$ rpki-client -vvf rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft File: esbv-wTCtYD1pWtqdGzf4FOvap4.mft (raw, json) Hash identifier: 6dzPIGVEI7vZn1dQYCDY6oHBZSvOy56TVMFkmR3DrBs= Subject key identifier: DD:9D:14:A3:57:E1:DD:67:85:E2:DB:AC:89:24:A9:CF:6B:BE:AD:8A Authority key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E Certificate issuer: /CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E Certificate serial: 0B43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft Manifest number: 0B2F Signing time: Sun 02 Nov 2025 19:15:40 +0000 Manifest this update: Sun 02 Nov 2025 19:15:40 +0000 Manifest next update: Sun 09 Nov 2025 19:15:40 +0000 Files and hashes: 1: esbv-wTCtYD1pWtqdGzf4FOvap4.crl (hash: IjWB8SXJz+1XHL1+nvc2zfeuQ1i/szdG6egWwGL8oOQ=) 2: D9C33050560B11EDA1636E52C4F9AE02.roa (hash: RuSZgMZ4QoYvu76O7V8W4nab76a8ye3lfqmWyPmtPvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2883 (0xb43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91747E1, serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E Validity Not Before: Nov 2 19:15:40 2025 GMT Not After : Nov 9 19:15:40 2025 GMT Subject: CN=6907addc-4cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:48:98:8a:f0:f0:c4:ca:ed:4c:6b:48:88:41: 58:61:8d:95:77:92:13:3c:e7:a0:75:3a:2f:5d:52: 39:ff:97:a0:19:28:66:8c:94:10:0b:8e:5c:65:8c: 3a:d9:8d:7f:d9:36:8e:3b:d4:0a:33:d6:d4:24:d1: 22:18:84:34:7e:d1:34:5c:f5:be:fb:e0:06:e7:87: c2:fb:90:81:51:7f:c0:34:1b:81:f8:55:29:05:fe: e6:b3:b8:54:57:2a:26:ff:94:91:0f:3c:4d:95:85: 5c:83:b3:a1:14:21:e1:4c:17:e7:fb:28:c2:e5:b7: d1:68:99:83:c4:4e:bc:f7:29:08:e9:ee:d4:e5:4f: de:82:d4:d2:c0:64:95:44:f2:97:1a:94:05:1a:94: 52:ae:d8:6e:ca:5c:49:e0:10:84:06:d3:8a:5c:66: 3a:01:d9:f0:6a:60:4b:12:4e:ee:4c:2f:d4:f4:46: a3:21:b7:f6:b8:f7:9d:9b:b6:6c:70:32:fa:ed:a4: 1a:fe:43:6e:e9:55:7d:a0:71:56:f7:08:46:5e:3a: ee:a4:3f:0d:64:e8:df:d3:67:6c:62:cd:52:23:7c: 98:31:1f:7a:88:52:6e:f2:6c:25:70:45:19:85:cf: fb:5a:c9:46:bf:4a:68:f1:70:25:82:35:0f:52:7e: 64:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9D:14:A3:57:E1:DD:67:85:E2:DB:AC:89:24:A9:CF:6B:BE:AD:8A X509v3 Authority Key Identifier: keyid:7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:7d:ac:e4:03:e1:10:d5:da:9b:11:55:3f:e7:88:db:9e:0b: d5:d3:29:a1:f8:3c:6b:6f:f0:a5:95:a6:99:35:2b:b7:45:1c: 6d:a7:0c:ac:8c:65:b7:d6:a4:da:ad:56:3b:cb:90:62:88:b2: 20:b4:97:fa:f9:f4:41:93:ce:71:2d:30:a5:ae:33:23:f0:e3: a0:f2:24:7e:d9:58:c4:8d:69:dd:83:06:c8:a9:cf:bf:3c:84: 75:0c:b8:db:52:ec:28:30:2d:8a:74:88:1c:28:26:21:3c:23: 19:ce:61:09:9c:9d:2d:75:ea:2b:74:f4:88:a8:77:cf:9e:f3: 5a:3a:8e:32:48:de:9d:6d:48:e6:16:49:62:11:bf:89:b4:e4: ee:e6:41:1b:80:ad:5b:dc:1e:ca:d7:aa:7f:76:ad:70:92:bd: c5:ab:f7:d0:ad:d2:8e:d9:ed:96:18:d2:80:c1:55:6a:bb:c5: fe:5a:73:c0:77:13:c2:80:ee:fa:44:55:5c:a8:33:98:f0:78: 05:c9:bc:bf:9e:f5:23:90:48:95:5e:9b:55:e8:c9:f7:94:11: ee:b7:42:9e:cf:26:cd:e2:d9:10:c8:45:bc:09:6d:66:ea:67: 3d:e4:c5:f1:20:de:3c:8c:43:4b:cf:a0:94:ec:68:64:de:99: 20:00:2b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ3RTExMTAvBgNVBAUTKDdBQzZFRkZCMDRDMkI1ODBGNUE1NkI2QTc0NkNERkUw NTNBRjZBOUUwHhcNMjUxMTAyMTkxNTQwWhcNMjUxMTA5MTkxNTQwWjAYMRYwFAYD VQQDEw02OTA3YWRkYy00Y2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEiYivDwxMrtTGtIiEFYYY2Vd5ITPOegdTovXVI5/5egGShmjJQQC45cZYw6 2Y1/2TaOO9QKM9bUJNEiGIQ0ftE0XPW+++AG54fC+5CBUX/ANBuB+FUpBf7ms7hU Vyom/5SRDzxNlYVcg7OhFCHhTBfn+yjC5bfRaJmDxE689ykI6e7U5U/egtTSwGSV RPKXGpQFGpRSrthuylxJ4BCEBtOKXGY6AdnwamBLEk7uTC/U9EajIbf2uPedm7Zs cDL67aQa/kNu6VV9oHFW9whGXjrupD8NZOjf02dsYs1SI3yYMR96iFJu8mwlcEUZ hc/7WslGv0po8XAlgjUPUn5kMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2dFKNX 4d1nheLbrIkkqc9rvq2KMB8GA1UdIwQYMBaAFHrG7/sEwrWA9aVranRs3+BTr2qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDdFMS9DRTM0NzJERTRD QzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdUQ3RZRDFwV3RxZEd6ZjRGT3Zh cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzYnYtd1RDdFlEMXBXdHFkR3pmNEZPdmFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDdFMS9DRTM0NzJERTRDQzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdUQ3RZ RDFwV3RxZEd6ZjRGT3ZhcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlfazkA+EQ1dqbEVU/54jbngvV0ymh+Dxrb/CllaaZNSu3RRxtpwys jGW31qTarVY7y5BiiLIgtJf6+fRBk85xLTClrjMj8OOg8iR+2VjEjWndgwbIqc+/ PIR1DLjbUuwoMC2KdIgcKCYhPCMZzmEJnJ0tdeordPSIqHfPnvNaOo4ySN6dbUjm FkliEb+JtOTu5kEbgK1b3B7K16p/dq1wkr3Fq/fQrdKO2e2WGNKAwVVqu8X+WnPA dxPCgO76RFVcqDOY8HgFyby/nvUjkEiVXptV6Mn3lBHut0KezybN4tkQyEW8CW1m 6mc95MXxIN48jENLz6CU7Ghk3pkgACu9 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:31 2025 by rpki-client