$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json) Hash identifier: dLoEIAQS14yAhWV9DvT4mUU/9qieSUxGAr9d0InKjsI= Subject key identifier: F7:A8:10:F7:BC:07:4F:53:10:AE:30:BB:F7:81:F0:C2:28:D1:13:81 Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft Manifest number: 046D Signing time: Mon 03 Nov 2025 00:07:34 +0000 Manifest this update: Mon 03 Nov 2025 00:07:33 +0000 Manifest next update: Mon 10 Nov 2025 00:07:33 +0000 Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: 5Z0bgs2N+dZwS1FHA0vaNBFwvJNwV8rNfnp9CrGuqWg=) 2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: hAIkEeLEWcB2wcEGanDh+e9b0MM5CnTkz5SOu7dH+to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Validity Not Before: Nov 3 00:07:33 2025 GMT Not After : Nov 10 00:07:33 2025 GMT Subject: CN=6907f246-1c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:b1:09:e2:1b:70:23:3b:02:04:d0:08:01: 16:aa:1d:ef:d5:ec:93:0a:e8:7c:12:43:3c:33:7b: b2:92:fe:25:47:cb:f7:ef:52:1b:66:34:bf:04:59: 3c:f1:ef:32:97:ec:b3:36:7c:28:3c:b3:90:c7:fc: 5d:10:89:87:94:80:37:59:98:66:00:29:fa:e0:ad: e0:81:91:ef:0e:1a:69:ed:8d:49:75:e0:be:35:13: 74:62:bc:f6:51:0f:d1:f8:5a:31:c6:e6:88:7c:2d: 0c:43:22:7a:93:75:b4:10:dc:0b:48:90:ee:cd:0a: 3d:cd:d6:d2:52:9d:99:bc:5f:58:4f:65:ed:55:cf: b8:8f:49:8e:1e:40:59:9a:bf:d5:cd:b5:71:47:aa: 20:c3:98:43:b3:db:3e:06:69:fd:17:55:c1:cc:95: 84:70:b9:cd:55:4a:68:42:53:ae:d3:43:5a:00:45: cd:c5:ca:42:85:0f:4b:15:15:95:a3:b0:3c:26:a5: 08:d5:66:ad:93:97:89:a5:7b:6a:fc:6a:b7:1a:ad: d4:20:fe:bc:2f:1b:60:28:bb:cf:66:df:59:25:1b: 64:c6:36:ba:65:ab:d5:2f:a6:11:31:c2:25:e5:8d: e7:02:f1:2c:a1:14:1a:98:66:16:53:3d:da:e3:ec: cc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A8:10:F7:BC:07:4F:53:10:AE:30:BB:F7:81:F0:C2:28:D1:13:81 X509v3 Authority Key Identifier: keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a0:53:94:a9:20:4f:ca:c2:fd:de:2f:7c:ea:31:c5:ff:e0: af:36:8a:22:17:79:c5:8e:40:c6:bd:23:d4:73:61:46:38:03: 78:d7:ed:e9:4a:de:00:f0:d4:5e:85:36:78:eb:55:f7:d4:ec: 96:47:67:26:fc:ef:f1:83:2f:ff:4c:0d:85:c4:c0:c7:20:f5: 50:f7:0d:c8:c2:48:29:31:63:7a:64:f8:4c:23:f6:81:b7:fd: e5:ab:52:e3:6c:0f:f1:e0:f8:95:22:cf:f5:c0:ff:ee:ff:c5: 5d:14:8d:d2:11:96:bd:37:26:c8:52:b2:e3:9c:45:14:d3:2b: d0:e3:fa:1c:4b:0a:9c:a7:92:b4:75:98:04:bd:4e:fa:25:f3: 37:4c:ec:b6:4d:0f:28:c3:7e:c8:50:26:ea:6b:ac:7a:44:2e: 1e:23:3a:7c:d4:6f:c2:0a:f3:10:29:7a:a0:a9:62:6d:4d:b0: cc:7f:9c:55:e3:9c:eb:70:35:6d:23:06:b9:70:71:f3:5e:41: 95:c7:35:1a:11:ca:98:65:5b:fa:ba:3d:cf:cf:ed:f3:d9:15: bd:84:7a:25:bc:80:ad:ac:10:30:6e:9c:a9:69:dd:74:4e:43: 6d:e1:45:43:b8:03:28:6c:b7:30:88:af:7c:57:e6:59:33:6e: 4f:9b:3d:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGNTIxMTAvBgNVBAUTKDc5N0RGQTE4ODM5Rjg3RDEzMTBFOUNBOUMzNDEwQUJF QjY4MzlFNzQwHhcNMjUxMTAzMDAwNzMzWhcNMjUxMTEwMDAwNzMzWjAYMRYwFAYD VQQDEw02OTA3ZjI0Ni0xYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgWxCeIbcCM7AgTQCAEWqh3v1eyTCuh8EkM8M3uykv4lR8v371IbZjS/BFk8 8e8yl+yzNnwoPLOQx/xdEImHlIA3WZhmACn64K3ggZHvDhpp7Y1JdeC+NRN0Yrz2 UQ/R+FoxxuaIfC0MQyJ6k3W0ENwLSJDuzQo9zdbSUp2ZvF9YT2XtVc+4j0mOHkBZ mr/VzbVxR6ogw5hDs9s+Bmn9F1XBzJWEcLnNVUpoQlOu00NaAEXNxcpChQ9LFRWV o7A8JqUI1Watk5eJpXtq/Gq3Gq3UIP68LxtgKLvPZt9ZJRtkxja6ZavVL6YRMcIl 5Y3nAvEsoRQamGYWUz3a4+zMLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeoEPe8 B09TEK4wu/eB8MIo0ROBMB8GA1UdIwQYMBaAFHl9+hiDn4fRMQ6cqcNBCr62g550 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y1Mi9FOTQ2NjZDQzY4 QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5RXhEcHlwdzBFS3ZyYURu blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYMzZHSU9maDlFeERweXB3MEVLdnJhRG5uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y1Mi9FOTQ2NjZDQzY4QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5 RXhEcHlwdzBFS3ZyYURublEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBioFOUqSBPysL93i986jHF/+CvNooiF3nFjkDGvSPUc2FGOAN41+3p St4A8NRehTZ461X31OyWR2cm/O/xgy//TA2FxMDHIPVQ9w3IwkgpMWN6ZPhMI/aB t/3lq1LjbA/x4PiVIs/1wP/u/8VdFI3SEZa9NybIUrLjnEUU0yvQ4/ocSwqcp5K0 dZgEvU76JfM3TOy2TQ8ow37IUCbqa6x6RC4eIzp81G/CCvMQKXqgqWJtTbDMf5xV 45zrcDVtIwa5cHHzXkGVxzUaEcqYZVv6uj3Pz+3z2RW9hHolvICtrBAwbpypad10 TkNt4UVDuAMobLcwiK98V+ZZM25Pmz30 -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:12 2025 by rpki-client