$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: og2mNCMIw9h/J+BP8o57dEg1Uf2YC6+HYm91Qef96lU= Subject key identifier: FD:76:D3:90:8B:88:92:00:9F:B0:6A:5D:AC:2D:57:D6:AD:D5:E2:53 Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 0A03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 09FC Signing time: Sun 02 Nov 2025 19:49:55 +0000 Manifest this update: Sun 02 Nov 2025 19:49:55 +0000 Manifest next update: Sun 09 Nov 2025 19:49:55 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: XaOYl5WZRkBgRiJF9vU06lBrQqVqmEHvpm32Gh2lS/w=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: j3TvpWzSPFDlAyo3sD7Pw75i2w5zEIxOHyTqJM4+nXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2563 (0xa03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: Nov 2 19:49:55 2025 GMT Not After : Nov 9 19:49:55 2025 GMT Subject: CN=6907b5e3-e4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:c1:42:30:e4:cd:fe:09:33:f0:7e:d7:1d: c3:0b:dd:b5:97:65:af:58:6e:f3:de:06:bf:1b:91: 41:36:a0:61:cf:a5:03:b6:29:93:15:8a:4b:91:09: a1:64:bb:8c:cf:86:ff:ab:b9:1b:57:b0:7f:d3:8b: 5d:9c:13:6c:26:b7:2c:be:99:f8:b6:b1:8c:93:e7: 72:c4:52:d5:34:78:91:b5:e9:48:a6:cb:3e:dc:ff: 0d:dc:ff:b9:18:40:63:b2:8a:9f:66:5e:1f:ac:86: d8:6c:03:ab:16:49:8c:85:b7:01:34:60:47:36:d2: f8:d0:9e:cf:39:eb:c1:61:a3:dd:87:3e:e0:83:9c: 6d:14:1e:44:68:58:d4:73:f5:3e:30:cf:01:ff:55: ff:ae:8c:75:a3:18:e1:5d:d3:c1:a7:54:b0:5d:c0: fc:ba:58:4e:75:1e:12:ed:bf:2c:d3:97:99:17:a6: a2:72:f4:71:52:eb:ec:fb:98:c7:ac:b6:67:b9:50: 9d:e7:70:86:3a:10:79:45:3b:9b:51:87:f4:b1:61: 30:e7:5a:63:17:0d:63:a3:70:0b:f5:2b:4c:58:40: c3:ea:fb:86:da:89:78:b7:01:05:06:a0:73:16:5b: 5f:52:c4:46:de:05:a0:2a:ed:e7:30:f2:96:e5:31: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:76:D3:90:8B:88:92:00:9F:B0:6A:5D:AC:2D:57:D6:AD:D5:E2:53 X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b8:d8:bf:43:2c:aa:6f:de:28:7a:0c:7b:56:0c:e7:e8:de: 6c:8f:f4:a8:a4:16:b5:4b:4c:6a:a4:fc:4f:4b:e5:6e:b4:5e: 8e:46:f5:7a:15:c3:28:d9:07:9a:56:9a:df:69:81:b9:3b:a6: 2d:cd:a6:98:dd:0d:ed:bc:44:fe:ea:08:bc:72:ce:16:2c:99: 02:23:cd:9c:af:f0:09:95:59:ec:db:83:25:bc:43:89:40:75: cd:91:8e:04:5d:02:8b:83:9e:17:09:58:ef:17:4a:cd:5a:0d: d9:12:a3:35:a6:c1:fa:c6:f2:ec:be:bd:d7:d4:bc:16:9e:c0: 91:7f:c3:8b:91:a1:5d:11:34:b8:9f:47:30:74:af:9c:81:78: 7d:3b:22:5a:34:6d:ce:ff:8f:a1:24:c6:91:52:50:cb:2e:5f: 1b:e1:b7:98:41:3c:da:6d:fa:87:67:fb:32:da:70:90:05:4b: af:a3:1f:8e:8b:da:8d:1a:52:9b:ce:16:0d:12:61:87:ba:05: 45:19:46:9f:d6:49:48:ea:59:b2:ad:be:eb:21:52:f8:8f:d7: 8d:44:41:2d:a6:b5:06:8b:a5:ff:31:e0:eb:09:47:a9:cd:02: 08:e1:9c:1e:b3:ac:7e:0c:50:6b:43:ab:03:db:26:27:9d:2d: ea:e8:05:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUxMTAyMTk0OTU1WhcNMjUxMTA5MTk0OTU1WjAYMRYwFAYD VQQDEw02OTA3YjVlMy1lNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstnBQjDkzf4JM/B+1x3DC921l2WvWG7z3ga/G5FBNqBhz6UDtimTFYpLkQmh ZLuMz4b/q7kbV7B/04tdnBNsJrcsvpn4trGMk+dyxFLVNHiRtelIpss+3P8N3P+5 GEBjsoqfZl4frIbYbAOrFkmMhbcBNGBHNtL40J7POevBYaPdhz7gg5xtFB5EaFjU c/U+MM8B/1X/rox1oxjhXdPBp1SwXcD8ulhOdR4S7b8s05eZF6aicvRxUuvs+5jH rLZnuVCd53CGOhB5RTubUYf0sWEw51pjFw1jo3AL9StMWEDD6vuG2ol4twEFBqBz FltfUsRG3gWgKu3nMPKW5TG28QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1205CL iJIAn7BqXawtV9at1eJTMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7uNi/Qyyqb94oegx7Vgzn6N5sj/SopBa1S0xqpPxPS+VutF6ORvV6 FcMo2QeaVprfaYG5O6YtzaaY3Q3tvET+6gi8cs4WLJkCI82cr/AJlVns24MlvEOJ QHXNkY4EXQKLg54XCVjvF0rNWg3ZEqM1psH6xvLsvr3X1LwWnsCRf8OLkaFdETS4 n0cwdK+cgXh9OyJaNG3O/4+hJMaRUlDLLl8b4beYQTzabfqHZ/sy2nCQBUuvox+O i9qNGlKbzhYNEmGHugVFGUaf1klI6lmyrb7rIVL4j9eNREEtprUGi6X/MeDrCUep zQII4Zwes6x+DFBrQ6sD2yYnnS3q6AXm -----END CERTIFICATE-----Generated at Tue Nov 4 12:35:00 2025 by rpki-client