$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft File: eoryTXjXdw3DOcL_KP18FNE8X7E.mft (raw, json) Hash identifier: JeCt+GhBbwdiZnuqU53LY+C/Dey1MK+tSgDrFvciiUQ= Subject key identifier: CA:53:05:9A:D4:3A:60:CC:E6:AA:45:C1:CD:38:2F:8A:1F:96:C4:6D Authority key identifier: 7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 Certificate issuer: /CN=A911EB2D/serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft Manifest number: 09BE Signing time: Fri 31 Oct 2025 20:34:38 +0000 Manifest this update: Fri 31 Oct 2025 20:34:37 +0000 Manifest next update: Fri 07 Nov 2025 20:34:37 +0000 Files and hashes: 1: eoryTXjXdw3DOcL_KP18FNE8X7E.crl (hash: Xbro9HnhcrYpINPGLmjB3YDqVox9AXeGO1/+BT5DaVI=) 2: 47C98CE6860911EFBACC1172C4F9AE02.roa (hash: YlK6PNNV4o8XYoD4OsO5FY1L+q++AQFySduwH+CQhk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D, serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Validity Not Before: Oct 31 20:34:37 2025 GMT Not After : Nov 7 20:34:37 2025 GMT Subject: CN=69051d5e-3815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e6:0a:9c:03:6a:e4:48:8a:db:da:58:a8:0c: 2a:59:fc:1f:8f:50:dd:e4:23:d1:3e:af:69:af:e8: 54:03:5e:4d:1e:c1:ef:5f:ae:cb:c3:18:23:34:4d: 33:cc:b1:af:34:86:32:2a:f2:00:f3:6d:1e:cf:77: 6e:f6:7c:b9:bd:fe:bc:a1:6f:3a:13:36:c0:6b:1b: 53:50:2e:a8:99:1a:37:a8:36:d9:86:0c:a7:32:4a: b7:6c:17:75:c9:75:f5:7a:09:53:fc:a1:dd:01:82: d8:ff:f4:bd:52:f5:dc:a8:25:d9:b3:2b:a7:ee:ef: 6b:b1:90:b3:11:51:04:81:24:f6:f3:91:a4:5d:0b: 5a:ea:e2:ef:25:d4:12:e1:14:ac:20:e1:f3:29:2f: 33:5a:0e:72:7f:ac:69:18:11:58:6a:5f:d1:32:91: 4b:22:d5:a9:2b:a9:74:b1:27:3c:d4:1b:1c:8c:2d: 9e:ae:e6:53:3c:28:a4:71:af:06:5a:7f:ec:81:17: fb:d8:61:01:10:0b:1e:18:00:54:bc:0f:a2:11:7c: 7b:0a:e1:03:8b:56:16:26:6b:16:46:d6:0f:c6:7d: b0:35:cb:f6:91:3d:e6:79:c4:97:ff:02:7e:d8:7b: 02:e3:cb:34:88:59:d3:3c:fb:46:a0:ca:ca:b8:3a: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:53:05:9A:D4:3A:60:CC:E6:AA:45:C1:CD:38:2F:8A:1F:96:C4:6D X509v3 Authority Key Identifier: keyid:7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ee:30:0d:b8:3f:1d:96:b5:6b:05:10:8e:ef:92:6a:38:76: d8:68:64:51:44:04:7f:08:3c:4b:10:fd:13:03:55:f8:16:26: ed:f7:07:62:7e:a4:40:f9:a7:e1:0e:c2:18:48:26:c8:34:26: d7:5c:08:bd:1f:1a:3a:a3:00:f6:89:38:8c:32:7d:2f:89:f5: 5d:7e:8c:38:b5:8a:73:e8:5b:36:62:06:9c:27:ab:90:3c:b3: 1d:92:e6:86:cd:bd:c3:71:88:25:c0:d6:60:46:43:6f:b2:fb: a2:a6:be:a3:d1:57:a2:18:ab:4b:d3:5d:2c:e5:8b:dd:7e:f5: c9:76:a9:21:ff:0b:f7:48:db:56:bb:2c:2b:cb:fe:c9:b1:a4: c9:e6:61:fd:f5:0d:6c:a7:7b:9e:41:96:7b:5f:e9:00:51:ac: d5:5a:18:8e:56:e8:e2:5d:a0:93:f4:a7:8e:dd:7e:02:f7:66: fb:05:4c:26:3b:c5:b6:cf:ba:f1:eb:63:9f:32:dd:23:2d:d9: 1a:ff:24:38:6f:be:19:f7:0b:b0:32:0e:9f:fa:b4:46:b5:42: 83:e0:8c:70:0f:bd:af:79:22:a5:58:79:12:5f:02:8e:ac:86: a7:a7:59:24:a2:da:c1:06:1f:85:42:1d:34:ef:7d:38:9c:a6: 05:a2:be:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVCMkQxMTAvBgNVBAUTKDdBOEFGMjRENzhENzc3MERDMzM5QzJGRjI4RkQ3QzE0 RDEzQzVGQjEwHhcNMjUxMDMxMjAzNDM3WhcNMjUxMTA3MjAzNDM3WjAYMRYwFAYD VQQDEw02OTA1MWQ1ZS0zODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OYKnANq5EiK29pYqAwqWfwfj1Dd5CPRPq9pr+hUA15NHsHvX67LwxgjNE0z zLGvNIYyKvIA820ez3du9ny5vf68oW86EzbAaxtTUC6omRo3qDbZhgynMkq3bBd1 yXX1eglT/KHdAYLY//S9UvXcqCXZsyun7u9rsZCzEVEEgST285GkXQta6uLvJdQS 4RSsIOHzKS8zWg5yf6xpGBFYal/RMpFLItWpK6l0sSc81BscjC2eruZTPCikca8G Wn/sgRf72GEBEAseGABUvA+iEXx7CuEDi1YWJmsWRtYPxn2wNcv2kT3mecSX/wJ+ 2HsC48s0iFnTPPtGoMrKuDpPtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpTBZrU OmDM5qpFwc04L4oflsRtMB8GA1UdIwQYMBaAFHqK8k1413cNwznC/yj9fBTRPF+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF QjMxMUVBODI2ODc2NDNDNEY5QUUwMi9lb3J5VFhqWGR3M0RPY0xfS1AxOEZORThY N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VvcnlUWGpYZHczRE9jTF9LUDE4Rk5FOFg3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUIyRC80QTZDRURBQ0JFQjMxMUVBODI2ODc2NDNDNEY5QUUwMi9lb3J5VFhqWGR3 M0RPY0xfS1AxOEZORThYN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb7jANuD8dlrVrBRCO75JqOHbYaGRRRAR/CDxLEP0TA1X4Fibt9wdi fqRA+afhDsIYSCbINCbXXAi9Hxo6owD2iTiMMn0vifVdfow4tYpz6Fs2YgacJ6uQ PLMdkuaGzb3DcYglwNZgRkNvsvuipr6j0VeiGKtL010s5YvdfvXJdqkh/wv3SNtW uywry/7JsaTJ5mH99Q1sp3ueQZZ7X+kAUazVWhiOVujiXaCT9KeO3X4C92b7BUwm O8W2z7rx62OfMt0jLdka/yQ4b74Z9wuwMg6f+rRGtUKD4IxwD72veSKlWHkSXwKO rIanp1kkotrBBh+FQh007304nKYFor4k -----END CERTIFICATE-----Generated at Sat Nov 1 10:09:39 2025 by rpki-client