$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: W3JrDQbNhQ3LW+csZMA2jDZJESPEqup+2ITBIf1Fjng= Subject key identifier: AE:2A:7B:50:71:F8:53:82:E5:FB:F1:4A:38:BE:9F:DD:64:D3:2F:A3 Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 06F6 Signing time: Sun 02 Nov 2025 23:08:57 +0000 Manifest this update: Sun 02 Nov 2025 23:08:56 +0000 Manifest next update: Sun 09 Nov 2025 23:08:56 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: 4CHZRKN/WNgJTC/lnSHzAGL7s1ZUK4T7fgWqyK7mEsg=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: HpV9alDLFaENoEQRBDM1U8HrLENNv7Hd/Jy118wd7FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Nov 2 23:08:56 2025 GMT Not After : Nov 9 23:08:56 2025 GMT Subject: CN=6907e488-9e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:27:9a:62:5e:fc:bd:ef:39:7f:ab:f0:06: 89:bb:51:2e:bf:91:65:fb:3a:34:7e:a7:45:05:a9: 83:96:7f:e2:4f:93:aa:30:ac:43:d7:7b:36:a9:08: 38:a5:13:33:2a:3a:7c:22:75:58:f7:69:85:96:03: 2f:e0:3d:23:fe:04:f1:7d:d4:a1:40:b5:2a:71:07: a2:e1:4a:9a:eb:ae:75:88:71:13:8e:3e:f6:db:14: 4b:48:26:19:f6:8e:b0:9e:58:47:da:07:49:70:3e: bc:99:1a:50:53:04:7c:25:c7:e5:21:77:8a:7b:40: 2e:48:4d:96:8e:9e:98:82:f3:ed:c7:83:6a:c9:29: b3:cb:c8:cd:1b:16:b8:3c:3c:29:24:99:3a:91:15: 8b:8a:0a:04:3b:b2:36:d7:4b:5a:08:fc:56:01:5b: f4:9e:7e:4b:80:ca:2e:48:b8:82:40:d6:58:da:ac: 3f:cd:bd:b2:f0:5c:6f:8e:79:ba:f8:7e:06:10:7e: ae:50:dd:e8:02:30:9a:bd:30:10:e3:cb:51:9a:64: d1:44:cc:a0:48:b4:58:d8:50:cb:dc:77:1d:01:a4: 3c:b6:3d:37:bc:63:4e:2c:69:03:f4:13:8a:5f:9b: 8b:93:a0:5f:46:f5:e7:ef:f3:b7:41:64:48:9c:a6: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2A:7B:50:71:F8:53:82:E5:FB:F1:4A:38:BE:9F:DD:64:D3:2F:A3 X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c5:b5:43:3d:6b:f5:e3:5d:68:f4:e3:15:21:25:ac:93:43: c5:37:33:3b:60:e2:d6:dc:4d:db:50:db:db:23:1c:d7:ca:86: de:b7:73:94:62:8a:d1:ba:85:f2:ae:78:af:aa:bb:7e:4c:1e: c6:a9:72:e4:f9:78:56:62:20:c7:60:9a:69:75:35:6a:8f:a9: ab:37:27:2a:ca:e6:d7:02:55:58:98:6c:44:31:cf:c2:36:73: 05:0f:ca:cf:72:cc:2c:55:01:de:f7:58:ab:63:08:31:cf:e2: f7:6a:34:22:42:f4:2b:5e:e8:c3:23:7e:58:e3:09:cf:ad:88: 29:58:04:65:90:a0:12:51:08:c3:c9:76:ac:81:59:58:84:cd: 62:38:c2:86:58:00:3c:bf:b5:1b:a3:31:ac:65:69:6f:05:91: 2d:bc:83:ba:4e:82:05:50:0d:78:87:8b:e4:76:44:cf:97:84: ef:91:72:c6:f8:b2:f3:5d:2e:ee:46:26:78:a5:97:4f:e8:68: 39:d2:92:d7:c3:80:a5:96:5f:08:f9:5f:6d:80:ff:01:7c:c1: f1:e0:f3:f2:df:5b:07:cf:8e:86:0e:d6:4e:b4:0b:27:23:d4: 0a:15:96:d5:1a:e8:a9:7b:c4:93:e0:c9:08:dc:1a:b1:a7:58: 32:f0:83:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz M0UwMkMwMTkwHhcNMjUxMTAyMjMwODU2WhcNMjUxMTA5MjMwODU2WjAYMRYwFAYD VQQDEw02OTA3ZTQ4OC05ZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxcnmmJe/L3vOX+r8AaJu1Euv5Fl+zo0fqdFBamDln/iT5OqMKxD13s2qQg4 pRMzKjp8InVY92mFlgMv4D0j/gTxfdShQLUqcQei4Uqa6651iHETjj722xRLSCYZ 9o6wnlhH2gdJcD68mRpQUwR8JcflIXeKe0AuSE2Wjp6YgvPtx4NqySmzy8jNGxa4 PDwpJJk6kRWLigoEO7I210taCPxWAVv0nn5LgMouSLiCQNZY2qw/zb2y8Fxvjnm6 +H4GEH6uUN3oAjCavTAQ48tRmmTRRMygSLRY2FDL3HcdAaQ8tj03vGNOLGkD9BOK X5uLk6BfRvXn7/O3QWRInKbapwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4qe1Bx +FOC5fvxSji+n91k0y+jMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3 QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu cWZJYlRFLWd5R1l6NEN3QmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClxbVDPWv1411o9OMVISWsk0PFNzM7YOLW3E3bUNvbIxzXyobet3OU YorRuoXyrnivqrt+TB7GqXLk+XhWYiDHYJppdTVqj6mrNycqyubXAlVYmGxEMc/C NnMFD8rPcswsVQHe91irYwgxz+L3ajQiQvQrXujDI35Y4wnPrYgpWARlkKASUQjD yXasgVlYhM1iOMKGWAA8v7UbozGsZWlvBZEtvIO6ToIFUA14h4vkdkTPl4TvkXLG +LLzXS7uRiZ4pZdP6Gg50pLXw4Clll8I+V9tgP8BfMHx4PPy31sHz46GDtZOtAsn I9QKFZbVGuipe8ST4MkI3Bqxp1gy8IO8 -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:49 2025 by rpki-client