$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: akPJZhPBYAMbAO1BSL2haxxWY212F9g+DHlVxB/qZhE= Subject key identifier: 36:1E:1F:64:3F:03:45:7E:C7:2A:36:D1:E7:68:68:75:A1:F9:DC:FA Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: C6 Signing time: Wed 05 Nov 2025 06:04:09 +0000 Manifest this update: Wed 05 Nov 2025 06:04:09 +0000 Manifest next update: Wed 12 Nov 2025 06:04:09 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: k9P3LfC3ff0MEhSPu+fKGkBsgBVW0SeF4pm+ecUyGus=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: AtI/2Ua9nQqNbzSJOCRvMvTqRCV50QJmjGrd4yNCBfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Nov 5 06:04:09 2025 GMT Not After : Nov 12 06:04:09 2025 GMT Subject: CN=690ae8d9-0c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cf:88:6c:6b:60:03:4b:28:57:eb:5d:9e:ef: 51:9c:d7:09:04:94:ff:bb:38:33:0e:ea:23:26:d5: 56:88:50:50:4d:24:86:08:90:12:8d:52:bc:ae:ac: ff:58:81:e6:64:2b:73:9d:57:6d:3d:ed:d8:24:e2: 82:d5:fc:fb:1a:44:1b:49:d8:2c:00:99:cc:f2:e8: 1e:0f:03:57:af:cc:99:64:c6:ea:8d:7d:7c:61:b7: a5:28:50:6b:f2:80:cd:12:98:70:e4:2e:1c:1d:b3: ae:d4:de:fc:cf:39:6d:7c:bc:4a:0b:70:1d:e7:41: ca:30:17:ca:d2:ac:16:7b:09:b9:7f:e7:00:b5:17: 92:da:6c:f4:43:a4:d3:f2:10:0b:af:64:1e:ab:96: bf:e6:36:bc:d9:0b:ee:f6:68:85:01:94:9b:bd:2c: a0:ad:f3:fe:60:14:15:59:95:7b:f2:5b:6a:c6:84: 58:5c:73:f6:ad:81:c4:ab:51:82:b2:4a:5f:c1:1f: 35:8d:6c:14:71:05:08:30:4d:e0:08:7c:78:be:d8: 05:cc:be:46:6f:a9:6e:6e:eb:8b:47:e9:1c:30:58: 89:e1:e2:91:d6:85:6a:4f:8b:04:31:35:1a:c4:ad: 3d:17:c2:c7:3e:19:e1:9c:e6:bf:55:92:6f:fc:9b: 32:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1E:1F:64:3F:03:45:7E:C7:2A:36:D1:E7:68:68:75:A1:F9:DC:FA X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:08:7b:e3:20:01:43:c5:48:c3:18:5f:94:72:3c:50:53:32: 89:79:a4:ad:a6:4b:12:61:b9:6a:ca:54:0b:e2:ff:7b:0c:f8: e8:67:d8:4b:a3:ae:1d:2a:ef:dd:6b:64:31:f6:3d:0a:65:51: a0:6a:56:70:3b:1e:90:c6:73:7c:4e:31:c5:18:1d:37:52:58: 32:e3:d7:36:0c:9e:15:d8:7a:71:44:b2:11:82:55:fe:88:20: d1:04:d8:b6:9a:5e:a9:54:8f:63:b8:52:2b:1f:9d:ce:9b:25: 51:73:2f:30:1b:da:58:5d:57:e9:0d:15:64:47:b5:03:63:80: 17:54:f7:de:83:e9:43:b4:2d:cb:3a:14:7b:3d:59:be:ee:11: 94:f6:3d:06:a5:cb:c5:76:7a:e5:4a:34:79:6b:a9:85:1c:fa: 98:b9:af:ef:2c:4e:34:3e:a3:45:0c:ca:e0:d5:de:d3:b2:c9: 50:58:8e:3e:11:c6:c8:14:42:76:eb:05:57:9b:fb:69:72:70: 83:66:6b:ef:fb:5c:f6:26:35:6c:67:e4:02:2a:a1:92:6c:4a: a6:ee:e1:33:58:92:29:5b:24:b4:05:9f:1b:5d:43:f6:4d:70: 6d:8a:d6:e9:4c:0f:91:a5:4c:5b:57:f1:2d:d5:df:f0:ae:1f: c6:0b:31:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2RTcxMTAvBgNVBAUTKDEyNDcwODFFOUJBOTdDMTNDN0REM0Q2OEU0NDNEMUY1 NDc5QjJBRkYwHhcNMjUxMTA1MDYwNDA5WhcNMjUxMTEyMDYwNDA5WjAYMRYwFAYD VQQDEw02OTBhZThkOS0wYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4c+IbGtgA0soV+tdnu9RnNcJBJT/uzgzDuojJtVWiFBQTSSGCJASjVK8rqz/ WIHmZCtznVdtPe3YJOKC1fz7GkQbSdgsAJnM8ugeDwNXr8yZZMbqjX18YbelKFBr 8oDNEphw5C4cHbOu1N78zzltfLxKC3Ad50HKMBfK0qwWewm5f+cAtReS2mz0Q6TT 8hALr2Qeq5a/5ja82Qvu9miFAZSbvSygrfP+YBQVWZV78ltqxoRYXHP2rYHEq1GC skpfwR81jWwUcQUIME3gCHx4vtgFzL5Gb6lubuuLR+kcMFiJ4eKR1oVqT4sEMTUa xK09F8LHPhnhnOa/VZJv/JsyNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYeH2Q/ A0V+xyo20edoaHWh+dz6MB8GA1UdIwQYMBaAFBJHCB6bqXwTx909aORD0fVHmyr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTZFNy8wNjc5QUNGNDkx MjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZCUEgzVDFvNUVQUjlVZWJL djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTZFNy8wNjc5QUNGNDkxMjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZC UEgzVDFvNUVQUjlVZWJLdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFCHvjIAFDxUjDGF+UcjxQUzKJeaStpksSYblqylQL4v97DPjoZ9hL o64dKu/da2Qx9j0KZVGgalZwOx6QxnN8TjHFGB03Ulgy49c2DJ4V2HpxRLIRglX+ iCDRBNi2ml6pVI9juFIrH53OmyVRcy8wG9pYXVfpDRVkR7UDY4AXVPfeg+lDtC3L OhR7PVm+7hGU9j0GpcvFdnrlSjR5a6mFHPqYua/vLE40PqNFDMrg1d7TsslQWI4+ EcbIFEJ26wVXm/tpcnCDZmvv+1z2JjVsZ+QCKqGSbEqm7uEzWJIpWyS0BZ8bXUP2 TXBtitbpTA+RpUxbV/Et1d/wrh/GCzHW -----END CERTIFICATE-----Generated at Wed Nov 5 16:23:05 2025 by rpki-client