$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: 5cQBmn6Gq4ImXgq1q0HQoaGBwQeVa6ItkMQg4UN3ADY= Subject key identifier: B7:48:8D:40:22:1E:50:23:C6:3E:0F:67:A1:3F:34:0F:96:8F:22:D0 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 0414 Signing time: Mon 03 Nov 2025 00:22:51 +0000 Manifest this update: Mon 03 Nov 2025 00:22:51 +0000 Manifest next update: Mon 10 Nov 2025 00:22:51 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: wnvt7b66sAOqBOJwpjVMYGdXETzULjceKXyG7speJeE=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: sKV1Z0cYRUE+VWc2YxnGxIUnhyBPTtnJSFk2o11IcBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Nov 3 00:22:51 2025 GMT Not After : Nov 10 00:22:51 2025 GMT Subject: CN=6907f5db-84d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:08:cf:14:3c:61:05:ad:84:41:ae:93:04: fa:4e:0e:18:48:45:7d:37:f3:17:73:15:8c:9d:ba: 8d:a6:07:3a:a7:e3:a6:99:eb:03:d9:c6:32:cf:2b: d0:d9:6a:ca:21:0f:c8:27:5a:b6:b9:ad:d1:37:c7: 82:da:84:db:12:7c:b9:1f:0e:f9:33:09:25:9c:6e: 12:bf:d0:12:79:5c:cd:6e:d8:f4:a2:68:a9:13:4f: 15:c5:9f:67:0f:79:c9:c8:73:f1:5d:27:62:ee:0c: dd:04:de:d8:53:b7:d9:ff:42:6b:50:76:ba:09:4b: 81:01:db:6c:43:9b:02:26:fa:ec:11:a8:82:a2:e0: 5b:cc:3b:3e:e9:29:a3:8d:65:c0:ec:77:26:99:41: 94:d2:22:0e:82:b3:7c:81:e6:49:f4:19:eb:2d:52: 9e:91:b3:fb:ec:c3:00:63:e2:16:e8:53:c5:94:20: 3e:bb:57:e0:79:68:1b:5f:76:81:c1:a8:89:cd:28: 94:ba:5b:c4:74:e9:dd:33:cb:02:13:5d:7a:4b:2e: 35:e3:c3:81:25:ac:bc:a7:cc:ad:9c:7c:0a:d7:46: da:30:94:c7:ad:d8:eb:b5:27:65:48:cf:2a:45:4c: 62:7e:db:54:c5:31:c9:8c:97:9a:4f:a5:4e:53:47: 5d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:48:8D:40:22:1E:50:23:C6:3E:0F:67:A1:3F:34:0F:96:8F:22:D0 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:24:38:0e:85:51:e9:1b:f9:ad:3f:a0:b9:54:c2:b4:81:6b: 5e:3f:c4:33:f9:81:9c:2e:1e:23:75:74:30:3c:5f:cf:43:db: 56:dd:35:f6:3c:08:8a:fd:33:ec:0b:35:7b:1b:61:29:69:07: cd:27:89:da:37:74:bf:08:50:7a:6c:54:13:82:56:9b:35:e9: f4:9b:d7:70:50:58:2a:31:7e:08:da:a3:3c:80:a7:80:68:bd: 03:d9:c2:9c:bb:ff:8c:f4:d1:a3:b5:8e:4c:71:17:6a:2f:48: 39:31:a2:44:de:36:10:a4:f0:f2:18:ae:16:94:b1:84:37:11: 96:fb:03:a3:f7:63:71:a7:d9:22:16:fc:30:e6:ea:f7:c9:27: fc:89:49:d7:bd:39:9f:f4:32:6e:b4:d6:32:3a:b4:0f:f7:9f: e0:33:08:2b:e8:a6:08:2c:07:d7:4f:b9:aa:6e:4e:98:c1:30: 45:10:6e:9c:a9:97:d5:16:11:82:cc:34:14:eb:89:0d:0c:e8: 25:b0:c4:21:5c:2a:a0:78:c7:d7:e9:aa:83:b2:08:8f:42:1d: 49:cc:0c:2c:df:0c:63:bf:2d:1d:f6:e5:e0:23:e4:5e:f6:c4: 12:4a:8c:4c:a4:c5:0a:1d:0c:45:70:ab:31:42:36:1d:ce:9b: 11:a0:42:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUxMTAzMDAyMjUxWhcNMjUxMTEwMDAyMjUxWjAYMRYwFAYD VQQDEw02OTA3ZjVkYi04NGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DkIzxQ8YQWthEGukwT6Tg4YSEV9N/MXcxWMnbqNpgc6p+OmmesD2cYyzyvQ 2WrKIQ/IJ1q2ua3RN8eC2oTbEny5Hw75MwklnG4Sv9ASeVzNbtj0omipE08VxZ9n D3nJyHPxXSdi7gzdBN7YU7fZ/0JrUHa6CUuBAdtsQ5sCJvrsEaiCouBbzDs+6Smj jWXA7HcmmUGU0iIOgrN8geZJ9BnrLVKekbP77MMAY+IW6FPFlCA+u1fgeWgbX3aB waiJzSiUulvEdOndM8sCE116Sy4148OBJay8p8ytnHwK10baMJTHrdjrtSdlSM8q RUxifttUxTHJjJeaT6VOU0ddBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdIjUAi HlAjxj4PZ6E/NA+WjyLQMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxJDgOhVHpG/mtP6C5VMK0gWteP8Qz+YGcLh4jdXQwPF/PQ9tW3TX2 PAiK/TPsCzV7G2EpaQfNJ4naN3S/CFB6bFQTglabNen0m9dwUFgqMX4I2qM8gKeA aL0D2cKcu/+M9NGjtY5McRdqL0g5MaJE3jYQpPDyGK4WlLGENxGW+wOj92Nxp9ki Fvww5ur3ySf8iUnXvTmf9DJutNYyOrQP95/gMwgr6KYILAfXT7mqbk6YwTBFEG6c qZfVFhGCzDQU64kNDOglsMQhXCqgeMfX6aqDsgiPQh1JzAws3wxjvy0d9uXgI+Re 9sQSSoxMpMUKHQxFcKsxQjYdzpsRoEKK -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:54 2025 by rpki-client