$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json) Hash identifier: zL1o5rUZRi/KhHPF+DVaqxKxr8mqMWLaaISCPgPKchA= Subject key identifier: 02:AB:A2:78:70:6C:89:07:06:97:FE:4B:6F:43:C9:0B:02:CA:77:F5 Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft Manifest number: 0498 Signing time: Sun 02 Nov 2025 23:58:52 +0000 Manifest this update: Sun 02 Nov 2025 23:58:52 +0000 Manifest next update: Sun 09 Nov 2025 23:58:52 +0000 Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: ZtXV99/JIjtKi4Kbxs3UGU8Uk0Olz3VsKDOPMSiwYes=) 2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: l8fLmMSk/DnNzXLnjLGhCq/saPEmEN6St/FpFqUG3SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Validity Not Before: Nov 2 23:58:52 2025 GMT Not After : Nov 9 23:58:52 2025 GMT Subject: CN=6907f03c-87d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:86:16:40:a7:58:a9:e3:ae:32:72:ed:c5: f6:5c:ec:90:5b:fd:a3:30:de:3c:f0:12:c3:b1:28: cc:37:30:2d:8f:bc:2d:d9:7b:ca:e1:a3:03:58:d8: 1a:4b:52:61:73:2f:0e:26:51:7b:29:0b:99:3f:ff: 90:5f:26:62:56:03:c7:73:1e:08:9a:2a:63:a5:51: 67:b0:56:f4:b0:b8:e5:6d:51:10:e8:bf:e8:99:c4: 1a:0a:6b:e6:bc:04:ba:d2:4c:a7:32:a6:65:ba:80: 46:dd:8b:ee:53:d9:af:86:5b:96:c1:16:ec:c0:de: 10:26:19:be:ed:0a:3b:1f:59:8a:00:7e:7b:8b:25: cb:6b:f2:76:ea:61:14:4d:3f:9c:41:7f:9e:04:f0: 66:2d:47:7b:cf:56:9b:9a:86:8b:45:91:3b:a6:4d: b1:e7:ef:62:ce:95:60:f7:0e:96:42:a4:ca:74:01: 7a:cd:df:f5:5a:f9:2c:9d:7e:6c:d5:af:dc:d7:47: 47:3e:ee:79:a4:b6:9c:81:db:8c:7f:11:79:61:d8: c4:d9:4f:b8:c0:a7:88:4b:36:05:ca:a2:8c:55:47: 3a:76:57:01:40:ef:94:df:5e:d3:79:dc:8d:17:c6: b4:6e:81:b8:51:cc:fb:9f:75:dd:55:3e:01:04:21: 1d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AB:A2:78:70:6C:89:07:06:97:FE:4B:6F:43:C9:0B:02:CA:77:F5 X509v3 Authority Key Identifier: keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:df:93:97:f9:4e:1c:70:0a:12:ff:23:9a:3b:b0:ad:f6:6f: b6:d2:fb:6f:d3:36:d5:ed:4b:1f:67:18:d6:9b:c8:67:fd:04: 64:56:86:88:4a:9e:07:cf:d6:84:22:75:0e:7a:a4:8b:2f:62: b0:04:0a:97:4e:60:68:f8:08:5e:88:ad:81:4b:ea:ec:3e:ac: 52:e0:9c:88:d1:de:04:22:9a:ae:8e:1c:02:a4:79:da:db:22: ae:27:9a:35:81:87:37:80:ca:8e:32:98:d4:eb:b7:1c:0b:5a: 4e:28:4b:1a:45:4a:47:b6:c7:1e:72:6a:4e:40:e9:81:f3:88: a9:91:6f:45:df:ff:cf:ad:6d:bd:ca:0a:f9:b0:41:fb:df:c7: 04:f3:39:19:fa:30:f5:9d:44:ca:6b:17:6c:35:39:21:5f:e7: e9:32:9c:a7:7d:6b:e4:cc:e4:bd:a5:27:b7:13:30:8d:cf:5a: 74:29:77:fe:15:d1:cf:27:88:f4:ee:cf:18:3a:59:e5:0d:c7: 54:bc:23:77:9b:f4:19:5d:9b:cc:c7:a3:72:03:1d:c6:d9:ad: 8a:29:08:16:af:08:15:85:8b:70:4d:3a:95:f7:b3:4c:69:f5: db:29:6c:95:37:cc:65:1d:87:c4:6e:cc:90:dc:da:03:58:fa: 3b:42:a6:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx QzUzMDMxQTcwHhcNMjUxMTAyMjM1ODUyWhcNMjUxMTA5MjM1ODUyWjAYMRYwFAYD VQQDEw02OTA3ZjAzYy04N2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtViGFkCnWKnjrjJy7cX2XOyQW/2jMN488BLDsSjMNzAtj7wt2XvK4aMDWNga S1Jhcy8OJlF7KQuZP/+QXyZiVgPHcx4ImipjpVFnsFb0sLjlbVEQ6L/omcQaCmvm vAS60kynMqZluoBG3YvuU9mvhluWwRbswN4QJhm+7Qo7H1mKAH57iyXLa/J26mEU TT+cQX+eBPBmLUd7z1abmoaLRZE7pk2x5+9izpVg9w6WQqTKdAF6zd/1WvksnX5s 1a/c10dHPu55pLacgduMfxF5YdjE2U+4wKeISzYFyqKMVUc6dlcBQO+U317TedyN F8a0boG4Ucz7n3XdVT4BBCEdYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKronhw bIkHBpf+S29DyQsCynf1MB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3 NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0 QlJkTHo0TU1QckljVXdNYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG35OX+U4ccAoS/yOaO7Ct9m+20vtv0zbV7UsfZxjWm8hn/QRkVoaI Sp4Hz9aEInUOeqSLL2KwBAqXTmBo+AheiK2BS+rsPqxS4JyI0d4EIpqujhwCpHna 2yKuJ5o1gYc3gMqOMpjU67ccC1pOKEsaRUpHtscecmpOQOmB84ipkW9F3//PrW29 ygr5sEH738cE8zkZ+jD1nUTKaxdsNTkhX+fpMpynfWvkzOS9pSe3EzCNz1p0KXf+ FdHPJ4j07s8YOlnlDcdUvCN3m/QZXZvMx6NyAx3G2a2KKQgWrwgVhYtwTTqV97NM afXbKWyVN8xlHYfEbsyQ3NoDWPo7QqaH -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:37 2025 by rpki-client