$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft File: EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json) Hash identifier: kcvrXf52XTHrfhNomyclJJ1/MvVmD3Mk8EY4OViLnqw= Subject key identifier: 7C:64:4A:A1:15:54:7F:01:96:C5:A6:84:A8:6C:8D:86:63:E4:25:F9 Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61 Certificate issuer: /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61 Certificate serial: 0EA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft Manifest number: 0E9F Signing time: Sun 02 Nov 2025 17:41:18 +0000 Manifest this update: Sun 02 Nov 2025 17:41:17 +0000 Manifest next update: Sun 09 Nov 2025 17:41:17 +0000 Files and hashes: 1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: iVCE/3vx/OscT9CXPJVMenLw99KBvI+l6o2XSIxbX4s=) 2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: WHACvNrcE0YDUYNFLw70C4k+Gn2fGHs4oAn4CLKhehw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3752 (0xea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61 Validity Not Before: Nov 2 17:41:17 2025 GMT Not After : Nov 9 17:41:17 2025 GMT Subject: CN=690797bd-e6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:8c:13:42:fc:cf:da:bb:b5:ed:22:93:17: db:41:4f:7c:da:f8:39:f9:a0:f1:99:56:66:3b:7c: 7a:6d:93:89:d1:d2:8a:75:36:a4:e7:90:bd:a1:01: 2a:d8:9b:1d:89:15:cd:ec:d3:b4:95:bd:5f:b2:d1: ed:0d:9d:3c:fe:c5:50:66:7b:04:6d:98:09:24:f0: 39:50:ef:62:47:35:7f:4b:da:1c:a1:5a:e3:f0:4e: ff:e6:db:10:68:5f:70:c7:e6:74:20:f2:30:f7:34: a7:25:2e:d7:cb:3b:d0:ca:c7:85:7a:97:61:c6:5c: aa:9f:0b:a4:3f:b0:4e:16:39:f4:8d:ad:85:a4:cc: 90:b6:e8:1c:30:7a:d6:16:02:e5:34:65:38:f3:8c: 55:3f:14:59:4f:69:b1:1b:cf:e8:9c:18:33:24:4b: b6:90:0f:86:34:f2:8e:17:21:4b:af:d0:81:cd:e4: 73:63:40:f3:4a:4e:29:c3:9e:55:62:fe:0c:f3:3a: 06:ec:82:dc:da:f1:f5:b0:66:4e:0f:9d:65:15:82: de:bb:23:b7:82:93:d8:00:52:68:15:6e:63:1f:90: c0:d0:9c:ff:ca:70:62:5e:6b:c0:b6:1e:20:3b:bb: cc:94:34:11:0b:07:5c:c6:6e:9e:54:cd:f5:eb:18: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:64:4A:A1:15:54:7F:01:96:C5:A6:84:A8:6C:8D:86:63:E4:25:F9 X509v3 Authority Key Identifier: keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:29:61:d6:5a:53:75:79:56:4f:1f:5f:3a:d3:46:55:13:77: bb:7c:53:65:32:87:e0:ac:4e:2c:6a:1b:48:bf:48:18:37:90: 00:71:f5:ec:66:0b:99:fc:20:75:9a:90:5d:6d:58:f8:58:8e: 9e:d7:45:17:70:47:94:d3:e3:8b:99:c4:39:91:a7:8a:fd:ff: 24:93:83:ef:16:fa:ab:82:f7:ea:10:d5:71:7a:dc:a1:3d:05: 36:b5:45:2f:eb:2c:88:8d:49:73:b9:9f:45:89:5b:00:a3:67: 21:7e:4f:06:ce:ea:21:61:05:f1:67:46:68:84:1b:c6:6c:62: 91:06:bb:0b:12:d0:fe:35:0b:1a:b9:45:60:b1:76:3b:a3:81: 99:e8:28:b2:cb:08:02:3f:6d:9d:39:ed:cf:52:6e:7a:48:f8: 0b:54:4f:4c:40:d5:8e:bf:09:03:9b:d9:eb:8e:0e:b3:56:cb: 03:27:85:57:4e:81:c2:c2:d1:3e:35:e3:bc:58:32:d4:96:3d: ad:3b:dd:d9:cd:63:10:34:91:c5:ba:36:e9:85:03:36:f6:9f: 13:3d:6a:f0:c9:fd:e9:fe:95:36:0d:d6:8e:47:56:e0:5b:fa: 7a:b4:52:86:03:2f:43:86:62:aa:05:a7:69:cc:a6:8b:ce:44: 9c:b9:47:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QjQxMTAvBgNVBAUTKDEwNDQ5OTdCQzYzQTgxM0RBMDRDMUI5MTg5NzM3NEI2 OEIwNEJBNjEwHhcNMjUxMTAyMTc0MTE3WhcNMjUxMTA5MTc0MTE3WjAYMRYwFAYD VQQDEw02OTA3OTdiZC1lNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21yME0L8z9q7te0ikxfbQU982vg5+aDxmVZmO3x6bZOJ0dKKdTak55C9oQEq 2JsdiRXN7NO0lb1fstHtDZ08/sVQZnsEbZgJJPA5UO9iRzV/S9ocoVrj8E7/5tsQ aF9wx+Z0IPIw9zSnJS7XyzvQyseFepdhxlyqnwukP7BOFjn0ja2FpMyQtugcMHrW FgLlNGU484xVPxRZT2mxG8/onBgzJEu2kA+GNPKOFyFLr9CBzeRzY0DzSk4pw55V Yv4M8zoG7ILc2vH1sGZOD51lFYLeuyO3gpPYAFJoFW5jH5DA0Jz/ynBiXmvAth4g O7vMlDQRCwdcxm6eVM316xgrqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxkSqEV VH8BlsWmhKhsjYZj5CX5MB8GA1UdIwQYMBaAFBBEmXvGOoE9oEwbkYlzdLaLBLph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdCNC8zNjA4OTIyMDlE OUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdUMmdUQnVSaVhOMHRvc0V1 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFU1plOFk2Z1QyZ1RCdVJpWE4wdG9zRXVtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdCNC8zNjA4OTIyMDlEOUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdU MmdUQnVSaVhOMHRvc0V1bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/KWHWWlN1eVZPH18600ZVE3e7fFNlMofgrE4sahtIv0gYN5AAcfXs ZguZ/CB1mpBdbVj4WI6e10UXcEeU0+OLmcQ5kaeK/f8kk4PvFvqrgvfqENVxetyh PQU2tUUv6yyIjUlzuZ9FiVsAo2chfk8GzuohYQXxZ0ZohBvGbGKRBrsLEtD+NQsa uUVgsXY7o4GZ6CiyywgCP22dOe3PUm56SPgLVE9MQNWOvwkDm9nrjg6zVssDJ4VX ToHCwtE+NeO8WDLUlj2tO93ZzWMQNJHFujbphQM29p8TPWrwyf3p/pU2DdaOR1bg W/p6tFKGAy9DhmKqBadpzKaLzkScuUdv -----END CERTIFICATE-----Generated at Tue Nov 4 14:06:10 2025 by rpki-client