$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft File: eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json) Hash identifier: KFHMHKSMTI5akXcA3PXAenpYJhSZUqGSn6N59K5itI8= Subject key identifier: 48:79:E3:81:51:81:A1:61:E5:75:EC:57:DE:21:90:17:88:6F:36:A9 Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 Certificate issuer: /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft Manifest number: B9 Signing time: Wed 05 Nov 2025 06:21:16 +0000 Manifest this update: Wed 05 Nov 2025 06:21:16 +0000 Manifest next update: Wed 12 Nov 2025 06:21:16 +0000 Files and hashes: 1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: +xPWNgWV7awPtaI7qhpZIrtrHQcnkdQnWxKXhDcbvmg=) 2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: Wt4oaLtuBJ4fgLPX/SsvtzixRgQ01RXrk2kes3e+Yok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Validity Not Before: Nov 5 06:21:16 2025 GMT Not After : Nov 12 06:21:16 2025 GMT Subject: CN=690aecdc-3426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:01:10:e3:62:a5:26:64:51:09:76:1a:72: 97:26:bf:d1:66:34:e3:9c:bb:a2:d1:83:6f:b4:d9: 3a:11:21:de:ab:61:b9:83:b9:63:43:9a:e3:78:63: 5e:69:42:1c:1c:bf:4d:52:a2:bd:2f:9c:34:46:cf: a6:73:e4:84:b1:ae:89:ce:30:28:37:15:91:c0:35: 7e:27:10:5b:62:0f:2c:2d:b3:18:ff:0c:62:b7:e7: 85:83:b6:d3:18:cd:94:53:77:49:84:0a:a8:da:af: ca:93:cb:81:96:db:ca:6a:ac:b5:35:20:b3:f6:b8: e1:5d:10:3b:91:b2:ee:05:e5:1d:0e:65:9e:59:29: fb:d0:e2:f2:3a:be:59:c1:5e:5f:a4:de:5a:dd:5c: 93:71:d5:66:ce:e4:c2:4e:62:3d:a5:0a:c5:97:32: 0d:ab:f0:95:ac:6d:da:fb:f0:69:a0:88:f0:40:9d: b2:1c:f3:5d:14:04:11:f1:0b:f6:c9:64:f1:fc:14: be:02:51:20:fe:fc:f7:df:96:e2:eb:f7:a9:12:92: b1:f6:e9:e4:59:f6:35:78:d6:66:11:7e:ab:e9:92: a5:17:0f:7d:e9:ec:71:95:94:f1:0e:a3:a2:3a:e1: da:5d:bc:90:d5:bf:9e:6b:dd:ae:0e:65:4d:90:1e: a0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:79:E3:81:51:81:A1:61:E5:75:EC:57:DE:21:90:17:88:6F:36:A9 X509v3 Authority Key Identifier: keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bb:de:d8:82:b3:56:28:2f:bb:ef:1e:84:fa:3b:02:29:7d: 9d:4e:0d:8d:ad:e3:23:f5:12:30:61:8c:e9:ad:ae:8d:8d:ad: 87:b0:2d:54:a8:2e:c3:83:5a:06:e6:ee:ab:05:21:86:4d:e7: 75:54:72:0d:f1:8e:b7:58:65:e5:17:9a:7e:ad:72:cf:01:8b: 3c:8c:f9:c1:f5:56:bd:18:d8:f7:05:31:07:7d:af:cb:c4:b2: c5:cf:a9:e2:9d:2c:8d:22:26:5a:36:e1:c7:d5:14:16:42:78: 75:25:5f:6e:4c:e0:69:55:06:ff:2f:dd:7d:45:b3:e5:cd:fa: b2:cf:ec:c0:a3:99:5e:7a:c8:5a:50:9d:f1:59:b2:24:63:a5: a3:fa:c5:0e:b9:f6:23:53:cc:aa:ab:6c:3d:5f:16:9a:16:2f: fb:0c:16:3c:60:e8:c9:d6:20:5c:68:2b:6b:8e:49:d3:e1:8d: 3b:f3:27:e3:c2:48:ef:ca:cf:ab:87:b5:fe:6c:ea:44:f4:c3: 89:64:37:7e:ef:67:0a:91:7d:32:fc:cd:4f:0f:fe:fd:17:07: 29:f4:15:8d:63:4e:08:62:5f:04:a8:fe:d2:1f:b4:78:87:c8: 5c:a4:af:80:2e:88:55:df:43:4e:15:76:51:91:6d:59:8f:c3: 8a:5e:e1:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKDc5RTkyM0Q1MDY5NTdGRDMwREQyNkQ2Mjc5M0I5QjQw RjhGRTg5NTYwHhcNMjUxMTA1MDYyMTE2WhcNMjUxMTEyMDYyMTE2WjAYMRYwFAYD VQQDEw02OTBhZWNkYy0zNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NUBEONipSZkUQl2GnKXJr/RZjTjnLui0YNvtNk6ESHeq2G5g7ljQ5rjeGNe aUIcHL9NUqK9L5w0Rs+mc+SEsa6JzjAoNxWRwDV+JxBbYg8sLbMY/wxit+eFg7bT GM2UU3dJhAqo2q/Kk8uBltvKaqy1NSCz9rjhXRA7kbLuBeUdDmWeWSn70OLyOr5Z wV5fpN5a3VyTcdVmzuTCTmI9pQrFlzINq/CVrG3a+/BpoIjwQJ2yHPNdFAQR8Qv2 yWTx/BS+AlEg/vz335bi6/epEpKx9unkWfY1eNZmEX6r6ZKlFw996exxlZTxDqOi OuHaXbyQ1b+ea92uDmVNkB6giwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEh544FR gaFh5XXsV94hkBeIbzapMB8GA1UdIwQYMBaAFHnpI9UGlX/TDdJtYnk7m0D4/olW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9DNzNBMzg5NEEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi9lZWtqMVFhVmY5TU4wbTFpZVR1YlFQai1p VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Vla2oxUWFWZjlNTjBtMWllVHViUVBqLWlWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9DNzNBMzg5NEEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi9lZWtqMVFhVmY5 TU4wbTFpZVR1YlFQai1pVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvu97YgrNWKC+77x6E+jsCKX2dTg2NreMj9RIwYYzpra6Nja2HsC1U qC7Dg1oG5u6rBSGGTed1VHIN8Y63WGXlF5p+rXLPAYs8jPnB9Va9GNj3BTEHfa/L xLLFz6ninSyNIiZaNuHH1RQWQnh1JV9uTOBpVQb/L919RbPlzfqyz+zAo5leesha UJ3xWbIkY6Wj+sUOufYjU8yqq2w9XxaaFi/7DBY8YOjJ1iBcaCtrjknT4Y078yfj wkjvys+rh7X+bOpE9MOJZDd+72cKkX0y/M1PD/79Fwcp9BWNY04IYl8EqP7SH7R4 h8hcpK+ALohV30NOFXZRkW1Zj8OKXuFG -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:15 2025 by rpki-client