$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: leSj+iOXp3WvgUbMppNfVtidwl0U0u90rWkuldOk2HM= Subject key identifier: CB:77:5D:93:AF:CF:E3:01:DF:06:CC:A4:B1:E6:1A:6E:9B:F5:07:E3 Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0BF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0BE5 Signing time: Sun 02 Nov 2025 18:51:09 +0000 Manifest this update: Sun 02 Nov 2025 18:51:08 +0000 Manifest next update: Sun 09 Nov 2025 18:51:08 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: LCA+IhQvLBUAjEY96UBYVYv3HEqkUkP0CKGy9IDO7PU=) 2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: kbjVSRJWVNsKP886UTdCXje46K3vQ/OgBysCSuexrdk=) 3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 0VsxW37CUzW4AoNDh7cYqP2zuBQmSz8Y4/jKr2zDwys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3062 (0xbf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Nov 2 18:51:08 2025 GMT Not After : Nov 9 18:51:08 2025 GMT Subject: CN=6907a81c-efde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:49:5c:48:dc:fe:d4:1e:90:11:c7:aa:72: b4:db:9a:4a:12:f7:94:f6:d2:18:b3:a5:db:75:4e: ef:30:64:88:55:82:cd:18:6b:bd:f2:1f:e1:36:95: 9b:59:5b:21:9b:fe:a8:d2:10:65:da:aa:d8:e8:19: 79:bb:b3:0e:59:fd:76:33:92:2e:8b:ca:4e:fb:b9: e7:aa:5a:59:25:68:41:bd:15:e1:1f:e1:ba:c7:e4: b9:30:66:0e:bc:e6:8c:68:4d:2a:7f:e8:0b:77:50: 5f:b9:29:26:ad:0d:88:82:fd:6c:27:a6:3b:37:03: fa:6d:fc:b9:0e:8b:f2:35:a1:2a:b8:68:9f:eb:16: 94:f3:4f:e0:a1:77:15:31:f0:83:c7:42:cb:73:a9: 61:48:a4:e5:a2:3b:e1:31:48:56:a2:1e:58:45:06: b8:67:bb:b5:52:cf:75:d8:39:e2:4c:53:62:aa:d0: 5d:cc:8f:e2:0e:5e:bb:93:4b:13:2d:67:b6:b1:02: 9c:de:f4:35:6f:23:3e:39:9f:7d:be:29:44:21:d2: c2:fd:51:94:5d:7f:fc:14:36:c0:a8:50:61:49:97: 79:d3:c8:4b:39:91:2c:5f:6a:d7:6a:b7:57:3e:2d: c9:7b:1d:a5:98:be:ee:85:2d:52:2e:d0:a8:52:15: b2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:77:5D:93:AF:CF:E3:01:DF:06:CC:A4:B1:E6:1A:6E:9B:F5:07:E3 X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:5c:8c:3a:7a:20:0e:6b:bc:62:6c:97:54:9a:86:56:3f:9a: 1d:ae:e4:c0:ec:9a:6d:9d:69:62:d9:d6:f7:ee:84:a9:42:c1: d9:37:23:1f:5f:51:db:2d:c5:c2:ed:dd:c1:01:5a:40:78:b8: 32:8c:12:dd:b3:20:47:55:8d:b1:73:b0:b7:bd:02:d9:a3:33: 84:99:4a:e0:4a:c9:84:1a:02:1d:ed:1d:78:8e:d9:af:87:28: 9d:d8:54:11:17:02:4f:8e:0c:42:23:bc:97:c1:e8:7d:dd:d5: a1:c5:8f:67:33:d2:01:7a:7f:0c:8a:c4:9a:52:9c:8e:07:bb: 50:c0:cc:02:07:1e:8b:f6:25:ce:c1:ab:47:ee:ca:6f:e4:45: 6b:53:5f:9c:05:fa:d1:51:be:70:df:9c:22:f4:26:03:31:d2: f2:91:09:e0:0d:a4:9b:b7:cd:f8:bf:5a:c4:e5:85:b2:aa:97: 37:15:77:70:f7:ab:83:10:0d:0e:7c:d3:69:95:07:8d:fc:ba: f7:1f:57:93:8f:67:7c:e6:a8:7d:4f:d6:f4:10:db:2b:96:7f: ec:db:7e:23:d1:89:15:9a:66:ba:f2:a9:ad:08:7b:06:8d:7e: 79:b3:c2:9e:aa:1b:be:78:3b:a8:a7:36:8a:84:14:28:41:16: bd:35:03:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjUxMTAyMTg1MTA4WhcNMjUxMTA5MTg1MTA4WjAYMRYwFAYD VQQDEw02OTA3YTgxYy1lZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTZJXEjc/tQekBHHqnK025pKEveU9tIYs6XbdU7vMGSIVYLNGGu98h/hNpWb WVshm/6o0hBl2qrY6Bl5u7MOWf12M5Iui8pO+7nnqlpZJWhBvRXhH+G6x+S5MGYO vOaMaE0qf+gLd1BfuSkmrQ2Igv1sJ6Y7NwP6bfy5DovyNaEquGif6xaU80/goXcV MfCDx0LLc6lhSKTlojvhMUhWoh5YRQa4Z7u1Us912DniTFNiqtBdzI/iDl67k0sT LWe2sQKc3vQ1byM+OZ99vilEIdLC/VGUXX/8FDbAqFBhSZd508hLOZEsX2rXardX Pi3Jex2lmL7uhS1SLtCoUhWy3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMt3XZOv z+MB3wbMpLHmGm6b9QfjMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWXIw6eiAOa7xibJdUmoZWP5odruTA7JptnWli2db37oSpQsHZNyMf X1HbLcXC7d3BAVpAeLgyjBLdsyBHVY2xc7C3vQLZozOEmUrgSsmEGgId7R14jtmv hyid2FQRFwJPjgxCI7yXweh93dWhxY9nM9IBen8MisSaUpyOB7tQwMwCBx6L9iXO watH7spv5EVrU1+cBfrRUb5w35wi9CYDMdLykQngDaSbt834v1rE5YWyqpc3FXdw 96uDEA0OfNNplQeN/Lr3H1eTj2d85qh9T9b0ENsrln/s234j0YkVmma68qmtCHsG jX55s8Keqhu+eDuopzaKhBQoQRa9NQON -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:09 2025 by rpki-client