$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json) Hash identifier: 5Ojc0IJLa6u+Fe2E5b70D2k+jVa8/A4WZMCMnK5blFg= Subject key identifier: 59:F9:AC:7C:6B:45:B2:68:CB:E1:38:AC:53:D4:56:2A:8D:F9:B8:17 Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft Manifest number: 012F Signing time: Mon 03 Nov 2025 04:35:40 +0000 Manifest this update: Mon 03 Nov 2025 04:35:39 +0000 Manifest next update: Mon 10 Nov 2025 04:35:39 +0000 Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: PKH1Kj2z8jDUAl41zp8XuV5HC/ME2guqg1YcEiIMJeE=) 2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: nAAaBPNOT83reooBTbRysc5FUHQ0lj/e8r5J8CDIx/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Validity Not Before: Nov 3 04:35:39 2025 GMT Not After : Nov 10 04:35:39 2025 GMT Subject: CN=6908311b-4b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:b7:22:78:7f:fa:fa:83:a4:7b:75:bf:74: 50:85:34:64:da:e4:57:d1:aa:71:f5:0a:0d:b4:aa: 60:c1:be:e2:f2:22:8a:ca:db:24:12:8f:c5:89:dd: ea:be:c6:84:05:8d:01:f2:18:b8:20:b5:a4:2b:39: 6b:11:05:8d:6c:fa:c4:2d:6d:fe:1f:e1:94:1f:f7: 82:e8:74:6b:0f:ed:80:70:f7:11:27:df:e7:f9:7d: 89:07:3d:b1:be:b1:5f:51:0f:d5:25:40:c4:5e:ca: f1:ea:1a:3e:4f:c7:ba:d2:73:6f:c6:fb:7e:f4:fe: 8d:8d:71:7a:86:79:55:45:91:85:62:e4:3a:44:c5: 75:c0:24:f9:19:f4:96:32:b6:3e:d2:5f:6b:7f:75: d5:e5:e6:36:4b:f0:7c:6b:5b:9a:3f:76:82:6f:17: 6c:6f:b2:ab:ee:0c:17:e9:e3:88:92:03:df:05:b5: 36:5e:c1:8a:91:33:43:da:99:cd:68:fc:57:d1:5e: ba:ab:53:c2:d7:96:c1:fa:21:ea:e2:34:c0:80:b1: 27:5c:98:76:24:ac:19:ab:53:ff:e7:ae:b2:9e:44: 6c:4b:0c:cf:f7:a9:0e:48:cb:bc:16:39:cd:48:9f: ab:2e:49:66:a1:b7:67:45:93:b4:5c:3f:82:5b:5e: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F9:AC:7C:6B:45:B2:68:CB:E1:38:AC:53:D4:56:2A:8D:F9:B8:17 X509v3 Authority Key Identifier: keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b3:4a:01:60:c9:69:86:b3:6c:99:1a:9a:17:2c:54:92:0f: 3e:db:95:ea:e9:31:ad:32:08:10:1c:de:81:fb:2a:24:38:8d: 18:33:4a:c2:2f:89:ef:ce:bd:e0:af:46:2f:11:96:1a:16:5f: f7:c2:fb:1a:3d:c4:c0:99:a0:66:57:bf:d3:e6:2d:b7:4f:dd: 19:17:78:5a:0d:c4:e8:9e:49:fe:b7:4f:8b:54:00:45:75:0e: 43:55:4f:fe:ed:15:15:f0:e0:8d:30:3b:cf:4d:06:06:07:1c: 4e:f6:9c:d0:ae:1b:ab:f0:65:56:15:f6:00:cb:a3:0f:f8:be: 2d:ec:78:6a:1a:dd:6a:52:c7:be:0f:1e:4a:9e:56:ac:d7:3f: 1e:a9:87:27:c2:2a:16:29:c8:06:35:36:d4:ad:01:cb:d3:d8: da:31:d6:8a:2a:e7:d5:2c:ee:3c:00:8e:41:a0:21:05:6a:b3: 34:48:58:84:62:f5:63:41:f1:49:55:1d:9a:eb:e3:e9:40:fd: 95:04:9b:06:aa:31:ee:48:57:f1:bf:1e:2c:c6:5a:53:81:c0: 72:ca:f5:42:12:cf:b2:e5:9a:65:40:c8:40:0f:c7:50:f0:d7: 8a:13:1d:08:7a:93:e5:9d:4f:3a:98:ea:66:d7:65:fd:68:72: 50:2f:26:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD MjBBRTUzODYwHhcNMjUxMTAzMDQzNTM5WhcNMjUxMTEwMDQzNTM5WjAYMRYwFAYD VQQDEw02OTA4MzExYi00YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI63Inh/+vqDpHt1v3RQhTRk2uRX0apx9QoNtKpgwb7i8iKKytskEo/Fid3q vsaEBY0B8hi4ILWkKzlrEQWNbPrELW3+H+GUH/eC6HRrD+2AcPcRJ9/n+X2JBz2x vrFfUQ/VJUDEXsrx6ho+T8e60nNvxvt+9P6NjXF6hnlVRZGFYuQ6RMV1wCT5GfSW MrY+0l9rf3XV5eY2S/B8a1uaP3aCbxdsb7Kr7gwX6eOIkgPfBbU2XsGKkTND2pnN aPxX0V66q1PC15bB+iHq4jTAgLEnXJh2JKwZq1P/566ynkRsSwzP96kOSMu8FjnN SJ+rLklmobdnRZO0XD+CW14zCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFn5rHxr RbJoy+E4rFPUViqN+bgXMB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4 RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN U1R5S19INkcxbW5DQ3VVNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3s0oBYMlphrNsmRqaFyxUkg8+25Xq6TGtMggQHN6B+yokOI0YM0rC L4nvzr3gr0YvEZYaFl/3wvsaPcTAmaBmV7/T5i23T90ZF3haDcTonkn+t0+LVABF dQ5DVU/+7RUV8OCNMDvPTQYGBxxO9pzQrhur8GVWFfYAy6MP+L4t7HhqGt1qUse+ Dx5Knlas1z8eqYcnwioWKcgGNTbUrQHL09jaMdaKKufVLO48AI5BoCEFarM0SFiE YvVjQfFJVR2a6+PpQP2VBJsGqjHuSFfxvx4sxlpTgcByyvVCEs+y5ZplQMhAD8dQ 8NeKEx0IepPlnU86mOpm12X9aHJQLyYK -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:30 2025 by rpki-client