$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft File: eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json) Hash identifier: 1/amEjaeearVhqEnC/k50ZPpUI/XddEK+KP97V0t3ks= Subject key identifier: 10:21:D8:B2:CA:FF:3C:06:1D:35:9C:58:37:84:FE:A2:8C:5B:66:F0 Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96 Certificate issuer: /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft Manifest number: 01B7 Signing time: Mon 03 Nov 2025 03:08:13 +0000 Manifest this update: Mon 03 Nov 2025 03:08:12 +0000 Manifest next update: Mon 10 Nov 2025 03:08:12 +0000 Files and hashes: 1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: QaDsFEyq9hwKPv9qahxbIJlPtI/A7LGF+4G4ZIGsjNY=) 2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: TxTcbAcufMja4FsqpJQTg2We2RY0eq4FwQMk5GLL3ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596 Validity Not Before: Nov 3 03:08:12 2025 GMT Not After : Nov 10 03:08:12 2025 GMT Subject: CN=69081c9c-587c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e0:ed:cf:00:a2:5e:e8:8e:a3:a3:e0:c9:b5: 8b:87:1c:36:dc:b5:2f:8b:0f:70:df:5c:7c:e7:55: 03:82:a3:75:24:b6:83:f9:57:b9:06:6a:28:07:06: cb:dc:94:db:87:5f:7b:e1:cf:57:b0:79:94:d1:19: 90:c1:9a:a7:97:c1:5f:36:30:b5:04:e2:00:fa:ff: 22:0f:13:16:bd:64:0f:da:dd:5c:a6:e9:ca:48:49: 49:c5:2f:9c:67:e8:ae:09:92:19:43:36:4d:03:da: 0a:4a:69:5e:dc:97:db:4c:c3:08:f3:1e:0c:d3:b8: 44:f4:a3:a5:ec:78:df:71:23:a0:be:ba:f5:c2:7e: 05:e4:42:5d:d3:47:01:11:a0:31:56:3b:66:c2:1d: 5a:8c:63:09:d6:7d:ec:e7:f2:fe:6c:00:3c:b7:1a: 4f:3d:b3:8b:d7:2d:a9:a1:00:60:a4:d3:6a:82:2a: 7f:d1:73:77:87:15:8f:12:6f:5b:e5:dd:31:5a:9a: 29:01:05:4b:bc:26:3f:83:e6:d5:67:fc:36:b5:1e: cf:80:e1:3b:ab:2c:51:1f:6f:a9:f4:31:dc:4d:eb: 7f:38:02:0e:86:cf:39:8f:ef:8b:c5:d9:6e:07:32: d3:6d:f6:f5:6f:fc:08:7e:70:ab:c9:d3:c9:d2:97: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:21:D8:B2:CA:FF:3C:06:1D:35:9C:58:37:84:FE:A2:8C:5B:66:F0 X509v3 Authority Key Identifier: keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:cc:48:c2:43:6e:05:42:a5:0e:39:64:96:80:56:3c:11:ce: fc:ff:64:d4:a4:9e:1d:7d:51:5e:95:4b:3f:71:0b:59:4f:ef: de:f0:c6:96:d7:ee:f7:26:f7:1d:85:36:10:a6:d6:27:bb:5a: 4b:2b:80:0d:1d:3e:38:3c:b0:f4:ae:73:f1:d3:d4:ae:c9:65: ea:03:39:17:13:84:77:ad:b9:8a:8d:26:0e:28:0a:fc:d2:9a: c5:3c:94:da:3f:39:49:fc:24:3b:a4:ab:b3:24:a1:4a:ac:68: 14:0e:ed:45:91:08:e9:04:96:7a:d4:56:8d:78:71:ab:02:ca: be:fa:08:94:14:67:6b:50:93:fa:7c:36:05:8e:07:57:da:25: 59:a4:9f:73:e8:b0:b1:d4:ed:c8:16:72:88:44:c8:5c:72:e5: 35:bc:68:a1:d2:a2:8a:61:fe:74:c1:70:ca:ba:7f:51:ff:85: e3:bc:94:97:f4:b6:8a:06:9d:6a:bb:cf:02:85:48:64:6f:22: bb:00:bd:f5:31:f7:81:b4:9b:04:22:d3:9c:fc:07:e9:d0:bf: 40:87:04:9c:e5:90:10:16:9f:ab:7b:13:94:7c:e3:b9:4d:7b: 8c:b5:fe:56:44:06:0a:81:b7:d2:e2:e3:8d:87:70:3b:0d:b3: c6:ce:49:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNBMjcxMTAvBgNVBAUTKDc5MkUwQjNFQjM2MDQ0MjdGQzg0OEY5NkM3MzRBQzRE OTlGRTc1OTYwHhcNMjUxMTAzMDMwODEyWhcNMjUxMTEwMDMwODEyWjAYMRYwFAYD VQQDEw02OTA4MWM5Yy01ODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+DtzwCiXuiOo6PgybWLhxw23LUviw9w31x851UDgqN1JLaD+Ve5BmooBwbL 3JTbh1974c9XsHmU0RmQwZqnl8FfNjC1BOIA+v8iDxMWvWQP2t1cpunKSElJxS+c Z+iuCZIZQzZNA9oKSmle3JfbTMMI8x4M07hE9KOl7HjfcSOgvrr1wn4F5EJd00cB EaAxVjtmwh1ajGMJ1n3s5/L+bAA8txpPPbOL1y2poQBgpNNqgip/0XN3hxWPEm9b 5d0xWpopAQVLvCY/g+bVZ/w2tR7PgOE7qyxRH2+p9DHcTet/OAIOhs85j++Lxdlu BzLTbfb1b/wIfnCrydPJ0pesBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAh2LLK /zwGHTWcWDeE/qKMW2bwMB8GA1UdIwQYMBaAFHkuCz6zYEQn/ISPlsc0rE2Z/nWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0EyNy81MzVFQTY0RTIx RjcxMUVFQkI4NDg2MzRDNEY5QUUwMi9lUzRMUHJOZ1JDZjhoSS1XeHpTc1Rabi1k WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VTNExQck5nUkNmOGhJLVd4elNzVFpuLWRaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0EyNy81MzVFQTY0RTIxRjcxMUVFQkI4NDg2MzRDNEY5QUUwMi9lUzRMUHJOZ1JD ZjhoSS1XeHpTc1Rabi1kWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChzEjCQ24FQqUOOWSWgFY8Ec78/2TUpJ4dfVFelUs/cQtZT+/e8MaW 1+73JvcdhTYQptYnu1pLK4ANHT44PLD0rnPx09SuyWXqAzkXE4R3rbmKjSYOKAr8 0prFPJTaPzlJ/CQ7pKuzJKFKrGgUDu1FkQjpBJZ61FaNeHGrAsq++giUFGdrUJP6 fDYFjgdX2iVZpJ9z6LCx1O3IFnKIRMhccuU1vGih0qKKYf50wXDKun9R/4XjvJSX 9LaKBp1qu88ChUhkbyK7AL31MfeBtJsEItOc/Afp0L9AhwSc5ZAQFp+rexOUfOO5 TXuMtf5WRAYKgbfS4uONh3A7DbPGzknJ -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:58 2025 by rpki-client