$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: AeG1yLyVImTINO4D6Ke11zsxse1euuWq8KyoCtcdX10= Subject key identifier: 71:BD:3F:7C:59:BA:2D:EC:E0:0E:6C:63:45:FF:AC:52:5F:CD:5A:AD Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: D4 Signing time: Wed 05 Nov 2025 05:59:13 +0000 Manifest this update: Wed 05 Nov 2025 05:59:13 +0000 Manifest next update: Wed 12 Nov 2025 05:59:13 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: 09U/0RIOjVQoG+RvK1tEQf/s4uff8kj3VexDV4WwalY=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: kFeLSlxr+WCGPho9rPBLPN730/5wUSHLkfcdGg7Yk2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Nov 5 05:59:13 2025 GMT Not After : Nov 12 05:59:13 2025 GMT Subject: CN=690ae7b1-cbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:29:1c:8c:15:38:08:b3:bd:34:99:ce:21:c6: f4:af:08:39:16:3a:a0:91:a8:94:b4:8a:ec:f9:5c: b8:7c:b1:9e:ec:f6:00:49:7a:fd:3b:13:e3:f8:69: 73:d0:75:dc:57:c2:35:4a:2e:8a:83:a4:47:13:1e: ad:0c:67:bd:39:5e:33:7c:00:4b:12:db:a0:76:44: be:09:cf:14:3a:9c:65:e6:b5:f0:3b:23:2c:52:1d: 97:51:28:be:0e:bb:a1:21:20:aa:98:49:8c:0c:59: af:57:2d:80:b9:b5:57:32:3e:d7:31:c1:a3:4e:91: db:eb:a5:0b:23:b2:5d:9b:b1:4a:b8:5e:37:02:b7: 21:0e:bc:e0:ab:b6:bd:12:eb:89:45:84:f6:ba:e8: 9f:e6:f0:a2:36:72:b2:4d:dc:62:8e:bd:21:90:6d: 1b:cd:87:3f:a8:ea:78:3d:28:18:d6:f2:f6:d2:51: 79:22:30:df:c1:cf:9e:ca:aa:47:90:94:00:d8:7e: 47:0d:81:fe:f4:24:1a:59:05:2d:cb:59:65:42:04: 49:3c:43:08:a7:e6:f4:a7:9f:ba:50:a9:58:e1:77: bc:4e:34:9a:31:13:01:9a:95:53:3e:92:7d:3d:0b: 17:a0:a7:78:33:3e:2c:13:a1:3f:c1:e4:f5:58:db: 20:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BD:3F:7C:59:BA:2D:EC:E0:0E:6C:63:45:FF:AC:52:5F:CD:5A:AD X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:9a:df:c6:6c:d4:6e:f5:90:b1:88:25:55:fb:04:83:ee:ef: b2:6e:f1:d0:0b:ea:f1:41:54:4b:c6:27:bc:f9:9a:c6:83:87: 97:ff:8d:c5:57:ec:71:24:32:df:a2:ea:1f:ee:fe:43:00:a8: 67:bb:9b:5e:62:8e:7c:de:f2:3e:b7:11:a3:a9:3a:ea:1a:48: 60:4f:4e:f6:78:8d:28:80:26:af:9b:a1:3e:e9:0e:28:b4:51: 47:de:e9:52:d3:46:c3:c0:3a:bb:96:be:24:f5:ac:86:cb:d3: 61:6f:c2:e0:df:2f:96:c4:44:a1:b1:65:86:50:6e:8a:c0:ae: d7:43:aa:ee:2a:c7:95:71:80:7a:4c:40:ea:85:88:d4:8d:14: 37:1b:e9:d1:41:a4:fd:0c:cf:57:64:34:42:2d:40:af:89:59: 74:b5:c0:42:19:6c:2c:b5:5d:ff:91:9a:4e:6b:ed:ed:09:e5: 4f:32:eb:d2:38:b5:c5:73:de:e3:80:b3:db:a7:46:03:bd:17: ba:20:8c:d3:0b:f5:06:75:f8:c6:1d:75:8f:89:e1:70:80:2d: e1:c5:75:3a:42:ac:8e:35:f4:b8:d9:a5:97:0e:a3:18:38:2e: 61:e8:49:a6:69:e6:58:39:fb:9e:ce:4b:af:18:bf:fb:ea:d0: a7:64:e5:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKDEwMEQ5QUVFOTFEMjI3RkU0NzU5MzRGMjk3OEMzNjE3 RDhDRkE4RUUwHhcNMjUxMTA1MDU1OTEzWhcNMjUxMTEyMDU1OTEzWjAYMRYwFAYD VQQDEw02OTBhZTdiMS1jYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkykcjBU4CLO9NJnOIcb0rwg5FjqgkaiUtIrs+Vy4fLGe7PYASXr9OxPj+Glz 0HXcV8I1Si6Kg6RHEx6tDGe9OV4zfABLEtugdkS+Cc8UOpxl5rXwOyMsUh2XUSi+ DruhISCqmEmMDFmvVy2AubVXMj7XMcGjTpHb66ULI7Jdm7FKuF43ArchDrzgq7a9 EuuJRYT2uuif5vCiNnKyTdxijr0hkG0bzYc/qOp4PSgY1vL20lF5IjDfwc+eyqpH kJQA2H5HDYH+9CQaWQUty1llQgRJPEMIp+b0p5+6UKlY4Xe8TjSaMRMBmpVTPpJ9 PQsXoKd4Mz4sE6E/weT1WNsggQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHG9P3xZ ui3s4A5sY0X/rFJfzVqtMB8GA1UdIwQYMBaAFBANmu6R0if+R1k08peMNhfYz6ju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS81N0ZGNEJDQThC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pfNUhXVFR5bDR3MkY5alBx TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS81N0ZGNEJDQThCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pf NUhXVFR5bDR3MkY5alBxTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCImt/GbNRu9ZCxiCVV+wSD7u+ybvHQC+rxQVRLxie8+ZrGg4eX/43F V+xxJDLfouof7v5DAKhnu5teYo583vI+txGjqTrqGkhgT072eI0ogCavm6E+6Q4o tFFH3ulS00bDwDq7lr4k9ayGy9Nhb8Lg3y+WxEShsWWGUG6KwK7XQ6ruKseVcYB6 TEDqhYjUjRQ3G+nRQaT9DM9XZDRCLUCviVl0tcBCGWwstV3/kZpOa+3tCeVPMuvS OLXFc97jgLPbp0YDvRe6IIzTC/UGdfjGHXWPieFwgC3hxXU6QqyONfS42aWXDqMY OC5h6EmmaeZYOfuezkuvGL/76tCnZOX0 -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:23 2025 by rpki-client