$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft File: eDj_-XHbpCvN2NjzdFXwsoSbedc.mft (raw, json) Hash identifier: MEi0ztMn/MW3cAXCbwpfLE4MO/v6pbM5ALr5ax/MA0k= Subject key identifier: 85:B6:52:8A:70:CD:E5:CF:F2:73:C6:E2:81:AE:AC:F6:0E:72:22:73 Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7 Certificate issuer: /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft Manifest number: 0162 Signing time: Mon 03 Nov 2025 04:02:02 +0000 Manifest this update: Mon 03 Nov 2025 04:02:01 +0000 Manifest next update: Mon 10 Nov 2025 04:02:01 +0000 Files and hashes: 1: eDj_-XHbpCvN2NjzdFXwsoSbedc.crl (hash: 69i2Lqt48d7vpjsW0/x9bSVg6gZmAW33tt6slDohnbw=) 2: 0D0118A89A4C11EEB7AE8812C4F9AE02.roa (hash: dKUIWl8erdDyFZKjf2ms5iCtc7nOGksh5tTJx3endFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A9C8, serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7 Validity Not Before: Nov 3 04:02:01 2025 GMT Not After : Nov 10 04:02:01 2025 GMT Subject: CN=6908293a-d1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b2:0d:52:03:81:e4:eb:c5:8a:57:e0:e1:b1: cb:05:91:26:21:6e:11:97:05:53:9d:87:3e:7c:39: 96:7a:8b:f2:8c:85:cd:1e:29:e0:1f:6b:d2:fe:c9: 9e:4b:cf:69:2f:85:df:74:1f:31:e8:91:26:c6:9d: 95:6f:b2:91:75:89:84:20:37:ab:95:71:72:aa:53: 9e:79:e0:64:5c:36:2f:f1:a6:df:a0:4f:f9:54:70: b3:22:21:b7:04:a0:d3:9d:19:a2:8f:50:3b:db:12: fc:b7:68:1a:43:cc:cd:7f:9e:83:4c:f0:a7:64:a0: a7:be:6a:94:71:ca:0a:8d:55:1c:8b:5d:61:8b:0b: 0f:9b:33:2e:b6:98:4d:dd:7e:29:d5:6f:2a:f3:84: a4:22:16:9e:40:a1:87:a7:95:89:76:bd:d5:57:bd: fa:b3:5f:58:23:ea:b1:63:2b:47:81:0d:4d:75:39: 34:c4:28:f6:27:9a:4c:d6:2b:25:28:bb:c2:79:cf: 2d:31:37:99:c3:f7:66:26:58:9b:09:b4:15:04:ae: c7:57:bd:cc:db:68:56:1e:4d:a6:f0:e8:51:0d:65: 20:34:47:5e:dc:8a:52:75:33:0f:7c:36:dc:b8:26: 74:2b:b4:f8:9f:87:be:16:73:dd:3a:de:07:88:cf: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B6:52:8A:70:CD:E5:CF:F2:73:C6:E2:81:AE:AC:F6:0E:72:22:73 X509v3 Authority Key Identifier: keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:bf:0d:c5:00:bd:91:c9:f6:2b:95:be:5c:54:48:1d:8b:10: f1:18:6f:fd:95:1d:1d:22:69:2b:78:8c:44:55:66:b5:71:42: 7f:c6:00:80:5e:2a:ba:f8:ef:50:f3:f2:a1:3c:52:96:45:63: 02:20:06:e9:66:27:d1:db:e3:fa:03:a3:56:d4:f0:dd:ee:33: 73:bc:6a:47:93:01:c0:da:f8:e2:e0:95:56:ea:59:88:7b:23: 91:38:24:7c:7d:24:d0:14:bc:51:70:1c:1a:4f:e8:cc:ef:3d: 35:d2:24:37:4e:f3:90:c7:be:3a:fe:f4:f6:cd:9f:fb:4e:a0: 41:b8:cd:1e:7e:8d:df:fc:12:87:57:f6:0c:96:dc:07:b4:1e: 20:56:3c:b0:61:4e:51:40:43:74:e1:d3:19:28:0c:5d:e9:3c: 7f:0c:4a:a4:2d:cb:fb:68:e8:5a:b2:c1:f0:e2:d6:90:7e:70: f9:34:7d:f7:78:ef:24:60:9b:e8:cc:77:ad:9e:b1:0b:17:60: f4:8b:3a:0f:dd:4a:d5:2b:6f:6e:8b:0b:1b:9b:39:08:28:f0: 29:a0:2e:07:a9:d2:9e:31:93:c8:b1:78:78:7a:42:a4:2e:75: 5f:05:5c:ad:5a:4e:01:a1:90:74:53:65:22:27:2f:f5:3b:b3: 70:d3:e5:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5QzgxMTAvBgNVBAUTKDc4MzhGRkY5NzFEQkE0MkJDREQ4RDhGMzc0NTVGMEIy ODQ5Qjc5RDcwHhcNMjUxMTAzMDQwMjAxWhcNMjUxMTEwMDQwMjAxWjAYMRYwFAYD VQQDEw02OTA4MjkzYS1kMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27INUgOB5OvFilfg4bHLBZEmIW4RlwVTnYc+fDmWeovyjIXNHingH2vS/sme S89pL4XfdB8x6JEmxp2Vb7KRdYmEIDerlXFyqlOeeeBkXDYv8abfoE/5VHCzIiG3 BKDTnRmij1A72xL8t2gaQ8zNf56DTPCnZKCnvmqUccoKjVUci11hiwsPmzMutphN 3X4p1W8q84SkIhaeQKGHp5WJdr3VV736s19YI+qxYytHgQ1NdTk0xCj2J5pM1isl KLvCec8tMTeZw/dmJlibCbQVBK7HV73M22hWHk2m8OhRDWUgNEde3IpSdTMPfDbc uCZ0K7T4n4e+FnPdOt4HiM94owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW2Uopw zeXP8nPG4oGurPYOciJzMB8GA1UdIwQYMBaAFHg4//lx26QrzdjY83RV8LKEm3nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTlDOC9EQkJCMDlGRTlB M0ExMUVFQTY3NTg5N0NDNEY5QUUwMi9lRGpfLVhIYnBDdk4yTmp6ZEZYd3NvU2Jl ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEal8tWEhicEN2TjJOanpkRlh3c29TYmVkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTlDOC9EQkJCMDlGRTlBM0ExMUVFQTY3NTg5N0NDNEY5QUUwMi9lRGpfLVhIYnBD dk4yTmp6ZEZYd3NvU2JlZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVvw3FAL2RyfYrlb5cVEgdixDxGG/9lR0dImkreIxEVWa1cUJ/xgCA Xiq6+O9Q8/KhPFKWRWMCIAbpZifR2+P6A6NW1PDd7jNzvGpHkwHA2vji4JVW6lmI eyOROCR8fSTQFLxRcBwaT+jM7z010iQ3TvOQx746/vT2zZ/7TqBBuM0efo3f/BKH V/YMltwHtB4gVjywYU5RQEN04dMZKAxd6Tx/DEqkLcv7aOhassHw4taQfnD5NH33 eO8kYJvozHetnrELF2D0izoP3UrVK29uiwsbmzkIKPApoC4HqdKeMZPIsXh4ekKk LnVfBVytWk4BoZB0U2UiJy/1O7Nw0+Uy -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:07 2025 by rpki-client