$ rpki-client -vvf rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft File: EiOAOGQwr9Y_NklEdk4bNBhj0No.mft (raw, json) Hash identifier: 5oj5BASSDY2QefI0htGgd1bPKfC2mW10gU2c1Io3pzA= Subject key identifier: B2:34:1D:D8:A8:58:F9:FA:2C:FC:7E:24:A7:97:55:9E:04:F2:A0:31 Authority key identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA Certificate issuer: /CN=A9156AFF/serialNumber=122380386430AFD63F364944764E1B341863D0DA Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft Manifest number: 69 Signing time: Mon 03 Nov 2025 06:58:10 +0000 Manifest this update: Mon 03 Nov 2025 06:58:09 +0000 Manifest next update: Mon 10 Nov 2025 06:58:09 +0000 Files and hashes: 1: EiOAOGQwr9Y_NklEdk4bNBhj0No.crl (hash: CfPfwnh0Xxfqky4/COigKG9AA3up/JMW7igWJK+VFeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156AFF, serialNumber=122380386430AFD63F364944764E1B341863D0DA Validity Not Before: Nov 3 06:58:09 2025 GMT Not After : Nov 10 06:58:09 2025 GMT Subject: CN=69085282-5133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fb:76:62:39:9c:72:93:18:cf:98:b0:ce:e5: 08:74:2c:ee:c7:16:84:db:be:d6:e9:04:17:2b:24: 69:7c:b3:77:17:5b:e2:07:57:98:ad:d1:73:13:0c: 94:e6:ca:d1:d7:d3:d7:f3:d9:5f:a3:da:37:3f:16: 06:c0:22:c0:c6:5d:55:ad:4f:48:50:bf:b0:f4:6e: b8:c1:2a:62:9e:92:f1:32:f1:d0:02:80:52:ff:f5: a8:3c:7c:83:bc:3a:fe:73:11:a6:f0:46:32:e2:73: 04:88:a1:0b:88:da:7d:4e:a5:99:11:da:b9:eb:7c: 64:0d:9b:3c:5a:dc:25:a5:79:df:d6:3d:33:0b:48: 93:74:e2:08:e0:d2:17:4f:ee:5a:c6:8c:57:2a:02: 68:9c:27:1a:bb:ac:4e:99:7e:08:65:da:26:98:52: 7f:e5:27:53:b0:f1:82:52:5a:e2:0d:b1:49:60:e0: 42:b9:62:3a:03:93:ae:24:2d:50:ae:d0:b3:ca:95: 13:31:70:9a:36:09:80:21:36:c6:a2:be:be:50:be: 78:b3:a0:e7:cc:12:48:8f:8a:74:01:68:75:49:71: 19:11:34:21:b4:d9:df:27:d0:af:f5:aa:01:4f:73: 5e:22:76:1a:02:9a:11:55:2e:61:93:95:2f:47:b6: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:34:1D:D8:A8:58:F9:FA:2C:FC:7E:24:A7:97:55:9E:04:F2:A0:31 X509v3 Authority Key Identifier: keyid:12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3e:09:74:3b:d1:68:6b:18:24:35:1e:dd:be:a2:cf:e4:cf: b1:29:8c:96:2a:f1:25:9f:c6:96:1a:bf:2d:a0:8c:e5:8a:00: 36:c7:2c:d3:38:d2:9c:5b:55:b9:74:68:41:70:79:61:ec:84: 78:b6:34:c9:e0:fe:62:75:a8:17:9b:dd:8d:32:a2:9d:b1:62: 89:d1:d9:de:a1:9b:2f:d8:73:e8:0c:4f:2c:66:82:7b:e7:23: 99:e3:6c:8e:e5:a8:4e:7e:f7:a4:93:43:f9:28:24:f9:a0:9e: d8:3f:d3:b4:bf:ae:f4:7c:db:7f:6a:2f:e9:80:c5:94:43:55: a9:51:8c:b9:67:d1:0d:d8:59:eb:9e:46:d2:72:c7:cb:62:d6: c3:05:84:8a:8b:ca:c3:da:d3:9d:0b:d5:97:e1:30:33:27:a9: d2:fe:fe:1f:5d:81:b7:c4:e6:a5:1d:bb:4f:e4:e0:01:fa:e9: 70:bf:46:4f:17:62:3c:35:f7:1a:a1:f7:f0:5c:1c:c4:70:f1: 2d:a1:12:22:ef:16:15:24:72:4b:3f:7a:ba:76:a5:46:8d:95: e2:b4:6a:8e:62:20:80:7d:37:7e:16:e4:a2:1c:7a:27:dc:bd: e6:39:d8:73:42:76:7e:58:a8:24:5a:1c:f8:5f:9f:c7:ac:0e: cf:c3:70:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkFGRjExMC8GA1UEBRMoMTIyMzgwMzg2NDMwQUZENjNGMzY0OTQ0NzY0RTFCMzQx ODYzRDBEQTAeFw0yNTExMDMwNjU4MDlaFw0yNTExMTAwNjU4MDlaMBgxFjAUBgNV BAMTDTY5MDg1MjgyLTUxMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa+3ZiOZxykxjPmLDO5Qh0LO7HFoTbvtbpBBcrJGl8s3cXW+IHV5it0XMTDJTm ytHX09fz2V+j2jc/FgbAIsDGXVWtT0hQv7D0brjBKmKekvEy8dACgFL/9ag8fIO8 Ov5zEabwRjLicwSIoQuI2n1OpZkR2rnrfGQNmzxa3CWled/WPTMLSJN04gjg0hdP 7lrGjFcqAmicJxq7rE6Zfghl2iaYUn/lJ1Ow8YJSWuINsUlg4EK5YjoDk64kLVCu 0LPKlRMxcJo2CYAhNsaivr5QvnizoOfMEkiPinQBaHVJcRkRNCG02d8n0K/1qgFP c14idhoCmhFVLmGTlS9Hto7NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsjQd2KhY +fos/H4kp5dVngTyoDEwHwYDVR0jBBgwFoAUEiOAOGQwr9Y/NklEdk4bNBhj0Now DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QUZGLzNCN0IzMUI2MTRE ODExRjBBMzdFQzA0RUM0RjlBRTAyL0VpT0FPR1F3cjlZX05rbEVkazRiTkJoajBO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWlPQU9HUXdyOVlfTmtsRWRrNGJOQmhqME5vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QUZGLzNCN0IzMUI2MTREODExRjBBMzdFQzA0RUM0RjlBRTAyL0VpT0FPR1F3cjlZ X05rbEVkazRiTkJoajBOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4+CXQ70WhrGCQ1Ht2+os/kz7EpjJYq8SWfxpYavy2gjOWKADbHLNM4 0pxbVbl0aEFweWHshHi2NMng/mJ1qBeb3Y0yop2xYonR2d6hmy/Yc+gMTyxmgnvn I5njbI7lqE5+96STQ/koJPmgntg/07S/rvR8239qL+mAxZRDValRjLln0Q3YWeue RtJyx8ti1sMFhIqLysPa050L1ZfhMDMnqdL+/h9dgbfE5qUdu0/k4AH66XC/Rk8X Yjw19xqh9/BcHMRw8S2hEiLvFhUkcks/erp2pUaNleK0ao5iIIB9N34W5KIceifc veY52HNCdn5YqCRaHPhfn8esDs/DcMM= -----END CERTIFICATE-----Generated at Tue Nov 4 01:08:23 2025 by rpki-client