$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft File: a1eqjwdnrM-oLNKqaesREse3fPw.mft (raw, json) Hash identifier: 1hy/6l3LuxkWI5okP5OeOV7q5OXJnRX/a8hV4/9dcFE= Subject key identifier: D5:58:08:64:75:17:7C:0B:A6:73:01:16:C6:33:F6:8F:80:35:E9:F7 Authority key identifier: 6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC Certificate issuer: /CN=A917EC30/serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft Manifest number: 44 Signing time: Mon 03 Nov 2025 07:25:28 +0000 Manifest this update: Mon 03 Nov 2025 07:25:27 +0000 Manifest next update: Mon 10 Nov 2025 07:25:27 +0000 Files and hashes: 1: a1eqjwdnrM-oLNKqaesREse3fPw.crl (hash: 4vwmcChOogE4GgwE6sMvAa+gYSNYmzqTHSnul+5eOaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC30, serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Validity Not Before: Nov 3 07:25:27 2025 GMT Not After : Nov 10 07:25:27 2025 GMT Subject: CN=690858e7-6b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:df:b5:9c:89:be:88:fa:42:89:53:b4:3d: e3:ae:ed:67:79:5d:18:59:03:e7:a4:23:9e:6e:8c: 6b:f0:5b:c3:25:1f:57:41:64:4d:0f:e6:7f:96:f2: 63:6b:24:7f:47:c4:9d:05:3f:2e:a7:71:77:74:79: 0e:84:96:1f:5c:2d:a4:4a:45:bf:88:89:c4:ee:be: 39:3c:7e:55:3f:24:fd:11:83:45:47:b5:ed:a8:73: 00:de:57:b0:3e:08:79:39:1e:d1:98:82:86:e5:31: 66:c8:a2:01:29:98:5f:40:c2:99:8e:d0:6b:3e:16: 68:4c:55:62:a6:9f:7e:06:56:56:9e:cc:5a:f8:06: 80:34:a9:72:5a:64:5a:f9:46:ec:2c:75:f1:a9:11: 0c:0a:c2:c7:17:75:a3:08:9a:56:b3:fa:10:aa:b9: 6b:ec:63:40:ac:3b:15:b1:57:0e:e0:50:5a:26:2f: 5d:e8:42:f9:28:53:72:60:59:4a:41:3a:bb:65:b4: ab:6e:46:2f:1a:cf:e4:72:7e:c9:ab:2a:03:cd:1f: f7:7c:39:9f:3f:4e:ff:42:10:01:b5:7b:b8:48:da: 71:da:03:6a:36:af:f2:19:de:13:25:25:27:c6:66: a2:82:e6:f3:fa:be:db:ed:e0:34:23:3b:fd:9c:f4: ce:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:58:08:64:75:17:7C:0B:A6:73:01:16:C6:33:F6:8F:80:35:E9:F7 X509v3 Authority Key Identifier: keyid:6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0a:41:d6:5e:c0:5c:30:42:0a:94:bd:71:64:9a:f2:5e:a7: c9:25:95:bf:ec:fd:4c:c0:af:1b:96:70:8c:c1:06:4d:f7:15: 66:3c:12:5c:95:88:4b:a5:80:90:0c:2b:0b:79:23:b7:8c:45: f7:cc:8d:d9:fd:94:2e:a1:b5:f5:90:0b:da:ab:7f:29:d8:0b: 1e:a9:69:eb:fe:94:dd:87:9e:2b:ab:70:9f:54:02:7c:d8:59: 31:49:01:a3:45:3a:06:14:a1:7a:d9:0d:6a:5a:91:66:31:60: 2a:c7:53:9d:f5:f7:d3:b8:14:7e:78:42:67:0b:43:28:ee:2f: a6:d6:45:fb:99:e0:49:63:7f:95:81:cd:de:be:fe:8c:f3:fa: 86:20:f6:32:93:52:ea:35:4c:9d:f0:3b:87:ba:e9:7c:ea:fc: 74:91:ff:0a:25:b4:51:11:69:47:c0:9e:63:23:8d:7c:a3:28: 0e:97:c5:b0:e4:95:08:71:48:e5:22:36:26:66:b3:6c:23:39: e0:f8:7e:de:56:d8:fa:64:d0:80:92:1e:96:8b:4e:a1:5a:2a: 4d:ba:3c:44:e4:c3:a2:ea:23:ac:ad:56:61:1e:b8:09:82:ba: 03:84:32:f6:7f:7c:ce:67:ec:09:f0:47:11:71:c1:75:9f:e1: 8b:c9:fd:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RUMzMDExMC8GA1UEBRMoNkI1N0FBOEYwNzY3QUNDRkE4MkNEMkFBNjlFQjExMTJD N0I3N0NGQzAeFw0yNTExMDMwNzI1MjdaFw0yNTExMTAwNzI1MjdaMBgxFjAUBgNV BAMTDTY5MDg1OGU3LTZiMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMKN+1nIm+iPpCiVO0PeOu7Wd5XRhZA+ekI55ujGvwW8MlH1dBZE0P5n+W8mNr JH9HxJ0FPy6ncXd0eQ6Elh9cLaRKRb+IicTuvjk8flU/JP0Rg0VHte2ocwDeV7A+ CHk5HtGYgoblMWbIogEpmF9AwpmO0Gs+FmhMVWKmn34GVlaezFr4BoA0qXJaZFr5 RuwsdfGpEQwKwscXdaMImlaz+hCquWvsY0CsOxWxVw7gUFomL13oQvkoU3JgWUpB OrtltKtuRi8az+RyfsmrKgPNH/d8OZ8/Tv9CEAG1e7hI2nHaA2o2r/IZ3hMlJSfG ZqKC5vP6vtvt4DQjO/2c9M7RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1VgIZHUX fAumcwEWxjP2j4A16fcwHwYDVR0jBBgwFoAUa1eqjwdnrM+oLNKqaesREse3fPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFQzMwLzYzQ0Q2RUM0NTcz RTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0tb0xOS3FhZXNSRXNlM2ZQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTFlcWp3ZG5yTS1vTE5LcWFlc1JFc2UzZlB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF QzMwLzYzQ0Q2RUM0NTczRTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0t b0xOS3FhZXNSRXNlM2ZQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJgKQdZewFwwQgqUvXFkmvJep8kllb/s/UzArxuWcIzBBk33FWY8ElyV iEulgJAMKwt5I7eMRffMjdn9lC6htfWQC9qrfynYCx6paev+lN2HniurcJ9UAnzY WTFJAaNFOgYUoXrZDWpakWYxYCrHU53199O4FH54QmcLQyjuL6bWRfuZ4Eljf5WB zd6+/ozz+oYg9jKTUuo1TJ3wO4e66Xzq/HSR/woltFERaUfAnmMjjXyjKA6XxbDk lQhxSOUiNiZms2wjOeD4ft5W2Ppk0ICSHpaLTqFaKk26PETkw6LqI6ytVmEeuAmC ugOEMvZ/fM5n7AnwRxFxwXWf4YvJ/VE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:47 2025 by rpki-client