$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: q8RQvfe4nWDhRPVyMj5+6FolZFln7OBmnOwfx5fyJdA= Subject key identifier: BC:62:B7:49:D4:76:B0:66:97:98:20:07:83:F3:85:41:DD:8A:F4:2E Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0BE6 Signing time: Tue 04 Nov 2025 18:58:22 +0000 Manifest this update: Tue 04 Nov 2025 18:58:21 +0000 Manifest next update: Tue 11 Nov 2025 18:58:21 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: AnS7nImfGq6Qj2C8MtNS2KIkA0nFjQm63EeYbU2xFT4=) 2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: kbjVSRJWVNsKP886UTdCXje46K3vQ/OgBysCSuexrdk=) 3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 0VsxW37CUzW4AoNDh7cYqP2zuBQmSz8Y4/jKr2zDwys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Nov 4 18:58:21 2025 GMT Not After : Nov 11 18:58:21 2025 GMT Subject: CN=690a4ccd-4f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:a4:12:a1:84:87:ad:c6:1d:51:f6:48:f7: db:1f:67:36:9f:d6:c5:88:d9:46:81:6a:f0:84:1e: 6f:e4:c2:de:6f:2d:1d:cd:e1:b5:b9:dd:dd:a6:0f: 25:18:f7:c5:58:2f:b7:80:8f:88:ef:1b:cc:eb:0b: bd:8e:9a:89:02:ab:c3:83:3f:8c:74:b9:f0:69:18: f7:6a:aa:19:6d:55:1e:ef:8e:33:92:c4:f7:67:42: d0:86:99:7c:7d:b4:d5:e0:e3:63:15:36:e8:c2:ed: 30:26:8f:e9:0c:1f:c1:33:00:3b:f0:ad:69:66:d9: 32:99:bd:2b:0e:ae:c0:f9:ee:44:53:6e:b8:45:97: 21:39:a8:f5:64:7a:2e:ec:c9:17:02:66:92:e1:34: ed:47:5c:57:ee:d6:cc:e7:d1:f4:70:e2:e2:58:64: 35:58:4e:37:8c:da:f7:cc:34:73:2d:d7:6a:89:8c: 2c:7b:bb:d5:46:c4:be:f4:f2:6b:e2:fa:9f:d2:4c: ed:23:21:1f:1d:e6:1b:be:03:0e:70:8c:e1:cd:8d: f6:e0:3a:7e:e5:56:85:e7:ee:6f:9d:4b:c7:2a:b5: 80:36:10:8d:6f:ff:e6:2e:e7:de:f9:89:4a:31:a1: f7:34:29:08:63:98:ba:e8:f9:7e:36:ed:c3:5e:6a: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:62:B7:49:D4:76:B0:66:97:98:20:07:83:F3:85:41:DD:8A:F4:2E X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:0e:d3:8f:f6:e6:b6:1e:4b:3c:47:0f:11:79:f5:d0:c0:42: 9b:54:e7:47:78:84:24:de:e0:cb:39:b7:42:00:d9:d0:6d:59: 69:dc:96:90:18:d6:9a:e7:c5:2e:ed:a8:8f:d9:e2:bc:49:7d: 8e:36:1b:fd:0f:3a:3e:99:9a:e7:77:9e:da:e5:70:28:f4:1a: 96:55:cb:d1:7f:ca:96:f0:20:b4:c0:dd:b1:25:d5:a9:45:07: f8:67:56:85:c0:b9:2c:0c:83:ea:45:2b:e6:37:be:02:25:ac: df:ac:5e:65:a1:c8:80:02:5d:2a:cc:14:14:b7:f7:17:8e:e1: 69:5b:d9:61:67:f9:16:9b:a4:06:ac:fb:f3:1e:66:67:3b:6f: 8b:ba:b8:23:eb:07:d1:cd:95:a1:97:b8:d3:cd:7c:f9:af:a5: a4:52:ca:2e:a3:8b:01:ad:48:ea:92:41:f1:27:fd:d1:42:aa: e1:ac:51:5f:85:52:c9:38:87:dd:7e:af:71:52:e4:37:2d:d9: be:14:76:4e:f7:d9:e9:93:43:c6:32:7d:ee:68:97:ad:47:e4: 53:58:c3:cb:57:21:93:3f:bd:7a:02:da:83:6c:ea:fa:90:42: ab:5a:c2:1c:6f:0c:45:64:2e:d6:0b:66:e4:05:3d:d5:eb:cb: c9:74:21:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjUxMTA0MTg1ODIxWhcNMjUxMTExMTg1ODIxWjAYMRYwFAYD VQQDEw02OTBhNGNjZC00ZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvESkEqGEh63GHVH2SPfbH2c2n9bFiNlGgWrwhB5v5MLeby0dzeG1ud3dpg8l GPfFWC+3gI+I7xvM6wu9jpqJAqvDgz+MdLnwaRj3aqoZbVUe744zksT3Z0LQhpl8 fbTV4ONjFTbowu0wJo/pDB/BMwA78K1pZtkymb0rDq7A+e5EU264RZchOaj1ZHou 7MkXAmaS4TTtR1xX7tbM59H0cOLiWGQ1WE43jNr3zDRzLddqiYwse7vVRsS+9PJr 4vqf0kztIyEfHeYbvgMOcIzhzY324Dp+5VaF5+5vnUvHKrWANhCNb//mLufe+YlK MaH3NCkIY5i66Pl+Nu3DXmql3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxit0nU drBml5ggB4PzhUHdivQuMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHDtOP9ua2Hks8Rw8RefXQwEKbVOdHeIQk3uDLObdCANnQbVlp3JaQ GNaa58Uu7aiP2eK8SX2ONhv9Dzo+mZrnd57a5XAo9BqWVcvRf8qW8CC0wN2xJdWp RQf4Z1aFwLksDIPqRSvmN74CJazfrF5lociAAl0qzBQUt/cXjuFpW9lhZ/kWm6QG rPvzHmZnO2+Lurgj6wfRzZWhl7jTzXz5r6WkUsouo4sBrUjqkkHxJ/3RQqrhrFFf hVLJOIfdfq9xUuQ3Ldm+FHZO99npk0PGMn3uaJetR+RTWMPLVyGTP716AtqDbOr6 kEKrWsIcbwxFZC7WC2bkBT3V68vJdCF3 -----END CERTIFICATE-----Generated at Wed Nov 5 08:03:12 2025 by rpki-client