$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft File: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json) Hash identifier: y971Jj1XTDRdZOhiAz3LLeBtklh5+uyQyS0gnksQ90M= Subject key identifier: CA:A0:52:48:E2:1D:5F:2A:FB:12:47:BC:69:86:5A:67:73:CB:58:18 Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 Certificate issuer: /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft Manifest number: 349F Signing time: Tue 04 Nov 2025 15:22:47 +0000 Manifest this update: Tue 04 Nov 2025 15:22:46 +0000 Manifest next update: Tue 11 Nov 2025 15:22:46 +0000 Files and hashes: 1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: wmO6iUqT3MRhqSwGBSiwbvJRItIvp4NPbcJJDzRmbVk=) 2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: d/14FJHyt97NnvQezwZgszS2h7OqJIW+bhi4rgk0UNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6 Validity Not Before: Nov 4 15:22:46 2025 GMT Not After : Nov 11 15:22:46 2025 GMT Subject: CN=690a1a46-2dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:40:c0:6a:36:5c:67:a1:12:90:f7:0c:e1: 3a:59:01:ce:9f:9e:3e:20:05:b1:1e:61:11:0f:d9: 43:c2:fe:98:e4:e3:24:7f:a1:ed:4a:75:6c:44:ba: 48:77:36:7c:cf:73:a9:01:d8:5e:f6:9e:9f:ac:4b: 70:83:e8:79:f7:a7:d8:5f:35:a5:a4:ad:1b:24:88: 88:cc:d8:6e:95:c9:db:b7:c5:15:09:5c:b7:da:03: 5b:0c:f8:b2:da:77:ba:0d:80:b7:ff:b0:e0:2f:28: 54:3d:61:2b:6c:4e:e2:69:7b:be:0c:50:96:b5:56: c7:6e:98:c0:ea:a1:e9:56:68:70:ca:3d:93:d9:bd: d5:cd:cf:67:15:76:d5:ea:24:5b:71:f9:16:8b:84: 09:d7:36:c1:31:45:9d:af:81:f8:77:19:39:95:d4: a4:5d:12:a8:5b:e1:80:86:83:e3:9b:3a:00:f8:ee: a2:0c:45:79:c9:78:11:18:83:c0:d7:e0:b5:cf:60: 9f:e3:b1:90:52:de:3d:c1:bc:00:70:e2:9e:6e:e2: 11:8d:c0:d0:45:e9:91:18:0d:b5:3a:56:ef:a4:89: 9e:0f:28:15:a4:39:38:77:cd:61:2a:05:8c:32:d4: d4:8c:16:dc:bf:c7:15:20:d1:32:9f:57:c0:68:bc: 1e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A0:52:48:E2:1D:5F:2A:FB:12:47:BC:69:86:5A:67:73:CB:58:18 X509v3 Authority Key Identifier: keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7e:e8:8d:09:99:52:19:0c:65:e5:ae:e6:b4:20:8b:c9:c9: 3b:91:b0:03:86:ee:d7:54:c9:62:ad:53:57:75:04:1e:f0:9f: c2:e2:83:f8:94:27:dc:2f:b4:7b:fb:84:9c:46:b0:35:f1:6d: 51:1f:97:08:0f:d2:b1:8e:0c:d2:bb:c9:1c:7a:7d:ae:d7:0e: 2d:62:86:85:54:30:41:bd:65:d6:b8:5b:38:2d:21:79:75:74: 47:3f:ce:89:16:9e:58:cb:25:90:2c:de:e5:ba:b1:47:0a:1f: ea:25:2f:2c:2a:59:1a:cb:ba:fa:ed:08:a7:b3:4c:8a:3f:bd: 2d:24:f8:30:5b:db:ad:db:03:53:91:fb:3e:d4:fb:da:80:48: 70:2f:5f:3e:d4:ae:d3:21:6b:cd:af:45:99:72:e5:c9:bd:0b: 24:96:31:cf:0d:72:aa:37:9e:27:c5:71:91:d9:cf:65:0b:8b: 3c:c7:2c:a0:f8:ed:f2:71:e9:d9:aa:e4:b5:c5:8e:b4:a2:4d: 74:5c:e0:77:55:96:56:cd:1e:e2:c1:d0:a1:1f:41:d9:20:0f: ff:26:a2:aa:0c:04:e5:d4:f3:85:2e:2b:c0:79:70:99:de:98: 66:f2:62:70:d7:5e:0a:e4:4a:07:ab:5a:f5:31:2b:e9:aa:f5: b1:2d:bd:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENGNzMxMTAvBgNVBAUTKDc4OUY4Qjc4N0VEM0REMzUyMDMzMzJDRUIzQjUzMkUx RkFGMEI2QzYwHhcNMjUxMTA0MTUyMjQ2WhcNMjUxMTExMTUyMjQ2WjAYMRYwFAYD VQQDEw02OTBhMWE0Ni0yZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGNAwGo2XGehEpD3DOE6WQHOn54+IAWxHmERD9lDwv6Y5OMkf6HtSnVsRLpI dzZ8z3OpAdhe9p6frEtwg+h596fYXzWlpK0bJIiIzNhulcnbt8UVCVy32gNbDPiy 2ne6DYC3/7DgLyhUPWErbE7iaXu+DFCWtVbHbpjA6qHpVmhwyj2T2b3Vzc9nFXbV 6iRbcfkWi4QJ1zbBMUWdr4H4dxk5ldSkXRKoW+GAhoPjmzoA+O6iDEV5yXgRGIPA 1+C1z2Cf47GQUt49wbwAcOKebuIRjcDQRemRGA21OlbvpImeDygVpDk4d81hKgWM MtTUjBbcv8cVINEyn1fAaLweEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqgUkji HV8q+xJHvGmGWmdzy1gYMB8GA1UdIwQYMBaAFHifi3h+0901IDMyzrO1MuH68LbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0Y3My9BNjg0NzU1MDJB MDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNUVWdNekxPczdVeTRmcnd0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKLUxlSDdUM1RVZ016TE9zN1V5NGZyd3RzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0Y3My9BNjg0NzU1MDJBMDExMUUyODE3MjNDQTYwOEIwMkNEMi9lSi1MZUg3VDNU VWdNekxPczdVeTRmcnd0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLfuiNCZlSGQxl5a7mtCCLyck7kbADhu7XVMlirVNXdQQe8J/C4oP4 lCfcL7R7+4ScRrA18W1RH5cID9KxjgzSu8kcen2u1w4tYoaFVDBBvWXWuFs4LSF5 dXRHP86JFp5YyyWQLN7lurFHCh/qJS8sKlkay7r67Qins0yKP70tJPgwW9ut2wNT kfs+1PvagEhwL18+1K7TIWvNr0WZcuXJvQskljHPDXKqN54nxXGR2c9lC4s8xyyg +O3ycenZquS1xY60ok10XOB3VZZWzR7iwdChH0HZIA//JqKqDATl1POFLivAeXCZ 3phm8mJw114K5EoHq1r1MSvpqvWxLb22 -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:38 2025 by rpki-client