$ rpki-client -vvf rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft File: ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft (raw, json) Hash identifier: 3cqDVVqJazpeXyDGBxGGbecRWs+fXATCVJv4MuureoQ= Subject key identifier: C1:67:A2:B7:1E:D9:18:2E:D9:6A:7D:A1:F6:CD:FA:84:46:26:69:BB Authority key identifier: 7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F Certificate issuer: /CN=A919A285/serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft Manifest number: 08B7 Signing time: Tue 04 Nov 2025 20:34:13 +0000 Manifest this update: Tue 04 Nov 2025 20:34:13 +0000 Manifest next update: Tue 11 Nov 2025 20:34:13 +0000 Files and hashes: 1: ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl (hash: 9+S2X+c9jKbjzwanetS+/eVRFYByPQuzYZEVgYvRkog=) 2: 1DCABC72C57811EA950A8643C4F9AE02.roa (hash: 3y+P8Wjw2NbNvaqBtjPXBVu0eGWr6eeBTOCTDHgw4uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Validity Not Before: Nov 4 20:34:13 2025 GMT Not After : Nov 11 20:34:13 2025 GMT Subject: CN=690a6345-254d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:59:4f:30:fb:6f:f4:e2:3c:03:70:5e:bb: 65:21:77:b1:c3:8c:22:1c:d1:07:92:12:e6:6a:da: 37:4a:98:ce:c2:66:16:ad:70:31:79:86:de:0f:f4: d1:99:76:1b:03:e2:ab:87:e5:15:a2:ea:9c:66:0c: 98:e3:81:ef:df:33:c8:77:67:dc:c8:f8:b0:61:96: 4d:11:68:ae:82:cd:60:4a:28:7e:2e:47:f7:77:0c: 5f:40:ab:81:90:db:7d:ba:60:70:20:2d:64:1c:68: 08:a0:d6:f8:1b:71:74:52:15:19:b4:88:e3:fa:01: 26:c4:fd:1f:d9:cd:ca:9f:c3:35:e1:7b:2a:a8:fe: 00:6a:9d:30:8c:c9:5a:80:8c:d4:68:1e:cf:99:df: c8:cd:63:ec:29:50:85:44:ad:81:1d:3c:9b:22:24: e7:dd:da:60:a7:a9:10:06:7e:aa:29:5b:c8:b6:ef: 45:40:99:18:43:10:f1:00:9c:94:e9:3e:c5:eb:37: a5:b4:44:b7:f5:f3:06:9a:cf:95:ee:6d:54:a2:9d: c2:7c:2c:96:b8:b1:12:8b:6f:a1:eb:08:b8:51:8f: 6a:b9:90:62:da:4b:05:5c:5e:0f:38:9f:1d:c4:9f: 57:78:5d:4a:6e:4a:ff:55:5d:6d:54:ad:be:2b:89: 85:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:67:A2:B7:1E:D9:18:2E:D9:6A:7D:A1:F6:CD:FA:84:46:26:69:BB X509v3 Authority Key Identifier: keyid:7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:14:f1:6b:ed:66:cf:59:51:10:28:ec:3d:e2:42:d4:68:d4: 58:65:70:7c:42:92:de:a5:f1:44:50:d0:0c:8e:af:81:a0:5f: f1:a4:b9:74:b1:69:40:c5:58:10:b1:17:3b:28:7d:a0:41:9b: 5d:0f:f8:2a:20:37:96:78:f3:0b:be:65:94:e4:52:c2:44:55: 9c:56:2d:2e:6a:95:60:c6:1c:1c:a9:f5:61:76:e5:17:81:f6: 07:6c:3c:98:df:69:0c:db:69:92:94:ec:13:a5:a0:94:ef:13: 07:e7:f1:bc:a8:36:06:a4:66:ba:eb:21:58:57:d0:67:ae:cf: 0f:ae:dc:ae:9f:af:5f:b7:72:f6:e1:8c:a0:2b:0d:b7:ba:34: 87:52:c6:aa:21:a7:b3:b1:b7:4a:0d:c0:ad:ac:2c:cd:48:25: a5:3c:50:bb:b4:d9:06:82:21:42:f8:4f:a3:38:02:98:43:bc: 1f:d9:d4:66:e0:2c:76:0a:31:fd:35:4b:72:72:39:af:a9:22: 1b:b9:00:85:bf:37:8e:14:32:d3:da:cf:6c:4b:ab:57:4a:1b: c0:0d:f6:be:1d:b1:df:1b:a0:2e:b3:16:c8:f4:d4:ff:9e:0f: 8f:d6:ee:7b:b8:5e:08:29:a2:b8:3e:56:3e:97:23:c1:e9:2d: ae:dc:37:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEyODUxMTAvBgNVBAUTKDdBMzFENTczOTc5OEIwNjRBNjAwNzEzM0FBM0U1QjlD RDBFRUQ0NUYwHhcNMjUxMTA0MjAzNDEzWhcNMjUxMTExMjAzNDEzWjAYMRYwFAYD VQQDEw02OTBhNjM0NS0yNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXtZTzD7b/TiPANwXrtlIXexw4wiHNEHkhLmato3SpjOwmYWrXAxeYbeD/TR mXYbA+Krh+UVouqcZgyY44Hv3zPId2fcyPiwYZZNEWiugs1gSih+Lkf3dwxfQKuB kNt9umBwIC1kHGgIoNb4G3F0UhUZtIjj+gEmxP0f2c3Kn8M14XsqqP4Aap0wjMla gIzUaB7Pmd/IzWPsKVCFRK2BHTybIiTn3dpgp6kQBn6qKVvItu9FQJkYQxDxAJyU 6T7F6zeltES39fMGms+V7m1Uop3CfCyWuLESi2+h6wi4UY9quZBi2ksFXF4POJ8d xJ9XeF1Kbkr/VV1tVK2+K4mFEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFnorce 2Rgu2Wp9ofbN+oRGJmm7MB8GA1UdIwQYMBaAFHox1XOXmLBkpgBxM6o+W5zQ7tRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTI4NS9ERDYyODlBQUM1 NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNHU21BSEV6cWo1Ym5ORHUx RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqSFZjNWVZc0dTbUFIRXpxajVibk5EdTFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTI4NS9ERDYyODlBQUM1NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNH U21BSEV6cWo1Ym5ORHUxRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtFPFr7WbPWVEQKOw94kLUaNRYZXB8QpLepfFEUNAMjq+BoF/xpLl0 sWlAxVgQsRc7KH2gQZtdD/gqIDeWePMLvmWU5FLCRFWcVi0uapVgxhwcqfVhduUX gfYHbDyY32kM22mSlOwTpaCU7xMH5/G8qDYGpGa66yFYV9Bnrs8Prtyun69ft3L2 4YygKw23ujSHUsaqIaezsbdKDcCtrCzNSCWlPFC7tNkGgiFC+E+jOAKYQ7wf2dRm 4Cx2CjH9NUtycjmvqSIbuQCFvzeOFDLT2s9sS6tXShvADfa+HbHfG6AusxbI9NT/ ng+P1u57uF4IKaK4PlY+lyPB6S2u3DeX -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:35 2025 by rpki-client