$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json) Hash identifier: X8dG5oImTTOAfICc1FVST8tSOonTuv0+nAfu/OcgOg0= Subject key identifier: 8D:B1:B6:81:72:5A:9B:2E:4A:05:EF:6B:DB:29:41:22:F6:40:95:CB Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft Manifest number: 77 Signing time: Mon 03 Nov 2025 06:49:15 +0000 Manifest this update: Mon 03 Nov 2025 06:49:15 +0000 Manifest next update: Mon 10 Nov 2025 06:49:15 +0000 Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: oEQ95K4axq08TZr0SRnhTzgQSYhpYkc874iBbVPttIU=) 2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: vF2hPrjWnGE1wVLs/Ml1OeBVYR8W6IECJw4qVwfrJO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Validity Not Before: Nov 3 06:49:15 2025 GMT Not After : Nov 10 06:49:15 2025 GMT Subject: CN=6908506b-e4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0d:ec:60:d6:6f:d9:25:05:1f:69:6a:f5:1d: 9b:f0:6d:c0:55:5b:08:bf:54:00:fe:6a:bc:2e:6e: ed:22:f1:bd:1f:3a:79:68:f8:5f:94:5b:91:c3:b4: 9e:aa:85:33:0e:f2:82:d5:55:60:25:d5:99:ca:39: 77:e1:d3:45:3d:dd:e2:a7:6f:c4:be:ea:a9:3a:33: 4b:df:af:7a:80:88:8c:7f:ca:3e:8b:c8:9c:f4:58: 9c:ad:c0:30:40:c8:68:4a:7f:27:0a:ee:9a:28:3f: ad:3f:ca:89:a9:52:4f:00:2f:03:6a:9a:da:63:56: 5d:d0:9e:4e:d3:21:ba:c4:c6:cf:ec:f3:9b:ea:22: 9e:7b:84:ca:35:d2:30:eb:05:03:66:c1:a6:3a:b3: 24:1f:d8:4d:42:01:75:82:51:e4:1c:23:72:42:81: fb:e1:ca:d1:ef:d8:36:0b:90:dc:a7:5f:ee:4a:77: 4d:c5:70:e8:66:b4:e3:0e:72:cf:6d:56:ef:18:d5: 83:f2:19:04:5b:9b:27:c1:f5:7d:e3:8f:c7:c3:76: 5f:a8:1c:63:79:d3:9b:78:59:c5:72:2a:9d:2d:ea: a2:bb:69:b2:0b:1e:80:77:bd:2a:f8:3c:14:d0:30: 7d:66:71:3e:ed:56:25:59:66:36:fe:6a:40:a2:95: 98:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B1:B6:81:72:5A:9B:2E:4A:05:EF:6B:DB:29:41:22:F6:40:95:CB X509v3 Authority Key Identifier: keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f5:7d:68:6c:94:e6:bb:31:0d:b7:bf:c0:17:3b:d8:89:1f: 1e:c1:ad:d0:94:cf:eb:d5:8c:63:da:9b:75:71:2e:c4:11:1e: 65:48:e3:3d:59:68:e9:fc:ba:b4:6c:00:af:68:95:d4:6f:88: 64:93:6c:c5:a9:4a:a1:61:23:9a:6c:7f:32:c2:cf:ec:4c:7f: 69:10:f4:71:b0:87:96:7c:d3:1e:48:29:0d:eb:fb:a0:c4:c8: 54:38:32:b7:d3:00:e4:48:60:b7:7f:1e:ea:ac:b6:75:06:f2: 4c:5a:c1:12:60:cb:ef:85:5d:0e:89:95:76:41:6a:59:8f:4b: ce:9b:2f:78:cb:e3:89:c4:47:d0:d9:68:5b:66:17:a6:dc:83: 5c:3c:39:95:98:cc:d1:10:4a:30:ac:2b:e8:5d:ab:54:10:5c: 67:06:49:df:34:55:81:71:45:11:4d:a2:2c:ec:4f:50:c0:7c: 3f:b0:e0:1e:b3:3f:f6:5d:50:55:8c:fb:12:85:c6:8d:0e:66: 75:c4:e9:42:36:78:dd:e3:48:1d:81:18:c7:8b:1c:88:fa:fa: 66:d7:58:1a:bd:14:f1:02:a2:d3:81:c7:3b:61:b7:23:a3:be: a6:a8:31:8f:90:03:9b:36:c5:ac:91:55:85:f7:d3:63:c7:fe: 15:43:9b:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNzk1NjhBMzhFQ0RCNjE3RTY3OEMwOEE2Q0M0M0M0RDY1 MDJDRUM2MjAeFw0yNTExMDMwNjQ5MTVaFw0yNTExMTAwNjQ5MTVaMBgxFjAUBgNV BAMTDTY5MDg1MDZiLWU0YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlDexg1m/ZJQUfaWr1HZvwbcBVWwi/VAD+arwubu0i8b0fOnlo+F+UW5HDtJ6q hTMO8oLVVWAl1ZnKOXfh00U93eKnb8S+6qk6M0vfr3qAiIx/yj6LyJz0WJytwDBA yGhKfycK7pooP60/yompUk8ALwNqmtpjVl3Qnk7TIbrExs/s85vqIp57hMo10jDr BQNmwaY6syQf2E1CAXWCUeQcI3JCgfvhytHv2DYLkNynX+5Kd03FcOhmtOMOcs9t Vu8Y1YPyGQRbmyfB9X3jj8fDdl+oHGN505t4WcVyKp0t6qK7abILHoB3vSr4PBTQ MH1mcT7tViVZZjb+akCilZg3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjbG2gXJa my5KBe9r2ylBIvZAlcswHwYDVR0jBBgwFoAUeVaKOOzbYX5njAimzEPE1lAs7GIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0U4MDI4MTlFMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1bmpBaW16RVBFMWxBczdH SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVZhS09PemJZWDVuakFpbXpFUEUxbEFzN0dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0U4MDI4MTlFMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1 bmpBaW16RVBFMWxBczdHSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD31fWhslOa7MQ23v8AXO9iJHx7BrdCUz+vVjGPam3VxLsQRHmVI4z1Z aOn8urRsAK9oldRviGSTbMWpSqFhI5psfzLCz+xMf2kQ9HGwh5Z80x5IKQ3r+6DE yFQ4MrfTAORIYLd/HuqstnUG8kxawRJgy++FXQ6JlXZBalmPS86bL3jL44nER9DZ aFtmF6bcg1w8OZWYzNEQSjCsK+hdq1QQXGcGSd80VYFxRRFNoizsT1DAfD+w4B6z P/ZdUFWM+xKFxo0OZnXE6UI2eN3jSB2BGMeLHIj6+mbXWBq9FPECotOBxzthtyOj vqaoMY+QA5s2xayRVYX302PH/hVDm+s= -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:17 2025 by rpki-client