$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json) Hash identifier: zrx7KUDyWMRG3jCBRU1La0klXIls25oXpw+PkEC+bh4= Subject key identifier: AB:55:BF:B8:87:9A:CA:05:01:38:DE:30:4D:34:C9:C6:19:3F:50:A7 Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Certificate serial: 34DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft Manifest number: 34DD Signing time: Sun 02 Nov 2025 14:19:33 +0000 Manifest this update: Sun 02 Nov 2025 14:19:32 +0000 Manifest next update: Sun 09 Nov 2025 14:19:32 +0000 Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: /ktxepauBcmKlJwdKhjMOpExObJILnQlFVbVGWeacYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13534 (0x34de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Validity Not Before: Nov 2 14:19:32 2025 GMT Not After : Nov 9 14:19:32 2025 GMT Subject: CN=69076875-e057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4f:a0:f7:87:c1:82:33:ad:b4:0c:98:cb:67: 8a:7e:af:29:a3:ba:8d:dc:f8:e4:6a:c4:57:69:d5: 48:82:e8:f3:ea:d9:3e:76:1f:80:72:51:3e:73:2c: 0b:7e:f0:86:6d:79:c8:53:3b:c4:d1:91:69:0c:1b: 29:d7:6f:88:8f:92:b9:99:58:09:c8:bc:12:6d:8b: 33:1f:9d:7f:a7:4b:8e:cc:2d:93:14:47:11:5c:6c: 70:2b:89:fe:30:a0:54:91:fa:c1:50:5b:1e:d7:53: 50:f3:ed:73:b1:71:6c:68:7a:33:ae:b3:3a:cc:33: 73:dc:21:b5:17:aa:90:4a:ed:2a:54:aa:03:a9:8e: 59:0c:b6:08:0b:e2:f9:66:c8:9c:56:6f:62:0f:38: cc:cd:16:06:51:cf:80:4a:25:dd:0f:40:7e:58:8c: 38:27:3f:d9:95:ff:af:c9:d2:f9:ee:c4:26:be:cb: e4:03:1f:29:29:7e:f1:c3:75:2f:a3:00:4e:85:8a: 18:21:e0:e7:d9:ba:8b:42:96:5b:31:48:af:e9:d9: c4:ee:d2:ec:cb:15:91:c8:b6:79:91:65:0e:62:3f: b4:ed:34:a5:a3:0b:0b:7f:93:ac:ce:14:da:77:75: c5:1d:81:42:f3:a6:a3:6f:0d:7d:d4:93:ef:a7:68: 1d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:55:BF:B8:87:9A:CA:05:01:38:DE:30:4D:34:C9:C6:19:3F:50:A7 X509v3 Authority Key Identifier: keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:88:3e:b1:42:04:ca:01:a5:34:af:6a:6b:d2:3d:09:bf:af: 89:2f:2a:bf:f7:a0:d9:25:a0:e6:d7:8d:33:53:bf:74:b2:73: 8a:33:25:f4:ab:dc:c0:4c:77:10:3d:aa:14:13:0b:57:b9:6f: 47:ab:ec:6a:02:5f:bf:c7:05:3f:c6:1f:4e:0e:ea:76:9d:c5: e3:15:fa:06:a9:d3:b9:82:60:b8:f7:cf:ee:48:9c:8d:f1:b4: 95:75:6b:e3:39:a0:73:1d:a0:2b:5d:8a:a2:2e:54:53:ab:9e: 1e:c9:72:ff:fb:f4:09:3f:c9:bd:c9:fe:e4:12:92:63:89:53: 90:98:8e:cb:99:fa:c3:7e:c4:e4:31:05:0e:59:13:b2:22:73: 17:a1:32:28:87:df:e7:2a:03:7d:be:dc:04:ac:88:52:4e:20: a0:e1:e9:c7:f5:14:cc:b0:30:b7:e7:17:00:f5:42:9a:8c:3b: 33:16:d2:84:56:6e:a1:97:6e:cb:e2:4c:d4:1e:31:c1:85:44: 78:ae:59:9f:50:19:e3:ef:11:2d:15:aa:de:91:f1:6a:9b:e1: 96:03:f1:8f:d1:19:ae:c4:06:e8:5d:45:eb:f0:90:79:e5:5c: e1:9b:5b:08:88:43:6e:23:06:64:d7:a8:55:6f:6a:c6:68:7d: 6e:24:bf:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3 Q0Q3QzE0QjgwHhcNMjUxMTAyMTQxOTMyWhcNMjUxMTA5MTQxOTMyWjAYMRYwFAYD VQQDEw02OTA3Njg3NS1lMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2k+g94fBgjOttAyYy2eKfq8po7qN3PjkasRXadVIgujz6tk+dh+AclE+cywL fvCGbXnIUzvE0ZFpDBsp12+Ij5K5mVgJyLwSbYszH51/p0uOzC2TFEcRXGxwK4n+ MKBUkfrBUFse11NQ8+1zsXFsaHozrrM6zDNz3CG1F6qQSu0qVKoDqY5ZDLYIC+L5 ZsicVm9iDzjMzRYGUc+ASiXdD0B+WIw4Jz/Zlf+vydL57sQmvsvkAx8pKX7xw3Uv owBOhYoYIeDn2bqLQpZbMUiv6dnE7tLsyxWRyLZ5kWUOYj+07TSlowsLf5OszhTa d3XFHYFC86ajbw191JPvp2gdaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtVv7iH msoFATjeME00ycYZP1CnMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF QzBkUnFjS3lTUjE4MThGTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAriD6xQgTKAaU0r2pr0j0Jv6+JLyq/96DZJaDm140zU790snOKMyX0 q9zATHcQPaoUEwtXuW9Hq+xqAl+/xwU/xh9ODup2ncXjFfoGqdO5gmC498/uSJyN 8bSVdWvjOaBzHaArXYqiLlRTq54eyXL/+/QJP8m9yf7kEpJjiVOQmI7LmfrDfsTk MQUOWROyInMXoTIoh9/nKgN9vtwErIhSTiCg4enH9RTMsDC35xcA9UKajDszFtKE Vm6hl27L4kzUHjHBhUR4rlmfUBnj7xEtFarekfFqm+GWA/GP0RmuxAboXUXr8JB5 5Vzhm1sIiENuIwZk16hVb2rGaH1uJL8i -----END CERTIFICATE-----Generated at Tue Nov 4 08:05:40 2025 by rpki-client