$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: WxSIkJUXZ9VKbpHSnmUjT5R5mo+/lKVZQmyTdvwl2kY= Subject key identifier: 22:50:E1:04:18:50:38:26:C1:F9:B4:54:C2:A7:09:6C:90:FA:20:AC Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 52 Signing time: Mon 03 Nov 2025 07:15:12 +0000 Manifest this update: Mon 03 Nov 2025 07:15:12 +0000 Manifest next update: Mon 10 Nov 2025 07:15:12 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: HqapfW6z42S/wwOUbx4osel/yTR4LFogDm9ZkWGm6K0=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Nov 3 07:15:12 2025 GMT Not After : Nov 10 07:15:12 2025 GMT Subject: CN=69085680-3e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:e8:b3:07:99:7e:91:ff:47:6d:7f:4b:2b: 83:85:05:aa:8b:d7:04:78:6d:20:f6:e9:b3:93:4f: ca:73:38:52:12:c6:e6:91:d6:70:b6:d1:93:5f:3a: 26:3b:86:2b:bc:4f:88:80:fb:ce:08:aa:e4:b0:08: b1:01:47:66:79:5a:63:2a:85:16:d3:eb:c7:6d:da: 95:1d:e6:65:75:96:d6:cc:e0:8a:b8:16:0b:ce:7f: b4:97:ce:d9:89:78:3b:e5:c4:c0:83:94:50:3e:28: 63:80:62:7a:82:c6:99:93:9e:70:05:7e:51:ed:9e: 94:c9:75:96:1a:ea:c3:5a:50:77:fd:f5:18:de:4e: a3:d1:2b:c5:dd:99:c8:4b:8c:da:6c:56:14:c9:08: af:fe:88:d5:cf:de:d1:5a:c8:09:a0:72:eb:97:f6: ac:ff:30:e4:07:ce:75:bd:4f:05:f7:7b:3d:5b:c7: 00:6a:6b:86:ea:74:bb:cb:5f:79:b1:76:2c:cb:ce: 5a:ed:99:ab:a4:92:c6:1e:b5:83:52:0f:eb:f3:c7: ab:59:a5:e0:e9:52:43:a5:04:b2:1f:e9:6d:d0:41: 76:aa:45:4a:7b:b2:82:a7:a1:56:75:b0:e5:80:8d: 6b:bd:3d:bd:ce:f5:08:cd:ab:34:a3:47:08:f5:8a: 38:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:50:E1:04:18:50:38:26:C1:F9:B4:54:C2:A7:09:6C:90:FA:20:AC X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:33:a3:66:9b:1d:d9:c9:5d:39:ea:46:05:d2:6e:4c:61:5e: e7:2b:88:0e:26:09:50:8b:58:30:24:d3:d6:14:37:db:46:62: f0:59:22:f0:f5:04:af:69:1a:4e:6d:37:3c:57:e2:0c:ed:79: 96:1a:a4:a3:2b:57:f5:3b:af:ec:7b:14:3c:69:5b:29:eb:c7: 94:2d:19:81:b7:9e:dc:a0:e0:e0:f8:5e:3f:c5:1f:f4:ca:4c: 19:df:51:65:b5:f7:ea:b4:da:d6:0c:69:6a:58:4d:7a:4a:40: ce:19:c9:a0:dd:e4:9d:1f:a8:dd:fd:97:45:e7:fa:b2:7d:ab: e5:96:28:c3:f9:62:40:e2:cd:99:6f:b7:b9:c5:4b:b2:48:11: f2:0f:39:9c:b7:6d:78:76:6e:5d:a3:cf:ba:32:3f:2a:de:4c: 28:68:db:87:ee:22:08:e4:c4:f5:9a:54:31:59:88:21:32:58: 05:de:26:a5:85:c3:d6:bf:c3:51:d4:a1:2d:c3:cd:8f:60:f4: 76:b7:b1:92:ec:8c:89:97:10:d6:0d:99:c6:43:5b:bb:65:ed: 4f:91:0c:f9:80:e6:4d:bd:27:af:19:5b:26:55:1b:8b:ef:16: 13:94:84:9f:21:8e:36:28:62:5b:55:46:7c:9f:67:03:b2:f5: 36:57:a2:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNTExMDMwNzE1MTJaFw0yNTExMTAwNzE1MTJaMBgxFjAUBgNV BAMTDTY5MDg1NjgwLTNlMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwgOizB5l+kf9HbX9LK4OFBaqL1wR4bSD26bOTT8pzOFISxuaR1nC20ZNfOiY7 hiu8T4iA+84IquSwCLEBR2Z5WmMqhRbT68dt2pUd5mV1ltbM4Iq4FgvOf7SXztmJ eDvlxMCDlFA+KGOAYnqCxpmTnnAFflHtnpTJdZYa6sNaUHf99RjeTqPRK8XdmchL jNpsVhTJCK/+iNXP3tFayAmgcuuX9qz/MOQHznW9TwX3ez1bxwBqa4bqdLvLX3mx dizLzlrtmaukksYetYNSD+vzx6tZpeDpUkOlBLIf6W3QQXaqRUp7soKnoVZ1sOWA jWu9Pb3O9QjNqzSjRwj1ijgJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIlDhBBhQ OCbB+bRUwqcJbJD6IKwwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8zo2abHdnJXTnqRgXSbkxhXucriA4mCVCLWDAk09YUN9tGYvBZIvD1 BK9pGk5tNzxX4gzteZYapKMrV/U7r+x7FDxpWynrx5QtGYG3ntyg4OD4Xj/FH/TK TBnfUWW19+q02tYMaWpYTXpKQM4ZyaDd5J0fqN39l0Xn+rJ9q+WWKMP5YkDizZlv t7nFS7JIEfIPOZy3bXh2bl2jz7oyPyreTCho24fuIgjkxPWaVDFZiCEyWAXeJqWF w9a/w1HUoS3DzY9g9Ha3sZLsjImXENYNmcZDW7tl7U+RDPmA5k29J68ZWyZVG4vv FhOUhJ8hjjYoYltVRnyfZwOy9TZXou4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:46 2025 by rpki-client