$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: K3Gb7nsYbVaoNkiKWisk4UXIBck8aKk50hyteBgmq7Q= Subject key identifier: 59:25:24:73:37:9A:23:1A:E0:32:0B:71:FE:A8:02:40:6B:72:95:0B Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 03DB Signing time: Wed 05 Nov 2025 00:40:28 +0000 Manifest this update: Wed 05 Nov 2025 00:40:27 +0000 Manifest next update: Wed 12 Nov 2025 00:40:27 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: dgmq0nU5yxBEkT+FSy+UcCq8WDZEhPYIhlowwdqcXAg=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: Nov 5 00:40:27 2025 GMT Not After : Nov 12 00:40:27 2025 GMT Subject: CN=690a9cfb-2c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f6:80:90:7b:2c:e8:b1:ea:e5:8b:46:4a:ff: fc:bd:92:88:66:68:94:f1:10:d3:4b:8e:e1:ff:f6: 55:66:97:89:9b:79:1c:00:fd:fc:91:1c:d3:e1:e7: e1:80:53:53:2e:c4:df:7b:c2:e1:aa:66:ee:5c:02: 94:07:3c:e2:cb:8e:3b:47:89:42:fb:fc:b9:c4:75: 67:e7:66:4f:7a:b3:2e:31:13:84:35:bf:ce:45:f6: d5:19:36:15:ff:ab:a3:19:b4:7c:f1:f1:84:68:7c: 07:9e:02:d2:0b:71:5d:9f:b6:c3:dc:07:d8:23:77: f0:92:24:f3:98:cc:01:c0:03:c3:3b:14:04:f4:7c: 3e:0c:6a:0d:64:5b:45:be:3c:5c:2b:4b:36:a9:e6: 6e:a2:1a:e2:f7:2c:00:4d:2e:4b:a2:fd:d6:e9:f0: 33:0e:b5:bb:d1:31:65:f5:69:f8:de:ff:82:a9:ed: 1f:c7:7d:82:d8:4a:e2:7e:3d:56:d0:28:69:5f:e3: 2c:33:8d:1a:ad:ee:13:6c:4a:83:a4:2d:2c:b8:d7: dc:2f:19:6c:82:e0:67:cc:b8:6e:0e:7f:7f:f8:2b: 23:89:a4:35:0b:b6:c6:f6:59:8f:db:7e:2c:de:3e: eb:bb:71:99:11:90:0c:f7:16:1c:87:65:c2:3e:4f: f7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:25:24:73:37:9A:23:1A:E0:32:0B:71:FE:A8:02:40:6B:72:95:0B X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7e:c7:6f:b2:5e:aa:7e:aa:97:49:e4:ca:18:b0:ef:8a:de: e7:e4:43:94:4b:35:57:61:47:68:c3:a9:35:55:a6:ae:f7:1a: a0:6f:a5:f0:4b:c2:dd:bc:e1:56:83:16:a3:7d:57:5f:48:91: d5:f5:0b:9e:0f:49:5f:25:6e:e9:1e:f4:51:18:19:7b:12:38: b0:fa:78:e8:14:74:47:0f:eb:8e:b3:87:74:35:45:ff:7c:5b: 77:e6:64:72:4f:0a:95:6d:5a:8b:59:58:0d:93:39:f3:52:36: 25:2c:37:63:33:f1:29:8a:93:4d:3b:d0:42:13:ae:91:49:54: 0a:9a:40:ba:b1:e2:0f:2e:4f:6e:5a:24:c8:23:7c:d3:d0:da: a9:8b:29:ab:2e:58:76:f6:66:98:52:12:df:a5:31:a5:27:ad: 0c:9c:dc:3f:83:8e:74:e2:3a:a1:05:cc:7d:9e:07:e9:c1:8f: d2:95:a3:f3:a4:48:46:56:28:2d:c0:a9:d9:17:0b:2e:b6:b1: 42:5f:db:db:97:ef:98:7c:0a:37:da:be:b6:46:07:e3:b7:39: 9a:cf:15:1b:5f:d8:c0:24:ce:6f:d9:9c:9b:71:36:a4:9d:59: 42:f7:60:83:ee:b1:84:83:69:86:4f:44:5b:8a:81:99:96:72: a3:aa:0c:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjUxMTA1MDA0MDI3WhcNMjUxMTEyMDA0MDI3WjAYMRYwFAYD VQQDEw02OTBhOWNmYi0yYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvaAkHss6LHq5YtGSv/8vZKIZmiU8RDTS47h//ZVZpeJm3kcAP38kRzT4efh gFNTLsTfe8LhqmbuXAKUBzziy447R4lC+/y5xHVn52ZPerMuMROENb/ORfbVGTYV /6ujGbR88fGEaHwHngLSC3Fdn7bD3AfYI3fwkiTzmMwBwAPDOxQE9Hw+DGoNZFtF vjxcK0s2qeZuohri9ywATS5Lov3W6fAzDrW70TFl9Wn43v+Cqe0fx32C2Erifj1W 0ChpX+MsM40are4TbEqDpC0suNfcLxlsguBnzLhuDn9/+CsjiaQ1C7bG9lmP234s 3j7ru3GZEZAM9xYch2XCPk/3AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFklJHM3 miMa4DILcf6oAkBrcpULMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6fsdvsl6qfqqXSeTKGLDvit7n5EOUSzVXYUdow6k1Vaau9xqgb6Xw S8LdvOFWgxajfVdfSJHV9QueD0lfJW7pHvRRGBl7Ejiw+njoFHRHD+uOs4d0NUX/ fFt35mRyTwqVbVqLWVgNkznzUjYlLDdjM/EpipNNO9BCE66RSVQKmkC6seIPLk9u WiTII3zT0NqpiymrLlh29maYUhLfpTGlJ60MnNw/g4504jqhBcx9ngfpwY/SlaPz pEhGVigtwKnZFwsutrFCX9vbl++YfAo32r62RgfjtzmazxUbX9jAJM5v2ZybcTak nVlC92CD7rGEg2mGT0RbioGZlnKjqgyd -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:05 2025 by rpki-client