$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft File: e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft (raw, json) Hash identifier: ZrNHj7E4TEifsh4XoibchU11yMWgarqjWparsRCeqW4= Subject key identifier: 8D:58:BA:35:FE:8B:E1:56:8A:F2:EF:A4:75:F1:A2:1C:13:C2:2D:92 Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5 Certificate issuer: /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5 Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft Manifest number: 0685 Signing time: Sun 26 Oct 2025 23:19:26 +0000 Manifest this update: Sun 26 Oct 2025 23:19:25 +0000 Manifest next update: Sun 02 Nov 2025 23:19:25 +0000 Files and hashes: 1: e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl (hash: QcbHXYD5chHksudoBb51poehlRjEZJcBS2uv8D5Cs2k=) 2: BC56EB8EA21811ED94424B59C4F9AE02.roa (hash: CnCawUsQtxE6gdOQrKIQ65eTD+z0tUhxmLZpOOZFkv0=) 3: 3520A4C0DDA711EBA436967CC4F9AE02.roa (hash: TACWMKsVmIF+DWEhLbG6Mmy8oK2ZJgn16SR/MDsvAC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 23:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5 Validity Not Before: Oct 26 23:19:25 2025 GMT Not After : Nov 2 23:19:25 2025 GMT Subject: CN=68feac7e-044c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:26:c4:fe:ca:05:f0:20:50:bf:b2:6f:97: 9a:8e:11:91:fc:13:3f:b9:11:4a:a9:9c:76:b0:20: ae:13:4d:1a:f0:7f:25:10:5d:31:b4:69:be:08:e0: dd:dc:c8:b9:c7:db:50:e8:72:0d:bd:1f:0e:95:f2: 95:bc:8b:bd:c9:9e:90:33:e6:03:92:27:62:2c:fa: 97:47:22:c2:86:a3:a6:63:73:c3:a0:fd:fb:3b:f7: 26:3f:00:b3:a0:f0:d8:e2:25:4a:52:b6:94:e4:ef: 1a:78:e3:79:20:f7:78:63:3d:84:29:91:f7:17:7a: 18:da:bb:0e:b9:bd:5e:2d:11:44:62:53:76:d9:21: 9f:e4:b4:1b:cc:3d:8a:66:ad:e1:5a:bb:c5:d8:67: 8c:ce:ad:6d:8c:d9:71:87:bc:da:c5:79:02:ed:d4: b5:c8:66:68:e0:43:a1:21:16:37:54:6a:cc:79:54: 0a:d4:b4:5f:84:bf:25:b4:e4:a6:42:e5:ef:c6:b6: 3a:a2:38:cf:c6:f2:a6:e7:8a:5f:13:dc:29:84:bc: 78:fc:14:cd:31:82:c6:51:25:05:12:42:79:ab:39: 84:7f:e5:04:db:1b:6f:bc:4f:49:f8:c0:dc:7b:3e: 9e:0d:dd:27:40:a0:5d:fd:a9:69:9a:ca:71:57:e5: ca:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:58:BA:35:FE:8B:E1:56:8A:F2:EF:A4:75:F1:A2:1C:13:C2:2D:92 X509v3 Authority Key Identifier: keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:24:b1:a3:a5:e7:3d:0c:16:72:97:6c:71:58:d5:fd:ef:c3: c2:4a:26:c0:7f:89:de:41:64:06:3d:27:dd:20:14:de:c2:ca: d1:bf:c9:f9:0f:2e:ec:f4:c4:21:ac:d9:d0:9d:30:6f:2a:31: 0e:3c:70:e3:a8:ac:12:5b:8c:a8:97:ed:4c:da:12:82:c2:44: 5b:a7:ac:e4:1c:08:83:8e:3b:3b:d2:26:b9:31:e4:54:51:6e: 97:13:d9:ee:5e:e3:04:73:62:63:26:bb:d4:3f:a2:62:71:17: ab:00:47:dc:5b:67:77:25:45:32:00:11:0f:be:77:71:7a:44: 4a:d6:76:21:9a:30:ba:6c:b7:cb:77:22:ff:e9:20:e7:15:d6: 5f:1c:80:0d:4c:34:ce:bb:19:99:b6:a4:34:f6:be:3c:58:dc: 4a:23:56:40:94:f0:c5:54:9c:ba:36:e6:e1:4e:88:ac:02:73: bb:e8:b8:28:91:09:bd:0c:c2:db:18:b8:e3:04:12:43:6b:bc: c1:ac:15:26:d8:65:f6:2a:14:63:ff:fc:6a:a1:ed:6a:84:ba: 47:dc:50:bf:56:48:e6:63:4a:53:b8:c3:98:44:c9:70:aa:2b: b4:a2:f1:a6:d4:41:ec:73:d4:43:6b:3f:a2:fa:60:7f:4e:25: b3:ed:ab:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFRjIxMTAvBgNVBAUTKDdCRjE4MENFQUM0NzZEQkQxODM5MjkxMEZBMjJEQUEx RUY1QkE2RDUwHhcNMjUxMDI2MjMxOTI1WhcNMjUxMTAyMjMxOTI1WjAYMRYwFAYD VQQDEw02OGZlYWM3ZS0wNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf8mxP7KBfAgUL+yb5eajhGR/BM/uRFKqZx2sCCuE00a8H8lEF0xtGm+CODd 3Mi5x9tQ6HINvR8OlfKVvIu9yZ6QM+YDkidiLPqXRyLChqOmY3PDoP37O/cmPwCz oPDY4iVKUraU5O8aeON5IPd4Yz2EKZH3F3oY2rsOub1eLRFEYlN22SGf5LQbzD2K Zq3hWrvF2GeMzq1tjNlxh7zaxXkC7dS1yGZo4EOhIRY3VGrMeVQK1LRfhL8ltOSm QuXvxrY6ojjPxvKm54pfE9wphLx4/BTNMYLGUSUFEkJ5qzmEf+UE2xtvvE9J+MDc ez6eDd0nQKBd/alpmspxV+XK/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1YujX+ i+FWivLvpHXxohwTwi2SMB8GA1UdIwQYMBaAFHvxgM6sR229GDkpEPoi2qHvW6bV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVGMi9EQTQ3RTU2MDk0 NDgxMUVCQTVBRTM2MDlDNEY5QUUwMi9lX0dBenF4SGJiMFlPU2tRLWlMYW9lOWJw dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VfR0F6cXhIYmIwWU9Ta1EtaUxhb2U5YnB0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVGMi9EQTQ3RTU2MDk0NDgxMUVCQTVBRTM2MDlDNEY5QUUwMi9lX0dBenF4SGJi MFlPU2tRLWlMYW9lOWJwdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGJLGjpec9DBZyl2xxWNX978PCSibAf4neQWQGPSfdIBTewsrRv8n5 Dy7s9MQhrNnQnTBvKjEOPHDjqKwSW4yol+1M2hKCwkRbp6zkHAiDjjs70ia5MeRU UW6XE9nuXuMEc2JjJrvUP6JicRerAEfcW2d3JUUyABEPvndxekRK1nYhmjC6bLfL dyL/6SDnFdZfHIANTDTOuxmZtqQ09r48WNxKI1ZAlPDFVJy6NubhToisAnO76Lgo kQm9DMLbGLjjBBJDa7zBrBUm2GX2KhRj//xqoe1qhLpH3FC/VkjmY0pTuMOYRMlw qiu0ovGm1EHsc9RDaz+i+mB/TiWz7auv -----END CERTIFICATE-----Generated at Mon Oct 27 14:57:42 2025 by rpki-client