$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: TVe37U6Nr0qQEzwYcF/QUtOZ7l/Hf69koAikFEd9pNk= Subject key identifier: 68:4A:16:78:C3:2B:43:F5:13:C0:59:BB:AA:7E:4E:AB:CE:51:65:AC Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0CCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0CBB Signing time: Tue 04 Nov 2025 18:18:21 +0000 Manifest this update: Tue 04 Nov 2025 18:18:21 +0000 Manifest next update: Tue 11 Nov 2025 18:18:21 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: uh0IBTUGOtELND/HqkIuANAbtmbHBeX39jtaTZwHNks=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: Nov 4 18:18:21 2025 GMT Not After : Nov 11 18:18:21 2025 GMT Subject: CN=690a436d-f7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:60:80:cb:2d:29:e7:57:15:18:c6:2c:31: 5f:e6:c9:cc:45:17:22:3a:b0:d2:4f:f0:0b:08:1d: 05:45:4d:ac:85:26:f6:67:04:ff:9a:bf:c5:13:b6: e0:72:ac:d2:db:39:b8:0a:e0:bc:80:3b:2b:b9:6c: a8:e5:cc:78:ed:28:3b:05:de:91:8a:42:24:a5:7a: 70:26:a3:e3:77:08:d9:56:55:9f:e1:c2:5a:1d:c3: 80:fb:1d:56:a5:30:ca:02:7e:22:d3:e5:a2:88:f3: 33:d1:d7:a6:17:77:6b:b8:9a:87:8f:c2:1b:0d:82: a6:df:5c:d9:87:67:d0:6a:1b:55:09:0a:5f:28:b1: f7:7b:93:f4:6c:20:e0:0f:be:1d:78:94:78:02:d6: c9:9b:1d:89:49:a8:fd:3c:65:d1:08:ae:da:22:af: 48:cf:b8:7a:1c:d1:b7:a0:b8:74:2b:5a:e6:d5:8e: 82:b2:9e:c1:64:7a:57:6e:1a:55:9f:8e:34:95:29: 34:ea:12:22:71:68:8b:61:34:2a:f7:1a:dd:95:74: 0d:ed:df:17:4a:92:98:f2:d7:65:27:c1:20:6a:5c: a4:7f:48:6b:52:88:1c:52:a6:1d:23:b7:aa:8f:43: 4d:ac:9a:c8:f8:70:fd:a2:e2:0a:39:69:56:32:6d: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4A:16:78:C3:2B:43:F5:13:C0:59:BB:AA:7E:4E:AB:CE:51:65:AC X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:cf:42:00:09:16:b5:85:f9:8f:52:8d:ec:e7:30:6d:de:66: 03:2b:cd:2c:e6:35:46:11:aa:c1:15:dc:b5:24:7d:b4:db:20: b7:44:36:c5:9a:fb:fd:5f:4a:fb:41:a3:96:50:17:32:22:33: 58:d3:be:db:f4:b0:d0:f2:f7:fb:01:ea:3b:4c:27:f9:78:2c: 0d:c9:73:39:ac:dd:c7:1c:c5:35:b6:6c:2e:90:e5:ff:a0:a6: f2:6b:84:32:91:d7:56:b1:2b:4a:e8:28:ab:c0:50:c4:04:4d: d1:8c:4d:aa:4a:3b:ff:c5:9d:ab:90:fc:b1:e8:2d:f2:f4:19: 68:d7:17:dd:e2:f6:0a:69:f1:dc:56:91:e3:41:fa:ce:cb:a6: 69:5a:48:a0:41:43:45:31:f0:8c:8b:12:cd:26:bd:29:63:a5: 2e:11:b5:9f:c9:52:5a:3a:4f:d3:6f:fc:b7:05:3e:bb:27:d4: 02:f6:21:90:63:08:70:07:40:b2:aa:2d:14:fa:ff:ed:21:2e: 9a:5c:27:c0:aa:92:72:7c:a5:a4:87:29:3d:f9:7e:3b:21:c5: 8c:d9:8d:74:4a:a1:78:ca:e3:80:b8:48:08:c0:5b:c4:80:c0: bf:04:de:ba:52:30:7d:f7:17:ff:d6:96:94:05:68:de:c8:b9: 78:2b:e8:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjUxMTA0MTgxODIxWhcNMjUxMTExMTgxODIxWjAYMRYwFAYD VQQDEw02OTBhNDM2ZC1mN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDhggMstKedXFRjGLDFf5snMRRciOrDST/ALCB0FRU2shSb2ZwT/mr/FE7bg cqzS2zm4CuC8gDsruWyo5cx47Sg7Bd6RikIkpXpwJqPjdwjZVlWf4cJaHcOA+x1W pTDKAn4i0+WiiPMz0demF3druJqHj8IbDYKm31zZh2fQahtVCQpfKLH3e5P0bCDg D74deJR4AtbJmx2JSaj9PGXRCK7aIq9Iz7h6HNG3oLh0K1rm1Y6Csp7BZHpXbhpV n440lSk06hIicWiLYTQq9xrdlXQN7d8XSpKY8tdlJ8Egalykf0hrUogcUqYdI7eq j0NNrJrI+HD9ouIKOWlWMm3FTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhKFnjD K0P1E8BZu6p+TqvOUWWsMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwz0IACRa1hfmPUo3s5zBt3mYDK80s5jVGEarBFdy1JH202yC3RDbF mvv9X0r7QaOWUBcyIjNY077b9LDQ8vf7Aeo7TCf5eCwNyXM5rN3HHMU1tmwukOX/ oKbya4QykddWsStK6CirwFDEBE3RjE2qSjv/xZ2rkPyx6C3y9Blo1xfd4vYKafHc VpHjQfrOy6ZpWkigQUNFMfCMixLNJr0pY6UuEbWfyVJaOk/Tb/y3BT67J9QC9iGQ YwhwB0Cyqi0U+v/tIS6aXCfAqpJyfKWkhyk9+X47IcWM2Y10SqF4yuOAuEgIwFvE gMC/BN66UjB99xf/1paUBWjeyLl4K+iu -----END CERTIFICATE-----Generated at Wed Nov 5 04:28:46 2025 by rpki-client