$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft File: ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json) Hash identifier: lKk8bmU8ucTS+oca2xZ4d57HntSIvJmx8M4ADvsBRuQ= Subject key identifier: 51:09:BC:D2:33:B0:3B:B6:29:FC:D0:F6:EC:4C:01:64:8F:DB:E0:3B Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC Certificate issuer: /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft Manifest number: 028D Signing time: Wed 05 Nov 2025 01:43:07 +0000 Manifest this update: Wed 05 Nov 2025 01:43:06 +0000 Manifest next update: Wed 12 Nov 2025 01:43:06 +0000 Files and hashes: 1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: G0dh+tsx7TaKs4rXBATqdlIsxbtUaA8E10tbT+0uatI=) 2: 66751A7C729211F0B01C9076C4F9AE02.roa (hash: DA2+T0X/BOsOoqnN72VPgqBzBOjbaGsjnoVczpg928Y=) 3: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: qSn7HxYC79SRKokwqOPpvLlZ94GTIrZHr+Y0TqagvLo=) 4: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: EmbjI84JzquBQTIr84bkMPcgLgOL5ED40jMLVI24vcA=) 5: EA61BF885BA011F0B7D9FB0DC4F9AE02.roa (hash: aOZDWn1qMroB3T8wskNnWN128J45BAOnAdMKsBqc0yc=) 6: 28144924820B11EF8B053D18C4F9AE02.roa (hash: mm04mj/mfrr+HTospMIe7o235EYlDUVjsUVc02GtxUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Validity Not Before: Nov 5 01:43:06 2025 GMT Not After : Nov 12 01:43:06 2025 GMT Subject: CN=690aabaa-457e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:d2:9c:8b:7c:c5:ab:1e:e9:cd:92:fe:e1: f1:d9:8d:9c:e5:03:1f:a8:18:94:ab:25:b1:11:b9: 3d:8b:20:77:f8:31:f8:d3:47:42:37:72:13:d8:21: 0c:ad:04:6c:7d:01:0f:b0:7d:7b:45:0c:e7:6d:fb: 47:e8:c3:5f:fe:7e:6f:99:1c:5f:5c:9e:9b:27:40: 9e:65:d3:7f:9e:4d:77:a4:80:b0:f4:01:7a:1a:1e: 3c:68:b1:15:2e:eb:0c:a1:24:1c:c6:b5:c4:d1:b4: ec:1a:15:23:4c:cd:a6:9c:ed:6a:10:dd:b3:62:af: 1b:bb:bb:60:87:66:62:b7:e6:2a:84:e4:a1:5e:5b: d4:a7:b5:eb:67:52:86:96:20:84:db:bc:e6:cc:37: 1a:05:08:7c:a6:5c:ea:1c:19:64:ae:3b:05:05:5b: 1b:5c:f8:05:c1:87:05:03:19:bc:5e:ab:15:e4:be: 01:a8:13:01:d1:de:99:b0:58:5c:4e:52:0c:bf:94: e1:bd:5c:ed:c7:92:65:8e:82:0e:5b:a4:b6:3c:bb: ce:cb:6b:30:c6:c4:ab:f3:22:7d:c5:5e:e1:3c:8f: e6:68:d5:01:b8:4a:d7:f0:32:09:43:63:bc:82:f9: da:3e:01:9b:7b:66:99:b2:16:00:2e:e8:23:f3:24: b1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:09:BC:D2:33:B0:3B:B6:29:FC:D0:F6:EC:4C:01:64:8F:DB:E0:3B X509v3 Authority Key Identifier: keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:63:29:af:d3:38:03:a7:db:3a:8a:65:a2:00:3b:e5:05:6a: 40:0a:31:1c:c6:23:e2:2a:dc:af:ed:21:ad:df:9c:70:39:3e: 9e:75:e5:4e:7f:c1:9c:34:0a:85:1e:6c:ac:57:21:05:4f:52: 84:86:76:c1:6f:92:e6:c7:e3:53:8a:09:18:dd:2f:b8:24:ca: a0:01:a6:e2:cc:1f:27:27:2f:c8:d1:9f:32:5d:dc:80:a4:05: ac:57:44:76:c7:7f:65:c5:a8:5b:81:49:85:d0:23:fb:e8:93: 2a:24:6a:dc:de:7d:be:83:7b:22:cb:bf:83:2c:1e:ad:9a:e4: 68:63:f1:86:d5:dd:c2:37:b6:58:45:10:48:ac:d6:e0:85:0c: cc:85:7f:d0:8c:d2:e6:8c:94:d5:e2:82:07:83:54:66:15:9c: 76:1e:98:93:2d:10:5d:8c:d0:4f:9b:ac:52:6d:aa:d5:3a:f2: f3:af:92:3d:5f:4c:ee:61:01:6d:6a:9e:f4:e0:d8:e0:c3:7e: a6:04:ac:31:64:5f:d6:68:cd:f1:87:e2:dc:ae:44:ad:91:ee: 72:14:0f:1e:4f:c7:75:14:9a:4f:03:75:d6:2a:dd:44:39:de: 38:99:a6:b4:a7:4b:46:c9:b4:26:6a:3b:31:33:9e:f6:db:36: 00:45:3e:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENzkxMTAvBgNVBAUTKDdBM0Q3RDM3NDhDNzg5ODZDMkM1RTUwQjUwMTNCRUI2 MEFCNDdBREMwHhcNMjUxMTA1MDE0MzA2WhcNMjUxMTEyMDE0MzA2WjAYMRYwFAYD VQQDEw02OTBhYWJhYS00NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJPSnIt8xase6c2S/uHx2Y2c5QMfqBiUqyWxEbk9iyB3+DH400dCN3IT2CEM rQRsfQEPsH17RQznbftH6MNf/n5vmRxfXJ6bJ0CeZdN/nk13pICw9AF6Gh48aLEV LusMoSQcxrXE0bTsGhUjTM2mnO1qEN2zYq8bu7tgh2Zit+YqhOShXlvUp7XrZ1KG liCE27zmzDcaBQh8plzqHBlkrjsFBVsbXPgFwYcFAxm8XqsV5L4BqBMB0d6ZsFhc TlIMv5ThvVztx5JljoIOW6S2PLvOy2swxsSr8yJ9xV7hPI/maNUBuErX8DIJQ2O8 gvnaPgGbe2aZshYALugj8ySxGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEJvNIz sDu2KfzQ9uxMAWSP2+A7MB8GA1UdIwQYMBaAFHo9fTdIx4mGwsXlC1ATvrYKtHrc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ3OS9CRjE5NEQ4MDI4 M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZYkN4ZVVMVUJPLXRncTBl dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqMTlOMGpIaVliQ3hlVUxVQk8tdGdxMGV0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ3OS9CRjE5NEQ4MDI4M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZ YkN4ZVVMVUJPLXRncTBldHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOYymv0zgDp9s6imWiADvlBWpACjEcxiPiKtyv7SGt35xwOT6edeVO f8GcNAqFHmysVyEFT1KEhnbBb5Lmx+NTigkY3S+4JMqgAabizB8nJy/I0Z8yXdyA pAWsV0R2x39lxahbgUmF0CP76JMqJGrc3n2+g3siy7+DLB6tmuRoY/GG1d3CN7ZY RRBIrNbghQzMhX/QjNLmjJTV4oIHg1RmFZx2HpiTLRBdjNBPm6xSbarVOvLzr5I9 X0zuYQFtap704Njgw36mBKwxZF/WaM3xh+LcrkStke5yFA8eT8d1FJpPA3XWKt1E Od44maa0p0tGybQmajsxM5722zYART6L -----END CERTIFICATE-----Generated at Thu Nov 6 11:23:27 2025 by rpki-client