$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft File: eQckJnCjuJ00jVqEHayNGC62YH4.mft (raw, json) Hash identifier: 9sf8xzDy2B3lVfUvuOjOdilKzVVC8gyLBnpLqKDLgXA= Subject key identifier: 40:14:64:4B:9C:DA:46:6B:2C:F5:AF:0D:1C:68:C0:30:FE:97:E2:30 Authority key identifier: 79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E Certificate issuer: /CN=A913DC32/serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft Manifest number: 7E Signing time: Mon 03 Nov 2025 06:46:59 +0000 Manifest this update: Mon 03 Nov 2025 06:46:59 +0000 Manifest next update: Mon 10 Nov 2025 06:46:59 +0000 Files and hashes: 1: eQckJnCjuJ00jVqEHayNGC62YH4.crl (hash: sB3kD8/NtLMEHUUXLf30GsrryeNQpArzKEQ5+9Kueb0=) 2: 22E5730815AC11F0BA789D40C4F9AE02.roa (hash: iWmeds3ikQddJ0zOLOMR2/nAx9kIXx/domN/vEqWgPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC32, serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Validity Not Before: Nov 3 06:46:59 2025 GMT Not After : Nov 10 06:46:59 2025 GMT Subject: CN=69084fe3-f4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:df:49:bc:e5:c8:d2:20:47:a4:69:7a:bf:19: 8c:b1:f0:fa:75:23:41:b3:d8:c2:05:65:6f:d8:67: fa:9d:20:f6:2c:1d:f9:ac:94:18:7e:27:bc:cd:f9: b0:be:5d:e9:67:fb:77:56:7b:46:1b:33:79:4b:55: 0f:d7:82:d1:b7:8b:b6:a3:ca:02:44:3d:c4:bf:4e: 16:b1:7f:f5:7b:da:66:e1:af:d1:04:e9:c7:17:40: 8c:6b:9e:07:8b:b2:c9:6d:b9:f9:70:19:3f:4e:65: aa:77:ab:67:ed:f8:fd:5d:7a:25:9a:e3:11:d1:8e: c8:b4:b7:d9:dd:9a:8e:3a:b9:20:ac:33:cb:1f:fa: 9c:55:80:b2:a6:84:93:b5:3b:2b:00:70:99:91:f7: 64:26:96:fd:fb:15:f3:b5:42:ec:15:b8:80:76:66: cf:f5:b1:f1:6f:b7:61:9d:d8:56:60:49:15:44:33: df:e7:d7:5a:cb:9b:3f:87:f8:48:6e:55:7d:4e:c8: 56:72:ce:88:d5:25:d3:55:3d:a9:f3:7d:ce:57:1f: 56:60:eb:92:db:78:d6:14:37:fd:b5:39:44:dd:db: a7:75:17:04:bc:b9:8e:fc:89:c3:8f:31:5d:d7:00: f2:5f:22:e9:0a:ae:6c:94:69:27:d8:aa:44:66:bc: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:14:64:4B:9C:DA:46:6B:2C:F5:AF:0D:1C:68:C0:30:FE:97:E2:30 X509v3 Authority Key Identifier: keyid:79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:98:72:eb:a7:4e:d8:5f:88:28:31:5a:50:62:fb:f3:13:78: fb:9d:56:16:a5:f9:42:e3:4a:34:30:8a:24:8a:8e:25:5c:a5: 77:b3:f5:de:04:8b:4d:ed:a3:c4:81:5b:12:f1:72:11:51:e4: bf:fb:82:3a:98:df:25:59:56:d4:24:2d:23:53:01:78:e1:22: de:5c:36:c8:24:43:d2:60:c5:f2:f7:32:23:f2:e0:4d:b6:29: 19:bb:2a:c2:f8:0c:46:04:6b:a1:61:04:c9:a9:2d:56:42:30: 1e:18:b6:2a:6e:71:b5:9f:71:8e:ff:bb:cb:82:48:ed:5a:89: 23:65:d7:86:aa:5a:16:4b:cc:ab:d4:09:3a:b6:9a:f6:cc:bf: 23:41:f6:36:23:9e:aa:00:ad:89:00:c7:c5:9a:01:b4:56:96: ef:0d:f6:49:dd:75:8a:73:d2:99:d8:18:eb:4d:84:de:48:d9: 9c:c6:ac:f8:67:41:86:e3:04:e9:05:31:6e:51:fe:59:33:a2: 83:64:79:98:5c:6a:3c:28:4d:fe:31:de:e8:d5:ba:75:37:3b: 05:6b:3b:f1:78:2f:b6:a9:59:7f:2e:39:d5:9c:7f:dd:c3:01: 2b:d0:63:df:19:a8:bb:8b:8c:56:09:0e:42:72:37:85:3c:c1: 3c:bc:12:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RDMzIxMTAvBgNVBAUTKDc5MDcyNDI2NzBBM0I4OUQzNDhENUE4NDFEQUM4RDE4 MkVCNjYwN0UwHhcNMjUxMTAzMDY0NjU5WhcNMjUxMTEwMDY0NjU5WjAYMRYwFAYD VQQDEw02OTA4NGZlMy1mNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8d9JvOXI0iBHpGl6vxmMsfD6dSNBs9jCBWVv2Gf6nSD2LB35rJQYfie8zfmw vl3pZ/t3VntGGzN5S1UP14LRt4u2o8oCRD3Ev04WsX/1e9pm4a/RBOnHF0CMa54H i7LJbbn5cBk/TmWqd6tn7fj9XXolmuMR0Y7ItLfZ3ZqOOrkgrDPLH/qcVYCypoST tTsrAHCZkfdkJpb9+xXztULsFbiAdmbP9bHxb7dhndhWYEkVRDPf59day5s/h/hI blV9TshWcs6I1SXTVT2p833OVx9WYOuS23jWFDf9tTlE3dundRcEvLmO/InDjzFd 1wDyXyLpCq5slGkn2KpEZrzaowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAUZEuc 2kZrLPWvDRxowDD+l+IwMB8GA1UdIwQYMBaAFHkHJCZwo7idNI1ahB2sjRgutmB+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREMzMi83Qjc1MEJGRUZD RkQxMUVGQURCODYxMTVDNEY5QUUwMi9lUWNrSm5DanVKMDBqVnFFSGF5TkdDNjJZ SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2VRY2tKbkNqdUowMGpWcUVIYXlOR0M2MllINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REMzMi83Qjc1MEJGRUZDRkQxMUVGQURCODYxMTVDNEY5QUUwMi9lUWNrSm5DanVK MDBqVnFFSGF5TkdDNjJZSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkmHLrp07YX4goMVpQYvvzE3j7nVYWpflC40o0MIokio4lXKV3s/Xe BItN7aPEgVsS8XIRUeS/+4I6mN8lWVbUJC0jUwF44SLeXDbIJEPSYMXy9zIj8uBN tikZuyrC+AxGBGuhYQTJqS1WQjAeGLYqbnG1n3GO/7vLgkjtWokjZdeGqloWS8yr 1Ak6tpr2zL8jQfY2I56qAK2JAMfFmgG0VpbvDfZJ3XWKc9KZ2BjrTYTeSNmcxqz4 Z0GG4wTpBTFuUf5ZM6KDZHmYXGo8KE3+Md7o1bp1NzsFazvxeC+2qVl/LjnVnH/d wwEr0GPfGai7i4xWCQ5CcjeFPME8vBJ7 -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:43 2025 by rpki-client