$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json) Hash identifier: /k5YXcSxUZ/CPsrjno9MQwhJCLWH95S4SLpvK5xyG00= Subject key identifier: 37:26:9B:83:BE:9A:63:D8:6E:BB:8A:54:55:B9:B0:B3:06:AD:75:80 Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft Manifest number: 0130 Signing time: Wed 05 Nov 2025 04:44:30 +0000 Manifest this update: Wed 05 Nov 2025 04:44:29 +0000 Manifest next update: Wed 12 Nov 2025 04:44:29 +0000 Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: 3TcsLXFS9ljBM4qZYac5cR+PBP0M3xjR/GYPzlHnpwI=) 2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: nAAaBPNOT83reooBTbRysc5FUHQ0lj/e8r5J8CDIx/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Validity Not Before: Nov 5 04:44:29 2025 GMT Not After : Nov 12 04:44:29 2025 GMT Subject: CN=690ad62e-48a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:22:9c:57:3c:51:8a:50:b8:83:82:b7:11:a8: e7:19:bb:db:93:83:0e:61:11:25:e8:6a:a6:aa:18: b8:c1:50:76:31:11:22:01:2e:96:95:b1:6e:f7:38: b1:45:f0:d2:70:9d:6b:92:5f:cc:c1:05:fe:e9:40: 7a:7c:c1:89:7e:cd:83:6a:89:0b:a2:42:88:10:e1: d3:87:cb:40:4d:2a:6c:65:59:9a:52:ba:c0:21:19: c0:0e:d0:b5:e0:42:be:11:58:9c:bf:0c:9e:7f:97: ea:51:17:c4:19:50:85:51:1c:fe:38:9e:b2:ca:1a: be:75:ea:44:d6:d8:ff:25:ad:a2:fd:c3:a3:eb:9e: 2a:e6:63:be:92:7b:30:77:ec:67:1d:ba:75:f0:3a: 8b:eb:66:f8:7f:d5:e4:70:3a:ad:f9:29:f6:2e:77: b7:19:ad:1b:61:6b:9a:0d:a6:20:82:4d:a8:aa:3c: a9:8a:2e:42:3f:ac:5d:d3:78:16:26:ad:d7:dc:fc: 01:06:dd:c5:65:97:e4:6f:92:60:ec:55:be:d0:c5: 09:1c:5c:e6:56:17:97:e9:c4:65:3c:2d:24:d4:5d: c5:34:42:71:1f:34:38:18:9a:73:c8:e7:b4:0d:89: 8d:02:c7:ed:8d:70:8d:5f:c1:7a:80:78:a0:d7:eb: 7b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:26:9B:83:BE:9A:63:D8:6E:BB:8A:54:55:B9:B0:B3:06:AD:75:80 X509v3 Authority Key Identifier: keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:94:98:0d:09:37:d6:67:34:24:81:c4:51:1f:c4:04:ba:e5: 37:3f:73:e4:06:42:c7:47:c9:7b:50:66:c6:70:9c:7b:a3:51: ae:17:9c:79:88:9d:d3:68:c5:49:d1:25:04:65:90:a1:ae:21: 43:90:c0:d8:23:cd:a3:3e:47:47:04:46:c6:dc:59:c8:d2:99: 44:da:f9:2f:2c:83:3f:80:2f:3b:dc:08:f1:4d:7d:48:71:6c: e0:cf:aa:b9:52:56:49:85:37:16:1b:54:0b:e1:1f:37:b9:64: de:08:55:ca:53:cb:89:41:dc:20:4f:0b:1e:c7:df:9c:33:fc: c3:fd:ec:1f:34:29:62:e5:3e:c5:21:c5:5b:42:f7:6b:cb:ca: b3:b9:9d:04:04:cb:1d:c4:b3:70:e9:a0:79:fa:37:db:f8:fa: b5:e5:13:b0:00:00:8a:1f:8e:ba:20:71:b3:61:0c:4b:03:d8: 04:b0:8b:50:1c:5e:89:cd:aa:01:1c:43:35:18:6c:c2:68:16: f1:ce:04:87:88:e9:1c:23:52:54:c3:f9:39:75:49:84:d3:90: a8:d6:64:87:fd:42:a6:ff:8e:98:cc:50:e5:dd:84:e8:87:d6: 52:d4:d5:fd:99:e2:49:b9:5e:22:4b:77:80:c0:ef:63:72:a1: 52:22:37:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD MjBBRTUzODYwHhcNMjUxMTA1MDQ0NDI5WhcNMjUxMTEyMDQ0NDI5WjAYMRYwFAYD VQQDEw02OTBhZDYyZS00OGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6iKcVzxRilC4g4K3EajnGbvbk4MOYREl6Gqmqhi4wVB2MREiAS6WlbFu9zix RfDScJ1rkl/MwQX+6UB6fMGJfs2DaokLokKIEOHTh8tATSpsZVmaUrrAIRnADtC1 4EK+EVicvwyef5fqURfEGVCFURz+OJ6yyhq+depE1tj/Ja2i/cOj654q5mO+knsw d+xnHbp18DqL62b4f9XkcDqt+Sn2Lne3Ga0bYWuaDaYggk2oqjypii5CP6xd03gW Jq3X3PwBBt3FZZfkb5Jg7FW+0MUJHFzmVheX6cRlPC0k1F3FNEJxHzQ4GJpzyOe0 DYmNAsftjXCNX8F6gHig1+t7nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcmm4O+ mmPYbruKVFW5sLMGrXWAMB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4 RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN U1R5S19INkcxbW5DQ3VVNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAlJgNCTfWZzQkgcRRH8QEuuU3P3PkBkLHR8l7UGbGcJx7o1GuF5x5 iJ3TaMVJ0SUEZZChriFDkMDYI82jPkdHBEbG3FnI0plE2vkvLIM/gC873AjxTX1I cWzgz6q5UlZJhTcWG1QL4R83uWTeCFXKU8uJQdwgTwsex9+cM/zD/ewfNCli5T7F IcVbQvdry8qzuZ0EBMsdxLNw6aB5+jfb+Pq15ROwAACKH466IHGzYQxLA9gEsItQ HF6JzaoBHEM1GGzCaBbxzgSHiOkcI1JUw/k5dUmE05Co1mSH/UKm/46YzFDl3YTo h9ZS1NX9meJJuV4iS3eAwO9jcqFSIjf+ -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:20 2025 by rpki-client