$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: baIZiEdnwf1sR68kKC88zdhkKFGNDhh1bWgRpKWSbAI= Subject key identifier: B2:EF:C1:C3:F5:CE:42:F9:A9:91:59:CD:05:33:36:AB:E5:86:79:61 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 0515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 050C Signing time: Tue 04 Nov 2025 23:42:13 +0000 Manifest this update: Tue 04 Nov 2025 23:42:12 +0000 Manifest next update: Tue 11 Nov 2025 23:42:12 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: cMOkoCyJjZ1xIA709oLabRsECVdwJ+XSWK5Wl01FHMY=) 2: 308C0A50A13C11F08C94C134C4F9AE02.roa (hash: MLNLxFV3l3v2qlx4z+7rlnxH45oQLQQp7Zd4nT4lSgg=) 3: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: oawqQy1Pv+77G3a1CKrM3zleGZuJqEu++rzrzzXvl0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1301 (0x515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Nov 4 23:42:12 2025 GMT Not After : Nov 11 23:42:12 2025 GMT Subject: CN=690a8f54-ab1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:03:84:12:88:1d:58:97:52:88:ce:b0:6c:b5: c1:16:ba:88:80:5f:4f:88:8c:8c:c4:57:de:bc:f2: 59:b5:3b:64:1a:d3:33:cd:bd:0e:4c:02:a9:73:72: c6:c6:ca:f3:ff:a0:ea:4b:58:b0:73:37:48:1e:95: 48:a7:0b:7d:ee:d1:c5:1e:57:f8:1b:35:9a:cc:48: 1f:f5:04:2a:ac:66:7c:27:3c:34:25:15:3a:42:23: dd:b2:64:29:2f:8c:2f:5c:bd:bf:8f:16:7a:6d:44: 1a:a6:87:1c:6c:28:d3:6d:44:3c:95:fa:f8:fc:2d: 92:77:40:90:93:97:49:eb:8a:8d:2f:aa:69:98:fa: c8:84:1c:cf:05:92:04:39:fa:a1:24:c0:25:47:24: 3b:bf:3a:14:e5:ad:12:c3:05:dd:67:b5:98:eb:3d: b3:7d:c0:6b:ae:55:32:35:ab:54:f8:60:b3:7e:da: 85:d1:2a:dd:8c:d0:14:b5:b2:d4:e7:65:4c:46:87: 0f:99:a7:b2:8e:ca:1f:bf:e3:52:7b:4a:b1:1e:55: 12:f5:3c:e5:14:f5:5f:b2:59:73:bc:c6:aa:11:5a: 43:73:27:22:14:ea:c2:50:4d:c5:eb:c9:f1:48:15: 8d:4e:3c:7c:3a:22:c9:06:14:78:9c:c7:07:72:d1: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EF:C1:C3:F5:CE:42:F9:A9:91:59:CD:05:33:36:AB:E5:86:79:61 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1b:c2:46:98:f0:f9:b1:06:c3:c1:35:22:11:05:f5:6f:ac: 08:44:b9:17:5e:4e:99:06:e8:34:a3:54:b9:3c:1a:58:a1:17: b2:b9:fa:ba:68:19:fc:52:76:30:d7:e0:a7:78:f5:78:e1:c6: 47:37:06:82:c8:08:ab:d6:3b:92:47:a3:93:cc:b9:bf:40:7e: 13:5d:b1:c6:8f:42:26:9d:e7:a3:5d:98:99:07:20:04:47:28: ec:be:aa:59:a9:43:86:a7:49:4b:b3:e6:14:c3:50:f1:3a:2c: 3a:89:d1:48:41:fd:05:a2:0d:4f:de:b7:31:84:97:fe:d1:f0: a1:e4:1c:8c:a3:b5:27:f2:7d:af:54:32:b2:59:1b:2d:e8:30: e7:bb:e1:d2:d5:02:2e:23:4b:ab:cc:b7:6a:1a:bb:85:a1:8e: 2c:cf:fd:22:2a:73:9c:8c:4d:f7:26:56:f6:bc:10:69:6c:68: 69:c7:a4:7e:aa:f9:ed:a5:a6:fa:8d:38:0a:61:d1:de:f6:d3: 28:2f:76:9d:2d:a4:fc:f9:88:23:ff:42:17:39:76:50:2e:c1: bb:68:e1:47:b0:9a:2b:c9:56:ad:f9:7a:28:f3:76:a8:70:16: db:97:df:23:47:78:69:e2:b1:0f:81:f0:a9:24:8f:a4:6d:39: 10:c5:a7:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUxMTA0MjM0MjEyWhcNMjUxMTExMjM0MjEyWjAYMRYwFAYD VQQDEw02OTBhOGY1NC1hYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwOEEogdWJdSiM6wbLXBFrqIgF9PiIyMxFfevPJZtTtkGtMzzb0OTAKpc3LG xsrz/6DqS1iwczdIHpVIpwt97tHFHlf4GzWazEgf9QQqrGZ8Jzw0JRU6QiPdsmQp L4wvXL2/jxZ6bUQapoccbCjTbUQ8lfr4/C2Sd0CQk5dJ64qNL6ppmPrIhBzPBZIE OfqhJMAlRyQ7vzoU5a0SwwXdZ7WY6z2zfcBrrlUyNatU+GCzftqF0SrdjNAUtbLU 52VMRocPmaeyjsofv+NSe0qxHlUS9TzlFPVfsllzvMaqEVpDcyciFOrCUE3F68nx SBWNTjx8OiLJBhR4nMcHctFaPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLvwcP1 zkL5qZFZzQUzNqvlhnlhMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgG8JGmPD5sQbDwTUiEQX1b6wIRLkXXk6ZBug0o1S5PBpYoReyufq6 aBn8UnYw1+CnePV44cZHNwaCyAir1juSR6OTzLm/QH4TXbHGj0ImneejXZiZByAE RyjsvqpZqUOGp0lLs+YUw1DxOiw6idFIQf0Fog1P3rcxhJf+0fCh5ByMo7Un8n2v VDKyWRst6DDnu+HS1QIuI0urzLdqGruFoY4sz/0iKnOcjE33Jlb2vBBpbGhpx6R+ qvntpab6jTgKYdHe9tMoL3adLaT8+Ygj/0IXOXZQLsG7aOFHsJoryVat+Xoo83ao cBbbl98jR3hp4rEPgfCpJI+kbTkQxaeW -----END CERTIFICATE-----Generated at Thu Nov 6 07:36:09 2025 by rpki-client