$ rpki-client -vvf rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft File: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft (raw, json) Hash identifier: ssbtVk+OOw+UKk+k2q4Quvy1qsyLkiMuPIVDSkLBLiQ= Subject key identifier: 5B:D4:4E:DF:18:F8:E1:66:47:3F:87:00:7B:89:FC:98:EE:37:F5:EE Authority key identifier: 79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2 Certificate issuer: /CN=A918A1E7/serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft Manifest number: 38 Signing time: Mon 03 Nov 2025 07:34:27 +0000 Manifest this update: Mon 03 Nov 2025 07:34:27 +0000 Manifest next update: Mon 10 Nov 2025 07:34:27 +0000 Files and hashes: 1: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl (hash: XBxRwqUTzG0onXLerSPhX3sznXIdYo8IDfk8oL2bxwk=) 2: 06239BF2677111F0BB789073C4F9AE02.roa (hash: m5+qywKlwkf5LRgphAV34L5igrhljBD4FBgDFcN7Cnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2 Validity Not Before: Nov 3 07:34:27 2025 GMT Not After : Nov 10 07:34:27 2025 GMT Subject: CN=69085b03-ffdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:f1:e4:5f:8f:6a:e5:ba:0a:03:21:33:2a: 5e:ca:f4:60:94:e3:e2:3f:a2:40:cb:bc:5c:aa:1d: ec:24:14:8f:b9:77:8c:e0:c6:42:fc:d0:d0:a8:12: 40:ba:34:09:bf:c7:ec:16:54:6a:35:7f:c2:9c:06: a8:63:59:87:de:af:eb:80:05:32:a0:a9:15:ac:55: 2d:a5:3b:6c:d8:ad:c1:32:08:5e:a1:13:b7:b2:b3: e8:22:e6:4b:f2:c7:6d:34:71:d1:f3:e0:2b:f8:e7: f4:75:85:ef:dd:09:46:98:0b:1e:a1:61:08:eb:c6: 83:fb:6a:55:73:6a:e8:6c:be:ae:f3:2a:bf:5a:b4: 1a:ca:cc:2e:e4:42:8d:29:3b:30:53:16:0e:52:c6: 50:b4:98:6e:c0:72:b4:bc:0c:76:da:55:a7:5e:86: 6c:a3:02:95:08:3b:cd:84:88:cc:a4:98:9a:3d:6e: 8a:99:85:38:e0:66:31:3e:18:3c:a7:a7:d7:a3:6e: fc:83:e5:7a:a1:f7:47:cd:80:4f:d7:b3:ca:15:f4: fb:41:8b:4d:21:d9:c3:0b:94:61:99:a1:c5:be:81: d1:1e:71:62:d5:9b:d5:cd:2c:a4:3a:cc:d2:fd:e5: 36:12:43:a8:ec:68:12:97:08:20:8b:d6:89:ae:73: c4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D4:4E:DF:18:F8:E1:66:47:3F:87:00:7B:89:FC:98:EE:37:F5:EE X509v3 Authority Key Identifier: keyid:79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:bf:9c:81:08:07:34:a5:de:6b:b7:dc:88:f8:ba:06:b4:2d: fa:e0:65:bf:8e:8d:3a:5d:4f:a8:d0:86:42:ea:74:a5:df:e9: 77:42:7a:3f:cd:d5:5d:d3:a7:21:16:4f:1c:19:f4:4e:64:6b: fe:b9:6a:cd:bf:d8:df:97:b3:7d:fe:cc:11:2e:e0:86:53:14: 70:e4:21:b0:f6:14:dc:2c:d9:4f:69:1e:98:e2:85:87:85:1a: 1d:5e:84:62:3a:82:50:39:6a:b5:e0:4c:8f:97:f0:78:8a:2e: d0:e7:9d:27:ad:84:57:5a:88:df:a5:1b:42:cd:20:54:0a:a1: ab:81:9e:bb:bd:46:c0:01:d3:58:b6:74:77:3f:25:9e:56:2f: ac:28:25:4b:5f:9b:6c:8a:bb:fe:0c:95:61:f0:5f:3f:4a:2e: 02:db:4c:c9:8f:45:37:c8:e1:2c:ba:3e:dd:73:42:54:ab:b6: 8b:99:dc:4f:37:7e:7e:3c:c4:e6:38:00:76:ec:2d:d6:9c:8e: 71:ed:97:0a:f5:28:da:94:b3:48:53:d2:ff:80:1b:0f:44:db: 69:bf:52:9f:93:b2:96:05:de:1c:dc:02:c5:e5:d3:da:83:c9: eb:33:fb:b6:43:f3:50:d0:04:cb:34:ac:dc:f3:0f:be:60:a6: 99:85:bc:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTFFNzExMC8GA1UEBRMoNzlCQTUxRDk2QkZEQzMxM0M3ODhBRUMzMzA3M0M5Njk4 RTVEMDFDMjAeFw0yNTExMDMwNzM0MjdaFw0yNTExMTAwNzM0MjdaMBgxFjAUBgNV BAMTDTY5MDg1YjAzLWZmZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB1PHkX49q5boKAyEzKl7K9GCU4+I/okDLvFyqHewkFI+5d4zgxkL80NCoEkC6 NAm/x+wWVGo1f8KcBqhjWYfer+uABTKgqRWsVS2lO2zYrcEyCF6hE7eys+gi5kvy x200cdHz4Cv45/R1he/dCUaYCx6hYQjrxoP7alVzauhsvq7zKr9atBrKzC7kQo0p OzBTFg5SxlC0mG7AcrS8DHbaVadehmyjApUIO82EiMykmJo9boqZhTjgZjE+GDyn p9ejbvyD5Xqh90fNgE/Xs8oV9PtBi00h2cMLlGGZocW+gdEecWLVm9XNLKQ6zNL9 5TYSQ6jsaBKXCCCL1omuc8TFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW9RO3xj4 4WZHP4cAe4n8mO439e4wHwYDVR0jBBgwFoAUebpR2Wv9wxPHiK7DMHPJaY5dAcIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMUU3LzlBNjY3NTdFNjc3 MDExRjA5M0QxNzQ3MkM0RjlBRTAyL2VicFIyV3Y5d3hQSGlLN0RNSFBKYVk1ZEFj SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWJwUjJXdjl3eFBIaUs3RE1IUEphWTVkQWNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MUU3LzlBNjY3NTdFNjc3MDExRjA5M0QxNzQ3MkM0RjlBRTAyL2VicFIyV3Y5d3hQ SGlLN0RNSFBKYVk1ZEFjSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIC/nIEIBzSl3mu33Ij4uga0LfrgZb+OjTpdT6jQhkLqdKXf6XdCej/N 1V3TpyEWTxwZ9E5ka/65as2/2N+Xs33+zBEu4IZTFHDkIbD2FNws2U9pHpjihYeF Gh1ehGI6glA5arXgTI+X8HiKLtDnnSethFdaiN+lG0LNIFQKoauBnru9RsAB01i2 dHc/JZ5WL6woJUtfm2yKu/4MlWHwXz9KLgLbTMmPRTfI4Sy6Pt1zQlSrtouZ3E83 fn48xOY4AHbsLdacjnHtlwr1KNqUs0hT0v+AGw9E22m/Up+TspYF3hzcAsXl09qD yesz+7ZD81DQBMs0rNzzD75gppmFvEw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:12 2025 by rpki-client