$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json) Hash identifier: EJ0ZJ3EflCmvgZlvMlDv20EcfzzXITKv09iis8EgEhk= Subject key identifier: 0C:E6:B4:1E:49:51:73:8F:5C:A4:A9:25:2D:56:F2:BE:CC:F2:0A:56 Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft Manifest number: 0236 Signing time: Mon 03 Nov 2025 01:49:43 +0000 Manifest this update: Mon 03 Nov 2025 01:49:43 +0000 Manifest next update: Mon 10 Nov 2025 01:49:43 +0000 Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: gpXZZUxrekfvMYqWk3cUafYdjFbDjumz+0/R1Mss4HA=) 2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: SUpV5MPTH/BMBi71c7spbVUHkBTzCZVpxBmfHqDrVmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Validity Not Before: Nov 3 01:49:43 2025 GMT Not After : Nov 10 01:49:43 2025 GMT Subject: CN=69080a37-098b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:d4:6a:e9:be:cb:f1:06:a5:1e:04:24:39: 1c:8e:3c:07:03:6f:f4:48:b1:ae:3b:72:c8:f7:d8: c0:13:06:a4:d3:ec:70:4d:df:e7:a3:8b:00:ea:d1: 95:a5:0b:ef:aa:6e:e7:b2:3e:ec:f0:6e:68:e6:49: f6:7a:04:a0:b8:60:1a:0a:ce:af:2a:06:41:b9:f9: 8f:1a:ff:36:94:e0:7f:75:6e:23:60:d6:3d:58:03: fb:0f:29:c9:9c:08:f7:c3:77:e6:eb:37:52:f5:9a: bd:00:df:2e:3b:ae:c5:12:11:f8:e6:43:77:05:a3: 01:1f:70:a8:a4:39:ce:7c:8c:35:50:ba:5d:e1:c4: 46:b9:f2:78:53:3a:96:78:4c:3c:24:ee:57:67:76: aa:cf:a7:ad:ba:11:93:09:3e:aa:4d:24:3b:10:b3: 11:42:f3:af:1f:23:8d:2b:ad:75:af:07:c0:bd:e5: 36:02:56:8d:47:91:e7:4c:35:75:53:99:79:e6:35: a3:83:a2:b4:17:5b:ab:ac:8f:89:58:05:01:6c:39: 7e:94:f5:94:6e:c2:45:7c:4e:ee:e3:3a:40:8d:2e: ae:17:f9:20:f9:58:46:8f:1a:31:a8:21:dd:0b:64: b5:8d:1c:e1:89:13:66:b0:60:03:71:78:f4:ae:d2: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E6:B4:1E:49:51:73:8F:5C:A4:A9:25:2D:56:F2:BE:CC:F2:0A:56 X509v3 Authority Key Identifier: keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:65:68:bf:97:ed:09:10:ec:69:0b:6b:ab:22:ca:b2:6e:96: 65:94:8e:a9:d2:93:e7:68:f9:da:86:98:8c:44:c1:4a:f0:d8: ca:10:ae:69:9a:fc:a7:2c:75:b3:ab:1d:ee:81:e0:79:a1:38: 17:50:a3:5e:c1:de:72:2f:06:14:d7:cf:10:12:49:e2:e8:ae: 25:58:d9:07:d9:64:46:f0:65:3f:19:e1:d1:8f:21:05:1a:16: 61:88:eb:fd:9d:69:20:18:e4:3f:6f:73:c0:af:eb:75:d8:d8: 27:76:69:62:73:83:d7:41:d1:47:25:6c:20:46:29:b4:3e:b5: 16:60:bc:8d:ec:da:4e:b0:46:2f:d7:9e:e8:ed:48:4c:5b:30: 52:5e:8b:5b:cd:9f:69:3d:da:50:73:68:59:96:63:ed:f4:a0: 4a:0d:7b:f8:9c:0f:87:7c:d7:36:0f:0a:49:f1:37:0a:43:2f: 53:63:67:54:fd:87:30:d2:da:d1:77:05:65:fc:5e:b8:a5:54: 89:0a:f3:0a:90:81:9b:b7:6d:3f:3a:bd:ce:38:d1:51:76:02: 15:be:70:a3:59:5c:01:c8:24:c7:07:f7:6e:af:09:29:85:51: 8b:be:2b:cd:c2:9e:a9:c1:8b:0c:b0:d5:f1:c2:e4:fd:ca:5a: af:f3:8d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3 RjFBMzA2MDkwHhcNMjUxMTAzMDE0OTQzWhcNMjUxMTEwMDE0OTQzWjAYMRYwFAYD VQQDEw02OTA4MGEzNy0wOThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziPUaum+y/EGpR4EJDkcjjwHA2/0SLGuO3LI99jAEwak0+xwTd/no4sA6tGV pQvvqm7nsj7s8G5o5kn2egSguGAaCs6vKgZBufmPGv82lOB/dW4jYNY9WAP7DynJ nAj3w3fm6zdS9Zq9AN8uO67FEhH45kN3BaMBH3CopDnOfIw1ULpd4cRGufJ4UzqW eEw8JO5XZ3aqz6etuhGTCT6qTSQ7ELMRQvOvHyONK611rwfAveU2AlaNR5HnTDV1 U5l55jWjg6K0F1urrI+JWAUBbDl+lPWUbsJFfE7u4zpAjS6uF/kg+VhGjxoxqCHd C2S1jRzhiRNmsGADcXj0rtI2QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzmtB5J UXOPXKSpJS1W8r7M8gpWMB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHZWi/l+0JEOxpC2urIsqybpZllI6p0pPnaPnahpiMRMFK8NjKEK5p mvynLHWzqx3ugeB5oTgXUKNewd5yLwYU188QEkni6K4lWNkH2WRG8GU/GeHRjyEF GhZhiOv9nWkgGOQ/b3PAr+t12Ngndmlic4PXQdFHJWwgRim0PrUWYLyN7NpOsEYv 157o7UhMWzBSXotbzZ9pPdpQc2hZlmPt9KBKDXv4nA+HfNc2DwpJ8TcKQy9TY2dU /Ycw0trRdwVl/F64pVSJCvMKkIGbt20/Or3OONFRdgIVvnCjWVwByCTHB/durwkp hVGLvivNwp6pwYsMsNXxwuT9ylqv842P -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:49 2025 by rpki-client