$ rpki-client -vvf rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft File: eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft (raw, json) Hash identifier: WJTOXkF201Fwavz7oSkdkHm6zY0LGBsYav/8WFV6sIM= Subject key identifier: 84:91:AE:7B:03:0E:88:B0:EB:15:3D:F4:45:70:EE:69:4A:A2:8C:5A Authority key identifier: 79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8 Certificate issuer: /CN=A9136359/serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft Manifest number: 09 Signing time: Mon 03 Nov 2025 08:01:01 +0000 Manifest this update: Mon 03 Nov 2025 08:01:01 +0000 Manifest next update: Mon 10 Nov 2025 08:01:01 +0000 Files and hashes: 1: eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl (hash: j3+mBJeEkY9cdax5lg3W9YIMYWVWcCzxRWFky5KNqT8=) 2: 698A914EAE2711F096416455C4F9AE02.roa (hash: 7Jh4bbECd/hNw4i818yA2WJfwAYJwUXesvOfcYZ46i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136359, serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8 Validity Not Before: Nov 3 08:01:01 2025 GMT Not After : Nov 10 08:01:01 2025 GMT Subject: CN=6908613d-3d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:0a:1b:1d:85:ea:a5:a0:73:f0:b4:6b:66: e2:45:13:27:a9:af:32:b1:d3:a9:5f:e7:cc:60:93: bd:20:bb:7d:9f:65:7a:30:f8:59:fa:a5:14:d1:9f: 05:fa:57:50:42:cb:e8:68:7e:1b:4c:41:51:8b:9c: 8f:46:55:9d:a7:3c:23:bb:49:71:b2:7c:71:95:7e: 2c:35:79:44:b1:13:46:6b:eb:8e:58:6a:0a:dc:88: 01:1a:41:b3:cd:d5:99:b7:13:ae:d6:9c:87:98:55: e4:b9:31:83:de:41:6a:7f:f5:49:b8:d2:58:e3:c9: b4:a0:64:3c:02:2a:03:52:d0:54:0d:8a:ad:db:f1: eb:69:43:bd:61:89:ec:b3:5a:46:47:bf:9b:8a:f1: 9d:e9:d4:5b:cd:05:5e:86:d4:f5:67:56:1c:de:91: ff:a2:68:0e:f3:09:22:40:49:86:45:19:2c:5a:53: dc:c7:fe:4d:cf:65:b7:02:4e:18:21:7d:38:e2:5d: 85:7f:30:2e:1f:bd:ba:6e:84:cf:89:7b:9e:a9:7a: 55:6a:25:48:b0:73:72:e9:ce:2a:54:52:6b:3c:93: c1:22:99:f5:5a:d9:78:90:94:f5:92:34:48:7a:ac: 00:bf:e6:c0:cf:69:1d:93:65:ae:a5:fc:f5:0b:6d: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:91:AE:7B:03:0E:88:B0:EB:15:3D:F4:45:70:EE:69:4A:A2:8C:5A X509v3 Authority Key Identifier: keyid:79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6c:58:38:5f:ba:f4:74:98:97:d0:e4:0f:e5:81:76:df:dd: b0:84:96:25:c8:7f:1f:7e:bf:82:21:03:a1:f2:ed:9b:18:23: 05:c7:56:b9:18:3d:fe:49:4a:a4:90:b3:fe:f1:82:bc:e3:4a: 46:cd:bf:8f:90:97:3c:a4:d9:89:e2:d6:ce:17:ff:8f:af:b6: 21:ef:11:d4:56:6a:fe:5b:d8:eb:ba:0d:b1:44:37:d2:d2:39: ce:75:79:a9:5e:3e:77:15:fb:fa:3a:27:ec:5d:74:98:db:c7: 52:89:10:12:6f:d5:e8:7f:16:cd:de:60:29:85:6b:8e:23:7a: ef:17:c0:4e:cd:76:36:1c:9d:7b:97:f8:cf:98:ee:e2:2b:8b: 6a:d3:3e:45:e9:51:89:a7:0e:73:3d:2d:58:4a:e3:d1:c9:63: fe:88:d3:67:fc:90:32:a3:58:30:7b:2e:a8:65:f1:b5:c7:de: 55:d6:f0:62:84:ea:ea:d7:34:c5:7a:37:c8:85:0e:42:59:02: 93:9a:49:46:3a:ac:f9:f3:9e:1d:df:d0:2d:01:4a:14:01:6a: c0:6e:6f:2c:75:5e:16:04:cf:59:02:55:60:d5:94:82:39:1f: 8e:5f:39:a9:ca:12:f8:f1:41:67:fa:34:8d:88:a5:8c:09:b4: ee:8d:68:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjM1OTExMC8GA1UEBRMoNzkyQzQ1NjZCOUIwMjU4QUIxNjU1MzgyMkYxOURGRkU4 NEEyRENCODAeFw0yNTExMDMwODAxMDFaFw0yNTExMTAwODAxMDFaMBgxFjAUBgNV BAMTDTY5MDg2MTNkLTNkMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6OQobHYXqpaBz8LRrZuJFEyeprzKx06lf58xgk70gu32fZXow+Fn6pRTRnwX6 V1BCy+hofhtMQVGLnI9GVZ2nPCO7SXGyfHGVfiw1eUSxE0Zr645YagrciAEaQbPN 1Zm3E67WnIeYVeS5MYPeQWp/9Um40ljjybSgZDwCKgNS0FQNiq3b8etpQ71hieyz WkZHv5uK8Z3p1FvNBV6G1PVnVhzekf+iaA7zCSJASYZFGSxaU9zH/k3PZbcCThgh fTjiXYV/MC4fvbpuhM+Je56pelVqJUiwc3LpzipUUms8k8EimfVa2XiQlPWSNEh6 rAC/5sDPaR2TZa6l/PULbSuTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhJGuewMO iLDrFT30RXDuaUqijFowHwYDVR0jBBgwFoAUeSxFZrmwJYqxZVOCLxnf/oSi3Lgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzU5LzY2NjBEODhBQUUy NjExRjBCQ0ZGODA1M0M0RjlBRTAyL2VTeEZacm13SllxeFpWT0NMeG5mX29TaTNM Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVN4RlpybXdKWXF4WlZPQ0x4bmZfb1NpM0xnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MzU5LzY2NjBEODhBQUUyNjExRjBCQ0ZGODA1M0M0RjlBRTAyL2VTeEZacm13Sllx eFpWT0NMeG5mX29TaTNMZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAANsWDhfuvR0mJfQ5A/lgXbf3bCEliXIfx9+v4IhA6Hy7ZsYIwXHVrkY Pf5JSqSQs/7xgrzjSkbNv4+Qlzyk2Yni1s4X/4+vtiHvEdRWav5b2Ou6DbFEN9LS Oc51ealePncV+/o6J+xddJjbx1KJEBJv1eh/Fs3eYCmFa44jeu8XwE7NdjYcnXuX +M+Y7uIri2rTPkXpUYmnDnM9LVhK49HJY/6I02f8kDKjWDB7Lqhl8bXH3lXW8GKE 6urXNMV6N8iFDkJZApOaSUY6rPnznh3f0C0BShQBasBubyx1XhYEz1kCVWDVlII5 H45fOanKEvjxQWf6NI2IpYwJtO6NaOw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:47 2025 by rpki-client