$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft File: tN_eECSMkMVYSwFupua0nnge2CA.mft (raw, json) Hash identifier: GbaKfu20wEYkapdNzJVB/3QwXkFUSpgsK6ZhMpVfQ6Y= Subject key identifier: 22:4A:7D:32:0F:60:59:6E:38:83:14:E7:EB:F5:8A:02:F9:82:E2:8E Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20 Certificate issuer: /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820 Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft Manifest number: 06DF Signing time: Tue 04 Nov 2025 22:05:16 +0000 Manifest this update: Tue 04 Nov 2025 22:05:16 +0000 Manifest next update: Tue 11 Nov 2025 22:05:16 +0000 Files and hashes: 1: tN_eECSMkMVYSwFupua0nnge2CA.crl (hash: WYqqcGq+/O9wlq9Wyw1/9Poa3uqt+M6iqu8mk3ZpQZ0=) 2: 9E9FA4C40AB011EC8906F464C4F9AE02.roa (hash: y+B4buIfbruqaejaK6x75+RSn7pa5KBjABUZlRGt/q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A5B, serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820 Validity Not Before: Nov 4 22:05:16 2025 GMT Not After : Nov 11 22:05:16 2025 GMT Subject: CN=690a789c-de8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:21:77:b3:6a:de:16:8a:86:1b:4e:78:5c:43: 4c:45:8b:a7:46:6b:5d:e2:dd:85:74:fd:66:ae:39: 36:27:60:50:56:21:2d:a6:4f:08:6f:ca:6a:34:ea: ab:d4:f0:8a:0f:4d:8a:0c:7a:87:ed:96:df:22:06: c4:a0:94:52:da:d6:d9:3a:33:bc:2a:0c:b6:83:ad: 18:f1:ff:66:b6:f7:f3:5e:d7:73:21:93:3f:ec:b1: e0:9c:09:35:ca:d7:af:d7:7d:76:c9:cd:56:ea:70: b1:ee:5c:2a:68:8a:64:0f:a3:9d:95:2e:5c:5b:1e: 2b:98:62:ca:fb:c3:ed:58:c8:7d:20:0b:2f:ac:34: 1d:e4:fa:f7:50:d1:20:e6:f1:9f:6a:68:18:11:50: 0e:95:c8:9d:a2:66:59:57:1e:46:2c:13:4f:7f:df: 6e:b3:b5:20:e1:39:01:3e:85:89:a3:e8:83:b1:5d: 4b:07:26:86:ab:91:46:b3:b3:38:28:e2:37:11:dc: 40:13:29:e2:86:d0:86:b9:b0:39:98:2c:cc:f4:c3: f3:cf:f2:1b:fb:d1:3e:13:6f:e9:3a:60:5a:ff:2e: 82:b7:26:1e:14:ec:36:57:8d:bb:0c:c8:32:60:38: c1:0d:a8:04:20:10:81:02:9a:57:38:a7:30:7a:cf: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4A:7D:32:0F:60:59:6E:38:83:14:E7:EB:F5:8A:02:F9:82:E2:8E X509v3 Authority Key Identifier: keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:57:24:6f:f5:9f:8b:9a:75:f6:a5:90:ae:0c:dc:07:92:b8: 72:f7:29:5e:d2:ea:a0:3d:ce:e5:96:5c:6e:0a:47:f6:49:a1: 57:c7:b4:70:80:57:b4:fc:26:20:5a:6b:fe:87:93:5e:7e:b4: 1f:fa:0d:91:77:3b:b4:e6:0e:af:86:2f:e5:be:02:91:59:53: 11:ca:20:f0:94:2a:60:55:80:82:1a:e3:03:f1:47:67:4f:c2: 49:61:eb:9a:ea:bb:23:9e:3b:90:44:51:6d:15:4c:0f:5e:2a: 83:3b:d4:bb:d0:96:b5:8a:14:f9:94:ec:b4:ce:ca:09:2c:f3: af:05:e1:80:9d:30:4c:c5:a0:e3:ec:d5:0c:39:f4:be:c4:7f: 97:09:8c:58:55:45:c9:1a:57:f2:1d:a8:ae:30:97:fe:f5:6e: ab:7f:75:b5:a3:77:cb:e5:94:d0:e3:d7:e3:b9:60:46:55:ac: 88:38:fd:21:07:98:cb:b7:e2:eb:94:66:b4:e2:2c:8c:f4:63: 3e:03:5a:e9:ac:4d:16:8b:e0:4b:1f:84:25:6b:6f:75:dd:26: 28:38:28:62:fb:95:73:34:27:18:23:ea:92:ae:bd:61:80:65: 93:d1:05:8f:9b:a6:f7:82:47:37:c4:ac:97:e6:10:17:bb:11: 15:47:5f:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNUIxMTAvBgNVBAUTKEI0REZERTEwMjQ4QzkwQzU1ODRCMDE2RUE2RTZCNDlF NzgxRUQ4MjAwHhcNMjUxMTA0MjIwNTE2WhcNMjUxMTExMjIwNTE2WjAYMRYwFAYD VQQDEw02OTBhNzg5Yy1kZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CF3s2reFoqGG054XENMRYunRmtd4t2FdP1mrjk2J2BQViEtpk8Ib8pqNOqr 1PCKD02KDHqH7ZbfIgbEoJRS2tbZOjO8Kgy2g60Y8f9mtvfzXtdzIZM/7LHgnAk1 ytev1312yc1W6nCx7lwqaIpkD6OdlS5cWx4rmGLK+8PtWMh9IAsvrDQd5Pr3UNEg 5vGfamgYEVAOlcidomZZVx5GLBNPf99us7Ug4TkBPoWJo+iDsV1LByaGq5FGs7M4 KOI3EdxAEynihtCGubA5mCzM9MPzz/Ib+9E+E2/pOmBa/y6CtyYeFOw2V427DMgy YDjBDagEIBCBAppXOKcwes81QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJKfTIP YFluOIMU5+v1igL5guKOMB8GA1UdIwQYMBaAFLTf3hAkjJDFWEsBbqbmtJ54Htgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE1Qi8xMUU5NkIzNDcw MTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtNVllTd0Z1cHVhMG5uZ2Uy Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROX2VFQ1NNa01WWVN3RnVwdWEwbm5nZTJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE1Qi8xMUU5NkIzNDcwMTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtN VllTd0Z1cHVhMG5uZ2UyQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCVyRv9Z+LmnX2pZCuDNwHkrhy9yle0uqgPc7lllxuCkf2SaFXx7Rw gFe0/CYgWmv+h5NefrQf+g2Rdzu05g6vhi/lvgKRWVMRyiDwlCpgVYCCGuMD8Udn T8JJYeua6rsjnjuQRFFtFUwPXiqDO9S70Ja1ihT5lOy0zsoJLPOvBeGAnTBMxaDj 7NUMOfS+xH+XCYxYVUXJGlfyHaiuMJf+9W6rf3W1o3fL5ZTQ49fjuWBGVayIOP0h B5jLt+LrlGa04iyM9GM+A1rprE0Wi+BLH4Qla2913SYoOChi+5VzNCcYI+qSrr1h gGWT0QWPm6b3gkc3xKyX5hAXuxEVR1/F -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:59 2025 by rpki-client