$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: B/2le1O4RDVSIJguAGk33b0UXJgwiyarHq95xr6Voz0= Subject key identifier: 1F:AB:16:95:F4:81:A8:4A:0C:EF:6B:36:A0:80:48:2D:9B:79:E7:DA Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0B22 Signing time: Thu 18 Sep 2025 19:31:50 +0000 Manifest this update: Thu 18 Sep 2025 19:31:49 +0000 Manifest next update: Thu 25 Sep 2025 19:31:49 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: AC0vAJpnFF5aT2o3zxPdTZW5Ql83VIpj5gzmeti52Gw=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: x6v+AqgjPFRVX68ne0JC+xRgXtO5WMJX4uQIZ5czHsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: Sep 18 19:31:49 2025 GMT Not After : Sep 25 19:31:49 2025 GMT Subject: CN=68cc5e26-a001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:c7:a1:be:61:4f:46:8b:4d:b0:ff:84:c2: 77:3b:53:8e:03:f6:b5:89:bf:b7:a4:93:99:d6:04: d9:99:cb:29:8e:e8:d3:c5:07:4c:88:c7:d8:01:90: ad:10:0d:7e:ba:31:40:6c:65:0a:28:6d:58:64:7e: 3d:b3:61:96:8b:aa:9d:eb:70:18:c4:25:78:d7:f1: c1:a7:c2:cc:e6:88:96:a9:7e:62:69:4e:5c:e9:be: 89:84:a3:d1:96:4f:42:f6:63:87:a3:9e:9a:f5:1f: 19:a9:74:98:7e:6d:5d:59:4e:4a:94:6a:b7:57:39: 8c:78:1a:6e:b1:b4:77:c8:cf:19:89:23:a8:50:00: e6:22:76:f9:75:2d:09:46:ed:1c:93:ea:64:43:2c: cb:60:82:75:76:a6:49:1f:a0:b1:94:64:c3:38:a5: 3d:ec:b3:3e:fb:7b:7f:2a:7c:06:e3:c9:eb:47:f7: 9f:9f:7a:86:af:df:02:bd:d1:3a:41:9f:e4:47:56: 84:fe:38:dc:94:4a:62:ff:39:eb:06:2c:32:42:fa: 19:1b:85:2c:9c:6c:88:a4:0e:fb:d5:78:d4:b7:b2: b2:7c:a5:07:a5:fe:00:97:9b:54:02:4b:7c:6d:0e: cc:3f:33:db:b0:31:7f:60:45:80:af:8f:56:f0:39: d7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AB:16:95:F4:81:A8:4A:0C:EF:6B:36:A0:80:48:2D:9B:79:E7:DA X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:cc:a8:e1:e7:3b:02:fe:52:44:f0:a7:93:66:de:f7:fb:94: 57:81:78:71:09:0a:fc:c5:d2:9b:cb:62:53:08:11:a8:50:63: 21:a5:e4:24:23:e0:ea:8d:48:8f:d8:b8:4e:33:76:ae:3f:c5: 27:25:b2:00:59:5a:fc:de:d7:6e:55:9f:60:d3:b6:f6:57:f1: 6d:14:4a:b5:fd:a1:45:b4:43:d8:3f:c8:e7:26:34:6f:48:c8: de:08:2c:45:a3:f5:f6:f5:5a:4f:f5:0c:b0:68:fb:40:11:fa: 1a:90:ba:24:bc:7d:bb:10:82:37:21:bf:96:1c:33:6e:14:65: c2:67:af:4f:40:51:0d:87:6f:94:ad:f2:d0:1f:db:19:57:82: 3b:02:19:e6:9b:fc:00:24:9a:b7:3e:3b:81:01:78:5f:57:e2: 63:54:3b:13:6f:c9:4f:89:da:9c:20:d9:8f:b8:cc:6a:19:ab: d2:75:7b:88:0a:41:a0:ae:92:eb:2d:0f:8e:35:8f:24:4c:29: a3:ff:df:d5:10:76:47:55:29:cf:e7:23:56:6e:50:ad:dc:93: 71:80:13:21:d8:31:96:70:db:79:55:f5:fd:bd:32:72:ce:d2: 0c:6a:bb:0d:eb:32:d5:3d:cb:af:57:0a:30:a3:92:ce:f8:67: 9d:f9:e2:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjUwOTE4MTkzMTQ5WhcNMjUwOTI1MTkzMTQ5WjAYMRYwFAYD VQQDEw02OGNjNWUyNi1hMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoz/Hob5hT0aLTbD/hMJ3O1OOA/a1ib+3pJOZ1gTZmcspjujTxQdMiMfYAZCt EA1+ujFAbGUKKG1YZH49s2GWi6qd63AYxCV41/HBp8LM5oiWqX5iaU5c6b6JhKPR lk9C9mOHo56a9R8ZqXSYfm1dWU5KlGq3VzmMeBpusbR3yM8ZiSOoUADmInb5dS0J Ru0ck+pkQyzLYIJ1dqZJH6CxlGTDOKU97LM++3t/KnwG48nrR/efn3qGr98CvdE6 QZ/kR1aE/jjclEpi/znrBiwyQvoZG4UsnGyIpA771XjUt7KyfKUHpf4Al5tUAkt8 bQ7MPzPbsDF/YEWAr49W8DnXwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+rFpX0 gahKDO9rNqCASC2beefaMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFzKjh5zsC/lJE8KeTZt73+5RXgXhxCQr8xdKby2JTCBGoUGMhpeQk I+DqjUiP2LhOM3auP8UnJbIAWVr83tduVZ9g07b2V/FtFEq1/aFFtEPYP8jnJjRv SMjeCCxFo/X29VpP9QywaPtAEfoakLokvH27EII3Ib+WHDNuFGXCZ69PQFENh2+U rfLQH9sZV4I7Ahnmm/wAJJq3PjuBAXhfV+JjVDsTb8lPidqcINmPuMxqGavSdXuI CkGgrpLrLQ+ONY8kTCmj/9/VEHZHVSnP5yNWblCt3JNxgBMh2DGWcNt5VfX9vTJy ztIMarsN6zLVPcuvVwowo5LO+Ged+eIw -----END CERTIFICATE-----Generated at Fri Sep 19 05:14:06 2025 by rpki-client