$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft File: ej5CbJYle98kPDxjt4A4NAUlwqk.mft (raw, json) Hash identifier: AC5rZl0a0nW6CwD1KvYtJLggSBp3qoCegn8+UEqMsmw= Subject key identifier: B3:B8:8F:6F:C6:00:CE:FD:30:35:E8:84:19:6F:82:A4:E6:28:B2:B1 Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Certificate serial: 027C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft Manifest number: 03DE Signing time: Wed 05 Nov 2025 01:44:59 +0000 Manifest this update: Wed 05 Nov 2025 01:44:58 +0000 Manifest next update: Wed 12 Nov 2025 01:44:58 +0000 Files and hashes: 1: ej5CbJYle98kPDxjt4A4NAUlwqk.crl (hash: q6gG1wlMKShEb2sMscqG46dq61PIvAogKQ6ZcLmxkBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Validity Not Before: Nov 5 01:44:58 2025 GMT Not After : Nov 12 01:44:58 2025 GMT Subject: CN=690aac1a-bc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:13:21:c7:81:89:6e:12:ab:32:81:2b:91: 63:5e:3a:e5:0a:2a:b6:fc:72:a5:e2:ca:70:ec:1b: 64:f7:5c:5b:72:09:7c:f6:46:7c:78:82:b5:2d:32: 14:99:f3:cc:f0:01:21:2b:c9:c0:ff:d7:1b:bc:52: ff:05:b2:9e:ef:94:9a:ed:57:30:28:a5:a5:b0:62: 87:7d:bb:22:ae:b1:e7:12:6e:96:3b:c3:f4:37:cf: 0e:ce:33:c3:16:f5:f2:e9:c7:57:73:6a:53:5b:22: 25:a0:e6:ab:4b:c7:42:c4:6b:17:cf:db:33:7f:05: 6a:e2:ab:6d:66:e1:3d:a9:7b:ce:af:07:21:56:95: 34:ce:1b:cf:49:6e:14:e7:0a:b5:db:2c:a5:7b:37: 3e:84:02:74:6f:ba:f4:da:10:15:0e:8e:f6:a0:54: e4:7d:e9:42:60:16:a2:72:1e:81:b2:c4:27:09:ac: 02:af:4b:10:42:d8:fd:ad:a6:37:38:ae:19:75:99: d5:3f:26:62:15:7d:50:dd:da:41:9b:3a:1b:22:38: e5:4a:9c:78:ac:91:64:cc:78:c0:40:cd:88:c1:f1: 74:f9:9c:e1:7e:f4:1d:0b:04:0a:1d:7b:ae:fd:ee: 81:3c:c8:db:79:dc:e7:22:14:ba:35:e1:00:c4:7f: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B8:8F:6F:C6:00:CE:FD:30:35:E8:84:19:6F:82:A4:E6:28:B2:B1 X509v3 Authority Key Identifier: keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2a:dc:be:f7:d4:af:da:b4:ce:89:4c:8c:11:df:e0:1d:70: eb:4b:d5:fb:3d:f8:9b:fd:27:18:17:1f:49:07:75:b8:3f:eb: 98:e6:bf:a2:e4:35:e3:8e:df:81:07:ed:a5:be:e5:3e:34:67: e0:53:00:c9:bf:e5:bb:d9:94:8d:f8:47:43:ff:f4:a4:a2:27: ce:14:87:4f:5b:c0:58:9f:6f:5d:c7:a4:aa:c7:24:13:3f:e8: 46:ee:dc:58:2d:35:14:be:0a:05:de:a2:04:9e:58:f2:78:5c: fa:ec:28:b3:c1:83:0f:66:db:64:84:70:2a:60:86:91:e0:a1: ee:18:0f:a1:98:cf:d8:1a:88:02:dd:7f:2d:e7:f5:9e:1d:3a: 6b:fa:8b:12:fa:88:ac:24:ce:a7:66:25:af:b6:49:0f:b8:c7: 23:ea:1c:d7:4d:46:ad:19:f6:11:e6:b8:31:59:79:d6:b3:aa: a8:f8:c0:55:36:a5:ce:a1:e8:d5:2c:83:c8:fb:e9:7d:23:79: 37:50:36:0a:b7:4b:f3:a0:42:9a:43:42:4a:85:7b:3d:96:32: fa:9e:ee:1f:fc:c4:34:2a:a2:bb:ee:01:bc:d3:a0:9f:ad:74: 2a:e5:5b:02:1b:49:51:a4:fd:41:6a:5c:56:c4:8d:29:3c:9c: 47:1e:e6:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKDdBM0U0MjZDOTYyNTdCREYyNDNDM0M2M0I3ODAzODM0 MDUyNUMyQTkwHhcNMjUxMTA1MDE0NDU4WhcNMjUxMTEyMDE0NDU4WjAYMRYwFAYD VQQDEw02OTBhYWMxYS1iYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PsTIceBiW4SqzKBK5FjXjrlCiq2/HKl4spw7Btk91xbcgl89kZ8eIK1LTIU mfPM8AEhK8nA/9cbvFL/BbKe75Sa7VcwKKWlsGKHfbsirrHnEm6WO8P0N88OzjPD FvXy6cdXc2pTWyIloOarS8dCxGsXz9szfwVq4qttZuE9qXvOrwchVpU0zhvPSW4U 5wq12yylezc+hAJ0b7r02hAVDo72oFTkfelCYBaich6BssQnCawCr0sQQtj9raY3 OK4ZdZnVPyZiFX1Q3dpBmzobIjjlSpx4rJFkzHjAQM2IwfF0+ZzhfvQdCwQKHXuu /e6BPMjbedznIhS6NeEAxH+a8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO4j2/G AM79MDXohBlvgqTmKLKxMB8GA1UdIwQYMBaAFHo+QmyWJXvfJDw8Y7eAODQFJcKp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5OGtQRHhqdDRBNE5BVWx3 cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqNUNiSllsZTk4a1BEeGp0NEE0TkFVbHdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5 OGtQRHhqdDRBNE5BVWx3cWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbKty+99Sv2rTOiUyMEd/gHXDrS9X7Pfib/ScYFx9JB3W4P+uY5r+i 5DXjjt+BB+2lvuU+NGfgUwDJv+W72ZSN+EdD//SkoifOFIdPW8BYn29dx6SqxyQT P+hG7txYLTUUvgoF3qIEnljyeFz67CizwYMPZttkhHAqYIaR4KHuGA+hmM/YGogC 3X8t5/WeHTpr+osS+oisJM6nZiWvtkkPuMcj6hzXTUatGfYR5rgxWXnWs6qo+MBV NqXOoejVLIPI++l9I3k3UDYKt0vzoEKaQ0JKhXs9ljL6nu4f/MQ0KqK77gG806Cf rXQq5VsCG0lRpP1BalxWxI0pPJxHHuZF -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:29 2025 by rpki-client