$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft File: _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json) Hash identifier: M5LBbBH+5tuZ6bxZxqzV48sT2CyLboHroRHBD9vR74c= Subject key identifier: E2:C3:58:6B:C9:57:FB:A4:06:94:9A:08:CE:3C:67:89:87:88:7B:CB Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC Certificate issuer: /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft Manifest number: 5B Signing time: Mon 03 Nov 2025 07:08:04 +0000 Manifest this update: Mon 03 Nov 2025 07:08:04 +0000 Manifest next update: Mon 10 Nov 2025 07:08:03 +0000 Files and hashes: 1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: rx7ZNS1yPEwrxWupWaqhQLAiJ6a4XWuj+cQgqQbGaNE=) 2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: qQ/o26aFQ3fCsqKdZcgYj7qgKbMCzj8e65hKr1gdKM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Validity Not Before: Nov 3 07:08:04 2025 GMT Not After : Nov 10 07:08:03 2025 GMT Subject: CN=690854d4-0fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:9e:2a:68:17:72:f7:92:db:13:a5:b1:c5: c7:93:f2:84:60:dd:34:e2:db:1f:a0:c2:9b:77:bd: 2c:98:8b:dc:d6:c2:18:9e:cf:6c:2c:f6:c3:92:52: 54:3e:31:81:c1:4e:91:06:c9:7f:55:2e:0f:0b:3b: fc:ff:7d:8a:df:5f:37:91:d1:cc:6a:39:d3:2c:2e: 3c:21:3b:5d:b6:2f:1b:c1:c1:2c:9b:fe:f3:15:f8: 63:86:83:e7:cd:76:cd:3a:43:e8:eb:d1:06:3d:00: 47:f0:eb:c3:ee:98:88:8b:96:3c:5b:dd:e3:57:cd: a6:8a:ac:b7:f8:9d:8d:16:43:85:c6:c7:b3:ef:1c: 00:39:e8:2c:a4:85:80:a6:93:5a:a8:b7:62:f1:e5: 7a:a1:0b:e2:eb:5e:b8:08:1b:e0:a0:65:b0:ec:f8: 65:1c:d3:9b:73:3d:a1:d1:d6:62:20:d9:8b:ad:74: bc:3e:0f:64:ee:ce:77:9f:9c:1a:5f:eb:2d:45:3a: 96:91:fe:49:a1:72:c9:d8:94:94:66:da:c2:14:dd: 3f:e2:92:57:42:12:8a:cf:14:ee:fa:c5:41:bb:fd: 75:2e:6d:4b:34:97:53:4d:26:46:8d:d8:4f:ed:ea: 50:64:c8:28:04:8f:cc:de:e7:9d:1c:9f:d3:53:2b: 42:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C3:58:6B:C9:57:FB:A4:06:94:9A:08:CE:3C:67:89:87:88:7B:CB X509v3 Authority Key Identifier: keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:7d:10:54:13:4a:03:8e:69:ed:47:00:38:f2:97:1b:c8:d0: 7d:db:43:07:79:ea:44:5f:17:fe:20:4f:53:b4:cd:80:a2:31: ca:ff:b3:c2:00:46:09:38:f3:b0:0a:b2:86:9f:2a:d3:66:9e: 3d:56:76:f1:b2:0b:0e:27:19:b0:69:85:ae:9e:2b:3a:e9:ae: 26:18:11:a4:ac:17:50:ba:e5:db:49:3b:9b:18:fb:94:7f:80: 27:52:33:48:0f:1c:c9:4d:bb:b8:8b:fb:4d:f2:b2:ad:ea:54: f2:e0:6f:14:e6:9f:7c:17:07:c8:40:6e:9d:66:57:84:11:c6: 70:55:11:35:d7:fc:2d:5e:77:00:b5:8f:34:98:32:00:c4:ab: db:5b:4a:86:b5:56:ba:d9:03:56:92:b8:26:95:46:70:33:ec: 6b:9c:76:c0:62:3b:40:88:d5:4a:e5:90:22:0e:06:ca:ba:3f: bd:35:32:5d:de:87:f0:60:cb:f5:8b:5a:1d:de:2f:5b:81:bc: 7f:42:ae:c7:d0:53:0f:82:cd:d4:e6:99:fa:75:29:2e:87:93: 74:b2:d2:fd:39:ed:e1:27:60:1d:2f:7a:e9:ea:29:6b:a4:04: 0a:9c:3a:78:8b:c9:f3:11:f7:10:ee:35:09:d2:d4:84:96:ac: fb:4f:74:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0ZBMTExMC8GA1UEBRMoRkRFMEQ4QUM4OERCRkM2QURFNjdERkZGNUEzQUMyRUYy NjZDNUNEQzAeFw0yNTExMDMwNzA4MDRaFw0yNTExMTAwNzA4MDNaMBgxFjAUBgNV BAMTDTY5MDg1NGQ0LTBmY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6R54qaBdy95LbE6WxxceT8oRg3TTi2x+gwpt3vSyYi9zWwhiez2ws9sOSUlQ+ MYHBTpEGyX9VLg8LO/z/fYrfXzeR0cxqOdMsLjwhO122LxvBwSyb/vMV+GOGg+fN ds06Q+jr0QY9AEfw68PumIiLljxb3eNXzaaKrLf4nY0WQ4XGx7PvHAA56CykhYCm k1qot2Lx5XqhC+LrXrgIG+CgZbDs+GUc05tzPaHR1mIg2YutdLw+D2TuznefnBpf 6y1FOpaR/kmhcsnYlJRm2sIU3T/ikldCEorPFO76xUG7/XUubUs0l1NNJkaN2E/t 6lBkyCgEj8ze550cn9NTK0J9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4sNYa8lX +6QGlJoIzjxniYeIe8swHwYDVR0jBBgwFoAU/eDYrIjb/GreZ9//WjrC7yZsXNww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3RkExL0JGOTA3NEUyMkZB MDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dyZVo5X19XanJDN3lac1hO dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2VEWXJJamJfR3JlWjlfX1dqckM3eVpzWE53LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 RkExL0JGOTA3NEUyMkZBMDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dy ZVo5X19XanJDN3lac1hOdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABZ9EFQTSgOOae1HADjylxvI0H3bQwd56kRfF/4gT1O0zYCiMcr/s8IA Rgk487AKsoafKtNmnj1WdvGyCw4nGbBpha6eKzrpriYYEaSsF1C65dtJO5sY+5R/ gCdSM0gPHMlNu7iL+03ysq3qVPLgbxTmn3wXB8hAbp1mV4QRxnBVETXX/C1edwC1 jzSYMgDEq9tbSoa1VrrZA1aSuCaVRnAz7GucdsBiO0CI1UrlkCIOBsq6P701Ml3e h/Bgy/WLWh3eL1uBvH9CrsfQUw+CzdTmmfp1KS6Hk3Sy0v057eEnYB0veunqKWuk BAqcOniLyfMR9xDuNQnS1ISWrPtPdIM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:32 2025 by rpki-client