$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: VVzHq+kvJFF2AJkjIwRwDuKpel9OFmj7rMLKWFTrtck= Subject key identifier: B3:0F:50:2E:82:33:27:3E:60:86:A3:25:46:D5:EC:7C:0F:4B:52:4D Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0B3A Signing time: Tue 04 Nov 2025 19:22:14 +0000 Manifest this update: Tue 04 Nov 2025 19:22:13 +0000 Manifest next update: Tue 11 Nov 2025 19:22:13 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: SciGfL+phIIq6MzziGbIiWp+TdfV1IbLroKSSc2jkrA=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: x6v+AqgjPFRVX68ne0JC+xRgXtO5WMJX4uQIZ5czHsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: Nov 4 19:22:13 2025 GMT Not After : Nov 11 19:22:13 2025 GMT Subject: CN=690a5265-0cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:2a:62:af:4c:c8:f8:7a:d0:30:2b:ce:96: 9e:d6:3f:e4:62:6e:c9:1c:27:52:0c:26:1f:b7:07: fb:8a:f1:b9:f6:bb:72:05:93:b0:0d:e8:06:95:fb: 11:e3:cf:1a:09:69:2e:c6:02:b5:30:f8:43:bb:78: 51:3e:bd:02:6f:e4:6c:c1:f3:60:38:4c:eb:66:1b: b0:37:49:a5:7b:0b:54:98:de:8a:83:ff:ef:b6:0b: 31:6b:5d:7a:f5:d7:9b:bc:8c:68:59:c2:75:71:d3: db:7b:38:c1:81:1e:52:ac:f3:d0:5c:f9:b3:83:03: 12:05:3f:a0:b8:17:5a:37:52:8c:df:74:5b:7c:94: d8:c2:53:9b:47:f7:0a:5a:23:ee:08:db:49:84:be: b5:73:7a:a5:ac:a0:fd:4f:b6:0e:3f:5e:e5:ee:4d: 02:a8:e7:56:83:db:0a:ed:2a:92:0b:d1:57:20:e2: 07:e4:ba:af:38:03:89:7e:71:f6:20:c4:a1:f3:ea: 22:82:6c:03:75:88:40:fb:54:2c:2f:0d:5d:b6:dd: cc:a4:b5:f0:fc:92:e7:69:f5:22:11:3e:ea:36:c4: 61:68:24:dd:f5:bb:c8:3e:70:44:87:a8:10:d4:6a: 98:3a:2a:c8:ab:8a:7c:c6:5d:99:94:27:53:58:9d: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0F:50:2E:82:33:27:3E:60:86:A3:25:46:D5:EC:7C:0F:4B:52:4D X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fa:96:ac:4a:89:34:d0:93:b4:90:ff:c0:19:2b:60:77:95: 2e:d3:00:dc:cb:f8:d7:9f:6c:4c:ad:2f:b8:c8:86:5a:10:e6: 85:0e:74:f7:79:ac:da:5a:83:3c:a7:11:60:26:19:b0:7d:30: 93:f5:0b:ca:b3:ce:05:39:5c:97:d5:23:87:d0:be:9e:53:7b: 61:99:b2:87:8c:4a:e2:ee:02:3c:94:38:43:32:fe:72:2a:39: e5:4c:ae:db:6c:94:da:38:1e:47:54:1d:b0:43:f2:aa:e1:a1: 59:bc:a1:68:21:07:a9:16:36:de:ee:fc:89:43:c8:c8:cc:c1: 86:ce:e5:5c:d5:63:28:1d:6a:f1:4c:29:7b:f5:69:14:75:ea: 4a:b1:e2:ab:32:bc:2e:d3:2b:ab:ad:0e:a5:d5:dc:01:70:7a: 6d:2d:70:ae:9c:82:7c:46:89:f9:1b:70:a6:ae:fb:da:4d:93: b3:fc:9a:40:2d:af:d7:e5:93:3f:43:11:87:eb:74:29:e3:97: 45:0f:13:53:0b:99:ca:dc:76:b2:aa:b3:aa:58:28:cf:9e:44: b1:2d:3f:39:65:07:c8:fc:96:53:d5:8f:90:7b:78:b8:d6:6a: 00:c2:e2:71:bd:5e:b3:3a:be:29:6a:02:b7:ca:02:01:58:39: 19:68:b7:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjUxMTA0MTkyMjEzWhcNMjUxMTExMTkyMjEzWjAYMRYwFAYD VQQDEw02OTBhNTI2NS0wY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBcqYq9MyPh60DArzpae1j/kYm7JHCdSDCYftwf7ivG59rtyBZOwDegGlfsR 488aCWkuxgK1MPhDu3hRPr0Cb+RswfNgOEzrZhuwN0mlewtUmN6Kg//vtgsxa116 9debvIxoWcJ1cdPbezjBgR5SrPPQXPmzgwMSBT+guBdaN1KM33RbfJTYwlObR/cK WiPuCNtJhL61c3qlrKD9T7YOP17l7k0CqOdWg9sK7SqSC9FXIOIH5LqvOAOJfnH2 IMSh8+oigmwDdYhA+1QsLw1dtt3MpLXw/JLnafUiET7qNsRhaCTd9bvIPnBEh6gQ 1GqYOirIq4p8xl2ZlCdTWJ2dxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMPUC6C Myc+YIajJUbV7HwPS1JNMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6+pasSok00JO0kP/AGStgd5Uu0wDcy/jXn2xMrS+4yIZaEOaFDnT3 eazaWoM8pxFgJhmwfTCT9QvKs84FOVyX1SOH0L6eU3thmbKHjEri7gI8lDhDMv5y KjnlTK7bbJTaOB5HVB2wQ/Kq4aFZvKFoIQepFjbe7vyJQ8jIzMGGzuVc1WMoHWrx TCl79WkUdepKseKrMrwu0yurrQ6l1dwBcHptLXCunIJ8Ron5G3CmrvvaTZOz/JpA La/X5ZM/QxGH63Qp45dFDxNTC5nK3HayqrOqWCjPnkSxLT85ZQfI/JZT1Y+Qe3i4 1moAwuJxvV6zOr4pagK3ygIBWDkZaLc9 -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:33 2025 by rpki-client