$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: GUvJqGFowGCFGKSnBBFBAnxMZTVv6+xQxx68mdZW2yg= Subject key identifier: 5A:D5:0A:DB:EF:BA:F7:8B:D9:E0:9D:15:1E:37:78:F6:4A:57:F7:4B Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 9E Signing time: Mon 03 Nov 2025 06:21:47 +0000 Manifest this update: Mon 03 Nov 2025 06:21:46 +0000 Manifest next update: Mon 10 Nov 2025 06:21:46 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: Ffn9OfsXtmVYV+/8kEfncNuBNeSbqRBFW652ux4fl6w=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Nov 3 06:21:46 2025 GMT Not After : Nov 10 06:21:46 2025 GMT Subject: CN=690849fa-89cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:5e:3f:c0:5c:e7:e3:2f:74:7f:3b:54:29: eb:da:e5:e0:b8:9b:e3:70:7e:69:78:ea:cd:d3:64: 19:2d:73:0d:87:63:77:b0:83:60:44:b6:92:45:8f: d8:4e:1d:81:e8:55:ad:25:2e:34:81:60:d2:6f:ed: b5:5a:a2:eb:ad:6a:d6:ba:48:2f:e1:58:1a:7a:1c: 77:12:05:fc:63:fd:b0:0a:eb:68:10:5d:5b:a1:e6: 1f:0e:dc:e1:99:ef:2d:52:32:50:e6:0a:4a:9c:d7: 5c:79:8b:26:56:b1:f2:5c:c1:98:fa:f9:49:d9:94: f0:7a:1e:3b:ad:60:d1:2e:4c:95:89:66:61:90:fa: d4:07:17:c8:45:8a:ab:aa:7e:b0:63:ba:42:fa:02: fd:e9:35:17:31:63:1b:23:83:9c:d5:b0:24:37:ab: 33:01:39:09:66:60:4e:c6:37:fe:ef:49:14:c8:5b: 41:31:3a:82:a8:35:ed:55:0a:b1:7f:bf:9d:4c:fd: 8e:88:85:fa:11:48:96:98:ed:2c:57:e8:4b:5d:39: e5:a8:66:46:fc:7b:5c:88:fb:06:34:4e:2d:9d:2f: cf:77:73:81:49:a9:2a:8b:12:3f:7b:90:38:96:c8: 89:6f:e0:54:0c:ae:4d:c4:40:54:1d:76:eb:5a:30: 5f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D5:0A:DB:EF:BA:F7:8B:D9:E0:9D:15:1E:37:78:F6:4A:57:F7:4B X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:62:d8:8d:d7:73:30:35:2f:48:39:63:9f:6c:e0:fa:66:a4: a6:d2:83:f9:24:9e:38:ce:30:db:98:42:59:ac:dc:dd:ed:b3: 48:8f:3d:75:63:07:fa:41:f6:95:f5:50:9d:b5:1d:59:46:0b: ce:a4:da:1c:b1:54:62:22:68:65:de:b4:d7:2d:e7:82:07:fd: ca:c6:9f:38:4e:84:5e:22:15:b8:74:56:14:04:02:a1:9a:ca: 4d:72:85:7a:c7:4e:bc:96:0c:26:df:38:58:b7:1c:e1:63:6f: 92:f2:35:69:f5:4a:c6:ba:b8:3d:3d:41:4c:5e:fb:a0:4e:b8: 9b:79:a2:b8:04:6a:32:6c:97:02:e1:65:07:3d:1a:6b:09:d7: 1d:8f:13:39:6f:00:1b:72:f5:d6:df:04:a5:90:f7:c0:9b:44: 97:b3:10:45:b8:66:26:46:7c:47:ef:3f:47:5c:e1:61:87:04: 54:dc:39:d9:7e:25:c6:35:2d:54:82:31:63:8c:95:63:0b:af: d9:6b:07:c0:cb:75:63:7d:01:82:e4:c5:f6:c1:49:a6:c4:81: 69:51:95:c4:b1:2f:32:15:a7:54:92:de:e6:1a:51:fe:ec:17: 49:f8:2c:b5:49:3b:a1:b6:8d:01:57:01:67:29:14:e9:c9:35: fb:d4:22:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0 RDFCOUExNTEwHhcNMjUxMTAzMDYyMTQ2WhcNMjUxMTEwMDYyMTQ2WjAYMRYwFAYD VQQDEw02OTA4NDlmYS04OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEReP8Bc5+MvdH87VCnr2uXguJvjcH5peOrN02QZLXMNh2N3sINgRLaSRY/Y Th2B6FWtJS40gWDSb+21WqLrrWrWukgv4Vgaehx3EgX8Y/2wCutoEF1boeYfDtzh me8tUjJQ5gpKnNdceYsmVrHyXMGY+vlJ2ZTweh47rWDRLkyViWZhkPrUBxfIRYqr qn6wY7pC+gL96TUXMWMbI4Oc1bAkN6szATkJZmBOxjf+70kUyFtBMTqCqDXtVQqx f7+dTP2OiIX6EUiWmO0sV+hLXTnlqGZG/HtciPsGNE4tnS/Pd3OBSakqixI/e5A4 lsiJb+BUDK5NxEBUHXbrWjBfdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrVCtvv uveL2eCdFR43ePZKV/dLMB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQy SV9wdU1kdXJTYUpORzVvVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpYtiN13MwNS9IOWOfbOD6ZqSm0oP5JJ44zjDbmEJZrNzd7bNIjz11 Ywf6QfaV9VCdtR1ZRgvOpNocsVRiImhl3rTXLeeCB/3Kxp84ToReIhW4dFYUBAKh mspNcoV6x068lgwm3zhYtxzhY2+S8jVp9UrGurg9PUFMXvugTribeaK4BGoybJcC 4WUHPRprCdcdjxM5bwAbcvXW3wSlkPfAm0SXsxBFuGYmRnxH7z9HXOFhhwRU3DnZ fiXGNS1UgjFjjJVjC6/ZawfAy3VjfQGC5MX2wUmmxIFpUZXEsS8yFadUkt7mGlH+ 7BdJ+Cy1STuhto0BVwFnKRTpyTX71CL4 -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:54 2025 by rpki-client