$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json) Hash identifier: lZqvGOF8aN8EaTA6ZTYZ29jomtR2Ee7ZbnhStgUDZ/8= Subject key identifier: C9:3B:00:6B:BB:E4:4A:B2:DF:C2:84:77:DF:09:1B:9B:93:B6:28:99 Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft Manifest number: 0199 Signing time: Tue 04 Nov 2025 15:28:02 +0000 Manifest this update: Tue 04 Nov 2025 15:28:01 +0000 Manifest next update: Tue 11 Nov 2025 15:28:01 +0000 Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: CVQrmIYisWY3MqZz2NT1Dyp4vrowlEzKwSTg+p0mqUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Validity Not Before: Nov 4 15:28:01 2025 GMT Not After : Nov 11 15:28:01 2025 GMT Subject: CN=690a1b82-ee58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:0f:5e:5a:dd:b1:e4:3d:6c:ec:03:46:e7: 5d:8d:4c:6c:02:a7:68:89:0a:03:df:51:5f:f9:8d: 4e:d1:8c:0a:bf:00:db:6a:cd:99:d8:2d:e7:a8:cc: 16:0e:05:6a:37:50:4c:02:43:09:b3:92:2b:13:f3: 75:79:84:b9:4c:2c:82:54:46:27:00:0a:0c:33:7b: 2d:f8:6b:98:7f:b7:15:d6:22:f4:b2:6c:b0:59:03: 9a:6e:43:fc:f6:e4:c1:4d:d0:6b:6e:f9:30:03:d1: 52:ee:73:6d:81:5a:58:3b:87:d2:58:81:92:07:f5: fb:a1:82:c3:64:f1:d5:3d:e2:0d:a3:d2:74:f8:64: 56:3e:bf:dc:d6:69:bf:fa:7a:c5:94:bd:ad:83:91: 87:49:de:28:5a:74:7f:f4:d1:7c:17:44:43:aa:0e: 09:6f:19:2d:46:60:6f:28:88:0f:12:06:04:58:70: 97:fd:c2:dc:ca:cc:3c:05:b8:d6:ab:2b:b2:b2:95: f5:67:9d:78:d9:92:cf:f9:65:ea:22:c3:bd:5f:5b: b3:ab:b8:87:6e:54:61:ec:2d:fa:56:09:a6:b9:63: 84:d4:2b:80:85:ea:19:3f:18:1b:e4:f9:ea:d0:e9: 8a:29:27:f9:09:e5:29:02:25:92:ab:20:40:2f:ab: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3B:00:6B:BB:E4:4A:B2:DF:C2:84:77:DF:09:1B:9B:93:B6:28:99 X509v3 Authority Key Identifier: keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:5d:ef:31:9b:45:b2:c7:bb:63:8a:1c:9a:f9:7f:ff:e0:f4: 5f:fe:af:31:32:97:bd:95:7d:ba:e6:e5:ca:f7:e4:8f:b4:8d: 6e:dd:77:38:94:f2:8a:90:a1:4f:d4:8b:93:6a:56:e9:07:a3: 51:32:41:3a:af:fc:0c:bc:b8:7c:38:99:33:cc:53:41:b3:4c: 20:b5:9a:21:33:d6:05:b4:9e:53:47:ee:07:4e:e6:86:02:af: 5b:4b:fb:0e:d3:08:4f:ed:98:94:f3:e0:26:6c:a0:14:38:54: 90:90:05:2b:70:4f:19:04:4c:d2:16:4f:6b:00:cb:29:5a:17: 47:01:99:01:b0:8c:af:2d:cb:d3:bb:ed:0c:5b:4b:63:72:2f: 2f:80:ac:1d:6c:fc:15:33:c0:b9:78:43:54:17:22:d0:27:f2: 4f:71:50:58:b1:24:e4:73:2d:32:ff:ee:b8:1f:b5:a6:83:0d: 72:85:a0:92:66:38:61:1c:d8:2a:0e:84:fe:a2:1f:51:fd:86: 91:3b:d2:6a:df:3c:96:1c:c0:3c:87:ab:9d:38:ad:76:c2:2a: 93:05:85:79:94:25:06:e5:0f:49:a9:1d:ea:d9:67:d5:d1:a0: e8:f2:79:d8:a8:ef:06:80:9d:e2:49:64:d8:3f:81:b4:92:93: 91:04:42:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0 RTdCNDNCMTcwHhcNMjUxMTA0MTUyODAxWhcNMjUxMTExMTUyODAxWjAYMRYwFAYD VQQDEw02OTBhMWI4Mi1lZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0kPXlrdseQ9bOwDRuddjUxsAqdoiQoD31Ff+Y1O0YwKvwDbas2Z2C3nqMwW DgVqN1BMAkMJs5IrE/N1eYS5TCyCVEYnAAoMM3st+GuYf7cV1iL0smywWQOabkP8 9uTBTdBrbvkwA9FS7nNtgVpYO4fSWIGSB/X7oYLDZPHVPeINo9J0+GRWPr/c1mm/ +nrFlL2tg5GHSd4oWnR/9NF8F0RDqg4JbxktRmBvKIgPEgYEWHCX/cLcysw8BbjW qyuyspX1Z5142ZLP+WXqIsO9X1uzq7iHblRh7C36VgmmuWOE1CuAheoZPxgb5Pnq 0OmKKSf5CeUpAiWSqyBAL6tH6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMk7AGu7 5Eqy38KEd98JG5uTtiiZMB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16 MWtjVG9mYkVocUJPZTBPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOXe8xm0Wyx7tjihya+X//4PRf/q8xMpe9lX265uXK9+SPtI1u3Xc4 lPKKkKFP1IuTalbpB6NRMkE6r/wMvLh8OJkzzFNBs0wgtZohM9YFtJ5TR+4HTuaG Aq9bS/sO0whP7ZiU8+AmbKAUOFSQkAUrcE8ZBEzSFk9rAMspWhdHAZkBsIyvLcvT u+0MW0tjci8vgKwdbPwVM8C5eENUFyLQJ/JPcVBYsSTkcy0y/+64H7Wmgw1yhaCS ZjhhHNgqDoT+oh9R/YaRO9Jq3zyWHMA8h6udOK12wiqTBYV5lCUG5Q9JqR3q2WfV 0aDo8nnYqO8GgJ3iSWTYP4G0kpORBELl -----END CERTIFICATE-----Generated at Tue Nov 4 21:28:59 2025 by rpki-client