$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: G/tml4luAZl6EECH+9QIBD3nPILCguvScSm/LkH+AWw= Subject key identifier: 6A:85:07:53:9E:C7:2A:7B:70:D4:06:EF:53:21:4E:50:2B:7C:EB:A4 Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 064D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 0647 Signing time: Sun 02 Nov 2025 22:39:46 +0000 Manifest this update: Sun 02 Nov 2025 22:39:46 +0000 Manifest next update: Sun 09 Nov 2025 22:39:46 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: 81ItE1PxLI/u0AONu5jVQ/vngGwFc3ZRAYIDHwjE5p8=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: OBNzTX6aR4jmrgmRDfzbRnwCFSG478b3wNooMI8zuUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: Nov 2 22:39:46 2025 GMT Not After : Nov 9 22:39:46 2025 GMT Subject: CN=6907ddb2-497e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:92:7c:99:dd:ec:9d:25:1b:e9:47:0d:09: f9:38:54:be:88:24:6a:de:90:9b:b8:c7:81:ae:0c: 09:01:63:85:d6:51:5d:58:26:f4:00:b2:3b:1a:57: 33:46:f5:f2:a6:75:4e:1f:57:70:dc:20:a3:07:13: ac:47:93:18:2e:bd:3a:b2:14:c9:a6:6a:f7:98:a3: a8:73:7b:d4:e3:a1:01:6c:74:c4:02:34:43:36:f6: c3:38:d0:18:94:2a:31:e9:dd:65:7c:ba:bb:08:9a: df:e4:7b:74:c5:bb:18:92:4d:66:c3:22:96:0d:49: fc:2b:e6:d5:29:ad:36:6d:ee:8d:83:1e:80:c4:4e: a6:84:a6:fe:0c:36:d5:24:b4:c1:59:48:de:de:59: cb:03:4d:ce:a7:d2:d7:c7:d6:29:dc:71:18:f6:b6: a5:60:58:2f:99:7a:68:ed:ea:60:1e:35:d3:bd:f8: 95:12:74:46:af:34:17:24:f0:45:92:79:8f:25:13: 3a:72:2c:e4:94:95:44:91:0e:7a:4e:38:ff:9b:0a: 90:35:0f:28:d9:a2:9b:c2:ce:0f:29:26:48:e3:f2: 52:33:23:85:70:17:5a:b0:0c:b7:77:37:8b:97:21: fa:e4:50:fa:49:56:87:c6:65:4f:bc:b6:e6:5f:50: 91:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:85:07:53:9E:C7:2A:7B:70:D4:06:EF:53:21:4E:50:2B:7C:EB:A4 X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d1:d0:fa:51:17:55:62:50:41:fe:8f:79:be:c3:84:f9:e9: 88:f0:c4:bc:4b:bf:2c:7d:f1:c2:cd:71:d0:15:d9:e0:e4:2e: 7a:a8:08:d8:dd:fd:ff:78:3f:7c:22:39:0f:a3:76:ae:58:64: 23:35:e6:db:d5:42:f4:82:c8:ed:cb:2e:b0:14:9f:91:94:42: 0b:1b:27:ee:00:80:43:9f:a4:4f:fa:6e:58:be:0c:cb:8f:40: 50:e0:ff:e1:0e:b9:76:ab:07:d0:64:b0:4f:22:6e:cf:09:5d: 4f:f1:98:cb:ab:e8:ff:cb:b4:d0:80:3a:62:66:59:ce:0f:7b: 1b:a4:c7:7a:63:4d:4b:ff:cd:da:01:56:e2:71:20:18:d0:dd: 3c:af:42:b9:4f:4f:53:38:15:c8:41:67:f9:0a:cb:47:eb:d2: b1:f5:af:fa:e2:78:86:56:cf:19:4d:ef:5c:21:c7:20:5a:df: c1:aa:e3:24:1a:75:af:a7:39:a3:cf:0f:cd:13:c3:ec:fb:d6: c5:32:9a:8d:f0:46:e7:97:a9:1c:d0:22:56:1c:24:34:8c:12: 5d:98:c9:dc:e8:63:c8:fe:bb:87:fb:46:89:34:86:17:18:7c: 0e:cf:72:65:b3:ce:82:86:37:13:b9:ab:00:51:cb:07:4f:e1: 1e:38:d9:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjUxMTAyMjIzOTQ2WhcNMjUxMTA5MjIzOTQ2WjAYMRYwFAYD VQQDEw02OTA3ZGRiMi00OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFaSfJnd7J0lG+lHDQn5OFS+iCRq3pCbuMeBrgwJAWOF1lFdWCb0ALI7Glcz RvXypnVOH1dw3CCjBxOsR5MYLr06shTJpmr3mKOoc3vU46EBbHTEAjRDNvbDONAY lCox6d1lfLq7CJrf5Ht0xbsYkk1mwyKWDUn8K+bVKa02be6Ngx6AxE6mhKb+DDbV JLTBWUje3lnLA03Op9LXx9Yp3HEY9ralYFgvmXpo7epgHjXTvfiVEnRGrzQXJPBF knmPJRM6cizklJVEkQ56Tjj/mwqQNQ8o2aKbws4PKSZI4/JSMyOFcBdasAy3dzeL lyH65FD6SVaHxmVPvLbmX1CR5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqFB1Oe xyp7cNQG71MhTlArfOukMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB50dD6URdVYlBB/o95vsOE+emI8MS8S78sffHCzXHQFdng5C56qAjY 3f3/eD98IjkPo3auWGQjNebb1UL0gsjtyy6wFJ+RlEILGyfuAIBDn6RP+m5YvgzL j0BQ4P/hDrl2qwfQZLBPIm7PCV1P8ZjLq+j/y7TQgDpiZlnOD3sbpMd6Y01L/83a AVbicSAY0N08r0K5T09TOBXIQWf5CstH69Kx9a/64niGVs8ZTe9cIccgWt/BquMk GnWvpzmjzw/NE8Ps+9bFMpqN8Ebnl6kc0CJWHCQ0jBJdmMnc6GPI/ruH+0aJNIYX GHwOz3Jls86ChjcTuasAUcsHT+EeONkv -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:58 2025 by rpki-client