$ rpki-client -vvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft File: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft (raw, json) Hash identifier: +cR9SwNi6z+8m6yjZ2xVRJ38bj5O8gFnKNh20dGd6nI= Subject key identifier: 5C:74:1B:D5:CE:2B:DC:EE:5C:21:B6:BC:74:67:64:49:12:61:AA:26 Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74 Certificate issuer: /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft Manifest number: 61 Signing time: Mon 03 Nov 2025 07:06:45 +0000 Manifest this update: Mon 03 Nov 2025 07:06:45 +0000 Manifest next update: Mon 10 Nov 2025 07:06:45 +0000 Files and hashes: 1: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl (hash: QTYO1mEZjSmTWk646y9PDku7g7W9yvukCoMENV/dcMM=) 2: 2B1A3764302A11F0B211AD0BC4F9AE02.roa (hash: NkhW5FW4JP+LMlscQaQBvoaph79aDkou+LpFxXsX7js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274 Validity Not Before: Nov 3 07:06:45 2025 GMT Not After : Nov 10 07:06:45 2025 GMT Subject: CN=69085485-8d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:fb:23:d1:ac:16:bf:91:5d:50:9f:15:7a: 28:2e:1a:4e:d3:5f:22:b8:10:e2:0d:77:d7:62:ce: 40:8b:a8:e7:3f:29:4a:9a:11:5b:d7:fd:3c:36:1f: 4b:28:17:d4:19:13:39:a6:07:aa:1f:e1:e3:92:6f: 69:29:74:96:3e:31:14:48:f4:43:d3:26:01:20:71: 2e:73:30:ed:56:1f:1a:21:fb:41:82:55:e0:ce:53: bb:b7:31:5d:2c:5b:44:79:ca:6d:fd:8d:99:58:e2: 96:3f:fc:fb:f2:08:55:1e:7c:4e:04:92:6c:6a:b7: 34:c8:4b:14:28:f5:ee:24:50:b8:aa:ca:e5:aa:fe: 49:26:47:76:5f:c6:59:4f:87:db:87:56:7b:0d:fc: 02:70:ef:7f:0f:c4:c6:94:fd:81:c0:49:7e:22:7b: 68:c4:eb:bf:85:40:2e:72:38:93:b9:73:de:78:fe: f8:18:c1:28:75:6a:59:14:b1:42:f9:75:0a:11:97: 9b:2d:5c:ed:29:2b:5e:35:51:3e:11:d9:f6:8c:d5: 35:e9:e5:06:a5:55:cb:41:f3:99:73:09:b8:bb:12: 3c:36:b9:fe:90:19:9a:d0:ef:06:d6:51:8d:87:63: 4f:3f:c5:02:54:15:69:23:19:2e:ba:8b:b7:3d:c6: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:74:1B:D5:CE:2B:DC:EE:5C:21:B6:BC:74:67:64:49:12:61:AA:26 X509v3 Authority Key Identifier: keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e2:bb:c7:19:89:97:45:b5:bf:45:43:10:ab:43:48:53:2c: c7:e8:7c:a6:42:a4:d1:e5:a3:df:8d:88:d1:24:79:23:02:cb: be:94:9c:ac:39:25:85:29:81:a5:90:26:94:27:85:d9:44:79: 3c:05:b1:a8:da:8d:ac:6c:15:ac:0f:9a:0d:b5:df:23:b2:23: 68:a5:7f:98:de:f8:29:9f:ae:de:42:02:b5:58:79:71:ae:32: 0a:4d:fa:7b:60:11:48:a3:e4:74:9e:eb:14:02:d2:08:f4:23: d7:b0:03:28:53:28:0f:9f:fb:b6:8f:37:5f:ef:18:42:ae:88: 10:f6:1e:f3:96:1f:51:10:25:a9:e5:17:c1:fb:11:2b:a8:eb: 1a:37:d6:b1:66:1a:78:9f:5e:c8:36:de:f6:64:31:21:7d:fc: d4:88:f2:f2:5a:43:6a:92:c8:1e:e1:c1:d0:93:36:96:d6:1c: 1a:a4:41:73:46:97:1b:59:7f:8f:f9:78:7b:2b:da:01:0e:79: ef:e8:6c:30:33:c5:e7:e3:0b:00:59:68:ad:fb:0a:2d:65:33: 81:10:aa:d9:e8:23:e3:19:b5:07:dd:5a:d3:b4:a7:b9:4d:66: 00:d5:98:49:3d:5a:06:f3:4e:a4:d1:4c:c3:da:33:94:a6:72: ea:7f:b2:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTI2OTExMC8GA1UEBRMoNEJFMTA3MzkzNjI1MkUzQ0YwNzJGOTg5RDdGREM0RTdF N0M2NjI3NDAeFw0yNTExMDMwNzA2NDVaFw0yNTExMTAwNzA2NDVaMBgxFjAUBgNV BAMTDTY5MDg1NDg1LThkNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwjPsj0awWv5FdUJ8VeiguGk7TXyK4EOINd9dizkCLqOc/KUqaEVvX/Tw2H0so F9QZEzmmB6of4eOSb2kpdJY+MRRI9EPTJgEgcS5zMO1WHxoh+0GCVeDOU7u3MV0s W0R5ym39jZlY4pY//PvyCFUefE4EkmxqtzTISxQo9e4kULiqyuWq/kkmR3ZfxllP h9uHVnsN/AJw738PxMaU/YHASX4ie2jE67+FQC5yOJO5c954/vgYwSh1alkUsUL5 dQoRl5stXO0pK141UT4R2faM1TXp5QalVctB85lzCbi7Ejw2uf6QGZrQ7wbWUY2H Y08/xQJUFWkjGS66i7c9xh9hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXHQb1c4r 3O5cIba8dGdkSRJhqiYwHwYDVR0jBBgwFoAUS+EHOTYlLjzwcvmJ1/3E5+fGYnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMjY5LzM5M0JBOENFMkI2 RjExRjA4NkFERTU0RUM0RjlBRTAyL1MtRUhPVFlsTGp6d2N2bUoxXzNFNS1mR1lu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy1FSE9UWWxManp3Y3ZtSjFfM0U1LWZHWW5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MjY5LzM5M0JBOENFMkI2RjExRjA4NkFERTU0RUM0RjlBRTAyL1MtRUhPVFlsTGp6 d2N2bUoxXzNFNS1mR1luUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD3iu8cZiZdFtb9FQxCrQ0hTLMfofKZCpNHlo9+NiNEkeSMCy76UnKw5 JYUpgaWQJpQnhdlEeTwFsajajaxsFawPmg213yOyI2ilf5je+Cmfrt5CArVYeXGu MgpN+ntgEUij5HSe6xQC0gj0I9ewAyhTKA+f+7aPN1/vGEKuiBD2HvOWH1EQJanl F8H7ESuo6xo31rFmGnifXsg23vZkMSF9/NSI8vJaQ2qSyB7hwdCTNpbWHBqkQXNG lxtZf4/5eHsr2gEOee/obDAzxefjCwBZaK37Ci1lM4EQqtnoI+MZtQfdWtO0p7lN ZgDVmEk9WgbzTqTRTMPaM5Smcup/srg= -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:23 2025 by rpki-client