$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft File: mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft (raw, json) Hash identifier: Vd+ZbVSmDIov/u3vnUD0e+YzFIg7NMbl0RmNryr5o8o= Subject key identifier: D5:70:1B:27:E7:C0:28:C9:01:EF:7A:EF:1B:C9:14:36:CA:33:C4:B4 Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 Certificate issuer: /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft Manifest number: 01FF Signing time: Mon 03 Nov 2025 02:23:39 +0000 Manifest this update: Mon 03 Nov 2025 02:23:38 +0000 Manifest next update: Mon 10 Nov 2025 02:23:38 +0000 Files and hashes: 1: mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl (hash: mncxeBO8RIme15yN1Weyw+ISULiooVjIZKuFAxLFhRU=) 2: EE4D73F2AE5611EDA021E516C4F9AE02.roa (hash: rHhV9X+494LZVhsBFnMPP35cu2Qc4CF3Pf3vW78mDqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E67, serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Validity Not Before: Nov 3 02:23:38 2025 GMT Not After : Nov 10 02:23:38 2025 GMT Subject: CN=6908122a-86cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:f1:2b:42:b0:2d:01:a7:b0:d2:5b:70:63: 3e:d2:e4:3d:15:85:8a:4f:b6:68:9c:11:a2:b4:76: cc:4a:70:62:8e:81:1c:94:89:2e:93:68:9e:6a:6b: 9c:ae:52:6d:4a:99:56:a3:ac:6f:63:7f:9d:b2:3f: b9:c6:1d:f9:36:0d:08:49:1b:67:9d:df:42:67:a5: 97:02:41:2b:f5:1a:ab:a8:0e:dd:7b:27:b9:83:02: 01:c3:46:16:d8:c3:43:72:ec:21:98:5c:dc:78:55: c0:75:d9:90:78:ea:8f:b2:f7:a1:af:06:0a:4e:d6: b1:14:70:21:c2:3c:1e:ed:3f:a7:2e:10:df:f3:b0: 21:76:b6:88:56:da:17:2d:da:8a:16:c2:90:f9:2c: d1:31:64:8e:bd:ec:78:46:87:0e:e1:32:4a:a0:d4: 6b:04:9b:02:4c:85:d8:b3:c0:aa:77:96:8c:c9:83: d1:dd:ca:a2:f6:fc:88:ad:98:f2:46:3e:5d:b7:19: 3e:9c:73:2b:54:24:c3:8a:06:e0:af:46:6c:95:16: ef:2a:55:cc:98:0f:70:f6:25:8b:be:1b:cb:6f:01: da:a3:d0:f0:5f:96:85:36:a1:52:ff:1c:78:28:db: a1:39:dd:06:aa:cc:fb:01:ac:eb:2d:61:37:25:5c: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:70:1B:27:E7:C0:28:C9:01:EF:7A:EF:1B:C9:14:36:CA:33:C4:B4 X509v3 Authority Key Identifier: keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:06:c0:e1:d3:ce:84:63:58:6e:17:ff:cc:10:34:51:1a:ed: 2f:f7:2f:9d:f2:e3:8f:2c:87:98:15:e7:29:2c:9f:9f:db:c2: 4b:35:fe:ac:ac:e4:f6:32:ce:60:20:55:ab:15:be:a5:ed:c6: 33:45:a3:bb:7c:2b:78:24:7e:ab:5f:5c:4f:61:4a:d8:c8:e3: e8:bc:9f:3c:63:46:8b:9a:3a:8c:cc:71:33:69:70:02:bd:36: fe:a7:c6:b2:27:14:aa:2b:e8:3d:8b:42:20:52:19:fe:6e:28: 88:bc:8d:44:b5:71:35:28:32:c4:67:fb:48:e6:59:66:bf:af: 04:a5:6d:ef:0e:ac:d9:a6:8a:70:21:e5:b6:96:dc:6d:2d:4c: 74:cb:fb:49:cb:1e:14:39:20:1a:a4:36:aa:79:39:61:6b:aa: 57:37:9e:19:e6:8c:60:06:65:7f:3c:51:c4:5b:b3:e6:81:ee: dc:10:dc:88:c5:48:5f:4a:44:8d:84:80:65:5e:05:f3:3b:20: 66:b6:e1:9e:79:6b:81:03:3d:f5:d1:d3:69:29:72:3b:ee:a0: d7:47:00:21:f6:b9:b8:b1:69:25:92:dc:ac:b7:da:c9:69:13: 2f:53:04:72:f0:f8:c5:50:66:82:37:56:c1:78:ee:6d:43:a4: f7:84:04:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFNjcxMTAvBgNVBAUTKDk4NDNDODkyNzdBODEyQUJEN0ZBREFCNTJEMUQ2MUQy NzhCQTJCMTkwHhcNMjUxMTAzMDIyMzM4WhcNMjUxMTEwMDIyMzM4WjAYMRYwFAYD VQQDEw02OTA4MTIyYS04NmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiHxK0KwLQGnsNJbcGM+0uQ9FYWKT7ZonBGitHbMSnBijoEclIkuk2ieamuc rlJtSplWo6xvY3+dsj+5xh35Ng0ISRtnnd9CZ6WXAkEr9RqrqA7deye5gwIBw0YW 2MNDcuwhmFzceFXAddmQeOqPsvehrwYKTtaxFHAhwjwe7T+nLhDf87AhdraIVtoX LdqKFsKQ+SzRMWSOvex4RocO4TJKoNRrBJsCTIXYs8Cqd5aMyYPR3cqi9vyIrZjy Rj5dtxk+nHMrVCTDigbgr0ZslRbvKlXMmA9w9iWLvhvLbwHao9DwX5aFNqFS/xx4 KNuhOd0Gqsz7AazrLWE3JVzS2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVwGyfn wCjJAe967xvJFDbKM8S0MB8GA1UdIwQYMBaAFJhDyJJ3qBKr1/ratS0dYdJ4uisZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUU2Ny8yMkMxNDUyOEFF NTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0VxdlgtdHExTFIxaDBuaTZL eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21FUElrbmVvRXF2WC10cTFMUjFoMG5pNkt4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUU2Ny8yMkMxNDUyOEFFNTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0Vx dlgtdHExTFIxaDBuaTZLeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKBsDh086EY1huF//MEDRRGu0v9y+d8uOPLIeYFecpLJ+f28JLNf6s rOT2Ms5gIFWrFb6l7cYzRaO7fCt4JH6rX1xPYUrYyOPovJ88Y0aLmjqMzHEzaXAC vTb+p8ayJxSqK+g9i0IgUhn+biiIvI1EtXE1KDLEZ/tI5llmv68EpW3vDqzZpopw IeW2ltxtLUx0y/tJyx4UOSAapDaqeTlha6pXN54Z5oxgBmV/PFHEW7Pmge7cENyI xUhfSkSNhIBlXgXzOyBmtuGeeWuBAz310dNpKXI77qDXRwAh9rm4sWklktyst9rJ aRMvUwRy8PjFUGaCN1bBeO5tQ6T3hASO -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:47 2025 by rpki-client