$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: soB1yZ1T7fQBhDx9bYEpoIXtbOaNfS39Llc35CAbL40= Subject key identifier: 04:E4:0E:64:C6:8A:67:21:A3:50:13:3B:8B:2C:88:ED:52:AA:35:0A Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 2556 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 2556 Signing time: Tue 04 Nov 2025 14:50:52 +0000 Manifest this update: Tue 04 Nov 2025 14:50:52 +0000 Manifest next update: Tue 11 Nov 2025 14:50:52 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: PpRZPfdBXzyjSoMU0+AJ2e5GyRpInwlLQg0DUMx/AVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9558 (0x2556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Nov 4 14:50:52 2025 GMT Not After : Nov 11 14:50:52 2025 GMT Subject: CN=690a12cc-a304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6a:00:38:77:7b:41:ab:c9:19:6e:9a:10:16: 92:4c:1f:b5:2d:b8:fc:99:ee:08:b3:1d:fc:04:f8: ce:d6:55:07:2a:1b:21:4d:07:da:23:71:45:b2:a6: e0:5d:97:b0:63:d5:ef:de:dc:ee:29:41:07:12:7b: dc:5a:aa:65:1e:19:a5:85:fd:bb:37:d5:93:55:30: cb:69:06:dc:7e:4f:cc:69:ad:c9:e7:ad:83:8a:93: 3a:a2:d6:55:d1:96:5f:7d:75:3b:88:8e:11:00:8a: 98:a7:1b:b9:b4:a8:03:7a:0c:a1:51:15:b2:07:45: 91:dc:f7:ea:79:d1:9e:0d:26:62:c6:b7:e7:88:12: 79:4d:76:a8:ab:ce:c1:e9:18:84:50:e9:e1:f1:cc: f6:28:c8:a5:1e:3e:e7:59:d9:00:bf:8d:bd:c2:f4: 9c:d6:3d:ef:e1:50:43:d6:5f:28:19:5f:1a:78:25: 2e:42:1d:d8:06:f6:03:bb:fc:db:01:d9:1a:63:38: 63:34:7f:8e:a5:ee:ab:28:34:11:3a:0f:80:c7:eb: 93:09:81:c0:07:ec:37:eb:c6:c0:9b:bd:1f:30:20: 3c:7a:ae:c2:66:2e:20:32:9f:f2:00:b8:09:33:08: 69:cc:e9:28:61:d0:d1:fc:51:b8:81:9d:6d:27:f6: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E4:0E:64:C6:8A:67:21:A3:50:13:3B:8B:2C:88:ED:52:AA:35:0A X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ab:86:ca:2a:f7:55:5f:48:8a:6f:97:47:cc:53:41:41:6c: 96:db:05:9d:f9:21:8b:86:79:62:e4:8d:36:7a:70:20:2b:32: e5:89:22:cf:ae:73:fa:8d:46:27:fe:59:91:da:e4:27:e6:5a: ef:88:6c:19:d0:fb:c8:98:de:8e:29:a5:32:3b:fe:6a:bf:3d: 75:8f:e3:4e:9a:74:95:dd:a8:40:c1:2e:1f:6a:14:d5:22:4a: e3:58:2a:ee:9a:ab:80:63:5a:f0:61:60:e8:bb:11:e7:82:30: b1:95:4e:28:a7:9a:57:3f:0e:cd:6a:ec:b0:43:e4:e7:4f:65: cb:b8:18:00:e7:e8:6a:6c:d0:ce:57:bd:01:00:c6:52:c9:c0: 9c:6d:5c:29:fc:5d:d3:2d:5c:a0:78:55:df:17:dd:a9:15:eb: 4a:c0:bd:a8:c3:2a:35:9e:26:4e:21:cd:81:f8:83:d1:5f:39: 5c:e7:71:60:5e:1b:d1:e0:0d:ed:b3:3f:33:11:aa:2e:0c:a5: 6e:01:23:3b:34:89:c6:dc:3a:a7:52:7f:49:39:32:fa:00:8c: a0:c4:eb:f8:2a:6a:09:16:a1:7e:0b:1b:9b:42:06:93:08:1a: e6:a6:84:71:ec:bf:26:ec:f1:2e:d6:57:9b:bc:91:a4:cd:1b: 6d:05:90:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjUxMTA0MTQ1MDUyWhcNMjUxMTExMTQ1MDUyWjAYMRYwFAYD VQQDEw02OTBhMTJjYy1hMzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8WoAOHd7QavJGW6aEBaSTB+1Lbj8me4Isx38BPjO1lUHKhshTQfaI3FFsqbg XZewY9Xv3tzuKUEHEnvcWqplHhmlhf27N9WTVTDLaQbcfk/Maa3J562DipM6otZV 0ZZffXU7iI4RAIqYpxu5tKgDegyhURWyB0WR3PfqedGeDSZixrfniBJ5TXaoq87B 6RiEUOnh8cz2KMilHj7nWdkAv429wvSc1j3v4VBD1l8oGV8aeCUuQh3YBvYDu/zb AdkaYzhjNH+Ope6rKDQROg+Ax+uTCYHAB+w368bAm70fMCA8eq7CZi4gMp/yALgJ MwhpzOkoYdDR/FG4gZ1tJ/bazQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATkDmTG imcho1ATO4ssiO1SqjUKMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAq4bKKvdVX0iKb5dHzFNBQWyW2wWd+SGLhnli5I02enAgKzLliSLP rnP6jUYn/lmR2uQn5lrviGwZ0PvImN6OKaUyO/5qvz11j+NOmnSV3ahAwS4fahTV IkrjWCrumquAY1rwYWDouxHngjCxlU4op5pXPw7NauywQ+TnT2XLuBgA5+hqbNDO V70BAMZSycCcbVwp/F3TLVygeFXfF92pFetKwL2owyo1niZOIc2B+IPRXzlc53Fg XhvR4A3tsz8zEaouDKVuASM7NInG3DqnUn9JOTL6AIygxOv4KmoJFqF+CxubQgaT CBrmpoRx7L8m7PEu1lebvJGkzRttBZCc -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:28 2025 by rpki-client