$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft File: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json) Hash identifier: A0i9guUgByleSOIjcPCo+cpuiSY8FoOXyqBHUBEbOYk= Subject key identifier: F1:F1:3C:32:B1:7E:91:DD:31:D9:FC:37:EC:66:AA:64:C0:48:BD:90 Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft Manifest number: 063F Signing time: Sun 02 Nov 2025 22:41:24 +0000 Manifest this update: Sun 02 Nov 2025 22:41:23 +0000 Manifest next update: Sun 09 Nov 2025 22:41:23 +0000 Files and hashes: 1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: 23OQCHhcPaxo62gaI9Q9QlIUbVNLMcWrSykhyUVU1Is=) 2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: KeDjzKypgQHXzMMCw525U76eYPfXZKl/2OFa/SSqsKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Validity Not Before: Nov 2 22:41:23 2025 GMT Not After : Nov 9 22:41:23 2025 GMT Subject: CN=6907de13-5be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:41:c4:17:83:99:21:da:8f:74:2f:ad:10: 0e:ea:84:3e:75:1e:e7:a3:4b:57:a9:ce:ad:a5:95: 80:c1:b0:b8:a1:f1:c3:47:6c:93:89:e8:2f:ce:d0: 6c:28:23:19:73:17:95:02:a8:e6:71:54:ae:63:02: 07:23:7c:b5:af:53:93:11:c3:6a:09:d5:27:c7:c7: eb:b3:ad:85:af:0f:f2:d1:9f:78:78:e2:b5:e2:51: 3c:65:76:5e:61:dc:80:8a:94:92:6d:7c:b2:10:90: 42:47:25:70:f8:6f:6a:c6:14:28:0d:de:07:bf:8e: 04:e4:9b:fc:fe:fa:34:6c:a7:b0:a1:a4:ca:d4:38: 06:ff:f1:37:c0:74:99:6a:95:63:ac:5a:90:eb:f0: 12:d2:9b:07:9e:65:16:7a:8c:3a:3e:15:4e:5d:9d: 06:6d:29:51:b7:b9:26:bf:7c:99:84:a3:8c:9f:49: 47:5e:5e:af:00:21:1a:01:c5:cb:cc:7b:8d:d5:48: 6c:65:b9:cb:11:16:03:90:6e:3c:f0:db:5a:32:56: 80:8b:fe:4f:3d:14:f4:77:73:43:fb:3a:f9:90:12: ca:e5:5b:48:de:c1:6c:86:13:c5:36:dd:f9:b2:94: 88:c1:14:00:4f:ef:a5:02:55:ae:90:15:67:3a:05: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F1:3C:32:B1:7E:91:DD:31:D9:FC:37:EC:66:AA:64:C0:48:BD:90 X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:87:7c:5d:13:26:b5:86:16:25:b5:85:ec:f7:df:cb:4b:65: fb:44:62:21:50:36:4f:82:86:88:28:39:bd:08:78:17:58:da: 64:c0:8a:b0:e5:6c:f6:c5:32:6e:f6:2b:13:e1:45:28:bc:1a: 6c:5c:f1:c7:b3:8c:06:bb:af:80:0e:6c:f5:a3:2b:e6:9b:87: 0f:41:21:fb:05:91:bb:f9:9c:ac:ca:1c:69:52:94:49:0b:f1: 60:8b:27:64:38:86:a4:39:c1:6a:09:66:6a:a0:ce:5c:07:f7: 43:48:2c:8d:f2:04:f7:a0:36:ac:8d:b8:8c:b7:46:ea:5b:c2: d0:c1:94:21:5e:04:d2:43:ab:c1:da:3c:b8:5b:a2:10:4f:74: 22:76:95:72:60:c0:3e:d1:e4:9c:c1:91:64:cc:51:d6:57:9f: ac:f0:cd:4e:7e:83:46:f1:6e:e2:ff:1b:5e:95:7e:45:a7:fe: 02:57:2a:7d:b8:95:b4:1b:43:9a:01:fd:a7:1e:52:bb:6d:9d: ee:64:2b:20:55:d3:1a:12:be:c8:f1:74:a3:48:58:fc:f0:f7: 1a:ca:54:fe:57:b8:de:d5:b7:18:73:ae:4a:79:8f:90:f2:0b: 68:db:78:2d:6b:ea:5d:9d:48:70:4f:33:0e:52:4e:91:a5:97: 8f:f0:fa:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjUxMTAyMjI0MTIzWhcNMjUxMTA5MjI0MTIzWjAYMRYwFAYD VQQDEw02OTA3ZGUxMy01YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DhBxBeDmSHaj3QvrRAO6oQ+dR7no0tXqc6tpZWAwbC4ofHDR2yTiegvztBs KCMZcxeVAqjmcVSuYwIHI3y1r1OTEcNqCdUnx8frs62Frw/y0Z94eOK14lE8ZXZe YdyAipSSbXyyEJBCRyVw+G9qxhQoDd4Hv44E5Jv8/vo0bKewoaTK1DgG//E3wHSZ apVjrFqQ6/AS0psHnmUWeow6PhVOXZ0GbSlRt7kmv3yZhKOMn0lHXl6vACEaAcXL zHuN1UhsZbnLERYDkG488NtaMlaAi/5PPRT0d3ND+zr5kBLK5VtI3sFshhPFNt35 spSIwRQAT++lAlWukBVnOgXY9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHxPDKx fpHdMdn8N+xmqmTASL2QMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt OGQya0lzNjNJZTQtMFpaNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGh3xdEya1hhYltYXs99/LS2X7RGIhUDZPgoaIKDm9CHgXWNpkwIqw 5Wz2xTJu9isT4UUovBpsXPHHs4wGu6+ADmz1oyvmm4cPQSH7BZG7+ZysyhxpUpRJ C/FgiydkOIakOcFqCWZqoM5cB/dDSCyN8gT3oDasjbiMt0bqW8LQwZQhXgTSQ6vB 2jy4W6IQT3QidpVyYMA+0eScwZFkzFHWV5+s8M1OfoNG8W7i/xtelX5Fp/4CVyp9 uJW0G0OaAf2nHlK7bZ3uZCsgVdMaEr7I8XSjSFj88PcaylT+V7je1bcYc65KeY+Q 8gto23gta+pdnUhwTzMOUk6RpZeP8Pqd -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:31 2025 by rpki-client