$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft File: E5zB22udJLk7FJKKdRjQTrOyajo.mft (raw, json) Hash identifier: FPB83L23W+ZYLK01EML7QEFAxTym87Fg6kI9xzF7lZM= Subject key identifier: E7:27:D2:E4:7D:B2:58:4E:E8:73:73:A5:18:2B:21:BA:A8:77:44:91 Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A Certificate issuer: /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A Certificate serial: 225B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft Manifest number: 221F Signing time: Tue 04 Nov 2025 15:58:45 +0000 Manifest this update: Tue 04 Nov 2025 15:58:45 +0000 Manifest next update: Tue 11 Nov 2025 15:58:45 +0000 Files and hashes: 1: E5zB22udJLk7FJKKdRjQTrOyajo.crl (hash: iXfutw/a9Wmvp+PaspTflTatdKXI55Ge6An05keHSzc=) 2: FF59EC70144911EFA2053B27C4F9AE02.roa (hash: 87Wd3ufHux4x6En79V3HJ0yy+yl6nx7Qh9e0Kc4SLtA=) 3: A20F01CCE1E511EEA0477018C4F9AE02.roa (hash: XEA5HBhsYH3LIGpBqjlOM3tEelRDYUoKK//5he1LRJg=) 4: 5AE16D9A386F11EFABF4E132C4F9AE02.roa (hash: 9Ncc5eO7lsxHhsxCWRYMxRGSAkh2VnH6ZKESuNAQzvA=) 5: C4F05AA6144911EF85E2DC26C4F9AE02.roa (hash: j3DVuY32luQDVa/vF1hOJNJXMyj5FRS3jyl06+nliBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8795 (0x225b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A Validity Not Before: Nov 4 15:58:45 2025 GMT Not After : Nov 11 15:58:45 2025 GMT Subject: CN=690a22b5-7c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:d2:26:67:97:a1:56:d2:ed:e8:3b:8a:7b: b0:ee:c9:e6:5d:cf:48:9d:ac:76:06:c5:2a:44:d3: 1d:7a:19:6f:92:df:0d:0d:b2:f6:1c:1d:7d:ea:78: a7:5b:ba:79:08:3e:87:69:21:4f:69:9a:db:3c:e5: e6:80:7e:5e:c1:ce:90:41:0b:63:1e:0e:f0:01:e9: 26:b4:1a:34:65:fd:62:18:0c:8a:f6:a4:dc:9a:4b: fe:a7:43:82:13:de:0b:6d:74:b6:58:3b:09:67:fa: 90:4e:6e:82:06:e2:ce:36:a0:47:fc:e2:c6:33:96: 5e:9b:2f:75:5a:45:88:7d:39:0e:c8:da:4c:ee:e0: c6:be:58:a9:5e:32:12:50:eb:c8:96:b5:13:c3:72: a9:e1:8f:59:a1:b5:fe:67:47:c6:87:44:f6:af:33: c1:11:f5:8d:46:f1:8c:a9:fc:cb:ad:2f:73:ae:9b: 88:d0:30:42:ce:88:a4:9d:5f:d1:69:44:b8:45:d8: be:5d:09:69:73:53:f8:8d:bd:ea:22:a5:b3:13:3c: d0:dd:6a:87:69:53:cb:dc:92:bb:be:5c:8b:72:cc: 20:80:fc:47:d7:24:da:86:8b:ac:08:41:52:3b:2c: 15:fd:dc:18:08:e2:46:21:98:32:ad:a7:e6:3e:39: 8a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:27:D2:E4:7D:B2:58:4E:E8:73:73:A5:18:2B:21:BA:A8:77:44:91 X509v3 Authority Key Identifier: keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:55:b8:5c:72:13:fd:a4:ce:96:04:e1:b4:eb:80:15:49:76: f5:0c:3f:6c:85:ab:40:26:bf:ad:12:86:86:05:3a:68:d8:cb: a7:10:b2:5f:d2:16:e8:18:5d:96:24:79:d8:3b:25:47:bb:b2: 86:d2:f5:ce:b7:1d:a4:78:16:06:28:6b:14:64:47:cc:b2:e3: e7:78:d2:72:de:9f:0e:cc:3e:17:92:fd:b5:3c:f1:f2:cd:75: ef:c6:9f:95:0c:75:bf:92:ef:ad:84:8a:51:b3:94:8f:0b:74: 25:4d:7c:45:21:55:3e:dd:21:10:cc:62:64:41:21:74:45:47: 7b:b9:9d:86:aa:dc:0e:66:02:e2:4e:9b:9d:cd:36:77:1d:0c: 9d:2c:80:9f:e4:f4:c9:21:b3:7d:fe:57:ff:5d:3c:36:fc:4d: e9:fb:62:40:f8:3f:5f:17:9b:ec:80:a2:f1:c7:f2:f5:8d:ec: 0a:11:63:d7:93:83:e1:dd:7c:27:f6:7a:63:7c:36:50:1c:ec: 08:b3:d5:45:e2:be:f1:f8:57:b5:c7:1d:9f:1a:93:81:48:79: 90:9d:c9:8f:6f:50:b2:56:26:ce:d8:bf:cd:65:d8:0b:57:05: 43:fb:8b:ef:ed:01:88:7f:08:f7:d7:ac:49:49:4b:f6:00:0a: bf:c0:cb:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBRjIxMTAvBgNVBAUTKDEzOUNDMURCNkI5RDI0QjkzQjE0OTI4QTc1MThEMDRF QjNCMjZBM0EwHhcNMjUxMTA0MTU1ODQ1WhcNMjUxMTExMTU1ODQ1WjAYMRYwFAYD VQQDEw02OTBhMjJiNS03YzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6jSJmeXoVbS7eg7inuw7snmXc9Inax2BsUqRNMdehlvkt8NDbL2HB196nin W7p5CD6HaSFPaZrbPOXmgH5ewc6QQQtjHg7wAekmtBo0Zf1iGAyK9qTcmkv+p0OC E94LbXS2WDsJZ/qQTm6CBuLONqBH/OLGM5Zemy91WkWIfTkOyNpM7uDGvlipXjIS UOvIlrUTw3Kp4Y9ZobX+Z0fGh0T2rzPBEfWNRvGMqfzLrS9zrpuI0DBCzoiknV/R aUS4Rdi+XQlpc1P4jb3qIqWzEzzQ3WqHaVPL3JK7vlyLcswggPxH1yTahousCEFS OywV/dwYCOJGIZgyrafmPjmKyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcn0uR9 slhO6HNzpRgrIbqod0SRMB8GA1UdIwQYMBaAFBOcwdtrnSS5OxSSinUY0E6zsmo6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REFGMi8yNkVDNkREQUQz REExMUU1OEM1Q0Q0MEZDNEY5QUUwMi9FNXpCMjJ1ZEpMazdGSktLZFJqUVRyT3lh am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1ekIyMnVkSkxrN0ZKS0tkUmpRVHJPeWFqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REFGMi8yNkVDNkREQUQzREExMUU1OEM1Q0Q0MEZDNEY5QUUwMi9FNXpCMjJ1ZEpM azdGSktLZFJqUVRyT3lham8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5VbhcchP9pM6WBOG064AVSXb1DD9shatAJr+tEoaGBTpo2MunELJf 0hboGF2WJHnYOyVHu7KG0vXOtx2keBYGKGsUZEfMsuPneNJy3p8OzD4Xkv21PPHy zXXvxp+VDHW/ku+thIpRs5SPC3QlTXxFIVU+3SEQzGJkQSF0RUd7uZ2GqtwOZgLi TpudzTZ3HQydLICf5PTJIbN9/lf/XTw2/E3p+2JA+D9fF5vsgKLxx/L1jewKEWPX k4Ph3Xwn9npjfDZQHOwIs9VF4r7x+Fe1xx2fGpOBSHmQncmPb1CyVibO2L/NZdgL VwVD+4vv7QGIfwj316xJSUv2AAq/wMsL -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:36 2025 by rpki-client