$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json) Hash identifier: DFNpHDCc8fqJ29e+u6vgwZwIBZTBITm39Xd8HbeYi5o= Subject key identifier: 03:44:56:B5:10:E0:EB:E0:C6:2A:B1:BC:46:06:C9:C3:F3:8A:D2:BC Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft Manifest number: FF Signing time: Wed 05 Nov 2025 05:15:53 +0000 Manifest this update: Wed 05 Nov 2025 05:15:53 +0000 Manifest next update: Wed 12 Nov 2025 05:15:53 +0000 Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: ZJ3OtKM+GljG8nsx7Qv3/wuI9+tp98s9VtYrFwLXXJw=) 2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: H9iBAev1i2fVG9Su0JRgr3VpHwr3qa10u8oippD4Mno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: Nov 5 05:15:53 2025 GMT Not After : Nov 12 05:15:53 2025 GMT Subject: CN=690add89-b8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:58:56:8a:29:c8:18:d8:ca:0d:43:a4:39: 67:47:d3:c6:a9:f9:61:74:d6:12:e9:1a:ae:53:e3: 22:30:04:91:bc:11:1f:ce:91:76:96:97:95:96:95: 55:99:58:b9:c3:c8:94:29:76:84:80:4c:41:1d:a9: af:d1:12:23:e3:80:5b:3e:ed:2d:2f:38:48:5f:bf: 64:51:6e:00:0f:87:3e:aa:8a:48:49:8d:7f:5e:81: ff:f3:ed:78:69:57:9d:ff:0f:00:03:df:21:16:25: fe:54:38:e2:54:e0:ee:bc:a6:1e:cd:28:b4:33:2f: 75:16:0d:ea:26:c8:ce:58:e3:5a:35:aa:78:a8:d4: dc:63:19:c8:cc:ef:26:bd:75:5a:89:3a:81:68:2d: 92:b8:ad:8f:13:d3:1d:a4:c6:aa:b3:7e:67:ad:f2: 38:61:c3:81:9a:88:2f:51:f8:d3:d8:fa:28:a6:eb: 14:73:73:3f:18:e4:0c:ac:7d:4f:a3:70:2a:44:5c: 42:54:75:b9:f4:b6:d3:6c:b9:a9:15:64:0e:35:1d: a0:4e:9f:f6:5d:91:9c:6c:f8:aa:ff:71:4e:00:c4: b8:f5:e3:eb:13:c2:da:57:1e:7d:9f:b3:39:48:b7: e2:9f:77:e2:11:f4:9e:18:b0:bb:12:9c:06:f2:0c: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:44:56:B5:10:E0:EB:E0:C6:2A:B1:BC:46:06:C9:C3:F3:8A:D2:BC X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c1:8f:ae:ce:40:c5:3a:91:e0:d5:c7:91:64:ec:ba:9a:8c: dc:bf:9f:a9:b3:fd:d3:8f:0d:17:15:68:d6:61:cf:19:ce:b4: f5:cd:5e:65:bb:54:de:15:10:06:72:13:fa:9c:5b:93:da:8d: ab:36:66:c3:2a:30:04:ee:9d:68:55:40:46:d4:c9:17:5a:1a: 77:59:7f:d0:89:1c:03:d8:11:96:5e:77:7d:5c:1e:80:b5:2a: 9c:0a:e4:55:1f:8f:13:57:25:31:73:55:e4:9d:5b:76:d3:b6: 4a:b3:f8:d4:1d:62:3f:ac:43:59:b0:8f:0a:71:43:f7:ff:da: 1c:69:13:8e:63:bd:76:89:e5:98:b0:da:f1:3f:43:41:53:00: 31:c5:01:72:0c:49:62:ed:8c:02:20:54:c0:10:69:c8:cc:9c: bd:07:44:00:b1:40:97:0f:cf:49:60:a5:55:74:9d:31:99:f7: a2:82:2e:01:87:d0:ae:b1:fe:69:32:cf:fb:d8:df:30:8b:42: 65:2b:09:a5:10:ff:b1:dd:c1:3d:d2:88:6c:07:7f:e0:36:ea: e0:a8:e2:81:83:e0:8d:6c:dc:2e:75:4b:09:1a:02:8a:bb:d8: 50:fe:b9:0f:6e:c3:5c:9f:9d:30:2b:73:95:bf:d4:bd:eb:3e: 7e:68:ab:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUxMTA1MDUxNTUzWhcNMjUxMTEyMDUxNTUzWjAYMRYwFAYD VQQDEw02OTBhZGQ4OS1iOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvxYVoopyBjYyg1DpDlnR9PGqflhdNYS6RquU+MiMASRvBEfzpF2lpeVlpVV mVi5w8iUKXaEgExBHamv0RIj44BbPu0tLzhIX79kUW4AD4c+qopISY1/XoH/8+14 aVed/w8AA98hFiX+VDjiVODuvKYezSi0My91Fg3qJsjOWONaNap4qNTcYxnIzO8m vXVaiTqBaC2SuK2PE9MdpMaqs35nrfI4YcOBmogvUfjT2PoopusUc3M/GOQMrH1P o3AqRFxCVHW59LbTbLmpFWQONR2gTp/2XZGcbPiq/3FOAMS49ePrE8LaVx59n7M5 SLfin3fiEfSeGLC7EpwG8gxyJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANEVrUQ 4OvgxiqxvEYGycPzitK8MB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZ RGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApwY+uzkDFOpHg1ceRZOy6mozcv5+ps/3Tjw0XFWjWYc8ZzrT1zV5l u1TeFRAGchP6nFuT2o2rNmbDKjAE7p1oVUBG1MkXWhp3WX/QiRwD2BGWXnd9XB6A tSqcCuRVH48TVyUxc1XknVt207ZKs/jUHWI/rENZsI8KcUP3/9ocaROOY712ieWY sNrxP0NBUwAxxQFyDEli7YwCIFTAEGnIzJy9B0QAsUCXD89JYKVVdJ0xmfeigi4B h9Cusf5pMs/72N8wi0JlKwmlEP+x3cE90ohsB3/gNurgqOKBg+CNbNwudUsJGgKK u9hQ/rkPbsNcn50wK3OVv9S96z5+aKvV -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:21 2025 by rpki-client