$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft File: eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft (raw, json) Hash identifier: z1vhl3wRSA/Nojy6PuRdjV2malIv8UqTIIY3R6nktGA= Subject key identifier: EF:DE:19:A0:D8:B0:E9:2D:0B:60:93:E2:20:B1:4C:DE:E2:E3:3F:2C Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44 Certificate issuer: /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344 Certificate serial: 23A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft Manifest number: 2389 Signing time: Tue 04 Nov 2025 15:54:02 +0000 Manifest this update: Tue 04 Nov 2025 15:54:02 +0000 Manifest next update: Tue 11 Nov 2025 15:54:02 +0000 Files and hashes: 1: eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl (hash: 5pP7T/Ibu5q4iRQ01GoTMSlholafG+99rcw/8497m2o=) 2: 384962A2709511EFB3C2992DC4F9AE02.roa (hash: YOc7DUo7eZoYnfNRbnOxXmZzWmvcCiQYkGybpqGaTU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9120 (0x23a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128992, serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344 Validity Not Before: Nov 4 15:54:02 2025 GMT Not After : Nov 11 15:54:02 2025 GMT Subject: CN=690a219a-16fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:ef:4d:88:c5:0a:83:92:b1:89:cc:a3:ca: 5f:4c:43:b0:8f:8e:16:11:c0:8f:3b:6b:db:d0:3f: fe:ee:62:da:4d:1e:f3:a9:0d:fc:5c:34:9e:bf:64: 0b:be:58:19:8d:62:57:97:7c:3c:97:14:0d:51:0d: a1:40:39:4a:f0:d6:66:7b:a6:8c:e7:00:d7:30:e9: dc:e0:24:cf:9a:cf:05:4d:be:1e:9c:b6:9f:d4:d2: c7:db:35:3c:8c:97:c7:7a:ea:b0:e8:94:88:ed:73: e8:18:9b:fb:84:a9:6b:a8:76:79:54:95:0c:76:5a: 97:a4:57:46:7f:76:95:02:20:73:75:ad:f9:82:98: 3e:72:ae:c2:5e:da:d5:ed:13:c5:14:06:f1:d2:34: b6:53:b1:3c:7a:64:fb:b8:79:e9:ee:29:06:61:52: 7c:77:2b:2d:4b:d9:c2:f7:0f:05:53:80:d1:6e:e4: af:2b:b8:41:ca:df:d9:b1:f1:e7:28:3b:15:f0:8b: 07:f3:cb:12:6e:e4:cc:2d:c0:23:0b:6e:1a:35:20: f0:27:d3:70:47:0c:da:22:d1:c0:aa:5c:47:3a:36: ec:37:2d:db:2b:76:6d:7f:3a:e1:fe:0e:95:33:a2: a1:31:8e:79:df:da:37:f8:67:49:be:45:83:0c:8f: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:19:A0:D8:B0:E9:2D:0B:60:93:E2:20:B1:4C:DE:E2:E3:3F:2C X509v3 Authority Key Identifier: keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:24:2c:94:2e:d6:37:86:75:92:3d:1c:aa:6e:cb:c7:d0:87: c4:b4:cd:9e:c0:39:da:52:a1:c5:7f:28:6c:20:e7:44:33:a4: 27:9e:8b:f7:21:dc:ea:f5:de:aa:bc:9e:6d:e4:0b:9a:a4:60: 65:e3:08:e5:a5:60:ba:df:24:7d:0c:e2:34:76:80:a7:a3:58: b9:81:b5:23:d1:60:31:90:c4:17:dd:71:fb:eb:c9:5f:cf:e9: 65:ce:06:00:41:03:7f:11:0f:06:2a:e5:b5:8c:b2:bf:64:55: f1:56:06:65:6a:db:e5:f8:67:1b:ad:b1:37:e4:03:42:64:68: 7b:b7:dc:72:69:9a:98:cb:98:59:f6:08:14:3e:59:44:f1:b0: 38:64:a5:98:ad:98:ca:3f:2d:f0:b3:92:35:bd:d2:72:7d:28: 20:16:dd:5f:a4:c9:97:4a:c6:ec:2f:fd:f6:52:56:2b:0b:71: 76:90:be:14:23:f3:a9:da:4f:4d:b9:5a:83:73:be:64:28:54: cd:8d:eb:a0:8a:52:f8:db:58:e0:dc:b7:44:ea:18:71:f9:3c: c3:8b:ca:26:4d:8b:c2:a6:01:13:08:82:d7:d2:c5:21:0c:de: ee:8a:da:3e:d4:e0:d0:1f:b9:ed:f9:00:d5:f0:f5:85:02:36: 0e:82:5a:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5OTIxMTAvBgNVBAUTKDc5MDE0QTVGMDczMTlGMDQ2MEZDRDA0RkM0QUFBQkND RTA5RUQzNDQwHhcNMjUxMTA0MTU1NDAyWhcNMjUxMTExMTU1NDAyWjAYMRYwFAYD VQQDEw02OTBhMjE5YS0xNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolnvTYjFCoOSsYnMo8pfTEOwj44WEcCPO2vb0D/+7mLaTR7zqQ38XDSev2QL vlgZjWJXl3w8lxQNUQ2hQDlK8NZme6aM5wDXMOnc4CTPms8FTb4enLaf1NLH2zU8 jJfHeuqw6JSI7XPoGJv7hKlrqHZ5VJUMdlqXpFdGf3aVAiBzda35gpg+cq7CXtrV 7RPFFAbx0jS2U7E8emT7uHnp7ikGYVJ8dystS9nC9w8FU4DRbuSvK7hByt/ZsfHn KDsV8IsH88sSbuTMLcAjC24aNSDwJ9NwRwzaItHAqlxHOjbsNy3bK3Ztfzrh/g6V M6KhMY5539o3+GdJvkWDDI9VjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/eGaDY sOktC2CT4iCxTN7i4z8sMB8GA1UdIwQYMBaAFHkBSl8HMZ8EYPzQT8Sqq8zgntNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODk5Mi9GQURCQzU2Qzg3 QTExMUU1QUVCNDdGNERDNEY5QUUwMi9lUUZLWHdjeG53UmdfTkJQeEtxcnpPQ2Uw MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VRRktYd2N4bndSZ19OQlB4S3Fyek9DZTAwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODk5Mi9GQURCQzU2Qzg3QTExMUU1QUVCNDdGNERDNEY5QUUwMi9lUUZLWHdjeG53 UmdfTkJQeEtxcnpPQ2UwMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMJCyULtY3hnWSPRyqbsvH0IfEtM2ewDnaUqHFfyhsIOdEM6Qnnov3 Idzq9d6qvJ5t5AuapGBl4wjlpWC63yR9DOI0doCno1i5gbUj0WAxkMQX3XH768lf z+llzgYAQQN/EQ8GKuW1jLK/ZFXxVgZlatvl+GcbrbE35ANCZGh7t9xyaZqYy5hZ 9ggUPllE8bA4ZKWYrZjKPy3ws5I1vdJyfSggFt1fpMmXSsbsL/32UlYrC3F2kL4U I/Op2k9NuVqDc75kKFTNjeugilL421jg3LdE6hhx+TzDi8omTYvCpgETCILX0sUh DN7uito+1ODQH7nt+QDV8PWFAjYOglon -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:26 2025 by rpki-client