$ rpki-client -vvf rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft File: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft (raw, json) Hash identifier: fY1srr6jjKPk3YA3EUlz1ogj21fVZ/TJ0dKuCv2kM4c= Subject key identifier: EE:B7:BE:CC:F1:CB:CD:6A:40:AD:E2:3C:65:D5:48:98:28:79:92:54 Authority key identifier: 79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2 Certificate issuer: /CN=A918A1E7/serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft Manifest number: 39 Signing time: Wed 05 Nov 2025 07:46:04 +0000 Manifest this update: Wed 05 Nov 2025 07:46:03 +0000 Manifest next update: Wed 12 Nov 2025 07:46:03 +0000 Files and hashes: 1: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl (hash: bLDyk5CnSztzmQyDaBzNxZK+VVu+XK8tqAywxxhipug=) 2: 06239BF2677111F0BB789073C4F9AE02.roa (hash: m5+qywKlwkf5LRgphAV34L5igrhljBD4FBgDFcN7Cnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2 Validity Not Before: Nov 5 07:46:03 2025 GMT Not After : Nov 12 07:46:03 2025 GMT Subject: CN=690b00bc-41df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:d2:a8:a9:1f:a1:fc:8b:f3:c5:2d:11:34: b2:aa:da:84:74:37:e0:31:2d:88:b4:ea:ff:54:37: 0f:4c:ef:c1:06:f8:c7:ed:34:b3:e1:e9:c3:1c:3f: b8:bb:d4:25:7e:1c:8c:5e:e9:8f:a0:a9:b2:30:7f: 73:13:9c:cd:29:6e:d8:24:58:09:81:28:ee:52:10: 78:6a:9f:b3:19:72:fb:38:34:ee:af:f0:48:70:b8: af:b5:f0:8c:e9:f9:66:fa:47:ca:c6:c3:a8:da:4a: af:ee:a3:23:eb:e4:3a:41:12:aa:49:22:19:89:26: 6d:9f:f5:4b:60:69:a4:a6:33:bb:c0:06:16:f0:d1: 8c:da:db:e1:ec:72:86:9f:e0:93:cb:3c:77:1d:2e: 47:e5:74:ab:af:ab:84:56:e4:a4:82:56:0d:de:03: 06:c1:9c:1f:23:76:f5:dd:4c:8d:ad:2b:c7:39:ab: 6e:e5:6f:e3:3a:f4:e2:48:85:f0:98:25:e9:36:de: 87:78:64:a4:4d:42:b1:4a:df:78:ac:21:cf:de:21: 20:bb:36:35:77:65:ed:35:1a:3d:5a:72:00:f2:61: b8:92:59:7e:91:eb:4e:88:83:1b:f3:e2:8e:81:d0: 75:32:7b:d0:27:03:50:88:0d:52:b1:e3:6e:64:20: 0a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B7:BE:CC:F1:CB:CD:6A:40:AD:E2:3C:65:D5:48:98:28:79:92:54 X509v3 Authority Key Identifier: keyid:79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:02:05:50:a7:5f:97:25:49:98:ed:1d:93:f2:27:3e:b8:08: c9:4d:fe:86:51:87:c2:5f:f7:49:a4:30:25:c9:43:05:f1:d3: a8:e7:80:ae:f7:d9:83:1c:3a:08:9c:b6:6a:6c:05:d6:c4:a3: 9c:53:ec:f2:7b:78:8d:ab:35:25:cf:9e:54:0a:e5:cc:ec:ec: 91:73:fa:65:e3:39:98:05:5f:6d:b3:af:2a:79:20:dc:2b:eb: 1d:70:96:2a:a3:e4:86:52:f6:e8:0c:46:1d:75:58:da:21:08: 17:41:01:64:e1:52:52:5b:78:fd:7a:7e:f3:f2:bc:43:ba:3d: 39:22:2a:98:bb:11:81:98:bb:12:b6:4d:41:eb:78:b7:20:c7: 4a:ec:2c:f0:3b:78:d4:62:17:69:c1:1d:d3:38:3a:f4:a6:88: c8:b0:e5:4e:f7:5c:e1:41:13:56:74:04:61:a1:0c:7f:cb:8b: 83:c6:80:0f:81:06:d8:eb:b8:7d:a1:0f:c8:95:bb:cb:7e:2a: d5:7a:58:9d:0b:51:65:8f:0b:cf:50:1d:32:44:56:d8:2b:91: 66:5e:9e:5b:f7:e1:50:96:86:b0:e8:55:95:32:9a:c7:fc:41: f7:36:22:21:3e:56:fb:15:82:2b:91:4b:cd:81:ff:1c:c4:16: 05:fa:df:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTFFNzExMC8GA1UEBRMoNzlCQTUxRDk2QkZEQzMxM0M3ODhBRUMzMzA3M0M5Njk4 RTVEMDFDMjAeFw0yNTExMDUwNzQ2MDNaFw0yNTExMTIwNzQ2MDNaMBgxFjAUBgNV BAMTDTY5MGIwMGJjLTQxZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZVdKoqR+h/IvzxS0RNLKq2oR0N+AxLYi06v9UNw9M78EG+MftNLPh6cMcP7i7 1CV+HIxe6Y+gqbIwf3MTnM0pbtgkWAmBKO5SEHhqn7MZcvs4NO6v8EhwuK+18Izp +Wb6R8rGw6jaSq/uoyPr5DpBEqpJIhmJJm2f9UtgaaSmM7vABhbw0Yza2+Hscoaf 4JPLPHcdLkfldKuvq4RW5KSCVg3eAwbBnB8jdvXdTI2tK8c5q27lb+M69OJIhfCY Jek23od4ZKRNQrFK33isIc/eISC7NjV3Ze01Gj1acgDyYbiSWX6R606Igxvz4o6B 0HUye9AnA1CIDVKx425kIArnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7re+zPHL zWpAreI8ZdVImCh5klQwHwYDVR0jBBgwFoAUebpR2Wv9wxPHiK7DMHPJaY5dAcIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMUU3LzlBNjY3NTdFNjc3 MDExRjA5M0QxNzQ3MkM0RjlBRTAyL2VicFIyV3Y5d3hQSGlLN0RNSFBKYVk1ZEFj SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWJwUjJXdjl3eFBIaUs3RE1IUEphWTVkQWNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MUU3LzlBNjY3NTdFNjc3MDExRjA5M0QxNzQ3MkM0RjlBRTAyL2VicFIyV3Y5d3hQ SGlLN0RNSFBKYVk1ZEFjSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIICBVCnX5clSZjtHZPyJz64CMlN/oZRh8Jf90mkMCXJQwXx06jngK73 2YMcOgictmpsBdbEo5xT7PJ7eI2rNSXPnlQK5czs7JFz+mXjOZgFX22zryp5INwr 6x1wliqj5IZS9ugMRh11WNohCBdBAWThUlJbeP16fvPyvEO6PTkiKpi7EYGYuxK2 TUHreLcgx0rsLPA7eNRiF2nBHdM4OvSmiMiw5U73XOFBE1Z0BGGhDH/Li4PGgA+B BtjruH2hD8iVu8t+KtV6WJ0LUWWPC89QHTJEVtgrkWZenlv34VCWhrDoVZUymsf8 Qfc2IiE+VvsVgiuRS82B/xzEFgX63xw= -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:19 2025 by rpki-client