$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: Dr5vE4bdJuE7A/kLIGJgcsMXUlF5mLWuwigVLW2Wmmg= Subject key identifier: 3B:69:2B:BF:1A:32:FD:B1:9B:49:AB:6A:64:5B:EC:F6:AB:A2:8C:9C Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 0185 Signing time: Mon 03 Nov 2025 03:36:40 +0000 Manifest this update: Mon 03 Nov 2025 03:36:39 +0000 Manifest next update: Mon 10 Nov 2025 03:36:39 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: pwWDK0c9T39R8f7R3VBAQOneGEhJZ4CfgQf/n5V7aLM=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: 8KY8F5aAbZQBF/Qe5iecqKDmzqJcSSXnzASxQlPbo4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: Nov 3 03:36:39 2025 GMT Not After : Nov 10 03:36:39 2025 GMT Subject: CN=69082348-21e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:95:7b:c8:a2:59:7e:c1:3d:fc:af:0f:3f: 5c:7b:71:0e:3c:bc:26:2c:01:74:7a:56:57:ba:06: 0d:9f:bc:d8:2e:b7:5f:10:87:0f:77:e0:3f:52:08: ec:c4:62:7d:53:2b:d1:eb:ea:ba:83:e5:3d:48:54: a0:a4:a0:cc:1d:59:39:a3:a1:d3:98:91:b0:be:98: 47:5f:8a:32:b5:95:87:72:8d:06:b9:98:d7:a4:59: 82:6d:5c:02:c0:e8:07:5e:a8:f2:47:e1:b2:62:76: ac:64:b3:69:f5:24:b0:18:a0:4e:7e:ec:94:31:1f: 5e:28:ba:e7:a2:59:99:d5:11:4d:79:8d:13:d0:8c: 4e:cf:8c:60:76:f6:62:41:00:d0:aa:99:19:d8:1e: 54:6f:0f:8c:7c:d6:22:8d:4b:d4:46:90:c6:f2:5b: a3:e5:65:5b:58:9d:e6:81:eb:a1:a6:d8:e6:72:0b: af:8d:f7:f7:e0:42:1a:da:df:90:7e:4e:46:70:63: b8:21:d1:9f:7f:d2:55:6b:44:ec:e3:1a:25:79:a2: ec:73:df:e3:90:5b:bd:47:03:ac:ab:41:0e:96:2f: e3:af:d4:e6:0c:f3:66:89:ad:0b:a2:17:3c:5a:c7: 80:e7:16:08:10:91:f9:d6:76:a7:11:20:91:9d:4f: fb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:69:2B:BF:1A:32:FD:B1:9B:49:AB:6A:64:5B:EC:F6:AB:A2:8C:9C X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:91:a7:ec:b7:f1:5a:a1:42:3f:df:61:87:3b:c4:ed:95:b4: e4:e9:29:fc:fa:c7:ab:2b:8e:2b:b7:d0:9f:92:1b:0a:de:db: 9f:71:41:ec:f7:6c:7d:e1:84:8b:36:2a:3b:95:7a:5f:8b:b8: c7:9c:52:50:11:28:76:47:27:e8:b8:29:c7:d5:87:79:25:56: d3:ec:4f:6f:a5:1f:fc:38:12:8b:b3:7c:76:ff:3c:60:0d:d4: eb:f2:45:d1:a2:ea:4c:a9:f9:31:1e:27:dd:0e:5d:bc:b7:3a: fd:67:69:a2:bf:a6:18:a4:e8:85:4a:76:bd:4e:1e:24:01:03: 16:d4:52:a5:b6:5e:56:34:ca:28:65:da:aa:f0:0a:ff:4c:06: 75:28:a5:fb:b1:d2:02:f4:ac:c6:74:a5:a6:e6:19:ce:1e:e9: 8b:09:53:c8:f3:56:b3:d7:bc:5c:4b:75:6f:96:51:80:bc:fd: 11:89:fa:8e:ce:2b:ca:7b:4b:14:ac:c8:3e:6d:bf:f5:42:89: d2:aa:34:69:1b:21:a2:d2:75:89:12:e5:cf:36:3c:e1:64:37: 02:79:e4:2f:52:84:68:67:eb:7f:c2:ad:8a:52:37:ff:da:f6: 78:35:27:44:3a:49:75:21:de:20:d6:5b:29:c8:49:66:bb:39: 4a:a0:c5:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3 QUNGMjgwMkQwHhcNMjUxMTAzMDMzNjM5WhcNMjUxMTEwMDMzNjM5WjAYMRYwFAYD VQQDEw02OTA4MjM0OC0yMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLGVe8iiWX7BPfyvDz9ce3EOPLwmLAF0elZXugYNn7zYLrdfEIcPd+A/Ugjs xGJ9UyvR6+q6g+U9SFSgpKDMHVk5o6HTmJGwvphHX4oytZWHco0GuZjXpFmCbVwC wOgHXqjyR+GyYnasZLNp9SSwGKBOfuyUMR9eKLrnolmZ1RFNeY0T0IxOz4xgdvZi QQDQqpkZ2B5Ubw+MfNYijUvURpDG8luj5WVbWJ3mgeuhptjmcguvjff34EIa2t+Q fk5GcGO4IdGff9JVa0Ts4xoleaLsc9/jkFu9RwOsq0EOli/jr9TmDPNmia0Lohc8 WseA5xYIEJH51nanESCRnU/7KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtpK78a Mv2xm0mramRb7ParooycMB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2 OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS UjEtNnF5T1FFVnQ2enlnQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1kafst/FaoUI/32GHO8TtlbTk6Sn8+serK44rt9CfkhsK3tufcUHs 92x94YSLNio7lXpfi7jHnFJQESh2RyfouCnH1Yd5JVbT7E9vpR/8OBKLs3x2/zxg DdTr8kXRoupMqfkxHifdDl28tzr9Z2miv6YYpOiFSna9Th4kAQMW1FKltl5WNMoo Zdqq8Ar/TAZ1KKX7sdIC9KzGdKWm5hnOHumLCVPI81az17xcS3VvllGAvP0RifqO zivKe0sUrMg+bb/1QonSqjRpGyGi0nWJEuXPNjzhZDcCeeQvUoRoZ+t/wq2KUjf/ 2vZ4NSdEOkl1Id4g1lspyElmuzlKoMV/ -----END CERTIFICATE-----Generated at Wed Nov 5 02:01:46 2025 by rpki-client