$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft File: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json) Hash identifier: YZM6pOz2o4Zt9Bf7QkNDobvoXNvvF1ojup1UHmM5AKE= Subject key identifier: 17:AF:D2:09:CB:65:E6:51:49:85:DF:D5:ED:77:F8:6F:CB:C9:52:F7 Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A Certificate issuer: /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft Manifest number: 01BC Signing time: Wed 05 Nov 2025 03:08:25 +0000 Manifest this update: Wed 05 Nov 2025 03:08:24 +0000 Manifest next update: Wed 12 Nov 2025 03:08:24 +0000 Files and hashes: 1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: sYCcRGjlZ54uVgj8IWZEqZhKh/HBKvrc6LEpbrmREcA=) 2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: 0vwZnVq6+4c6D/8J1aiiHDqlou0UwAPkCDM39Wg9hHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A Validity Not Before: Nov 5 03:08:24 2025 GMT Not After : Nov 12 03:08:24 2025 GMT Subject: CN=690abfa9-af7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:83:93:8a:e4:e9:b8:2e:d0:bd:d6:73:c0: ac:41:3e:0c:a1:ad:94:6b:7f:49:53:80:0e:ea:41: 9f:f6:eb:d8:48:da:a4:dc:b2:85:f9:af:d6:95:0e: 3f:9a:d1:94:92:a9:a0:9c:7a:cf:8c:ad:3f:9d:52: 16:8b:2d:8a:19:32:da:61:f0:fd:41:dd:83:b0:72: 2c:ac:40:a7:1b:2c:fc:7d:30:d1:3a:9a:88:97:a4: bc:bf:c2:ee:58:b2:1f:29:e5:26:e7:1f:7a:5d:b3: 87:17:e4:40:97:c3:cc:34:c8:d4:fd:b2:bf:7c:e8: 01:49:48:69:86:9b:b4:ab:a2:75:b4:9c:17:7e:0a: 5f:44:8c:5a:b6:2d:61:fa:f4:8c:ed:7a:93:42:f8: c1:fa:98:c1:aa:f5:b0:82:71:3a:a0:47:5c:20:6a: ed:ee:ab:ff:9d:f3:74:7f:1b:c5:09:9e:8c:b3:04: 25:43:27:f5:7b:0c:94:c0:2e:08:b4:53:3e:43:da: ac:5a:88:87:25:ca:a9:89:dc:a3:cf:a4:6f:c6:bf: e2:a3:b4:42:50:44:28:bf:91:44:63:b7:b2:27:e2: 02:ed:a4:5c:ef:55:2c:5a:67:a7:84:b9:9e:37:b6: 2a:2b:45:bc:a3:13:74:ee:2f:3f:12:e5:bf:3b:1c: 54:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:D2:09:CB:65:E6:51:49:85:DF:D5:ED:77:F8:6F:CB:C9:52:F7 X509v3 Authority Key Identifier: keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:48:1e:f4:ca:72:cd:d3:f8:db:53:47:6e:ac:dc:07:b6:3d: 09:75:7f:d7:b7:5e:9b:9b:d3:0b:c0:3a:e2:1b:9a:4a:3c:4f: c3:a6:8c:b8:d6:a8:32:b7:5b:8a:b6:dd:9c:0c:10:56:d8:69: b2:35:1d:5e:d2:8b:fe:67:f1:e3:69:7d:f1:48:6e:e3:4b:32: 29:b5:35:9c:0c:80:b6:05:41:0b:ef:99:2f:2b:89:40:85:4e: ca:34:c0:63:2c:b8:e1:66:96:f5:38:b2:ba:c3:c8:7a:ac:f4: 14:22:69:0a:f2:b5:b5:95:f0:09:96:62:fe:dd:82:65:29:ea: f5:e6:06:bb:90:8a:95:b8:cf:c2:ac:c8:47:02:f2:70:5f:03: ca:f7:f3:6b:14:fa:02:71:4d:ba:b7:7f:1e:5e:f6:5c:36:bb: a5:5d:20:74:ec:72:4a:c4:d6:46:a0:e7:9d:28:7c:25:d4:b2: 1a:df:02:5a:aa:25:cc:c7:de:3d:ac:35:3b:49:e9:1c:4a:fb: 08:84:c1:6f:82:74:8a:6f:c6:cc:d5:57:90:2b:12:6c:10:a6: df:79:2c:da:27:fd:70:2b:87:f0:bc:74:dd:67:6b:5d:00:e6: 56:5d:b1:4f:12:92:be:e4:8a:d4:b3:9b:9d:83:20:ab:bf:a5: 72:79:28:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGRjIxMTAvBgNVBAUTKDc5NTI4MjVEMkUxOEZGMDYxQjlCMzZCRDY2MzQyMTJE MkRGMUJGM0EwHhcNMjUxMTA1MDMwODI0WhcNMjUxMTEyMDMwODI0WjAYMRYwFAYD VQQDEw02OTBhYmZhOS1hZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowKDk4rk6bgu0L3Wc8CsQT4Moa2Ua39JU4AO6kGf9uvYSNqk3LKF+a/WlQ4/ mtGUkqmgnHrPjK0/nVIWiy2KGTLaYfD9Qd2DsHIsrECnGyz8fTDROpqIl6S8v8Lu WLIfKeUm5x96XbOHF+RAl8PMNMjU/bK/fOgBSUhphpu0q6J1tJwXfgpfRIxati1h +vSM7XqTQvjB+pjBqvWwgnE6oEdcIGrt7qv/nfN0fxvFCZ6MswQlQyf1ewyUwC4I tFM+Q9qsWoiHJcqpidyjz6Rvxr/io7RCUEQov5FEY7eyJ+IC7aRc71UsWmenhLme N7YqK0W8oxN07i8/EuW/OxxUrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBev0gnL ZeZRSYXf1e13+G/LyVL3MB8GA1UdIwQYMBaAFHlSgl0uGP8GG5s2vWY0IS0t8b86 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUZGMi85RTRCQTM0RTBG MzkxMUVFQUVDRjU2NjNDNEY5QUUwMi9lVktDWFM0WV93WWJtemE5WmpRaExTM3h2 em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VWS0NYUzRZX3dZYm16YTlaalFoTFMzeHZ6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUZGMi85RTRCQTM0RTBGMzkxMUVFQUVDRjU2NjNDNEY5QUUwMi9lVktDWFM0WV93 WWJtemE5WmpRaExTM3h2em8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCSB70ynLN0/jbU0durNwHtj0JdX/Xt16bm9MLwDriG5pKPE/Dpoy4 1qgyt1uKtt2cDBBW2GmyNR1e0ov+Z/HjaX3xSG7jSzIptTWcDIC2BUEL75kvK4lA hU7KNMBjLLjhZpb1OLK6w8h6rPQUImkK8rW1lfAJlmL+3YJlKer15ga7kIqVuM/C rMhHAvJwXwPK9/NrFPoCcU26t38eXvZcNrulXSB07HJKxNZGoOedKHwl1LIa3wJa qiXMx949rDU7SekcSvsIhMFvgnSKb8bM1VeQKxJsEKbfeSzaJ/1wK4fwvHTdZ2td AOZWXbFPEpK+5IrUs5udgyCrv6VyeShC -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:01 2025 by rpki-client