$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft File: e14ORHE1uxchraYfZdx1yV9U2wI.mft (raw, json) Hash identifier: h4nCx0hR+9JKsf9oQ5dOwOBvoeIUXVRhS1PnVivMa2Q= Subject key identifier: 05:89:E9:30:98:6F:06:18:C2:8F:E1:15:45:89:08:19:78:03:7C:B4 Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 Certificate issuer: /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft Manifest number: A6 Signing time: Mon 03 Nov 2025 06:16:34 +0000 Manifest this update: Mon 03 Nov 2025 06:16:34 +0000 Manifest next update: Mon 10 Nov 2025 06:16:34 +0000 Files and hashes: 1: e14ORHE1uxchraYfZdx1yV9U2wI.crl (hash: beQ+oNnHLglglCa/9Mm6uwgsaFpFRwweY8k6Dn9aYGA=) 2: E4086C08BC2311EF9A445084C4F9AE02.roa (hash: r/4IGYNLMpKuCk8NRggWB2EhHJYpkEkj/MdGzvjYmVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8226, serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Validity Not Before: Nov 3 06:16:34 2025 GMT Not After : Nov 10 06:16:34 2025 GMT Subject: CN=690848c2-532e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:e9:a8:df:21:ca:47:bf:9f:93:a7:6d:fd: 26:a3:da:5a:79:d2:8e:b0:e6:0d:85:06:7a:08:d1: 4a:78:3e:e9:20:94:6b:09:1b:ae:c6:6d:70:11:30: 37:22:0a:86:24:83:63:e8:44:bf:8e:d3:47:df:2c: 56:08:63:fc:08:0d:f1:74:95:45:1f:f0:8a:2a:bc: c3:8e:b0:3f:12:09:f4:ee:b0:e1:d7:42:59:5d:39: d8:a0:ec:1f:88:9d:1c:fb:5c:6d:0f:0b:a7:28:95: 75:f0:70:88:cb:06:70:4f:ca:5a:3f:f6:b8:71:de: 4e:2c:7a:10:5f:14:be:1d:d3:92:83:80:d8:66:46: 3d:90:2c:ff:e4:93:99:a3:38:55:d7:7e:0f:92:61: 15:82:88:41:8b:88:d9:e5:18:91:c2:f6:78:88:ab: b1:27:f5:3f:cf:96:72:f5:56:d4:d6:e1:7a:c0:a6: a9:ed:ee:27:d5:dd:91:80:37:4c:69:60:c0:ec:ed: 46:20:89:88:c2:b5:9d:ed:38:79:5d:b5:fe:e1:e9: 27:b9:bb:99:9a:31:e2:f1:c9:61:76:e6:f1:71:be: f3:92:15:49:be:22:c6:d0:f8:5b:5e:46:1a:c3:a6: f9:16:82:4f:36:0c:d6:93:a8:09:f2:2f:c2:81:3a: 7d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:89:E9:30:98:6F:06:18:C2:8F:E1:15:45:89:08:19:78:03:7C:B4 X509v3 Authority Key Identifier: keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:0a:2c:67:c9:0b:10:04:e1:e1:7d:c8:4f:e7:cc:0c:d5:18: 5b:54:72:c5:20:23:7e:f3:cb:22:7f:d0:49:55:d0:1a:93:ed: 27:7e:de:e6:e8:4c:94:94:76:45:87:15:65:76:91:ca:c3:79: 48:8c:fa:36:c1:e0:09:8a:06:f9:20:5c:6d:cc:b5:3d:9a:a8: bf:a7:da:ad:8e:60:90:00:fb:52:91:42:a3:8e:7b:2a:64:c9: 74:42:00:36:79:b1:be:53:ca:bf:69:9b:57:69:e8:0f:1a:30: 45:b0:5d:9f:19:99:b8:89:15:9f:df:ef:93:2d:a4:30:86:cf: 35:21:1b:be:51:ec:b8:28:1d:6b:f2:60:f8:c4:ee:79:4a:f4: 28:87:c7:fb:01:a7:74:e6:8e:07:bb:7a:1d:e7:c1:90:5b:ee: b5:98:5a:d0:15:b0:3e:a2:0b:3c:b0:e6:e1:d8:f4:f7:bc:29: e4:b1:50:b6:43:a1:e5:49:ae:2b:bf:80:df:c1:d3:36:95:0d: f9:48:53:f6:67:e0:1b:d5:d1:2e:07:87:7e:ab:aa:10:a3:89: 2d:07:99:29:1c:41:87:b4:33:e3:8f:ee:f2:3f:a3:78:8f:7f: dc:6e:7e:24:e9:1c:d6:2c:09:c8:76:6d:b9:83:45:f5:3f:e1: 7e:59:bb:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyMjYxMTAvBgNVBAUTKDdCNUUwRTQ0NzEzNUJCMTcyMUFEQTYxRjY1REM3NUM5 NUY1NERCMDIwHhcNMjUxMTAzMDYxNjM0WhcNMjUxMTEwMDYxNjM0WjAYMRYwFAYD VQQDEw02OTA4NDhjMi01MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9rpqN8hyke/n5Onbf0mo9paedKOsOYNhQZ6CNFKeD7pIJRrCRuuxm1wETA3 IgqGJINj6ES/jtNH3yxWCGP8CA3xdJVFH/CKKrzDjrA/Egn07rDh10JZXTnYoOwf iJ0c+1xtDwunKJV18HCIywZwT8paP/a4cd5OLHoQXxS+HdOSg4DYZkY9kCz/5JOZ ozhV134PkmEVgohBi4jZ5RiRwvZ4iKuxJ/U/z5Zy9VbU1uF6wKap7e4n1d2RgDdM aWDA7O1GIImIwrWd7Th5XbX+4eknubuZmjHi8clhdubxcb7zkhVJviLG0PhbXkYa w6b5FoJPNgzWk6gJ8i/CgTp9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWJ6TCY bwYYwo/hFUWJCBl4A3y0MB8GA1UdIwQYMBaAFHteDkRxNbsXIa2mH2XcdclfVNsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODIyNi9FQzRERjMxNEJD MUYxMUVGQUFEQTc0NUZDNEY5QUUwMi9lMTRPUkhFMXV4Y2hyYVlmWmR4MXlWOVUy d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxNE9SSEUxdXhjaHJhWWZaZHgxeVY5VTJ3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODIyNi9FQzRERjMxNEJDMUYxMUVGQUFEQTc0NUZDNEY5QUUwMi9lMTRPUkhFMXV4 Y2hyYVlmWmR4MXlWOVUyd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBICixnyQsQBOHhfchP58wM1RhbVHLFICN+88sif9BJVdAak+0nft7m 6EyUlHZFhxVldpHKw3lIjPo2weAJigb5IFxtzLU9mqi/p9qtjmCQAPtSkUKjjnsq ZMl0QgA2ebG+U8q/aZtXaegPGjBFsF2fGZm4iRWf3++TLaQwhs81IRu+Uey4KB1r 8mD4xO55SvQoh8f7Aad05o4Hu3od58GQW+61mFrQFbA+ogs8sObh2PT3vCnksVC2 Q6HlSa4rv4DfwdM2lQ35SFP2Z+Ab1dEuB4d+q6oQo4ktB5kpHEGHtDPjj+7yP6N4 j3/cbn4k6RzWLAnIdm25g0X1P+F+WbtK -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:09 2025 by rpki-client