$ rpki-client -vvf rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.mft File: eEW0a3Dd65eCVHguzbrsQcg-lyM.mft (raw, json) Hash identifier: rkMOQ3QSC/I1TThIkIIvidw2N7YBu3rhRGkhA/qpq9U= Subject key identifier: BB:40:66:C0:C3:2D:1F:10:50:39:D4:9D:77:E3:25:43:9B:5C:55:DE Authority key identifier: 78:45:B4:6B:70:DD:EB:97:82:54:78:2E:CD:BA:EC:41:C8:3E:97:23 Certificate issuer: /CN=A916C108/serialNumber=7845B46B70DDEB978254782ECDBAEC41C83E9723 Certificate serial: 0709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEW0a3Dd65eCVHguzbrsQcg-lyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.mft Manifest number: 0704 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:02 +0000 Manifest next update: Tue 11 Nov 2025 22:00:02 +0000 Files and hashes: 1: eEW0a3Dd65eCVHguzbrsQcg-lyM.crl (hash: K+GJdTsT+MW6ETbZS6lsog+q0y4T38VFrswf1Q5j4V4=) 2: D6C646EE616611EB87E8BA7CC4F9AE02.roa (hash: cjWtcLKmCLCcdb6nM1rkr3+SsLnHwKcSqveOiLm8S0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.crl rsync://rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEW0a3Dd65eCVHguzbrsQcg-lyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C108, serialNumber=7845B46B70DDEB978254782ECDBAEC41C83E9723 Validity Not Before: Nov 4 22:00:02 2025 GMT Not After : Nov 11 22:00:02 2025 GMT Subject: CN=690a7762-f778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:8d:ec:4d:f8:aa:0d:82:95:76:6b:1c:a8: a6:a3:a1:e6:3e:0b:2f:5e:aa:1c:fa:ae:ae:be:7c: d8:00:f3:33:58:b9:d0:96:95:a4:c1:46:99:5a:c3: 58:ef:58:3a:34:aa:8f:f0:97:09:11:9e:f2:1c:69: 98:ba:92:c8:54:cc:f0:f2:a5:1c:2f:14:df:e3:d4: c5:8d:5c:74:c1:ff:e8:aa:54:84:93:18:ae:b6:8f: c3:cb:4c:e4:2d:cb:12:59:fe:84:4c:6b:8c:5c:a7: 1f:7a:81:88:ab:a7:e9:06:ac:6b:3b:8f:93:d6:cd: 0f:2b:3e:94:7c:44:07:35:89:1e:61:d0:5b:83:11: e6:f3:bd:76:8e:4b:ea:6e:cb:9a:c3:0a:43:16:0c: 2c:f3:a9:ef:08:a6:89:31:d3:0c:2a:2f:b3:c9:25: b2:7e:fd:6a:bd:2e:ae:a7:48:57:a2:88:1b:fb:35: 22:a9:56:98:39:e8:a1:c9:19:5e:d2:aa:b0:e2:96: 23:ec:59:0c:7b:03:b2:46:bf:87:49:a1:bd:58:29: f0:6f:b7:40:c9:16:bb:76:2d:b2:21:c5:90:63:3a: 86:f3:58:aa:ae:52:46:b4:f7:fc:22:25:91:7a:d6: d5:f3:de:e3:93:bc:90:a6:df:9f:33:c0:48:94:06: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:66:C0:C3:2D:1F:10:50:39:D4:9D:77:E3:25:43:9B:5C:55:DE X509v3 Authority Key Identifier: keyid:78:45:B4:6B:70:DD:EB:97:82:54:78:2E:CD:BA:EC:41:C8:3E:97:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEW0a3Dd65eCVHguzbrsQcg-lyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:72:5d:e7:05:fd:78:1d:05:c9:9f:0f:95:c3:db:6d:0c:f2: c4:a5:03:5d:8d:3a:1c:34:39:9a:cc:53:f8:09:c6:b9:96:aa: 29:af:a0:7f:e4:67:0b:b4:3c:dc:5f:ff:14:77:d5:54:e3:3f: 5b:ef:e5:b5:1a:66:40:76:c7:c0:d9:6a:d0:5f:10:a2:31:f9: ba:1d:ee:3a:48:f2:a6:d9:6f:83:46:bf:82:b1:58:bb:a7:6e: a6:ca:9c:a7:18:af:49:1d:c2:f7:6b:b1:73:7e:a4:6b:36:83: b5:fb:7b:49:de:d7:aa:12:47:31:24:4a:6a:8a:4c:75:84:49: 7b:31:8b:26:c1:ff:a9:92:ff:b7:75:b9:1e:bf:62:37:a3:4b: 1f:cc:d0:2f:14:bd:4d:94:50:c5:18:76:c1:d4:48:0b:ea:a3: b1:40:ef:d1:75:0c:f5:3f:69:0f:3a:4d:68:d7:bc:35:09:66: 6b:e6:f1:f0:ec:4a:5c:52:07:69:f1:b5:99:a9:33:9d:1d:41: bf:21:97:7d:15:35:04:6b:51:5b:ce:e3:36:84:c0:1c:cf:81: 09:3d:d7:e2:b1:c6:2a:4c:ba:52:60:e6:61:59:e1:4b:3f:ee: 2e:3d:2f:80:51:b2:63:27:a6:bc:90:24:85:0c:26:f2:d2:a1: fc:7f:81:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMxMDgxMTAvBgNVBAUTKDc4NDVCNDZCNzBEREVCOTc4MjU0NzgyRUNEQkFFQzQx QzgzRTk3MjMwHhcNMjUxMTA0MjIwMDAyWhcNMjUxMTExMjIwMDAyWjAYMRYwFAYD VQQDEw02OTBhNzc2Mi1mNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgSN7E34qg2ClXZrHKimo6HmPgsvXqoc+q6uvnzYAPMzWLnQlpWkwUaZWsNY 71g6NKqP8JcJEZ7yHGmYupLIVMzw8qUcLxTf49TFjVx0wf/oqlSEkxiuto/Dy0zk LcsSWf6ETGuMXKcfeoGIq6fpBqxrO4+T1s0PKz6UfEQHNYkeYdBbgxHm8712jkvq bsuawwpDFgws86nvCKaJMdMMKi+zySWyfv1qvS6up0hXoogb+zUiqVaYOeihyRle 0qqw4pYj7FkMewOyRr+HSaG9WCnwb7dAyRa7di2yIcWQYzqG81iqrlJGtPf8IiWR etbV897jk7yQpt+fM8BIlAYnXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtAZsDD LR8QUDnUnXfjJUObXFXeMB8GA1UdIwQYMBaAFHhFtGtw3euXglR4Ls267EHIPpcj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEwOC8wRDMzNEVENjYx NjUxMUVCOEQ0NTY4N0FDNEY5QUUwMi9lRVcwYTNEZDY1ZUNWSGd1emJyc1FjZy1s eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFVzBhM0RkNjVlQ1ZIZ3V6YnJzUWNnLWx5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzEwOC8wRDMzNEVENjYxNjUxMUVCOEQ0NTY4N0FDNEY5QUUwMi9lRVcwYTNEZDY1 ZUNWSGd1emJyc1FjZy1seU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBcl3nBf14HQXJnw+Vw9ttDPLEpQNdjTocNDmazFP4Cca5lqopr6B/ 5GcLtDzcX/8Ud9VU4z9b7+W1GmZAdsfA2WrQXxCiMfm6He46SPKm2W+DRr+CsVi7 p26mypynGK9JHcL3a7FzfqRrNoO1+3tJ3teqEkcxJEpqikx1hEl7MYsmwf+pkv+3 dbkev2I3o0sfzNAvFL1NlFDFGHbB1EgL6qOxQO/RdQz1P2kPOk1o17w1CWZr5vHw 7EpcUgdp8bWZqTOdHUG/IZd9FTUEa1FbzuM2hMAcz4EJPdfiscYqTLpSYOZhWeFL P+4uPS+AUbJjJ6a8kCSFDCby0qH8f4F3 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:38 2025 by rpki-client