a:f5:02:b2:3c:08:c3:ef:02:fb:70: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:57:09:AB:5E:4D:36:32:46:2A:71:1C:18:35:07:EE:A9:17:93:2C X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:15:1e:d0:d2:34:e7:9c:20:59:09:42:d7:23:75:34:71:b5: 70:d4:c2:a2:56:13:69:ae:6a:01:55:25:88:15:01:cd:0f:5c: 14:d2:9c:54:7a:a3:6a:7a:8a:59:0b:ab:33:18:22:67:92:c4: 8e:f1:8a:10:05:51:60:1a:aa:7f:2c:e7:00:19:68:cd:cb:fa: 41:87:bf:17:f1:cc:39:6a:ac:82:94:1a:0b:8c:6f:a4:3e:57: 1e:a2:7e:ca:ec:1f:11:0a:70:ff:0e:01:8a:dc:33:76:55:a8: 38:30:f3:40:69:3e:6c:c3:3a:af:89:c8:ea:f7:98:18:81:a0: bd:e7:6a:a5:58:77:e8:4e:db:15:4c:72:2d:da:ea:e3:c7:5c: a9:b9:5d:84:6f:f3:33:6b:0d:47:17:4a:10:3a:e6:c2:aa:c9: 7e:8d:7d:79:df:b0:1e:a1:6d:e1:cc:d8:8f:ec:99:22:36:82: d6:b1:f6:2f:34:7c:ea:2d:d5:69:41:53:25:21:91:33:5d:8c: e8:ec:32:33:f0:b5:37:64:58:40:89:7d:34:51:38:1c:aa:32: 8d:aa:1d:b7:a1:9e:aa:ed:a7:99:cd:b5:9b:51:5e:67:8e:79: b7:da:e0:f7:9e:64:c4:5f:ba:7e:bb:db:b8:3a:1e:58:a6:b3: a0:f3:11:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjUxMTA0MjMxMzA0WhcNMjUxMTExMjMxMzA0WjAYMRYwFAYD VQQDEw02OTBhODg4MC05ODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLbvnih44Yifh9Usozpfpva01BEIRa2AOp4mC90C2e6r9cdtBbNdT1vPBhAT NRnGAtymD+s2XPdh6lxRgKi9aZJPm5WUExytId43712WDBqpFZCJP0T9F6d+uPHr AlrlCfcRNTI/mC5mliwq1fDBD1ypQ6JWhis2cqobfemNNlyLeTlcUpt0q7RgI9Z4 rsabEDeLD6YllOQO+8DtCF7RgGaXBh02zVwm44c1d3tp6U5YTBzp53RD0GaLmcoZ kKpUDw+ejhDobNSfS0M9S0MQ+mBHcW/CweDsWwDoqSlO5/dwoIedTCcz9lMEsKof hJnucxyMmvUCsjwIw+8C+3DzkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBXCate TTYyRipxHBg1B+6pF5MsMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt OGQya0lzNjNJZTQtMFpaNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6FR7Q0jTnnCBZCULXI3U0cbVw1MKiVhNprmoBVSWIFQHND1wU0pxU eqNqeopZC6szGCJnksSO8YoQBVFgGqp/LOcAGWjNy/pBh78X8cw5aqyClBoLjG+k Plceon7K7B8RCnD/DgGK3DN2Vag4MPNAaT5swzqvicjq95gYgaC952qlWHfoTtsV THIt2urjx1ypuV2Eb/Mzaw1HF0oQOubCqsl+jX1537AeoW3hzNiP7JkiNoLWsfYv NHzqLdVpQVMlIZEzXYzo7DIz8LU3ZFhAiX00UTgcqjKNqh23oZ6q7aeZzbWbUV5n jnm32uD3nmTEX7p+u9u4Oh5YprOg8xGj -----END CERTIFICATE-----Generated at Wed Nov 5 03:43:55 2025 by rpki-client