$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: JRkHneKO/qc2BglKldbBc/RMIlOgHBvFyPVGcdtdZLs= Subject key identifier: EA:AA:6E:E1:11:57:29:8F:6B:ED:28:5B:EE:2C:94:70:12:0C:81:99 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: AF Signing time: Mon 03 Nov 2025 06:22:15 +0000 Manifest this update: Mon 03 Nov 2025 06:22:15 +0000 Manifest next update: Mon 10 Nov 2025 06:22:15 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: mp9KQBUvRFcE6Jjb2G5bC6MzikqAuNuMPYT6iMPMuKA=) 2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: OH16X8GEk+h/u670xpKDKmtIszx6M9DvNarlNlVqoko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: Nov 3 06:22:15 2025 GMT Not After : Nov 10 06:22:15 2025 GMT Subject: CN=69084a17-4e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:56:85:c1:a6:87:89:35:0a:fa:f8:1c:c1: 6a:97:6b:0c:68:bf:a0:28:25:8d:f9:94:88:e1:64: 8a:26:63:fe:63:68:07:88:3d:cb:91:a5:0d:33:4b: a8:6b:aa:8f:06:c4:3f:08:73:e0:0d:42:7d:5a:bb: 95:1d:52:ba:ac:5b:f9:45:da:62:0b:24:87:73:17: 00:e8:4c:56:91:97:5f:23:44:d0:04:bd:25:28:5d: fd:73:a9:89:d4:30:ef:90:27:95:57:88:8a:21:6f: 51:ec:0d:9e:e9:26:cf:a4:52:3d:6e:4a:60:35:14: 67:46:6f:28:03:00:58:4b:3d:f0:43:0d:ed:4d:c4: 7a:d4:9d:82:2d:f9:be:7d:d9:e0:00:61:c3:b4:7f: e7:2f:e9:19:7c:de:29:52:1b:cb:93:c2:35:b3:fb: a5:0d:9a:b3:b5:47:9e:d7:ea:af:9b:88:09:f6:21: d3:d4:9a:8e:81:42:47:1b:c1:6d:d4:68:12:ef:9c: 09:f5:03:aa:fd:47:b7:17:c5:3b:45:fa:0b:73:ba: fa:0b:b3:89:7c:38:1b:35:13:f7:21:34:2e:55:dd: 26:b8:ef:29:f7:84:09:c5:32:23:3b:ef:41:b9:6e: 4e:e1:dc:1e:c6:60:8a:b4:a0:d0:5a:4b:89:ad:c6: fe:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AA:6E:E1:11:57:29:8F:6B:ED:28:5B:EE:2C:94:70:12:0C:81:99 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:50:aa:3d:d0:bd:4e:6a:f5:e1:79:4f:24:f8:8a:63:a9:70: c9:b3:e5:4a:00:44:08:bb:d5:29:ca:8a:73:64:e1:45:2a:cd: af:2a:d9:b0:76:95:2d:bc:d8:05:25:62:07:b5:3a:6e:80:96: 41:d9:59:16:bf:c3:7a:cd:37:24:97:06:b2:0b:02:e3:f0:25: 34:80:f7:06:aa:03:d9:42:4c:14:94:98:9d:c4:9f:cc:44:b5: a9:c8:2d:8b:09:b3:df:92:e0:34:99:63:ee:7e:df:16:ad:d1: d5:8a:49:9a:50:87:42:7c:44:24:b6:bb:60:a7:91:3a:eb:04: 52:f8:ac:63:58:b3:29:a3:63:f6:09:91:7b:9c:cc:f8:52:27: 5a:8b:3a:ac:61:08:14:0b:c5:f2:e6:16:4f:32:df:6a:33:73: b0:44:a1:2d:2b:61:61:e9:f0:ec:cb:c2:85:ac:ff:39:83:42: 7c:08:d7:4e:77:fd:66:df:b3:11:c0:01:cb:b3:44:dc:8d:ea: 31:03:fd:d3:76:df:da:62:12:77:68:c3:49:54:14:63:86:6f: 01:dd:a5:5f:69:0e:66:bf:f4:d8:14:cd:68:e3:78:30:d4:c0: 61:be:2d:6b:5b:2c:a5:8d:3f:02:6a:5b:b4:a2:86:c8:51:13: 47:59:ec:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MTgxMTAvBgNVBAUTKDc5QzdGQzVEMUE1RUVGMEIyOThFMDA3MjMyNkFCNzM2 ODZCREZFNzgwHhcNMjUxMTAzMDYyMjE1WhcNMjUxMTEwMDYyMjE1WjAYMRYwFAYD VQQDEw02OTA4NGExNy00ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm89WhcGmh4k1Cvr4HMFql2sMaL+gKCWN+ZSI4WSKJmP+Y2gHiD3LkaUNM0uo a6qPBsQ/CHPgDUJ9WruVHVK6rFv5RdpiCySHcxcA6ExWkZdfI0TQBL0lKF39c6mJ 1DDvkCeVV4iKIW9R7A2e6SbPpFI9bkpgNRRnRm8oAwBYSz3wQw3tTcR61J2CLfm+ fdngAGHDtH/nL+kZfN4pUhvLk8I1s/ulDZqztUee1+qvm4gJ9iHT1JqOgUJHG8Ft 1GgS75wJ9QOq/Ue3F8U7RfoLc7r6C7OJfDgbNRP3ITQuVd0muO8p94QJxTIjO+9B uW5O4dwexmCKtKDQWkuJrcb+qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqqbuER VymPa+0oW+4slHASDIGZMB8GA1UdIwQYMBaAFHnH/F0aXu8LKY4AcjJqtzaGvf54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxOC84RUU3MTQ4NkI2 QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3c3BqZ0J5TW1xM05vYTlf bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9uZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzkxOC84RUU3MTQ4NkI2QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3 c3BqZ0J5TW1xM05vYTlfbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTUKo90L1OavXheU8k+IpjqXDJs+VKAEQIu9UpyopzZOFFKs2vKtmw dpUtvNgFJWIHtTpugJZB2VkWv8N6zTcklwayCwLj8CU0gPcGqgPZQkwUlJidxJ/M RLWpyC2LCbPfkuA0mWPuft8WrdHVikmaUIdCfEQktrtgp5E66wRS+KxjWLMpo2P2 CZF7nMz4UidaizqsYQgUC8Xy5hZPMt9qM3OwRKEtK2Fh6fDsy8KFrP85g0J8CNdO d/1m37MRwAHLs0TcjeoxA/3Tdt/aYhJ3aMNJVBRjhm8B3aVfaQ5mv/TYFM1o43gw 1MBhvi1rWyyljT8Calu0oobIURNHWeyo -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:01 2025 by rpki-client