$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft File: CKtUearwyEilFC1v5NyZFitFwzc.mft (raw, json) Hash identifier: cYceNnoxQFYwZpHHYIFRglCaSq5JFRedr+SkvDEqehY= Subject key identifier: 7D:06:2E:31:98:2B:0D:22:10:E8:0D:51:06:02:A6:D8:1D:F5:61:5D Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37 Certificate issuer: /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft Manifest number: EA Signing time: Mon 03 Nov 2025 00:36:37 +0000 Manifest this update: Mon 03 Nov 2025 00:36:36 +0000 Manifest next update: Mon 10 Nov 2025 00:36:36 +0000 Files and hashes: 1: CKtUearwyEilFC1v5NyZFitFwzc.crl (hash: Kvn+DQYlGo35K1MngHJQi77aLYRRAu/QOABGfA51qeM=) 2: 710957A8559411EFA07E1C5AC4F9AE02.roa (hash: kCmrnMtq0oO23W6srUkZmhxFZ7143rIIMei/dep36jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337 Validity Not Before: Nov 3 00:36:36 2025 GMT Not After : Nov 10 00:36:36 2025 GMT Subject: CN=6907f914-568b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:e2:b4:80:0f:99:62:20:71:67:07:44:b6: 2f:0d:5f:24:81:8e:7a:5f:06:0d:51:04:68:1a:7f: 52:40:cf:48:ae:54:ba:f8:36:95:64:e7:6e:cd:c1: 08:f7:e1:03:c2:b9:e2:d1:63:d5:b2:9b:4d:bd:43: f1:b8:98:fb:ce:ca:69:27:6b:46:53:c1:5c:53:0e: 42:40:7c:6d:8c:51:68:8e:e8:79:a4:1f:d7:81:94: c2:b3:14:89:39:54:ce:51:3c:bc:e3:12:18:4a:ee: 5f:5d:c1:17:68:1b:b7:5a:20:7b:dc:e3:3e:27:aa: fd:3a:00:1f:eb:29:d6:67:dc:74:a6:50:30:bb:45: 02:d6:eb:0a:bc:2c:0f:8a:2a:7f:7e:df:2b:d8:e9: b9:60:6c:56:bd:21:00:9b:8e:0d:10:c6:80:85:bf: 95:3d:c8:0c:3b:64:8a:f1:2a:00:b4:55:b7:f5:ec: 51:9e:13:6b:c2:47:08:a4:5a:a8:d4:bc:bf:6e:ea: ef:8e:f3:41:9e:d2:42:b1:0f:df:2f:48:02:59:fc: 0a:1c:c5:b7:f3:ca:71:28:11:f4:e5:7e:ad:62:96: 25:bf:8f:44:d1:61:ae:8c:e7:ab:64:5b:7c:b6:b3: e3:a8:19:91:9e:94:81:1b:5a:78:0d:52:c1:c1:5f: 34:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:06:2E:31:98:2B:0D:22:10:E8:0D:51:06:02:A6:D8:1D:F5:61:5D X509v3 Authority Key Identifier: keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:3d:b8:1c:a2:5e:6f:e7:50:f0:33:a3:95:24:c3:a4:4a:d1: f9:f8:af:1e:6c:dd:9f:26:72:93:15:70:7c:12:08:87:01:9d: c7:49:21:2b:0b:91:6e:07:81:6e:16:dd:fd:3c:5d:c8:e1:89: 1f:ac:ab:27:1a:4d:ac:10:2d:d6:28:f0:71:e9:c6:1e:b8:96: e0:c8:d0:24:b5:0f:06:74:32:0a:d6:f9:0f:9f:dc:6c:34:23: 8c:38:7c:b6:f7:cb:91:4a:a3:99:ad:20:eb:64:84:c4:bf:2d: 19:31:01:3a:e3:ea:47:a2:fd:9e:0e:59:93:3a:b6:14:6f:7a: 34:05:6d:09:2c:7f:5e:c8:eb:5a:f6:ee:c2:5c:d4:9b:c1:4f: d1:72:d4:83:82:1d:d5:9b:3f:03:41:e1:29:57:90:40:4c:53: 7e:3e:7d:90:96:6f:a1:ae:70:84:ca:c8:83:1e:ac:0c:f7:c9: f7:a2:df:77:ae:cd:ab:d0:8a:3d:74:16:dd:d1:77:4c:e0:c7: 8d:43:01:49:29:72:8f:f0:4b:d7:ee:ad:49:bc:09:20:ec:4a: 86:08:c2:f5:27:48:12:98:a3:96:67:16:dd:26:de:df:0e:67: e2:b6:f9:27:b7:55:e1:52:70:a4:ca:b3:b6:9b:5c:7e:9b:84: 6a:cd:65:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDA4QUI1NDc5QUFGMEM4NDhBNTE0MkQ2RkU0REM5OTE2 MkI0NUMzMzcwHhcNMjUxMTAzMDAzNjM2WhcNMjUxMTEwMDAzNjM2WjAYMRYwFAYD VQQDEw02OTA3ZjkxNC01NjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0DitIAPmWIgcWcHRLYvDV8kgY56XwYNUQRoGn9SQM9IrlS6+DaVZOduzcEI 9+EDwrni0WPVsptNvUPxuJj7zsppJ2tGU8FcUw5CQHxtjFFojuh5pB/XgZTCsxSJ OVTOUTy84xIYSu5fXcEXaBu3WiB73OM+J6r9OgAf6ynWZ9x0plAwu0UC1usKvCwP iip/ft8r2Om5YGxWvSEAm44NEMaAhb+VPcgMO2SK8SoAtFW39exRnhNrwkcIpFqo 1Ly/burvjvNBntJCsQ/fL0gCWfwKHMW388pxKBH05X6tYpYlv49E0WGujOerZFt8 trPjqBmRnpSBG1p4DVLBwV80tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0GLjGY Kw0iEOgNUQYCptgd9WFdMB8GA1UdIwQYMBaAFAirVHmq8MhIpRQtb+TcmRYrRcM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy9BNEMxNDYyODU1 NDkxMUVGODJCNUQzNkZDNEY5QUUwMi9DS3RVZWFyd3lFaWxGQzF2NU55WkZpdEZ3 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NLdFVlYXJ3eUVpbEZDMXY1TnlaRml0Rnd6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy9BNEMxNDYyODU1NDkxMUVGODJCNUQzNkZDNEY5QUUwMi9DS3RVZWFyd3lF aWxGQzF2NU55WkZpdEZ3emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwPbgcol5v51DwM6OVJMOkStH5+K8ebN2fJnKTFXB8EgiHAZ3HSSEr C5FuB4FuFt39PF3I4YkfrKsnGk2sEC3WKPBx6cYeuJbgyNAktQ8GdDIK1vkPn9xs NCOMOHy298uRSqOZrSDrZITEvy0ZMQE64+pHov2eDlmTOrYUb3o0BW0JLH9eyOta 9u7CXNSbwU/RctSDgh3Vmz8DQeEpV5BATFN+Pn2Qlm+hrnCEysiDHqwM98n3ot93 rs2r0Io9dBbd0XdM4MeNQwFJKXKP8EvX7q1JvAkg7EqGCML1J0gSmKOWZxbdJt7f Dmfitvknt1XhUnCkyrO2m1x+m4RqzWUi -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:37 2025 by rpki-client