$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json) Hash identifier: RSYvaFo9OJbMkIx7sxg9t+I9kfEhJkRNyc1sSAtbAjw= Subject key identifier: E3:0F:38:22:53:9D:CD:1F:BD:5A:A0:5A:54:94:57:8E:FA:33:2A:D3 Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft Manifest number: E7 Signing time: Wed 05 Nov 2025 05:33:51 +0000 Manifest this update: Wed 05 Nov 2025 05:33:51 +0000 Manifest next update: Wed 12 Nov 2025 05:33:51 +0000 Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: cDfwX+kPlyAGvuxtLc1lCYG66rfvT2EDsa/PxZox9I0=) 2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: UXnC/XoVUkLq/3kEuo54UNzjcpY8CVmcAHE/kWC3Jds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Validity Not Before: Nov 5 05:33:51 2025 GMT Not After : Nov 12 05:33:51 2025 GMT Subject: CN=690ae1bf-034a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:af:32:97:98:8a:b2:e6:69:68:0f:8b:0e:57: b6:7d:cb:ca:50:4a:e3:6e:94:cb:c6:a7:97:9b:53: 46:3b:0e:58:96:c3:6e:31:e9:f2:e6:7a:71:12:34: 03:99:09:43:5d:2e:a7:ea:45:d1:8b:9e:f5:16:df: eb:22:1b:ac:22:d7:4c:55:3d:77:1d:23:59:c9:ae: 18:e3:3e:e1:78:97:64:12:18:76:83:27:89:31:99: 72:60:06:01:ea:d2:b1:27:26:08:52:89:3b:63:aa: d1:a3:e5:34:66:c1:3e:d8:30:a8:62:f8:5e:b6:fe: 08:20:a4:a1:76:94:f1:f3:b6:86:ab:53:56:7f:4a: 86:18:eb:cb:94:d9:b1:d0:b1:0c:a7:a2:92:3f:cf: e0:ed:64:3b:ae:5f:aa:cd:d1:bc:43:19:29:c9:91: db:90:6b:08:6b:1c:38:ad:1a:76:d6:9e:95:d5:5a: 77:56:75:32:a5:b0:a2:1b:ae:5c:ac:4f:ac:59:c7: 33:87:ab:a6:cf:67:0a:4b:bc:fb:82:31:7a:d8:8c: bf:4c:46:41:4b:b8:87:27:6e:57:c8:92:7c:9e:91: 0d:7a:b3:e4:bf:e7:f8:cb:27:69:58:35:ea:b1:eb: 77:95:a9:72:75:ee:d6:8e:fa:41:04:60:a8:6a:27: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0F:38:22:53:9D:CD:1F:BD:5A:A0:5A:54:94:57:8E:FA:33:2A:D3 X509v3 Authority Key Identifier: keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:87:65:65:01:95:4e:46:a7:1b:20:a9:a3:60:70:c3:af:09: e7:4b:5e:e6:88:0b:de:28:c9:17:2c:85:08:fb:0e:01:27:18: dc:8d:c8:0b:e7:e2:8c:b9:bb:26:5f:90:87:ad:2e:d0:01:9f: eb:82:b4:6e:bc:3c:74:a0:b0:44:e0:8a:04:fa:2e:66:45:6c: 97:b7:31:06:6b:b7:da:bc:dc:5d:b6:94:1b:b2:ce:4f:69:08: c8:c6:6b:16:e4:0e:42:b1:db:be:21:43:25:84:14:cf:e1:fa: cf:40:fe:68:e8:b3:6c:04:43:01:b7:7a:8c:69:63:54:71:28: 3f:2c:8a:a4:d5:ac:6e:3a:67:d9:f6:ba:64:bd:94:2e:69:4e: a0:27:85:6d:01:db:3e:70:18:1c:87:27:1b:19:35:25:d6:d2: f2:5a:50:11:ce:b1:d1:c9:d5:22:2f:9f:9b:4f:89:de:59:e4: 8a:07:12:3e:34:cd:80:0f:81:b6:93:6c:ce:70:1c:d9:20:e1: dd:18:b3:91:57:8a:ad:41:97:7a:a3:6c:9a:24:f5:30:35:b6: fc:a1:75:8f:1d:49:a7:f7:79:97:35:67:a6:d5:3e:c9:ce:8a: 60:fe:e4:61:14:6e:20:c0:c6:b6:d2:c0:25:90:a9:ab:49:a5: 70:22:ac:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDExNkYwQTJBNkE0QjkyNDJENzdBMjUwQjcxNzAwODE1 RDI5OEREQjkwHhcNMjUxMTA1MDUzMzUxWhcNMjUxMTEyMDUzMzUxWjAYMRYwFAYD VQQDEw02OTBhZTFiZi0wMzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2K8yl5iKsuZpaA+LDle2fcvKUErjbpTLxqeXm1NGOw5YlsNuMeny5npxEjQD mQlDXS6n6kXRi571Ft/rIhusItdMVT13HSNZya4Y4z7heJdkEhh2gyeJMZlyYAYB 6tKxJyYIUok7Y6rRo+U0ZsE+2DCoYvhetv4IIKShdpTx87aGq1NWf0qGGOvLlNmx 0LEMp6KSP8/g7WQ7rl+qzdG8QxkpyZHbkGsIaxw4rRp21p6V1Vp3VnUypbCiG65c rE+sWcczh6umz2cKS7z7gjF62Iy/TEZBS7iHJ25XyJJ8npENerPkv+f4yydpWDXq set3lalyde7WjvpBBGCoaif3IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMPOCJT nc0fvVqgWlSUV476MyrTMB8GA1UdIwQYMBaAFBFvCipqS5JC13olC3FwCBXSmN25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GNTMxRURFNDVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtrTFhlaVVMY1hBSUZkS1kz YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VXOEtLbXBMa2tMWGVpVUxjWEFJRmRLWTNiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GNTMxRURFNDVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtr TFhlaVVMY1hBSUZkS1kzYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADh2VlAZVORqcbIKmjYHDDrwnnS17miAveKMkXLIUI+w4BJxjcjcgL 5+KMubsmX5CHrS7QAZ/rgrRuvDx0oLBE4IoE+i5mRWyXtzEGa7favNxdtpQbss5P aQjIxmsW5A5Csdu+IUMlhBTP4frPQP5o6LNsBEMBt3qMaWNUcSg/LIqk1axuOmfZ 9rpkvZQuaU6gJ4VtAds+cBgchycbGTUl1tLyWlARzrHRydUiL5+bT4neWeSKBxI+ NM2AD4G2k2zOcBzZIOHdGLORV4qtQZd6o2yaJPUwNbb8oXWPHUmn93mXNWem1T7J zopg/uRhFG4gwMa20sAlkKmrSaVwIqzc -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:31 2025 by rpki-client