$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: ELKmw1II5tIoEHA6L0BhpxnHL2xe1uUKM/1GMPfFAOc= Subject key identifier: 37:52:AD:D1:B0:B1:D4:E7:14:46:A3:92:43:8E:09:5E:A2:83:72:5C Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 017E Signing time: Sun 19 Oct 2025 06:19:34 +0000 Manifest this update: Sun 19 Oct 2025 06:19:34 +0000 Manifest next update: Sun 26 Oct 2025 06:19:34 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: xj5pBiz6UnhVatkaarxfsOeYt+rqhyk6StwK6WFNh1s=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: 8KY8F5aAbZQBF/Qe5iecqKDmzqJcSSXnzASxQlPbo4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: Oct 19 06:19:34 2025 GMT Not After : Oct 26 06:19:34 2025 GMT Subject: CN=68f482f6-d4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:cd:fb:ac:bc:7a:36:29:ce:25:7c:64:94: 3d:d2:dd:a9:28:bc:94:78:ef:fe:3e:5f:89:aa:3f: 14:b9:12:28:d4:25:4e:9f:71:a3:44:c5:42:b0:66: 43:ee:40:30:c0:ee:2b:65:32:91:8c:ce:66:a0:ab: f3:a2:dd:82:92:3b:38:60:2f:e3:a3:09:3e:23:f6: 92:4b:19:91:09:c2:26:12:0e:85:64:47:e5:b0:96: d2:f2:ca:df:b6:26:b8:80:f0:7c:d9:a9:83:b5:4e: cb:8a:40:bf:a6:9d:f3:2b:ee:cb:30:a9:e5:b0:11: eb:8c:19:20:4f:ec:af:da:61:34:63:2b:d6:ad:0f: 74:f4:7c:d4:a9:f7:fb:04:e5:bc:cf:8c:cb:ec:fa: d4:af:8d:a6:f6:71:0e:13:d4:41:84:0d:71:9d:d3: 6d:d3:71:42:91:cc:48:ee:99:a3:5b:38:f6:13:80: ba:03:c9:80:60:bc:09:fb:c5:71:d6:1f:77:26:7b: 46:33:62:5d:4c:7b:06:67:96:87:7f:5a:d2:a2:78: 36:45:e7:71:cd:99:85:0f:18:42:41:48:4a:06:8d: e2:84:38:86:24:cf:e0:89:4a:86:61:f9:38:f1:70: c4:6e:a1:a1:da:68:19:b2:66:a4:e2:68:62:7e:8a: 99:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:52:AD:D1:B0:B1:D4:E7:14:46:A3:92:43:8E:09:5E:A2:83:72:5C X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:14:49:c9:91:ec:d2:63:e1:d0:9f:3f:1a:d0:05:60:b0:86: 41:07:69:e5:35:3a:3e:4b:05:92:a2:da:ce:07:e6:7d:9a:de: b9:5f:50:5b:2f:cc:3c:e7:cd:cf:22:e6:34:bb:4d:cd:fc:a1: d2:a7:66:7b:c4:5a:c2:6d:38:b1:ae:50:d0:98:9b:0b:7e:f4: 9b:4b:38:cf:7d:63:67:d5:2a:d2:bc:0a:f5:b4:74:7b:3f:89: 35:bd:0d:61:10:3e:39:6a:f1:24:ff:8a:de:45:8d:ba:5d:0a: 8d:46:a4:fd:02:cc:4a:6c:f9:25:c8:4e:ef:e0:48:5d:41:19: 6f:c0:25:35:1e:56:3b:17:29:3a:2d:71:1b:a6:ad:22:6a:bf: f7:46:a1:a5:41:96:1d:63:33:44:08:c6:7f:b3:9c:0a:c9:ed: 38:f7:ce:34:7d:fa:9d:df:7e:b5:2c:2f:f0:ee:60:4d:02:51: c9:25:1c:57:9b:33:d7:e7:a4:9e:05:c6:fc:c3:34:d4:eb:fe: 40:61:89:5e:80:ba:ce:44:6f:49:0a:1c:0a:d5:ec:32:7d:38: 3b:03:09:8d:44:a5:db:6d:63:ee:c2:97:3c:6c:1e:cc:70:74: 1f:f8:0a:2d:b9:90:26:cd:f2:bb:b6:0d:89:ab:8d:f6:3a:90: cf:1e:b7:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3 QUNGMjgwMkQwHhcNMjUxMDE5MDYxOTM0WhcNMjUxMDI2MDYxOTM0WjAYMRYwFAYD VQQDEw02OGY0ODJmNi1kNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjvN+6y8ejYpziV8ZJQ90t2pKLyUeO/+Pl+Jqj8UuRIo1CVOn3GjRMVCsGZD 7kAwwO4rZTKRjM5moKvzot2Ckjs4YC/jowk+I/aSSxmRCcImEg6FZEflsJbS8srf tia4gPB82amDtU7LikC/pp3zK+7LMKnlsBHrjBkgT+yv2mE0YyvWrQ909HzUqff7 BOW8z4zL7PrUr42m9nEOE9RBhA1xndNt03FCkcxI7pmjWzj2E4C6A8mAYLwJ+8Vx 1h93JntGM2JdTHsGZ5aHf1rSong2RedxzZmFDxhCQUhKBo3ihDiGJM/giUqGYfk4 8XDEbqGh2mgZsmak4mhifoqZhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdSrdGw sdTnFEajkkOOCV6ig3JcMB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2 OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS UjEtNnF5T1FFVnQ2enlnQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTFEnJkezSY+HQnz8a0AVgsIZBB2nlNTo+SwWSotrOB+Z9mt65X1Bb L8w8583PIuY0u03N/KHSp2Z7xFrCbTixrlDQmJsLfvSbSzjPfWNn1SrSvAr1tHR7 P4k1vQ1hED45avEk/4reRY26XQqNRqT9AsxKbPklyE7v4EhdQRlvwCU1HlY7Fyk6 LXEbpq0iar/3RqGlQZYdYzNECMZ/s5wKye049840ffqd3361LC/w7mBNAlHJJRxX mzPX56SeBcb8wzTU6/5AYYlegLrORG9JChwK1ewyfTg7AwmNRKXbbWPuwpc8bB7M cHQf+AotuZAmzfK7tg2Jq432OpDPHrcK -----END CERTIFICATE-----Generated at Sun Oct 19 16:28:24 2025 by rpki-client