$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: IS/VFmPOOwy6w+aALXXSjAH7bmonIqEv2ZrDIn8CnSU= Subject key identifier: 5F:93:4F:3E:DF:E3:B0:FD:B2:A2:10:38:32:1E:50:6C:19:16:A5:8E Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 03E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 03E0 Signing time: Mon 03 Nov 2025 00:33:15 +0000 Manifest this update: Mon 03 Nov 2025 00:33:15 +0000 Manifest next update: Mon 10 Nov 2025 00:33:15 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: BrpYQOoyzx/a00p/SwOngnvCVHoqqtd/+SMnR/i3hIc=) 2: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=) 3: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: Nov 3 00:33:15 2025 GMT Not After : Nov 10 00:33:15 2025 GMT Subject: CN=6907f84b-a837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:bb:79:88:69:fd:43:2f:35:78:2a:18:e2: 37:5a:ae:24:bb:a7:10:c3:4b:79:51:f5:ae:f9:82: 4b:87:7e:cd:8c:2c:40:f4:61:b0:ec:3c:8c:43:11: 18:fa:33:32:60:eb:31:21:75:71:c2:a7:31:0a:f3: ec:a9:c3:23:c8:7a:05:d0:b0:de:be:26:9f:04:6f: 1b:4f:5d:f5:e3:a8:c3:9c:36:8f:91:7e:cc:66:e3: 36:b2:33:aa:32:01:1f:70:e8:a4:51:3d:19:b6:01: c1:c7:5a:77:7d:71:df:1e:c7:ff:b3:5a:eb:ef:c6: 60:94:f2:67:da:a8:33:53:0a:87:ed:49:14:67:0f: 88:28:7e:20:e2:99:33:ab:c7:7e:1a:f1:ef:ca:1d: 78:82:0a:bf:33:d3:00:33:7c:c0:65:c3:ce:23:f2: bc:40:4e:0b:e6:38:d0:f6:39:d4:8f:89:9a:cb:5b: 5a:76:15:3b:23:c8:88:4b:b1:b8:0f:3e:8d:cb:78: 7b:82:a6:68:99:85:76:29:9c:d8:9a:00:4f:7b:1e: 8b:4d:7a:6c:ef:89:3b:85:4b:45:c5:f2:b3:4a:1f: 14:a9:d6:4a:6b:23:7d:bb:50:4b:4a:31:cf:4c:2c: ac:5d:c9:a7:73:93:3e:b2:56:01:5a:59:3a:92:13: 7e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:93:4F:3E:DF:E3:B0:FD:B2:A2:10:38:32:1E:50:6C:19:16:A5:8E X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:67:d9:01:dc:47:86:4e:18:c2:fe:a8:ad:7f:01:c7:6c:2e: 78:45:09:4d:20:c5:73:47:44:2d:9c:3c:b6:6c:55:30:51:e6: 97:e4:f2:6e:dd:ac:a8:f7:43:ba:0e:fd:3e:bf:47:a4:5b:f3: 44:d0:d3:1c:f1:2c:7d:e0:00:ac:19:ab:79:00:f7:b7:3d:fa: 72:47:f4:c7:30:0f:34:c3:a5:f6:8f:7c:17:61:55:94:19:0b: 1a:f7:30:c4:59:58:75:6a:bf:54:36:2c:33:27:d0:a6:0a:2c: a5:74:61:5f:da:69:22:a6:4d:81:a2:87:28:bf:fc:1b:f0:0d: a4:80:9d:76:a2:0b:79:79:05:82:d5:31:df:52:6b:85:56:97: e8:79:41:71:68:e7:55:2b:e1:97:4e:e8:6c:2b:fe:54:2d:49: 10:7f:aa:f0:4f:78:68:d0:92:e3:96:18:cd:5a:de:46:7b:7d: 53:ed:79:3c:e7:bb:47:98:fe:22:a7:9b:c6:bd:6b:d7:00:1b: c5:d3:e3:6b:42:ef:91:5f:09:5e:2e:1d:1b:b9:74:66:ae:a2: 07:04:d2:c5:14:61:1e:41:34:20:7c:3f:97:57:14:ab:68:eb: 2f:81:cc:4b:b3:6c:25:5a:9a:fc:95:77:b6:47:5d:b3:a9:e5: 01:c0:07:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjUxMTAzMDAzMzE1WhcNMjUxMTEwMDAzMzE1WjAYMRYwFAYD VQQDEw02OTA3Zjg0Yi1hODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3G7eYhp/UMvNXgqGOI3Wq4ku6cQw0t5UfWu+YJLh37NjCxA9GGw7DyMQxEY +jMyYOsxIXVxwqcxCvPsqcMjyHoF0LDeviafBG8bT13146jDnDaPkX7MZuM2sjOq MgEfcOikUT0ZtgHBx1p3fXHfHsf/s1rr78ZglPJn2qgzUwqH7UkUZw+IKH4g4pkz q8d+GvHvyh14ggq/M9MAM3zAZcPOI/K8QE4L5jjQ9jnUj4may1tadhU7I8iIS7G4 Dz6Ny3h7gqZomYV2KZzYmgBPex6LTXps74k7hUtFxfKzSh8UqdZKayN9u1BLSjHP TCysXcmnc5M+slYBWlk6khN+5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+TTz7f 47D9sqIQODIeUGwZFqWOMB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Z9kB3EeGThjC/qitfwHHbC54RQlNIMVzR0QtnDy2bFUwUeaX5PJu 3ayo90O6Dv0+v0ekW/NE0NMc8Sx94ACsGat5APe3PfpyR/THMA80w6X2j3wXYVWU GQsa9zDEWVh1ar9UNiwzJ9CmCiyldGFf2mkipk2Boocov/wb8A2kgJ12ogt5eQWC 1THfUmuFVpfoeUFxaOdVK+GXTuhsK/5ULUkQf6rwT3ho0JLjlhjNWt5Ge31T7Xk8 57tHmP4ip5vGvWvXABvF0+NrQu+RXwleLh0buXRmrqIHBNLFFGEeQTQgfD+XVxSr aOsvgcxLs2wlWpr8lXe2R12zqeUBwAf8 -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:46 2025 by rpki-client