$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft File: ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft (raw, json) Hash identifier: b4S7ApzweceOq0cQqDLD3kZ0BQwzvZb+G80G70okyWI= Subject key identifier: 95:2E:32:67:67:F1:35:4F:25:A2:BB:42:9F:DC:F0:B3:D2:76:AD:F9 Authority key identifier: 79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79 Certificate issuer: /CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79 Certificate serial: 0721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft Manifest number: 0718 Signing time: Tue 04 Nov 2025 21:57:26 +0000 Manifest this update: Tue 04 Nov 2025 21:57:26 +0000 Manifest next update: Tue 11 Nov 2025 21:57:26 +0000 Files and hashes: 1: ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl (hash: k4IfzzV4M0DOznRNgEN2zEYldn/VpWCHJFM+5DJv4bI=) 2: FE4992F25C3411EBA2B9004DC4F9AE02.roa (hash: 90yd6nVAhznOwqzLDkzWSurW9sg0NSgWSjPCpe+6AKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5FA2, serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79 Validity Not Before: Nov 4 21:57:26 2025 GMT Not After : Nov 11 21:57:26 2025 GMT Subject: CN=690a76c6-dce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:eb:b8:e1:c0:a0:00:12:5e:57:53:f1:62:b6: 38:19:c1:26:3b:96:f7:96:43:83:9d:54:50:f1:68: 5e:5e:1f:a2:96:fa:3e:1e:73:50:d9:3b:e3:a1:08: 31:05:d0:22:2f:8a:1a:03:89:46:32:1e:b1:a1:cb: 37:56:33:00:d8:48:68:ec:6b:32:65:d0:0d:e1:92: 5a:cd:22:aa:95:67:70:22:cb:8a:2f:c0:ce:7d:ba: 0e:4c:60:45:ea:ef:9e:d5:4c:5f:45:f4:15:31:c3: fb:9c:d6:79:68:0b:a0:df:cd:7e:d4:b4:bd:57:d9: b6:f9:c2:84:a9:f0:45:e3:17:4b:94:b2:92:67:b3: d5:c6:4e:83:e3:b2:26:43:c2:9f:b9:8e:bf:f7:69: c7:ee:3e:31:f0:7d:bf:59:98:36:8d:ce:e9:8f:c6: 11:c1:33:58:b0:53:02:35:71:cb:3d:f9:da:91:60: 09:98:08:bb:ad:ba:ae:a1:cf:99:d4:7f:40:62:e0: 63:cd:07:3a:e5:07:70:2a:98:c2:f4:dc:3a:ef:9b: 69:44:29:4e:37:00:87:04:cb:f1:19:ec:c0:5f:50: b3:56:4c:1e:2b:1c:c3:0f:6e:7e:e8:7d:78:85:b4: 52:4b:ba:52:64:55:f9:86:78:2d:79:bf:e4:86:c7: 53:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2E:32:67:67:F1:35:4F:25:A2:BB:42:9F:DC:F0:B3:D2:76:AD:F9 X509v3 Authority Key Identifier: keyid:79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bd:c6:80:22:77:18:b3:58:de:4a:21:5a:f4:cc:bf:b6:64: 0f:e4:e8:a6:14:45:8e:db:25:26:43:32:ec:6f:88:c1:ae:0c: 53:2c:82:8d:11:55:53:1a:00:8a:5f:c2:d2:9b:86:e4:3a:db: 52:35:04:ad:0e:24:02:be:d9:b6:af:c7:63:de:27:64:d1:85: c6:4b:46:81:54:37:82:a5:c3:8a:c3:74:a5:83:61:2c:d3:04: 38:d1:0d:7d:1f:0f:c5:37:6e:35:44:5f:31:86:5b:77:6c:80: 35:a4:71:51:a9:26:fb:13:c0:24:c8:07:aa:a4:06:a1:48:c0: 45:31:b5:5c:5b:59:5f:78:02:67:9f:56:c3:0d:bb:c5:4c:10: 37:cf:75:12:97:6d:3c:21:ce:14:66:af:be:64:53:91:f7:a9: 91:e9:b9:5b:00:b7:b3:17:2c:a1:bb:90:8b:b4:ac:7c:d2:59: 28:b6:b2:c4:6c:59:04:76:d6:0e:17:c2:fb:1b:ea:48:bc:bb: d3:16:41:9d:20:ab:dd:96:26:6c:4b:5a:84:32:45:8e:8a:88: c8:27:e6:e2:17:ae:b6:eb:44:6f:60:57:e8:73:b5:1d:3b:79: cc:84:a6:d2:99:cd:cf:e0:f4:aa:61:db:00:78:26:9f:8e:06: c8:15:c7:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVGQTIxMTAvBgNVBAUTKDc5QTk0RDI4RTU0MjQ3MzgwOTEzODNENUY0OTc1QkZE QkNFQUFFNzkwHhcNMjUxMTA0MjE1NzI2WhcNMjUxMTExMjE1NzI2WjAYMRYwFAYD VQQDEw02OTBhNzZjNi1kY2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4eu44cCgABJeV1PxYrY4GcEmO5b3lkODnVRQ8WheXh+ilvo+HnNQ2TvjoQgx BdAiL4oaA4lGMh6xocs3VjMA2Eho7GsyZdAN4ZJazSKqlWdwIsuKL8DOfboOTGBF 6u+e1UxfRfQVMcP7nNZ5aAug381+1LS9V9m2+cKEqfBF4xdLlLKSZ7PVxk6D47Im Q8KfuY6/92nH7j4x8H2/WZg2jc7pj8YRwTNYsFMCNXHLPfnakWAJmAi7rbquoc+Z 1H9AYuBjzQc65QdwKpjC9Nw675tpRClONwCHBMvxGezAX1CzVkweKxzDD25+6H14 hbRSS7pSZFX5hngteb/khsdT8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUuMmdn 8TVPJaK7Qp/c8LPSdq35MB8GA1UdIwQYMBaAFHmpTSjlQkc4CROD1fSXW/286q55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUZBMi8wMzI1NDQ0MDVD MzIxMUVCOTdCRjdDNDVDNEY5QUUwMi9lYWxOS09WQ1J6Z0pFNFBWOUpkYl9ienFy bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VhbE5LT1ZDUnpnSkU0UFY5SmRiX2J6cXJuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUZBMi8wMzI1NDQ0MDVDMzIxMUVCOTdCRjdDNDVDNEY5QUUwMi9lYWxOS09WQ1J6 Z0pFNFBWOUpkYl9ienFybmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBavcaAIncYs1jeSiFa9My/tmQP5OimFEWO2yUmQzLsb4jBrgxTLIKN EVVTGgCKX8LSm4bkOttSNQStDiQCvtm2r8dj3idk0YXGS0aBVDeCpcOKw3Slg2Es 0wQ40Q19Hw/FN241RF8xhlt3bIA1pHFRqSb7E8AkyAeqpAahSMBFMbVcW1lfeAJn n1bDDbvFTBA3z3USl208Ic4UZq++ZFOR96mR6blbALezFyyhu5CLtKx80lkotrLE bFkEdtYOF8L7G+pIvLvTFkGdIKvdliZsS1qEMkWOiojIJ+biF66260RvYFfoc7Ud O3nMhKbSmc3P4PSqYdsAeCafjgbIFcen -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:15 2025 by rpki-client