$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: iyq6fmS2dQNQiF5pjkPH49Pd+G4LkZsKgHAPNXOmLfk= Subject key identifier: 72:CC:8D:0F:7F:27:0E:26:AB:AF:FE:A6:1F:55:EA:5B:EA:8D:72:24 Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 53 Signing time: Wed 05 Nov 2025 07:26:38 +0000 Manifest this update: Wed 05 Nov 2025 07:26:38 +0000 Manifest next update: Wed 12 Nov 2025 07:26:38 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: nbZznkxXPWW/iqR0iMNb+sCaQv4YGxyWLFpfDkMKdNY=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Nov 5 07:26:38 2025 GMT Not After : Nov 12 07:26:38 2025 GMT Subject: CN=690afc2e-6796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:76:cf:35:fa:a4:c1:b7:5c:e6:f0:d6:f9:89: dd:ca:e6:41:97:29:5d:3e:41:81:b8:fe:9a:c6:ce: 46:11:57:09:93:c1:ae:b9:4a:6d:20:0b:39:dd:46: d7:df:55:87:37:43:ea:93:43:52:8b:27:37:f5:67: cf:f7:a8:c5:c6:99:68:b4:30:b1:ee:3d:65:e8:64: e7:8b:cd:66:93:43:22:25:03:da:63:a4:7a:dd:e8: b7:c1:18:8a:92:94:54:57:f0:62:6b:b8:e4:65:9c: 3f:42:6d:be:67:b8:37:99:7e:5a:97:6d:6a:c2:82: 77:a8:ad:b1:cc:f8:91:a7:ce:f5:76:09:a6:76:98: ef:a1:81:ae:d7:0a:ca:1f:cf:84:18:a1:fa:fa:1b: 90:f9:72:88:8f:9b:cc:4a:99:bb:7b:63:cd:b4:18: f6:4e:f2:f8:fc:46:aa:f9:65:17:13:68:9b:0f:3e: e8:66:6c:bb:7d:85:0b:8b:88:f7:c6:6e:f0:9d:5c: 47:67:af:37:6b:5e:1b:57:c4:52:5c:21:bb:16:8d: 25:05:ba:2f:08:ca:f0:43:06:1a:03:96:b0:29:08: 78:f9:6c:50:a2:2d:24:7d:d6:c4:4b:b0:9f:82:2c: 26:35:9f:6f:28:7b:7b:1c:db:f2:72:24:09:d8:a1: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CC:8D:0F:7F:27:0E:26:AB:AF:FE:A6:1F:55:EA:5B:EA:8D:72:24 X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:db:83:e8:c7:4f:9a:7a:cd:fe:b6:20:e0:ae:14:ae:e4:1f: 44:8b:a2:2f:cb:3e:af:c7:bb:06:79:c9:af:28:2f:5a:24:7b: 0b:fc:cd:a1:30:b8:9e:9e:cb:0f:c1:15:21:fc:03:2a:34:26: 14:83:89:7b:d6:f8:d6:57:27:98:ff:2b:88:8e:39:3d:8d:db: 79:ca:f1:97:79:09:9b:11:8d:82:69:ef:31:01:bd:06:ac:78: af:54:64:e3:97:34:40:79:a8:03:f6:98:04:a8:3e:38:20:ce: 4a:5a:a6:ef:83:0d:6c:81:01:da:fd:b7:ba:b2:d8:ef:94:b1: 66:d8:a9:6c:71:db:fe:ac:8b:55:c5:a6:38:82:3c:48:be:ff: e5:d5:a2:2a:d1:fb:8b:32:ee:26:2d:d6:4d:f2:53:88:b3:b1: 49:96:fa:bd:e2:4a:24:d8:85:9a:ba:da:d5:79:25:c6:71:8a: 64:14:9f:c2:c2:1a:8f:ee:22:df:53:da:fe:a0:3b:3b:ce:a7: 7d:9c:9f:4a:6f:88:d7:78:d2:85:73:e0:07:b3:cd:60:42:fd: e1:d7:8d:aa:40:2c:b0:cb:0c:d5:83:2a:9a:45:7a:9c:c8:6d: e7:6c:aa:21:ab:00:d8:a8:b1:e1:ff:0e:33:27:da:ca:c5:e7: dc:85:a7:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNTExMDUwNzI2MzhaFw0yNTExMTIwNzI2MzhaMBgxFjAUBgNV BAMTDTY5MGFmYzJlLTY3OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDids81+qTBt1zm8Nb5id3K5kGXKV0+QYG4/prGzkYRVwmTwa65Sm0gCzndRtff VYc3Q+qTQ1KLJzf1Z8/3qMXGmWi0MLHuPWXoZOeLzWaTQyIlA9pjpHrd6LfBGIqS lFRX8GJruORlnD9Cbb5nuDeZflqXbWrCgneorbHM+JGnzvV2CaZ2mO+hga7XCsof z4QYofr6G5D5coiPm8xKmbt7Y820GPZO8vj8Rqr5ZRcTaJsPPuhmbLt9hQuLiPfG bvCdXEdnrzdrXhtXxFJcIbsWjSUFui8IyvBDBhoDlrApCHj5bFCiLSR91sRLsJ+C LCY1n28oe3sc2/JyJAnYoQLVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcsyND38n Diarr/6mH1XqW+qNciQwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALDbg+jHT5p6zf62IOCuFK7kH0SLoi/LPq/HuwZ5ya8oL1okewv8zaEw uJ6eyw/BFSH8Ayo0JhSDiXvW+NZXJ5j/K4iOOT2N23nK8Zd5CZsRjYJp7zEBvQas eK9UZOOXNEB5qAP2mASoPjggzkpapu+DDWyBAdr9t7qy2O+UsWbYqWxx2/6si1XF pjiCPEi+/+XVoirR+4sy7iYt1k3yU4izsUmW+r3iSiTYhZq62tV5JcZximQUn8LC Go/uIt9T2v6gOzvOp32cn0pviNd40oVz4AezzWBC/eHXjapALLDLDNWDKppFepzI bedsqiGrANioseH/DjMn2srF59yFp0E= -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:13 2025 by rpki-client