$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft File: EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json) Hash identifier: fRnOpN6323dylHLNc9BXrkulv8s5BJPUtGgclJ3QO4M= Subject key identifier: 26:4D:5D:37:9F:E3:30:C2:47:6E:03:12:93:87:8A:96:42:DD:5A:78 Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 Certificate issuer: /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft Manifest number: 0133 Signing time: Wed 05 Nov 2025 04:42:24 +0000 Manifest this update: Wed 05 Nov 2025 04:42:24 +0000 Manifest next update: Wed 12 Nov 2025 04:42:24 +0000 Files and hashes: 1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: AbD7dKEIUNKUDjPyW9jLuAC3+OV5Mq7OrPUyuiJnnuo=) 2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: J5vtQMTwpL/xmHDO4Uy4YqCD/INA3rpqnN+ZrH/2hAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Validity Not Before: Nov 5 04:42:24 2025 GMT Not After : Nov 12 04:42:24 2025 GMT Subject: CN=690ad5b0-b8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:0e:21:74:68:b0:fb:8c:a4:92:50:b3:64: 48:11:7d:a0:a7:c1:44:f6:d7:ab:9c:0e:a1:d3:0c: 3a:ba:c5:3a:9d:a7:1d:e0:d7:90:ec:9b:38:04:97: 48:54:d8:fb:77:0f:98:fd:bd:cb:09:7d:cf:59:9a: 7c:45:82:18:9d:e1:e0:4b:10:2e:65:fe:07:22:07: 4b:87:a9:92:af:ce:6c:67:13:cf:a0:c8:eb:b6:7a: 51:05:f0:af:f0:0f:f6:c3:4e:c8:6c:73:52:36:33: b3:5c:ca:2f:84:13:9e:f5:3f:23:34:b4:d8:bd:b2: 95:f1:3d:d4:96:8d:24:cc:75:e1:34:98:74:07:48: 2e:57:ad:d5:b2:45:79:cd:19:97:46:d5:ee:81:39: 62:35:d4:6a:74:68:b6:a8:70:d5:05:f9:5a:85:91: 6b:0a:8c:d6:b2:4d:e7:4f:63:74:a9:94:8b:f2:58: 12:8b:63:18:5a:ed:72:42:53:cd:03:e3:f1:f8:43: 9d:73:ca:db:a1:43:d3:ed:64:7a:c7:e3:ea:35:40: b6:a4:b8:cd:64:6b:ff:3c:5b:98:c7:c8:f3:b8:a4: 1b:a5:25:4e:1e:1a:5a:c7:92:f1:4a:a9:ce:63:fb: f7:9c:c8:5a:cb:c2:eb:fe:07:34:bf:3f:b7:10:c4: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4D:5D:37:9F:E3:30:C2:47:6E:03:12:93:87:8A:96:42:DD:5A:78 X509v3 Authority Key Identifier: keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7a:93:d5:1b:c5:c6:aa:96:ef:18:e0:0f:ea:95:35:78:a4: b1:87:01:7c:44:1b:f1:b3:46:a3:b1:fd:a4:ff:49:78:92:71: 94:34:66:f3:dd:d6:25:d3:ca:1d:02:8a:72:0b:a9:33:21:08: 52:6c:5b:81:eb:74:3e:57:9e:ca:04:b7:67:c4:ca:4b:0e:d5: 11:dc:5d:ba:da:69:12:29:4f:34:20:ee:32:52:c9:8f:73:39: 87:fd:93:d6:97:bc:02:6e:c9:3f:d6:30:7a:1f:50:f9:2f:a7: aa:0d:e3:cb:9e:95:50:32:4d:46:1d:bf:19:bf:7e:f7:87:ef: 07:62:04:9a:6b:4e:51:ef:03:a6:6c:81:25:ca:b4:96:93:8d: 49:27:fd:83:fe:ea:ad:7f:53:23:a2:ec:87:9c:56:13:d0:2e: b7:03:54:37:f9:5b:4a:28:d2:5a:58:88:11:76:39:f5:3d:8c: 55:c2:37:4f:2e:23:72:42:b1:2b:27:b7:e5:80:22:fb:df:97: 95:99:8a:22:4e:8e:35:bc:bd:15:41:c1:a0:a5:ac:28:03:94: 2a:2e:76:a5:8a:b4:26:4e:6e:47:f5:03:55:65:68:92:96:a9: b5:bd:fa:c1:bb:76:69:df:81:b5:f4:ec:8f:b1:cd:43:5b:16: 95:9a:c1:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCREExMTAvBgNVBAUTKDEwN0EzOUMxQ0MwNEYyN0NDNzI2NjNEQkY3QkFFNkQ5 MkE5NTAzODAwHhcNMjUxMTA1MDQ0MjI0WhcNMjUxMTEyMDQ0MjI0WjAYMRYwFAYD VQQDEw02OTBhZDViMC1iOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcMOIXRosPuMpJJQs2RIEX2gp8FE9ternA6h0ww6usU6nacd4NeQ7Js4BJdI VNj7dw+Y/b3LCX3PWZp8RYIYneHgSxAuZf4HIgdLh6mSr85sZxPPoMjrtnpRBfCv 8A/2w07IbHNSNjOzXMovhBOe9T8jNLTYvbKV8T3Ulo0kzHXhNJh0B0guV63VskV5 zRmXRtXugTliNdRqdGi2qHDVBflahZFrCozWsk3nT2N0qZSL8lgSi2MYWu1yQlPN A+Px+EOdc8rboUPT7WR6x+PqNUC2pLjNZGv/PFuYx8jzuKQbpSVOHhpax5LxSqnO Y/v3nMhay8Lr/gc0vz+3EMTcNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZNXTef 4zDCR24DEpOHipZC3Vp4MB8GA1UdIwQYMBaAFBB6OcHMBPJ8xyZj2/e65tkqlQOA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkJEQS82QUQzNzRBQUU2 NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThuekhKbVBiOTdybTJTcVZB NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIbzV3Y3dFOG56SEptUGI5N3JtMlNxVkE0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkJEQS82QUQzNzRBQUU2NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThu ekhKbVBiOTdybTJTcVZBNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKepPVG8XGqpbvGOAP6pU1eKSxhwF8RBvxs0ajsf2k/0l4knGUNGbz 3dYl08odAopyC6kzIQhSbFuB63Q+V57KBLdnxMpLDtUR3F262mkSKU80IO4yUsmP czmH/ZPWl7wCbsk/1jB6H1D5L6eqDePLnpVQMk1GHb8Zv373h+8HYgSaa05R7wOm bIElyrSWk41JJ/2D/uqtf1MjouyHnFYT0C63A1Q3+VtKKNJaWIgRdjn1PYxVwjdP LiNyQrErJ7flgCL735eVmYoiTo41vL0VQcGgpawoA5QqLnalirQmTm5H9QNVZWiS lqm1vfrBu3Zp34G19OyPsc1DWxaVmsHF -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:53 2025 by rpki-client