$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft File: eI-02WtgHbphbd3JnP5GXWDDjyE.mft (raw, json) Hash identifier: rVOrWKeShSCHr7ymsFd9plLccCbrn2DSOZo9obhgYxI= Subject key identifier: B5:EC:21:A3:0F:F3:40:F3:84:44:B3:37:8A:0C:E2:6A:AA:31:8D:DA Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 Certificate issuer: /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft Manifest number: 06D0 Signing time: Mon 03 Nov 2025 00:01:23 +0000 Manifest this update: Mon 03 Nov 2025 00:01:23 +0000 Manifest next update: Mon 10 Nov 2025 00:01:23 +0000 Files and hashes: 1: eI-02WtgHbphbd3JnP5GXWDDjyE.crl (hash: BtS1fh8RFw4EsJ1c8qJa3RQgWC0mmhziilO3Pu3ps20=) 2: 960BB902A6F111EF9E720A74C4F9AE02.roa (hash: B8sszNLunLsrUHs5D3APS7GKyh44CqzKcDt/4Ik4FRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363, serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Validity Not Before: Nov 3 00:01:23 2025 GMT Not After : Nov 10 00:01:23 2025 GMT Subject: CN=6907f0d3-ceff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:e2:63:7e:41:c8:fc:39:9d:4e:2e:8f:ed: 4d:f9:44:68:85:b4:97:95:83:a3:23:6a:c4:82:74: 8d:35:2b:23:10:f8:9f:fe:06:9a:4f:e7:be:3a:40: 25:fd:f5:c3:1d:c4:ad:8d:6c:47:de:0d:79:30:5c: 0e:14:db:82:b5:6f:f0:ab:c3:de:a9:c5:27:19:ec: 79:6b:da:34:97:13:9e:f9:6f:64:4e:ac:75:c2:09: d6:7a:9d:5b:7d:7c:bf:2b:f3:f2:e2:1b:ca:0c:d6: 90:3a:59:98:e7:c8:87:5b:4b:52:a7:ca:84:75:92: 0c:ea:8a:b1:81:08:7c:84:c0:d6:34:b4:eb:a8:8b: b7:6e:54:c4:2e:94:97:90:a0:7e:48:74:1c:74:d7: 80:dd:3b:15:f9:74:15:4b:e2:aa:1f:96:a5:c8:b8: b8:61:70:25:63:0f:0b:e4:38:7f:ba:1f:59:d5:2a: 6f:0c:0a:83:c3:7f:72:ee:07:95:c6:0f:49:58:da: c6:48:07:94:8f:f9:79:72:c6:47:a5:9f:f4:2e:59: 43:38:e5:37:16:d8:7f:ee:a2:5f:94:b0:1a:b1:b6: 00:46:1e:1f:03:11:a2:66:e1:86:5a:ad:eb:fa:94: aa:de:c6:95:5b:5f:4d:f4:69:57:ee:f2:9f:eb:d3: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EC:21:A3:0F:F3:40:F3:84:44:B3:37:8A:0C:E2:6A:AA:31:8D:DA X509v3 Authority Key Identifier: keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:73:9e:5d:86:b9:ed:ef:31:55:03:a4:be:a4:d4:06:27:b5: 07:d3:c0:a9:63:76:10:67:6e:f0:b5:87:4f:09:42:5e:c0:95: ff:ad:ff:f3:49:9d:be:91:d1:95:da:fe:56:50:5d:37:77:f3: dd:ed:bb:6e:23:d6:55:88:f9:29:dd:80:da:b6:c5:d6:07:21: 25:7c:b0:8e:3f:ad:af:7f:78:e0:48:1e:e3:2f:9f:c0:a7:35: 7a:00:92:f7:11:a2:81:be:66:61:d7:c5:84:55:82:9d:01:2f: ca:ab:08:0d:ff:fe:6f:68:f8:39:21:92:7b:9f:ab:2f:db:93: 75:79:d7:3b:b4:27:7e:90:eb:97:27:88:c7:64:a4:e7:1d:6f: a4:ac:24:5c:d5:aa:32:8d:f6:60:35:3a:4e:59:52:31:74:77: 54:79:4c:ca:94:87:14:bf:56:17:43:0d:8c:11:9d:18:1d:8f: dd:39:6f:0a:ce:43:59:63:55:16:54:66:d4:3d:bf:e7:52:da: 2a:76:f8:e6:a3:88:5d:40:c3:45:45:6b:5a:65:0c:f2:42:f4: 99:46:58:b4:03:8d:40:63:38:e9:ef:98:43:18:34:33:7e:47: cf:95:a8:d8:42:ef:0f:48:7e:bf:3c:2e:2a:a6:2a:df:3f:e7: 68:83:b9:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzNjMxMTAvBgNVBAUTKDc4OEZCNEQ5NkI2MDFEQkE2MTZERERDOTlDRkU0NjVE NjBDMzhGMjEwHhcNMjUxMTAzMDAwMTIzWhcNMjUxMTEwMDAwMTIzWjAYMRYwFAYD VQQDEw02OTA3ZjBkMy1jZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunLiY35ByPw5nU4uj+1N+URohbSXlYOjI2rEgnSNNSsjEPif/gaaT+e+OkAl /fXDHcStjWxH3g15MFwOFNuCtW/wq8PeqcUnGex5a9o0lxOe+W9kTqx1wgnWep1b fXy/K/Py4hvKDNaQOlmY58iHW0tSp8qEdZIM6oqxgQh8hMDWNLTrqIu3blTELpSX kKB+SHQcdNeA3TsV+XQVS+KqH5alyLi4YXAlYw8L5Dh/uh9Z1SpvDAqDw39y7geV xg9JWNrGSAeUj/l5csZHpZ/0LllDOOU3Fth/7qJflLAasbYARh4fAxGiZuGGWq3r +pSq3saVW19N9GlX7vKf69NpYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXsIaMP 80DzhESzN4oM4mqqMY3aMB8GA1UdIwQYMBaAFHiPtNlrYB26YW3dyZz+Rl1gw48h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD QkExMUVDOEFBMTNFMjRDNEY5QUUwMi9lSS0wMld0Z0hicGhiZDNKblA1R1hXRERq eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VJLTAyV3RnSGJwaGJkM0puUDVHWFdERGp5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi9lSS0wMld0Z0hi cGhiZDNKblA1R1hXRERqeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbc55dhrnt7zFVA6S+pNQGJ7UH08CpY3YQZ27wtYdPCUJewJX/rf/z SZ2+kdGV2v5WUF03d/Pd7btuI9ZViPkp3YDatsXWByElfLCOP62vf3jgSB7jL5/A pzV6AJL3EaKBvmZh18WEVYKdAS/KqwgN//5vaPg5IZJ7n6sv25N1edc7tCd+kOuX J4jHZKTnHW+krCRc1aoyjfZgNTpOWVIxdHdUeUzKlIcUv1YXQw2MEZ0YHY/dOW8K zkNZY1UWVGbUPb/nUtoqdvjmo4hdQMNFRWtaZQzyQvSZRli0A41AYzjp75hDGDQz fkfPlajYQu8PSH6/PC4qpirfP+dog7ly -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:48 2025 by rpki-client