$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft File: eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json) Hash identifier: JmIdXJOlzIubZP4jvYfNtsh1jtnhDl6c3UBsgDYgIA4= Subject key identifier: A3:27:19:93:A7:D0:62:79:85:3A:29:D7:99:2A:57:8E:AB:58:DE:64 Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Certificate serial: 110C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft Manifest number: 1101 Signing time: Tue 04 Nov 2025 17:22:07 +0000 Manifest this update: Tue 04 Nov 2025 17:22:06 +0000 Manifest next update: Tue 11 Nov 2025 17:22:06 +0000 Files and hashes: 1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: /RgfqLLzgvwry3AVIdS299IDWM3sfwXG+UrgdE8PJCo=) 2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4364 (0x110c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Validity Not Before: Nov 4 17:22:06 2025 GMT Not After : Nov 11 17:22:06 2025 GMT Subject: CN=690a363e-cd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:ce:71:ed:ab:6f:c1:4b:6a:a1:bb:32:0d: aa:d0:7f:7c:0e:dd:db:b1:1f:5f:48:75:03:78:bc: 38:e9:42:2b:21:99:b0:fe:1c:e3:7f:43:35:09:7f: 04:67:d1:86:47:62:20:71:cd:e7:db:5b:a7:45:f8: 41:5b:e0:21:b4:05:c3:36:5c:95:69:d3:31:5c:d3: bf:f5:6b:39:00:fc:bc:34:ac:bd:75:71:55:e2:06: a5:15:2f:d3:6d:31:35:31:de:6f:87:28:88:ee:fd: cf:71:0e:86:9d:61:d5:fa:cd:17:f7:c9:dc:38:16: ac:ba:75:f8:d9:9a:b0:07:ed:fa:2a:56:fa:e0:e6: 82:c2:97:82:9d:1d:79:5b:ab:1a:d5:25:09:c9:d8: fd:36:b0:4b:bb:49:5d:3c:86:41:44:48:6c:76:b0: 6e:95:56:18:d1:d5:ed:06:00:ec:55:2c:25:a4:1d: 0c:3a:d0:d1:99:6c:d4:e3:c6:74:8f:97:1d:8e:d9: e4:e2:e3:ec:d1:77:02:da:34:2c:ec:08:6f:52:13: 08:34:ae:c9:56:b2:50:55:16:fe:3a:41:9b:2c:6c: 1f:86:bd:b9:3a:0c:67:99:6a:ff:8c:3d:74:61:cd: 3f:d4:2e:b8:6d:d7:56:c9:96:4f:af:72:0f:33:5a: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:27:19:93:A7:D0:62:79:85:3A:29:D7:99:2A:57:8E:AB:58:DE:64 X509v3 Authority Key Identifier: keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:21:f0:59:19:0f:e4:1d:db:4e:28:61:5d:88:76:e3:be:ec: 42:b5:06:c3:69:41:59:aa:ce:13:6c:f1:fe:7b:75:1d:92:53: cc:2a:19:8f:52:16:fa:be:c5:09:45:4a:2d:a7:c9:9e:c7:1e: 5f:e3:1e:8f:6b:e4:a9:86:0a:40:68:e8:46:ee:61:8b:cd:db: bf:67:26:36:9e:56:82:bc:51:3a:0a:13:13:7c:fa:a6:04:c8: 1e:1a:87:c4:e1:d7:95:78:49:3c:52:72:e6:67:40:b0:9f:b3: de:fe:3a:70:5f:16:bf:0f:1c:a1:6e:a9:b6:17:8c:1b:2b:7a: d9:8c:b7:92:17:a1:1d:2e:a9:a2:71:d1:09:c0:7e:a2:3a:ee: a3:4f:d3:a3:e9:88:ca:e0:72:8c:ae:0e:b2:0f:54:23:99:08: 61:28:ed:0d:5b:86:db:0f:63:64:d9:91:1c:9f:a3:a2:c2:ef: 05:14:81:e8:97:62:8b:22:85:db:2b:b8:0b:78:03:48:1b:06: cd:e4:c2:45:c6:b6:b4:2a:d8:21:b4:4e:3b:da:d6:b9:8f:a8: 70:ad:4c:0d:3f:0f:0a:b8:e6:63:f6:6d:01:8a:01:90:d8:f8: 15:6c:02:43:ab:64:bf:19:20:52:13:78:d2:58:46:bf:7b:68: 27:37:2e:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDRTkxMTAvBgNVBAUTKDc4NUFCMEIyMkRDRTVBMTI2NjUwMEMxMDY2QjRGNkIw NUY3NUNBQzAwHhcNMjUxMTA0MTcyMjA2WhcNMjUxMTExMTcyMjA2WjAYMRYwFAYD VQQDEw02OTBhMzYzZS1jZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyjOce2rb8FLaqG7Mg2q0H98Dt3bsR9fSHUDeLw46UIrIZmw/hzjf0M1CX8E Z9GGR2Igcc3n21unRfhBW+AhtAXDNlyVadMxXNO/9Ws5APy8NKy9dXFV4galFS/T bTE1Md5vhyiI7v3PcQ6GnWHV+s0X98ncOBasunX42ZqwB+36Klb64OaCwpeCnR15 W6sa1SUJydj9NrBLu0ldPIZBREhsdrBulVYY0dXtBgDsVSwlpB0MOtDRmWzU48Z0 j5cdjtnk4uPs0XcC2jQs7AhvUhMINK7JVrJQVRb+OkGbLGwfhr25OgxnmWr/jD10 Yc0/1C64bddWyZZPr3IPM1rUKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMnGZOn 0GJ5hTop15kqV46rWN5kMB8GA1UdIwQYMBaAFHhasLItzloSZlAMEGa09rBfdcrA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNFOS84NzEwNkQzRTI3 MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1doSm1VQXdRWnJUMnNGOTF5 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGcXdzaTNPV2hKbVVBd1FaclQyc0Y5MXlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNFOS84NzEwNkQzRTI3MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1do Sm1VQXdRWnJUMnNGOTF5c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlIfBZGQ/kHdtOKGFdiHbjvuxCtQbDaUFZqs4TbPH+e3UdklPMKhmP Uhb6vsUJRUotp8mexx5f4x6Pa+SphgpAaOhG7mGLzdu/ZyY2nlaCvFE6ChMTfPqm BMgeGofE4deVeEk8UnLmZ0Cwn7Pe/jpwXxa/Dxyhbqm2F4wbK3rZjLeSF6EdLqmi cdEJwH6iOu6jT9Oj6YjK4HKMrg6yD1QjmQhhKO0NW4bbD2Nk2ZEcn6Oiwu8FFIHo l2KLIoXbK7gLeANIGwbN5MJFxra0KtghtE472ta5j6hwrUwNPw8KuOZj9m0BigGQ 2PgVbAJDq2S/GSBSE3jSWEa/e2gnNy7k -----END CERTIFICATE-----Generated at Tue Nov 4 21:27:26 2025 by rpki-client