$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: 5ui3r3KA4zJjywqj08Bh1YtbiiKLRffL8zaQKCAg40U= Subject key identifier: A3:C3:1F:3E:56:27:D0:A7:4B:CC:0F:41:A9:96:02:08:20:EC:68:5D Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 0226 Signing time: Mon 03 Nov 2025 01:59:06 +0000 Manifest this update: Mon 03 Nov 2025 01:59:06 +0000 Manifest next update: Mon 10 Nov 2025 01:59:06 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: TCNtGOIS75f0DJsa/gJ/wELuITWrsVfEgA8iomRkoSg=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: Uh7B24TrfbcaCXXos+UCRzkq1ccagOkOy3EbQYTwo0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Nov 3 01:59:06 2025 GMT Not After : Nov 10 01:59:06 2025 GMT Subject: CN=69080c6a-3608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8a:4c:71:e6:e3:a7:87:e7:99:63:db:39:8e: c4:bb:0d:95:80:64:ec:fa:a5:3c:16:72:a6:02:2e: 33:b0:2f:48:bf:59:a6:c7:0b:ca:4b:3c:1e:01:24: a6:3b:cc:65:41:b9:9c:1c:fe:ed:75:2b:d4:f1:c8: 51:b0:37:cf:bd:68:cb:e8:57:36:41:7d:7e:5a:73: 50:54:91:f6:8e:8d:8e:76:5c:72:9a:86:d4:b2:8c: 7e:0e:da:25:4e:0b:05:ec:30:ae:59:4e:ee:3b:c2: c2:38:32:c3:2d:6e:51:28:6d:85:4b:ea:b8:81:db: 00:fe:2c:c4:fd:2c:3b:1d:d2:79:c8:16:56:57:40: 32:c0:c2:82:f5:01:77:6e:c5:b5:f5:38:ba:fd:5a: 2f:b1:e2:45:79:39:06:d0:38:e2:3c:b5:d1:80:a5: c6:3e:b6:f3:02:fd:82:db:ed:6e:92:d5:ad:6a:3a: 15:fc:7f:99:93:74:96:d9:02:5c:bf:37:24:e3:31: 9c:56:30:34:b6:bc:1f:30:8d:71:46:c9:1d:3a:f3: 73:bd:b4:2e:eb:a8:35:65:0a:80:b0:07:65:fd:e5: b1:ec:cc:f1:26:6b:38:a8:6f:b0:fe:99:d8:62:d4: 95:c3:5a:49:9b:48:96:bd:e1:35:09:2c:86:0d:7c: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C3:1F:3E:56:27:D0:A7:4B:CC:0F:41:A9:96:02:08:20:EC:68:5D X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ea:e5:f2:59:12:62:63:f3:43:c0:f0:b0:f5:81:49:47:38: 5d:ba:40:7d:26:e0:1b:07:96:2b:78:99:fe:e5:a3:4b:c9:0a: b3:ca:55:cf:6f:33:f8:dc:8a:70:e6:e1:4b:6c:46:92:da:c5: 45:84:d2:23:46:17:9f:82:a5:4e:3e:b4:9a:82:7d:a2:88:35: 7a:f7:e4:b3:24:c0:ee:56:53:ed:fc:7d:82:d6:65:5c:01:2a: 86:a2:12:03:f4:f4:2e:dc:6a:dc:5e:53:98:7c:d0:32:2f:cc: c5:75:94:f3:ce:81:60:e0:9d:3b:dd:4e:b1:4b:02:3d:d4:7b: 6d:12:c8:00:dc:94:c6:2e:f9:2d:1c:a9:f7:3d:a2:db:fa:c3: 04:42:75:65:91:af:cb:b8:f7:cb:03:e5:a5:24:d8:1b:db:4d: 8a:19:80:7a:43:f8:06:3d:c1:ce:6d:e9:04:65:86:69:4b:b9: 44:03:ce:62:5b:de:a8:f0:e5:2b:9c:1b:f3:45:bf:30:66:f6: b4:eb:29:2a:8e:4f:d6:9c:ae:9e:14:b5:63:94:34:d6:79:e0: 19:e9:4c:bf:8c:e1:dd:67:31:cb:a9:61:4f:24:dd:e8:b9:cf: 0d:92:e1:81:ae:60:03:28:55:9e:d3:0f:b5:0e:d2:44:86:43: 0a:e5:44:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUxMTAzMDE1OTA2WhcNMjUxMTEwMDE1OTA2WjAYMRYwFAYD VQQDEw02OTA4MGM2YS0zNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IpMcebjp4fnmWPbOY7Euw2VgGTs+qU8FnKmAi4zsC9Iv1mmxwvKSzweASSm O8xlQbmcHP7tdSvU8chRsDfPvWjL6Fc2QX1+WnNQVJH2jo2OdlxymobUsox+Dtol TgsF7DCuWU7uO8LCODLDLW5RKG2FS+q4gdsA/izE/Sw7HdJ5yBZWV0AywMKC9QF3 bsW19Ti6/VovseJFeTkG0DjiPLXRgKXGPrbzAv2C2+1uktWtajoV/H+Zk3SW2QJc vzck4zGcVjA0trwfMI1xRskdOvNzvbQu66g1ZQqAsAdl/eWx7MzxJms4qG+w/pnY YtSVw1pJm0iWveE1CSyGDXyMbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPDHz5W J9CnS8wPQamWAggg7GhdMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy6uXyWRJiY/NDwPCw9YFJRzhdukB9JuAbB5YreJn+5aNLyQqzylXP bzP43Ipw5uFLbEaS2sVFhNIjRhefgqVOPrSagn2iiDV69+SzJMDuVlPt/H2C1mVc ASqGohID9PQu3GrcXlOYfNAyL8zFdZTzzoFg4J073U6xSwI91HttEsgA3JTGLvkt HKn3PaLb+sMEQnVlka/LuPfLA+WlJNgb202KGYB6Q/gGPcHObekEZYZpS7lEA85i W96o8OUrnBvzRb8wZva06ykqjk/WnK6eFLVjlDTWeeAZ6Uy/jOHdZzHLqWFPJN3o uc8NkuGBrmADKFWe0w+1DtJEhkMK5USu -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:10 2025 by rpki-client