$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: YaJqo+rddiL1yepzzaOiDAE5BErmLJK88TBz9srKQis= Subject key identifier: E5:9A:5A:34:DC:3C:16:CF:59:42:46:73:97:65:AF:7D:30:17:2E:8A Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D70 Signing time: Tue 04 Nov 2025 18:06:28 +0000 Manifest this update: Tue 04 Nov 2025 18:06:28 +0000 Manifest next update: Tue 11 Nov 2025 18:06:28 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: 1ijHtnMuxE217AMflepFhwYf2lppsbud9XbE0sFl2HA=) 2: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: J4Hv1naBopBVbkvmkR77VLmGUJiYmVXkbO9FW9SSP/s=) 3: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: Y+E2Zw8cSibO88OVDC2atGI8LaONXqL9mkfjf3pS0hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Nov 4 18:06:28 2025 GMT Not After : Nov 11 18:06:28 2025 GMT Subject: CN=690a40a4-3b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:49:9a:49:f9:f7:d7:d1:92:44:cc:55:7c: 5c:74:d8:c8:d2:59:cf:84:d3:cf:8b:8d:d0:4f:09: 8c:e1:74:9d:8a:85:b0:46:5d:ff:c7:9f:20:aa:e7: 7f:37:68:76:4d:8f:d5:3d:6d:26:bd:86:bb:e3:57: 9b:25:d4:6b:f9:20:b4:eb:20:d9:61:75:a2:d5:5d: dd:fa:d9:21:52:0c:1d:3c:48:88:72:8b:e5:ea:81: 24:aa:6b:21:ac:a2:48:ac:68:bc:e4:d2:29:bb:e7: f3:cc:24:7e:4b:f1:af:55:f3:9a:13:d9:9b:db:4e: ec:3e:c2:fb:0d:14:5c:a7:15:43:51:31:88:0e:bd: 4f:ff:f0:45:ec:46:5b:92:85:42:90:42:06:92:de: 16:fd:90:ab:24:6f:78:51:92:a8:4e:d7:33:0e:74: cd:e5:e3:bf:f5:df:14:1b:ac:87:86:a2:a9:bb:d9: 4e:41:3a:b3:31:c3:16:8d:87:c4:05:9e:87:45:77: 89:d0:8d:06:44:36:b8:69:3f:9f:64:45:8c:eb:f6: f4:20:67:5e:e9:9b:2c:11:bf:92:52:16:71:86:a7: 95:d9:35:d9:2f:61:9b:5b:c4:be:4e:da:b8:14:46: 59:db:95:1f:64:86:77:a6:9e:02:1f:81:2b:27:d4: ae:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9A:5A:34:DC:3C:16:CF:59:42:46:73:97:65:AF:7D:30:17:2E:8A X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e8:10:54:9a:ed:7b:7e:70:78:93:07:66:d4:0c:ae:5d:fe: f6:32:0c:07:15:0a:b5:6b:12:34:9b:f4:88:53:af:82:52:89: ec:8f:6c:a5:b6:c3:01:53:64:5e:6b:5f:66:51:e1:42:e1:d5: 9f:6f:59:99:30:74:ef:38:f5:1f:c6:d5:83:6d:c0:82:90:9c: b6:44:c3:d0:f9:20:e5:8b:97:6f:39:1e:d6:7d:1f:b2:52:17: 95:ba:71:23:ab:cf:d4:3c:5f:fc:b9:50:cf:d7:c5:76:ab:89: 17:30:51:97:e1:45:28:a6:1a:71:71:62:d2:d7:44:ec:be:1f: 98:50:4b:37:c3:8e:b1:92:94:af:9d:45:12:3c:c6:9f:2c:45: 70:78:bb:43:36:14:4b:2c:65:3e:be:3e:00:9a:08:a5:f7:05: e7:77:8b:d6:0e:20:bd:3d:c1:34:57:04:b1:2d:fa:0a:1e:30: a7:76:75:f2:85:40:7b:8b:6a:90:01:2f:d1:30:88:7c:7c:22: d1:d8:b9:23:2f:23:d7:ab:18:32:2c:4b:f3:4e:27:cc:85:27: 0d:b1:14:57:90:1a:a7:6e:e3:f4:8a:0b:6d:95:c6:56:dd:9b: 74:e9:83:c7:67:db:c9:fd:f0:ea:5b:42:3a:65:d1:4a:31:d8: a5:76:ab:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUxMTA0MTgwNjI4WhcNMjUxMTExMTgwNjI4WjAYMRYwFAYD VQQDEw02OTBhNDBhNC0zYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx5Jmkn599fRkkTMVXxcdNjI0lnPhNPPi43QTwmM4XSdioWwRl3/x58gqud/ N2h2TY/VPW0mvYa741ebJdRr+SC06yDZYXWi1V3d+tkhUgwdPEiIcovl6oEkqmsh rKJIrGi85NIpu+fzzCR+S/GvVfOaE9mb207sPsL7DRRcpxVDUTGIDr1P//BF7EZb koVCkEIGkt4W/ZCrJG94UZKoTtczDnTN5eO/9d8UG6yHhqKpu9lOQTqzMcMWjYfE BZ6HRXeJ0I0GRDa4aT+fZEWM6/b0IGde6ZssEb+SUhZxhqeV2TXZL2GbW8S+Ttq4 FEZZ25UfZIZ3pp4CH4ErJ9SujwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWaWjTc PBbPWUJGc5dlr30wFy6KMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt6BBUmu17fnB4kwdm1AyuXf72MgwHFQq1axI0m/SIU6+CUonsj2yl tsMBU2Rea19mUeFC4dWfb1mZMHTvOPUfxtWDbcCCkJy2RMPQ+SDli5dvOR7WfR+y UheVunEjq8/UPF/8uVDP18V2q4kXMFGX4UUophpxcWLS10Tsvh+YUEs3w46xkpSv nUUSPMafLEVweLtDNhRLLGU+vj4Amgil9wXnd4vWDiC9PcE0VwSxLfoKHjCndnXy hUB7i2qQAS/RMIh8fCLR2LkjLyPXqxgyLEvzTifMhScNsRRXkBqnbuP0igttlcZW 3Zt06YPHZ9vJ/fDqW0I6ZdFKMdildqtz -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:22 2025 by rpki-client