$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: CiWbUOQEKbRXzBHYnopD7cdnsDXBkkqHrBTMOP58f98= Subject key identifier: A1:DD:0B:76:49:FA:F5:7D:CC:06:3F:5E:AB:99:3B:89:3F:0D:21:1E Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0E67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0E54 Signing time: Sun 02 Nov 2025 17:47:11 +0000 Manifest this update: Sun 02 Nov 2025 17:47:10 +0000 Manifest next update: Sun 09 Nov 2025 17:47:10 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: Y9iWgi2x4BOg/rtAwkaQ9EF1JiMfgp5OQbpDrP8/HK0=) 2: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: wmh/Lv/hljTYcluPdVifRdxIbnQ3ag/j+c2X6L3JX5o=) 3: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: dyHXMPsWXIi28t7W1U3CSitpoKF85Llotwpf4kiO82E=) 4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: 0ehGM9KvqQVlyysL0bR6r4knV2UFgPR8E2jylMcTv9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3687 (0xe67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Nov 2 17:47:10 2025 GMT Not After : Nov 9 17:47:10 2025 GMT Subject: CN=6907991e-1a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3b:2c:ec:4e:e5:94:5f:e2:94:e4:92:fb:ca: ff:8b:fc:22:00:e0:4f:43:2e:08:0f:ff:ef:b4:09: 57:4c:20:09:be:80:bf:f4:21:da:3b:14:d3:0c:36: 84:10:54:59:67:3e:2f:69:ee:3e:11:a8:e9:8a:2c: 1e:a0:5b:68:c5:1e:1f:57:03:a5:df:72:20:2d:de: 22:20:0a:4e:01:54:66:c9:18:e8:46:78:7c:9f:98: 7c:40:d9:86:34:34:2a:76:dc:ec:69:d7:b2:26:fc: 9b:11:34:55:1f:5d:21:1a:b1:a1:46:33:40:5c:a6: 1d:90:e5:7a:3f:c8:f0:88:08:13:ab:94:29:3f:6e: 52:42:6a:a6:9e:ff:d2:0f:b8:c0:6d:44:ce:4c:d7: 3a:cf:66:e3:eb:7e:65:aa:a2:c3:e9:9d:0f:c3:34: 81:28:fa:02:7e:31:3e:4b:12:eb:83:ef:8d:d8:4c: 01:59:2d:b1:4d:89:cb:95:90:4e:b6:d2:13:07:0d: 6d:5e:a4:f7:e4:1d:c2:54:32:c9:0e:44:5e:ee:a6: 71:1a:62:5b:34:a5:97:d9:85:94:de:ce:a8:3b:63: 6e:de:8b:bb:cc:6a:76:1b:99:5f:a4:f5:de:f0:bb: ad:51:ae:37:99:d4:7d:6d:38:30:2a:03:34:32:0f: 1d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DD:0B:76:49:FA:F5:7D:CC:06:3F:5E:AB:99:3B:89:3F:0D:21:1E X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c6:26:b3:91:ec:29:09:f8:29:72:63:d1:5d:e1:7e:e5:da: f6:55:cc:cc:f2:9a:58:cc:52:b7:1a:78:92:d5:14:2d:c3:bd: 49:72:86:61:0a:9d:af:4a:ac:07:9d:3c:ca:e1:0e:7f:ad:3d: 57:81:8e:a1:ff:54:08:aa:d9:2a:f9:75:0e:46:ff:a8:34:c1: 3a:da:b4:58:07:90:32:14:b2:6f:fa:d4:b2:17:9d:c1:d2:a5: a6:ee:56:2f:eb:0a:78:75:f8:b3:de:51:a3:20:2c:20:ba:73: 5c:5f:ac:07:5b:9d:aa:2f:4c:a7:56:15:ef:c9:ea:6c:91:38: eb:4f:c2:e8:cb:6f:fe:8f:48:6c:d8:79:19:a2:4e:b9:6e:70: 43:89:47:98:a0:2e:32:59:fe:a3:27:86:b1:0f:81:c7:eb:45: 77:ea:63:02:c3:6c:06:07:7a:76:7d:4a:6f:3e:60:4f:46:b2: 44:1f:40:e3:c6:e9:5c:be:a3:a3:83:33:cb:bd:9d:c2:e2:2f: dd:64:43:3d:99:db:63:7a:71:c2:fe:a4:3f:ee:39:77:3a:8d: 7d:0f:6d:b2:bf:72:3d:7c:3d:6d:9d:ac:1e:9f:2e:d8:48:74: 76:ae:38:4a:56:0b:a1:5d:18:d6:9e:5c:ef:bf:4d:c4:bc:5e: b4:02:c6:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjUxMTAyMTc0NzEwWhcNMjUxMTA5MTc0NzEwWjAYMRYwFAYD VQQDEw02OTA3OTkxZS0xYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Tss7E7llF/ilOSS+8r/i/wiAOBPQy4ID//vtAlXTCAJvoC/9CHaOxTTDDaE EFRZZz4vae4+EajpiiweoFtoxR4fVwOl33IgLd4iIApOAVRmyRjoRnh8n5h8QNmG NDQqdtzsadeyJvybETRVH10hGrGhRjNAXKYdkOV6P8jwiAgTq5QpP25SQmqmnv/S D7jAbUTOTNc6z2bj635lqqLD6Z0PwzSBKPoCfjE+SxLrg++N2EwBWS2xTYnLlZBO ttITBw1tXqT35B3CVDLJDkRe7qZxGmJbNKWX2YWU3s6oO2Nu3ou7zGp2G5lfpPXe 8LutUa43mdR9bTgwKgM0Mg8dVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHdC3ZJ +vV9zAY/XquZO4k/DSEeMB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2xiazkewpCfgpcmPRXeF+5dr2VczM8ppYzFK3GniS1RQtw71JcoZh Cp2vSqwHnTzK4Q5/rT1XgY6h/1QIqtkq+XUORv+oNME62rRYB5AyFLJv+tSyF53B 0qWm7lYv6wp4dfiz3lGjICwgunNcX6wHW52qL0ynVhXvyepskTjrT8Loy2/+j0hs 2HkZok65bnBDiUeYoC4yWf6jJ4axD4HH60V36mMCw2wGB3p2fUpvPmBPRrJEH0Dj xulcvqOjgzPLvZ3C4i/dZEM9mdtjenHC/qQ/7jl3Oo19D22yv3I9fD1tnaweny7Y SHR2rjhKVguhXRjWnlzvv03EvF60AsaK -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:28 2025 by rpki-client