$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft File: ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json) Hash identifier: HXaWNKDPD6cHQ+e+VP7DmFWXxaWr4IpnPHcV2Dwc3AI= Subject key identifier: E3:96:AC:58:3C:6D:86:AB:C3:32:48:00:04:59:E3:C0:62:5C:EC:52 Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC Certificate issuer: /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft Manifest number: 028C Signing time: Mon 03 Nov 2025 01:34:10 +0000 Manifest this update: Mon 03 Nov 2025 01:34:10 +0000 Manifest next update: Mon 10 Nov 2025 01:34:10 +0000 Files and hashes: 1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: yJKts1Zf/N2HiFrjY5kz0CnHo/y/dATk4fqRuwbE8rI=) 2: 66751A7C729211F0B01C9076C4F9AE02.roa (hash: DA2+T0X/BOsOoqnN72VPgqBzBOjbaGsjnoVczpg928Y=) 3: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: qSn7HxYC79SRKokwqOPpvLlZ94GTIrZHr+Y0TqagvLo=) 4: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: EmbjI84JzquBQTIr84bkMPcgLgOL5ED40jMLVI24vcA=) 5: EA61BF885BA011F0B7D9FB0DC4F9AE02.roa (hash: aOZDWn1qMroB3T8wskNnWN128J45BAOnAdMKsBqc0yc=) 6: 28144924820B11EF8B053D18C4F9AE02.roa (hash: mm04mj/mfrr+HTospMIe7o235EYlDUVjsUVc02GtxUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Validity Not Before: Nov 3 01:34:10 2025 GMT Not After : Nov 10 01:34:10 2025 GMT Subject: CN=69080692-cbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:67:f8:3e:80:30:82:50:7e:52:d2:e5:56: 4d:da:47:1d:1c:58:34:c0:e0:cc:fa:73:15:65:33: 58:28:34:d7:1e:80:ce:14:2f:04:e1:f4:6b:4c:87: 6e:21:b2:3b:7c:f9:81:d8:c8:7d:24:42:4b:23:42: 48:1f:82:d1:e2:a0:53:05:93:6b:33:55:5c:22:4d: ee:8a:99:f3:5c:7c:66:5a:b7:ec:1d:dd:f5:0e:a1: 9f:b7:50:89:d9:68:42:06:75:d3:47:c7:91:82:d0: 35:3d:e5:c4:cf:fa:8e:5f:de:5c:2d:a5:bd:61:e8: 0b:2d:48:96:6c:cf:e9:fb:53:57:aa:76:6e:2d:36: 46:fa:3f:32:34:81:b8:b2:9e:0a:20:fd:df:06:f1: f1:91:54:d7:fc:37:1e:f3:17:fe:af:3c:e1:df:2e: 16:9b:79:12:6e:69:a7:08:68:98:b8:75:8d:0a:99: 57:8f:23:3a:70:11:3b:e2:dd:a3:3a:4e:77:9c:11: 50:7f:49:36:50:53:42:87:bc:7f:dc:9d:f4:3c:be: f6:5a:29:4f:93:bc:8e:b1:89:7e:e5:26:f6:5f:c2: a8:f9:30:c8:7e:8d:06:29:21:95:2f:24:c6:bb:42: 85:41:21:42:3f:78:ed:d8:10:f1:5b:47:4f:6d:93: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:96:AC:58:3C:6D:86:AB:C3:32:48:00:04:59:E3:C0:62:5C:EC:52 X509v3 Authority Key Identifier: keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:c1:34:f0:70:89:e2:d4:2a:70:f5:5d:fc:7b:f5:dd:b7:81: 7a:0c:7d:80:01:b4:7d:31:6b:5d:82:09:95:87:e0:c6:b8:13: 0e:f1:1a:83:ad:c4:d1:e2:b1:7a:b2:dd:19:22:ab:76:15:dc: eb:3f:44:2a:6b:c5:38:e6:e0:d4:7d:7a:ea:d0:a5:33:99:aa: bf:e2:ff:54:ff:c2:cd:d9:a7:e6:db:6f:85:e0:79:78:1a:de: e8:f9:23:93:8f:7c:c4:0f:fc:e2:b1:e2:4f:08:86:b7:0f:78: 8e:0f:a8:d5:93:a1:79:64:e6:f4:b7:80:f2:dd:fc:48:c7:8f: 5e:f2:c4:a6:f2:f4:7d:bf:7f:58:b7:d5:7e:f6:55:2e:da:40: 19:0c:4d:a4:97:be:ad:fa:52:78:20:82:28:b5:26:2c:49:e7: f4:6e:f6:ac:8f:ef:7b:52:86:d6:e3:e7:9d:c2:12:8a:bc:b4: ec:1f:a8:0a:49:cc:cc:b9:f9:46:de:12:2d:c7:81:c9:33:f3: e3:6e:0c:91:e6:d8:21:12:7f:f9:8a:1f:39:b8:d6:38:ea:93: eb:81:f7:70:19:e4:1a:ce:e2:90:e2:79:b7:37:7f:76:29:1e: 54:08:db:3b:82:23:cc:d8:bc:44:82:9d:60:59:7b:00:c0:e1: 11:06:40:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENzkxMTAvBgNVBAUTKDdBM0Q3RDM3NDhDNzg5ODZDMkM1RTUwQjUwMTNCRUI2 MEFCNDdBREMwHhcNMjUxMTAzMDEzNDEwWhcNMjUxMTEwMDEzNDEwWjAYMRYwFAYD VQQDEw02OTA4MDY5Mi1jYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMRn+D6AMIJQflLS5VZN2kcdHFg0wODM+nMVZTNYKDTXHoDOFC8E4fRrTIdu IbI7fPmB2Mh9JEJLI0JIH4LR4qBTBZNrM1VcIk3uipnzXHxmWrfsHd31DqGft1CJ 2WhCBnXTR8eRgtA1PeXEz/qOX95cLaW9YegLLUiWbM/p+1NXqnZuLTZG+j8yNIG4 sp4KIP3fBvHxkVTX/Dce8xf+rzzh3y4Wm3kSbmmnCGiYuHWNCplXjyM6cBE74t2j Ok53nBFQf0k2UFNCh7x/3J30PL72WilPk7yOsYl+5Sb2X8Ko+TDIfo0GKSGVLyTG u0KFQSFCP3jt2BDxW0dPbZOEqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOWrFg8 bYarwzJIAARZ48BiXOxSMB8GA1UdIwQYMBaAFHo9fTdIx4mGwsXlC1ATvrYKtHrc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ3OS9CRjE5NEQ4MDI4 M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZYkN4ZVVMVUJPLXRncTBl dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqMTlOMGpIaVliQ3hlVUxVQk8tdGdxMGV0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ3OS9CRjE5NEQ4MDI4M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZ YkN4ZVVMVUJPLXRncTBldHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuwTTwcIni1Cpw9V38e/Xdt4F6DH2AAbR9MWtdggmVh+DGuBMO8RqD rcTR4rF6st0ZIqt2FdzrP0Qqa8U45uDUfXrq0KUzmaq/4v9U/8LN2afm22+F4Hl4 Gt7o+SOTj3zED/ziseJPCIa3D3iOD6jVk6F5ZOb0t4Dy3fxIx49e8sSm8vR9v39Y t9V+9lUu2kAZDE2kl76t+lJ4IIIotSYsSef0bvasj+97UobW4+edwhKKvLTsH6gK SczMuflG3hItx4HJM/PjbgyR5tghEn/5ih85uNY46pPrgfdwGeQazuKQ4nm3N392 KR5UCNs7giPM2LxEgp1gWXsAwOERBkBK -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:36 2025 by rpki-client