$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: bp4cr7Cc2E2e0Palm7smw1rs7TKAKqstAvGVpKXb9SQ= Subject key identifier: B0:93:93:35:43:87:62:69:17:4D:1E:24:C4:9E:3D:C4:87:E2:B7:86 Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 01E0 Signing time: Wed 05 Nov 2025 02:52:59 +0000 Manifest this update: Wed 05 Nov 2025 02:52:58 +0000 Manifest next update: Wed 12 Nov 2025 02:52:58 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: Ju5qpDUAbtvtuVVkYK7QjDAdssvAoj2lopdcfB+sIOM=) 2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: 2AFvxOgERN6IP1ghZwOz+nDsY9qU1LoYMzKU7ME8H9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Nov 5 02:52:58 2025 GMT Not After : Nov 12 02:52:58 2025 GMT Subject: CN=690abc0b-b655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7c:63:52:8e:5c:da:5b:47:10:e5:9d:e3:25: a7:2b:17:28:aa:35:01:fc:39:98:66:20:2c:8d:58: 74:e9:41:b7:66:70:73:c2:db:47:c5:ad:a0:40:5c: 7f:be:2a:da:59:ed:1b:97:b0:fa:c2:92:cb:e0:87: 91:d6:a5:06:39:0d:1e:97:c0:af:f9:38:a6:a5:8d: cc:45:db:14:98:a9:92:6d:a0:95:18:33:4c:ff:57: 35:ee:6d:b5:3e:f3:f4:a7:4e:68:28:41:6f:5a:0d: 18:6c:c4:7a:84:6c:06:b5:d9:a8:3e:cf:32:5d:77: ec:07:67:b4:b2:cd:00:5e:4e:9a:5e:d5:d4:70:74: d5:a8:19:2d:c2:a7:63:7c:18:00:17:dd:65:c1:70: 27:6c:23:b8:7e:24:3b:e6:9f:ba:ee:2f:14:52:89: 0e:bb:82:27:92:ec:86:f0:60:d0:d6:08:90:09:68: e4:a5:de:d0:9c:9f:bc:1e:70:a1:f6:10:6a:91:da: 48:34:79:f6:37:0b:89:e9:70:79:da:c4:14:da:23: d0:60:13:1b:44:fe:7e:af:60:36:bc:03:0c:9f:d2: 62:77:00:76:6c:a2:82:e7:1c:3c:85:4e:f2:96:11: 6e:ca:4e:e3:d1:c2:02:84:dd:0f:27:13:a4:de:14: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:93:93:35:43:87:62:69:17:4D:1E:24:C4:9E:3D:C4:87:E2:B7:86 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e8:09:4e:85:d7:4a:41:83:59:8a:39:70:47:a6:23:91:0b: 4d:dc:e2:7b:8c:8c:22:57:1b:c9:0f:08:d9:bd:75:c5:59:a1: be:2f:81:07:5b:d4:97:2d:ee:d8:11:ba:66:80:81:69:a5:66: dd:6e:72:c7:6d:86:73:62:07:8b:13:4b:ea:93:d0:1f:ed:d3: 31:85:74:b9:61:45:e5:e0:25:b4:fe:08:de:60:f0:34:29:e9: 20:42:1d:b0:f9:4a:04:a3:e7:28:6b:39:03:cb:c8:7d:aa:25: 69:c6:6e:d5:58:ba:9c:f7:fb:c7:03:1e:eb:f1:f3:21:7a:fd: 05:5d:37:a2:27:39:cb:4a:a5:2d:9e:07:af:75:22:a2:c4:76: d2:18:d9:5b:70:d1:85:bf:c6:23:c0:6f:90:69:a4:68:e1:c7: 47:30:c3:fa:6c:9a:16:28:e2:30:ed:8c:a7:76:93:88:ac:e8: 8b:e2:4b:bd:59:dc:9d:ca:c6:7d:3f:2f:0e:7f:5e:8a:9f:7a: 55:be:fc:df:8c:7a:5f:6d:f1:f5:25:3a:a7:a3:24:2e:21:34: 01:44:5b:82:bf:5b:a6:ad:d1:62:ce:d8:d8:8e:33:dd:4b:08: 67:5b:7d:90:cd:d5:15:92:9b:65:0b:e0:e8:e3:60:7d:86:90: b3:ca:58:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjUxMTA1MDI1MjU4WhcNMjUxMTEyMDI1MjU4WjAYMRYwFAYD VQQDEw02OTBhYmMwYi1iNjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03xjUo5c2ltHEOWd4yWnKxcoqjUB/DmYZiAsjVh06UG3ZnBzwttHxa2gQFx/ viraWe0bl7D6wpLL4IeR1qUGOQ0el8Cv+TimpY3MRdsUmKmSbaCVGDNM/1c17m21 PvP0p05oKEFvWg0YbMR6hGwGtdmoPs8yXXfsB2e0ss0AXk6aXtXUcHTVqBktwqdj fBgAF91lwXAnbCO4fiQ75p+67i8UUokOu4InkuyG8GDQ1giQCWjkpd7QnJ+8HnCh 9hBqkdpINHn2NwuJ6XB52sQU2iPQYBMbRP5+r2A2vAMMn9JidwB2bKKC5xw8hU7y lhFuyk7j0cIChN0PJxOk3hQxpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCTkzVD h2JpF00eJMSePcSH4reGMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm6AlOhddKQYNZijlwR6YjkQtN3OJ7jIwiVxvJDwjZvXXFWaG+L4EH W9SXLe7YEbpmgIFppWbdbnLHbYZzYgeLE0vqk9Af7dMxhXS5YUXl4CW0/gjeYPA0 KekgQh2w+UoEo+coazkDy8h9qiVpxm7VWLqc9/vHAx7r8fMhev0FXTeiJznLSqUt ngevdSKixHbSGNlbcNGFv8YjwG+QaaRo4cdHMMP6bJoWKOIw7YyndpOIrOiL4ku9 WdydysZ9Py8Of16Kn3pVvvzfjHpfbfH1JTqnoyQuITQBRFuCv1umrdFiztjYjjPd SwhnW32QzdUVkptlC+Do42B9hpCzylgV -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:20 2025 by rpki-client