$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: ZdfB/Jiy9rquMgyT8hjKWl2oZThOgPYwrWK/iJQYroo= Subject key identifier: 5C:A3:9F:AF:40:E6:61:CA:04:E1:93:9D:59:7E:B0:16:A9:70:AA:B0 Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: D3 Signing time: Mon 03 Nov 2025 05:49:52 +0000 Manifest this update: Mon 03 Nov 2025 05:49:51 +0000 Manifest next update: Mon 10 Nov 2025 05:49:51 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: nyqTl976I1i6akWkpjWf+lD3NtQLj8brlQU0YNzfAbc=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: kFeLSlxr+WCGPho9rPBLPN730/5wUSHLkfcdGg7Yk2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Nov 3 05:49:51 2025 GMT Not After : Nov 10 05:49:51 2025 GMT Subject: CN=6908427f-dc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:ea:ab:06:fe:58:96:c3:8c:c4:ac:25:35: f7:76:7e:cc:5f:2f:34:12:a0:8c:c7:ce:49:ad:d0: 89:60:c7:b6:f3:fa:57:dc:f8:76:95:42:4a:b5:96: 2c:4a:9b:33:0c:0b:77:04:fb:66:61:45:ea:ca:06: d6:4f:47:20:ed:62:ba:cf:fe:40:75:35:f6:fc:ce: b5:bc:68:4c:8f:43:0d:c9:b9:99:89:dc:60:49:ee: 8f:1d:ba:90:a6:89:ce:1e:1d:ce:1b:0f:a0:e4:7e: ea:d1:ea:d2:60:87:70:00:e4:02:f0:0a:09:c0:5f: 77:90:21:2f:29:bd:fd:68:be:94:04:7e:7a:05:2f: 16:00:2f:7c:6a:5f:f1:22:76:0c:8a:a6:af:30:b2: eb:35:7e:fb:ed:cb:2f:10:f5:d7:f6:aa:ad:3e:c3: 31:23:1a:a9:f2:dc:be:e0:4f:2f:69:c8:38:9c:9a: b3:fd:7a:bb:0e:e0:ec:dd:90:7a:fb:87:63:27:1d: e8:70:f0:59:8f:53:31:f0:9b:08:02:3d:59:cc:8f: 5e:ec:20:cb:5c:2e:b8:d4:75:7e:ad:eb:41:25:82: 5b:9a:26:e8:43:3d:3d:18:d8:f4:b0:fa:c1:a2:37: 19:b8:eb:c5:02:4b:25:a5:e4:7c:b8:65:92:1c:d3: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A3:9F:AF:40:E6:61:CA:04:E1:93:9D:59:7E:B0:16:A9:70:AA:B0 X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:4c:b4:2b:9a:a5:13:07:ce:80:62:46:62:76:74:9c:bb: 02:b1:1b:2b:cc:64:61:e0:c0:8d:ca:7d:d0:fa:56:0d:ee:4e: 12:ee:61:ec:03:5f:b3:82:52:01:4a:fa:81:ac:fb:e2:1a:26: f0:4b:ca:9e:f7:2c:7d:25:46:c1:62:c8:d3:8f:9f:d0:03:ff: e7:53:c9:47:ca:52:4a:12:a0:82:ae:b2:c0:cf:a0:4d:dd:eb: fb:9f:51:ad:46:49:b9:63:b6:d9:d8:60:d2:85:3f:6c:94:ec: b2:61:4e:1b:26:2b:fc:b4:ef:9e:ed:8e:81:04:3f:a7:e8:04: 51:60:2c:3e:61:63:ca:f9:df:09:8b:78:36:e5:c0:e3:44:71: 56:5d:0c:9c:62:78:e7:d9:f4:d4:d7:34:9f:5f:6f:61:5d:72: aa:f6:2a:99:a8:cb:ae:7b:57:99:1d:f9:7f:14:b5:e4:67:c1: fe:6e:ba:f0:12:80:46:e5:75:ef:33:04:f8:e0:df:60:a8:ff: fd:1e:cb:63:79:3e:f2:77:09:c6:48:f2:51:5c:34:95:3b:b8: 8b:3b:cd:ca:58:c2:ee:0c:d5:14:bf:f2:4d:f5:01:b6:a3:83: c7:c9:1f:8b:c0:13:c2:e3:5a:8e:4e:bd:3a:17:06:21:6d:d1: dc:1d:90:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKDEwMEQ5QUVFOTFEMjI3RkU0NzU5MzRGMjk3OEMzNjE3 RDhDRkE4RUUwHhcNMjUxMTAzMDU0OTUxWhcNMjUxMTEwMDU0OTUxWjAYMRYwFAYD VQQDEw02OTA4NDI3Zi1kYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1Dqqwb+WJbDjMSsJTX3dn7MXy80EqCMx85JrdCJYMe28/pX3Ph2lUJKtZYs SpszDAt3BPtmYUXqygbWT0cg7WK6z/5AdTX2/M61vGhMj0MNybmZidxgSe6PHbqQ ponOHh3OGw+g5H7q0erSYIdwAOQC8AoJwF93kCEvKb39aL6UBH56BS8WAC98al/x InYMiqavMLLrNX777csvEPXX9qqtPsMxIxqp8ty+4E8vacg4nJqz/Xq7DuDs3ZB6 +4djJx3ocPBZj1Mx8JsIAj1ZzI9e7CDLXC641HV+retBJYJbmiboQz09GNj0sPrB ojcZuOvFAkslpeR8uGWSHNNCvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyjn69A 5mHKBOGTnVl+sBapcKqwMB8GA1UdIwQYMBaAFBANmu6R0if+R1k08peMNhfYz6ju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS81N0ZGNEJDQThC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pfNUhXVFR5bDR3MkY5alBx TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS81N0ZGNEJDQThCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pf NUhXVFR5bDR3MkY5alBxTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAATUy0K5qlEwfOgGJGYnZ0nLsCsRsrzGRh4MCNyn3Q+lYN7k4S7mHs A1+zglIBSvqBrPviGibwS8qe9yx9JUbBYsjTj5/QA//nU8lHylJKEqCCrrLAz6BN 3ev7n1GtRkm5Y7bZ2GDShT9slOyyYU4bJiv8tO+e7Y6BBD+n6ARRYCw+YWPK+d8J i3g25cDjRHFWXQycYnjn2fTU1zSfX29hXXKq9iqZqMuue1eZHfl/FLXkZ8H+brrw EoBG5XXvMwT44N9gqP/9HstjeT7ydwnGSPJRXDSVO7iLO83KWMLuDNUUv/JN9QG2 o4PHyR+LwBPC41qOTr06FwYhbdHcHZCa -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:17 2025 by rpki-client