$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json) Hash identifier: RaQjK4fC0EnGlnoGxebOJfFO3rrJT+rStBlz2//UrGM= Subject key identifier: 6C:31:F8:CD:E9:F6:BE:FD:BE:34:21:7F:34:A0:C5:13:B4:64:08:2F Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft Manifest number: 014C Signing time: Mon 03 Nov 2025 04:17:03 +0000 Manifest this update: Mon 03 Nov 2025 04:17:02 +0000 Manifest next update: Mon 10 Nov 2025 04:17:02 +0000 Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: OFj2erP22IGHK0CBIggHjTQhGZKRn5V1vT6i/3AZH7A=) 2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Validity Not Before: Nov 3 04:17:02 2025 GMT Not After : Nov 10 04:17:02 2025 GMT Subject: CN=69082cbf-16cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:ef:aa:c0:18:45:03:ae:09:0a:08:f4:18: 83:3c:fe:4d:48:77:bf:ce:b9:e3:5d:d2:c5:0f:92: c4:18:42:f9:0d:43:b2:db:83:e9:bc:cf:ee:67:9a: 2f:fd:cd:c9:cc:32:7a:31:c7:72:3e:0e:c0:40:98: 44:76:ab:7d:c7:6b:29:e7:a5:a5:a5:9d:46:b4:d1: 67:d6:a9:d9:cd:5c:b3:16:86:0b:47:45:37:35:29: 8b:cd:bc:40:e0:29:5f:6c:c1:80:75:e3:79:8b:56: 55:59:2f:cd:e6:0f:fd:02:12:e9:68:62:bb:f8:b6: 2f:6c:81:96:e9:50:50:65:21:40:9f:cd:a7:5a:f8: 81:8b:8a:92:dc:8c:65:98:8a:12:e3:5f:af:3b:0c: 61:56:b1:26:65:56:9b:8d:dc:5e:1a:a2:2a:48:03: fc:e9:59:e1:75:21:cd:0e:58:fd:c0:2f:59:f4:3e: 34:83:d2:fd:11:61:12:8f:dd:f8:7e:d4:c2:58:61: 80:05:91:73:be:41:1b:41:bc:d8:f2:5d:6b:17:0f: de:81:f7:66:ac:e0:c8:ae:87:5f:c3:13:56:a6:35: 33:e6:f2:f2:62:05:b6:24:98:35:cf:5a:66:d0:be: 59:e0:9e:ad:05:56:c1:b6:f3:5b:a2:81:4c:5c:12: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:31:F8:CD:E9:F6:BE:FD:BE:34:21:7F:34:A0:C5:13:B4:64:08:2F X509v3 Authority Key Identifier: keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ae:23:2f:67:45:8a:4a:19:fd:75:75:a4:97:de:ce:7b:37: 5a:e1:3a:8d:da:61:ba:65:93:9c:bb:4b:54:ce:c4:3a:61:d0: 9a:5d:c1:11:4e:50:2a:e0:a1:2e:5b:b1:ec:5a:11:cf:31:38: e8:7e:8f:25:d6:c8:84:4f:94:5f:c2:89:34:0e:2d:e6:46:a3: 24:54:5e:1a:f9:e4:dc:1f:fd:cd:16:b2:e6:b7:01:84:bd:b1: 94:26:95:87:27:86:f4:d5:52:0c:3c:07:1c:76:7b:16:93:4f: c1:c2:f6:2f:29:17:81:15:4d:27:85:e3:e1:d4:2c:8c:83:4d: e7:87:85:4b:41:90:23:ed:c7:16:8a:fd:7d:55:7a:9a:8f:86: f8:7d:14:d6:37:7e:3d:b5:b5:01:76:71:4e:d9:c7:e3:ff:82: 67:ef:d3:67:ba:da:68:4b:43:05:62:3b:30:65:6b:dd:86:96: 9a:ba:4c:84:51:85:fd:28:b0:12:98:93:6a:81:db:c4:d3:0a: 3b:05:ce:51:7a:0e:c2:88:0a:fe:fa:fa:c4:59:85:8b:86:4d: 9c:a2:b5:a9:76:2a:da:f0:91:ec:ed:75:fd:70:c3:8d:e9:9c: da:40:11:27:2b:5c:37:ce:d7:71:f9:d9:92:37:fa:a1:6d:0d: 44:71:4f:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKDExNUE0MTYwQzg1NTU0N0Q5RTMxMEM2MEQzRDA4OENC QkM5QTk5MkEwHhcNMjUxMTAzMDQxNzAyWhcNMjUxMTEwMDQxNzAyWjAYMRYwFAYD VQQDEw02OTA4MmNiZi0xNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6bvqsAYRQOuCQoI9BiDPP5NSHe/zrnjXdLFD5LEGEL5DUOy24PpvM/uZ5ov /c3JzDJ6McdyPg7AQJhEdqt9x2sp56WlpZ1GtNFn1qnZzVyzFoYLR0U3NSmLzbxA 4ClfbMGAdeN5i1ZVWS/N5g/9AhLpaGK7+LYvbIGW6VBQZSFAn82nWviBi4qS3Ixl mIoS41+vOwxhVrEmZVabjdxeGqIqSAP86VnhdSHNDlj9wC9Z9D40g9L9EWESj934 ftTCWGGABZFzvkEbQbzY8l1rFw/egfdmrODIrodfwxNWpjUz5vLyYgW2JJg1z1pm 0L5Z4J6tBVbBtvNbooFMXBIzvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwx+M3p 9r79vjQhfzSgxRO0ZAgvMB8GA1UdIwQYMBaAFBFaQWDIVVR9njEMYNPQiMu8mpkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC9GRUNBNzUwNkJF N0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZIMmVNUXhnMDlDSXk3eWFt U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1Tby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC9GRUNBNzUwNkJFN0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZI MmVNUXhnMDlDSXk3eWFtU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWriMvZ0WKShn9dXWkl97Oezda4TqN2mG6ZZOcu0tUzsQ6YdCaXcER TlAq4KEuW7HsWhHPMTjofo8l1siET5Rfwok0Di3mRqMkVF4a+eTcH/3NFrLmtwGE vbGUJpWHJ4b01VIMPAccdnsWk0/BwvYvKReBFU0nhePh1CyMg03nh4VLQZAj7ccW iv19VXqaj4b4fRTWN349tbUBdnFO2cfj/4Jn79NnutpoS0MFYjswZWvdhpaaukyE UYX9KLASmJNqgdvE0wo7Bc5Reg7CiAr++vrEWYWLhk2corWpdira8JHs7XX9cMON 6ZzaQBEnK1w3ztdx+dmSN/qhbQ1EcU8b -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:02 2025 by rpki-client