$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft File: EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json) Hash identifier: EE5PXak3pXsXEHQCysdrZ7P1McykbNYrHVEajwVGWOI= Subject key identifier: E6:A9:46:6F:8D:68:16:29:E7:97:04:05:C8:43:A6:F2:F0:0A:CB:00 Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32 Certificate issuer: /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432 Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft Manifest number: 04B8 Signing time: Wed 05 Nov 2025 00:14:25 +0000 Manifest this update: Wed 05 Nov 2025 00:14:24 +0000 Manifest next update: Wed 12 Nov 2025 00:14:24 +0000 Files and hashes: 1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: Jlda+yLRzIL+orG1aIdTRFwhzk2BCXmUN1RAo1g2Big=) 2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: m8kc5pmxyNUtzE4T6XJqZukX44I+76FHWWNgV7rp9ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432 Validity Not Before: Nov 5 00:14:24 2025 GMT Not After : Nov 12 00:14:24 2025 GMT Subject: CN=690a96e0-6859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:77:d8:e9:e8:32:fc:d1:1f:29:84:b8:f7: 8e:0b:5c:58:b6:fe:66:91:07:cb:c7:ff:fb:d9:4e: b2:4d:93:79:d6:a6:5f:ab:c2:42:37:1c:99:dc:be: aa:8d:da:0b:55:dd:ce:6e:63:b9:ce:0a:ff:c0:88: b2:24:a7:9a:80:ac:b6:45:f0:a0:4d:ae:fc:04:cb: 61:f1:41:11:cf:b8:b3:3c:2e:01:d4:b2:e3:ba:ac: 27:75:ec:b3:bc:10:53:6d:f3:87:de:7e:42:45:1b: d7:fe:ad:80:41:2d:3e:a3:ea:5c:e0:c0:fe:2b:fa: 8b:ca:6f:af:7d:1d:13:36:4f:e6:66:3c:8e:b3:81: f1:05:1c:d8:df:09:1a:c1:c3:20:ee:8b:34:a3:b5: 8a:1a:30:b9:26:02:8a:d5:2f:ef:15:dc:41:1d:c5: 50:87:1e:06:ce:be:a4:c4:5d:6f:c0:6d:bf:b1:24: 72:e9:da:c0:05:1c:5c:0d:dc:d5:ca:c6:a9:a9:6f: a8:e2:3d:9a:df:ef:6f:ab:d8:40:6a:f5:ea:1a:90: 9c:37:e3:75:eb:f2:b9:17:43:ec:05:14:e9:6d:65: 6e:89:5d:4b:ce:06:4d:b1:be:1f:6f:05:46:b0:67: ff:8d:f3:fa:9a:5d:be:d0:ee:3e:c0:9f:7b:e7:7c: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A9:46:6F:8D:68:16:29:E7:97:04:05:C8:43:A6:F2:F0:0A:CB:00 X509v3 Authority Key Identifier: keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1e:ec:e0:71:4e:90:10:5c:0d:f7:3f:e3:df:cb:f9:55:b8: 72:fc:09:5a:05:ad:a9:69:b5:51:0f:3e:62:a8:13:64:53:b6: bf:df:51:cb:c6:38:a2:85:04:22:c0:27:6f:cc:19:fe:a0:68: 20:2d:b4:23:1c:01:8f:63:c1:d6:7c:b1:22:13:b5:0e:47:c9: 28:df:50:3f:96:d7:99:81:36:b7:fc:fe:a6:13:c3:0c:68:1c: a6:16:74:e4:2e:59:2a:f1:f3:ad:07:56:bd:04:65:f0:71:fa: bb:ae:f2:40:f3:d2:cc:de:62:83:f7:82:b8:d5:99:c1:d9:2b: c7:1b:d2:1b:84:8f:87:cb:3a:db:8a:f2:26:b0:12:47:a5:3d: 17:85:e3:2a:01:57:ed:2d:a6:71:d6:11:77:6e:7b:ee:c5:43: a2:42:8e:0c:da:05:93:51:35:42:6f:23:e0:75:8e:d3:b4:81: 44:af:9a:85:c9:25:4e:76:4b:43:10:95:aa:8e:a1:6a:b0:3d: 82:1f:5f:82:72:0e:c5:cd:b1:d6:e6:28:ca:fc:9e:91:46:22: e2:fc:fc:98:3a:a6:8e:1d:7f:21:69:da:9f:8b:4b:aa:b5:f5: 0a:b0:c8:c4:55:94:5d:87:a0:84:bb:42:89:92:ab:c5:2f:66: b0:8d:95:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MTcxMTAvBgNVBAUTKDEyOTRDNDhCQzY5NkFGRTgyMEJEMTU4MkYzNDM2N0JB REFCMDI0MzIwHhcNMjUxMTA1MDAxNDI0WhcNMjUxMTEyMDAxNDI0WjAYMRYwFAYD VQQDEw02OTBhOTZlMC02ODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYB32OnoMvzRHymEuPeOC1xYtv5mkQfLx//72U6yTZN51qZfq8JCNxyZ3L6q jdoLVd3ObmO5zgr/wIiyJKeagKy2RfCgTa78BMth8UERz7izPC4B1LLjuqwndeyz vBBTbfOH3n5CRRvX/q2AQS0+o+pc4MD+K/qLym+vfR0TNk/mZjyOs4HxBRzY3wka wcMg7os0o7WKGjC5JgKK1S/vFdxBHcVQhx4Gzr6kxF1vwG2/sSRy6drABRxcDdzV ysapqW+o4j2a3+9vq9hAavXqGpCcN+N16/K5F0PsBRTpbWVuiV1LzgZNsb4fbwVG sGf/jfP6ml2+0O4+wJ9753ykiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOapRm+N aBYp55cEBchDpvLwCssAMB8GA1UdIwQYMBaAFBKUxIvGlq/oIL0VgvNDZ7rasCQy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgxNy8wNjgzRUI3MDRE QUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3ItZ2d2UldDODBObnV0cXdK REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VwVEVpOGFXci1nZ3ZSV0M4ME5udXRxd0pESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgxNy8wNjgzRUI3MDREQUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3It Z2d2UldDODBObnV0cXdKREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6HuzgcU6QEFwN9z/j38v5Vbhy/AlaBa2pabVRDz5iqBNkU7a/31HL xjiihQQiwCdvzBn+oGggLbQjHAGPY8HWfLEiE7UOR8ko31A/lteZgTa3/P6mE8MM aBymFnTkLlkq8fOtB1a9BGXwcfq7rvJA89LM3mKD94K41ZnB2SvHG9IbhI+Hyzrb ivImsBJHpT0XheMqAVftLaZx1hF3bnvuxUOiQo4M2gWTUTVCbyPgdY7TtIFEr5qF ySVOdktDEJWqjqFqsD2CH1+Ccg7FzbHW5ijK/J6RRiLi/PyYOqaOHX8hadqfi0uq tfUKsMjEVZRdh6CEu0KJkqvFL2awjZW0 -----END CERTIFICATE-----Generated at Wed Nov 5 20:53:11 2025 by rpki-client