$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft File: eKfTXvnEd150y6PRZrYbdZAkFSM.mft (raw, json) Hash identifier: o1WwJmaDekxQXNKhBgPuN+wd9+wgvo4UcSlPaFPjNFU= Subject key identifier: DC:03:0A:04:DE:B5:40:1D:99:B1:6B:8E:1D:41:C7:7F:58:08:3D:6A Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 Certificate issuer: /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft Manifest number: B1 Signing time: Wed 05 Nov 2025 06:17:51 +0000 Manifest this update: Wed 05 Nov 2025 06:17:51 +0000 Manifest next update: Wed 12 Nov 2025 06:17:51 +0000 Files and hashes: 1: eKfTXvnEd150y6PRZrYbdZAkFSM.crl (hash: iGpZuMttYzxf64vqdiwu1OU2Ny9wZO+rF0W/x6Y4o6w=) 2: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (hash: yg1U4JyDYBAoLLqLQFnhNTd+uuZ0oKhea1PeFahobmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Validity Not Before: Nov 5 06:17:51 2025 GMT Not After : Nov 12 06:17:51 2025 GMT Subject: CN=690aec0f-5dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:aa:99:31:76:ab:eb:1a:1d:d5:42:42:f2:f3: b4:f8:8e:ed:61:8a:c0:84:45:17:02:eb:2f:97:71: 13:ca:88:ae:b0:ff:50:4e:18:ee:96:bd:1f:74:8f: bc:d9:8f:ab:3c:81:9d:bd:5e:f0:19:27:a8:ad:16: f0:8a:f1:1c:b1:a5:ed:e8:00:1f:fa:8f:e7:b8:cf: c0:c3:67:70:34:12:72:62:68:ab:69:ef:8b:1f:69: 56:9f:a0:11:d4:90:81:8e:8d:df:18:02:c0:60:83: 2c:c3:66:13:66:c6:c1:8b:ca:0e:bf:dc:7d:96:b5: d5:6b:63:ad:33:b2:79:2f:84:13:38:1d:0c:c3:9b: 56:46:81:fa:22:4f:44:33:50:e1:33:38:cf:18:c7: 7d:e8:a0:68:d0:6b:f3:fa:54:db:b7:6f:02:f8:0b: 4b:dd:48:56:e0:ca:f0:70:e4:0b:68:60:69:cf:30: f3:60:d3:e3:f0:4c:6a:36:f8:27:6b:5c:01:90:d2: b1:78:20:ef:e6:14:63:43:6a:0b:f2:65:ad:58:78: 60:38:22:30:cd:b3:87:29:f3:31:88:65:3e:c7:b1: d5:b4:db:cb:82:eb:72:31:2a:25:cd:00:ba:5c:31: 83:2c:4d:a6:05:af:3a:34:1f:e4:fc:a0:0b:01:be: 96:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:03:0A:04:DE:B5:40:1D:99:B1:6B:8E:1D:41:C7:7F:58:08:3D:6A X509v3 Authority Key Identifier: keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:85:4e:9d:21:8a:a2:61:74:01:c0:2d:91:67:68:5c:80:7f: c3:0e:dd:4e:cc:af:c0:39:9b:89:a0:88:55:eb:a3:3a:44:82: 77:c3:02:9d:d3:06:54:a7:fd:72:79:df:90:e9:a0:5e:82:cf: ff:f9:28:9b:b0:78:65:8a:7d:5d:6f:db:d1:a7:7a:e5:3d:d9: e3:ae:fc:77:06:e6:98:6a:ca:fb:70:6f:1f:ad:2b:00:d3:c2: 18:fa:e2:c4:29:43:40:9d:be:ba:35:79:56:47:2b:49:42:60: 91:ac:0d:57:45:ed:66:44:ad:f2:17:99:f8:d0:e4:49:e8:4b: 1e:6b:e2:42:76:0b:76:78:f5:86:e1:6f:dc:eb:ae:ab:65:d0: ce:05:4e:3e:b3:1d:92:e7:74:fc:60:84:cf:1f:44:28:eb:91: 14:bc:88:bf:7f:81:67:0e:30:63:45:26:79:01:ef:54:71:c7: db:c5:af:f3:df:26:56:f6:42:e8:a7:22:7a:96:a8:cf:56:d4: ca:f3:e4:8c:4a:21:1d:03:a4:6d:95:d5:8f:da:9a:f9:0c:e8: 42:af:d7:c5:e0:3d:92:ac:fb:4a:9d:19:3b:e6:7c:33:2f:7a: df:84:00:6e:48:a7:c0:26:95:9f:00:35:48:c2:d3:72:83:73: 1a:be:21:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKDc4QTdEMzVFRjlDNDc3NUU3NENCQTNEMTY2QjYxQjc1 OTAyNDE1MjMwHhcNMjUxMTA1MDYxNzUxWhcNMjUxMTEyMDYxNzUxWjAYMRYwFAYD VQQDEw02OTBhZWMwZi01ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaqZMXar6xod1UJC8vO0+I7tYYrAhEUXAusvl3ETyoiusP9QThjulr0fdI+8 2Y+rPIGdvV7wGSeorRbwivEcsaXt6AAf+o/nuM/Aw2dwNBJyYmirae+LH2lWn6AR 1JCBjo3fGALAYIMsw2YTZsbBi8oOv9x9lrXVa2OtM7J5L4QTOB0Mw5tWRoH6Ik9E M1DhMzjPGMd96KBo0Gvz+lTbt28C+AtL3UhW4MrwcOQLaGBpzzDzYNPj8ExqNvgn a1wBkNKxeCDv5hRjQ2oL8mWtWHhgOCIwzbOHKfMxiGU+x7HVtNvLgutyMSolzQC6 XDGDLE2mBa86NB/k/KALAb6W3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwDCgTe tUAdmbFrjh1Bx39YCD1qMB8GA1UdIwQYMBaAFHin0175xHdedMuj0Wa2G3WQJBUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wREU4OTM0MEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9lS2ZUWHZuRWQxNTB5NlBSWnJZYmRaQWtG U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLZlRYdm5FZDE1MHk2UFJaclliZFpBa0ZTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wREU4OTM0MEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9lS2ZUWHZuRWQx NTB5NlBSWnJZYmRaQWtGU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAThU6dIYqiYXQBwC2RZ2hcgH/DDt1OzK/AOZuJoIhV66M6RIJ3wwKd 0wZUp/1yed+Q6aBegs//+SibsHhlin1db9vRp3rlPdnjrvx3BuaYasr7cG8frSsA 08IY+uLEKUNAnb66NXlWRytJQmCRrA1XRe1mRK3yF5n40ORJ6Esea+JCdgt2ePWG 4W/c666rZdDOBU4+sx2S53T8YITPH0Qo65EUvIi/f4FnDjBjRSZ5Ae9Uccfbxa/z 3yZW9kLopyJ6lqjPVtTK8+SMSiEdA6RtldWP2pr5DOhCr9fF4D2SrPtKnRk75nwz L3rfhABuSKfAJpWfADVIwtNyg3MaviHU -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:57 2025 by rpki-client