$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json) Hash identifier: KxbGRIrHffPLPkbjHno2Pab+7HgHVG1NhnK8wKWO4gA= Subject key identifier: 95:6C:B9:A5:43:48:DF:CE:03:1B:21:D1:66:BD:67:C1:7D:53:5E:46 Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 09AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft Manifest number: 09A8 Signing time: Sun 02 Nov 2025 19:59:11 +0000 Manifest this update: Sun 02 Nov 2025 19:59:11 +0000 Manifest next update: Sun 09 Nov 2025 19:59:11 +0000 Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: umKFqfXrPn+Omam19qMK5BBl0OPWcJ5ShLysCor204w=) 2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: IM9yFzmqS+Is/NhhSreqHJdhDGFnp0WA0QJtpqV2ULo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2479 (0x9af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Validity Not Before: Nov 2 19:59:11 2025 GMT Not After : Nov 9 19:59:11 2025 GMT Subject: CN=6907b80f-54be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:6f:9b:51:77:f8:93:e2:f5:85:4c:73:0d: be:b2:1e:9e:c8:5a:09:0d:06:1a:84:a2:e0:53:5d: 31:90:13:c1:ce:fb:93:b3:9a:e1:3b:c4:1a:4f:9c: 6e:ba:89:ef:42:0d:14:52:40:2e:23:60:9f:0c:b6: f6:81:69:e2:7b:03:ea:51:62:ec:33:8b:fe:ed:0d: b2:7f:fa:72:51:f1:82:51:0a:62:7c:c0:b3:4c:2d: da:f6:3b:ea:36:12:36:ef:3c:17:45:c2:b3:e7:88: 65:4e:78:f4:52:11:be:11:b8:95:95:7d:bd:84:6d: 14:cf:f3:42:ab:de:95:59:28:56:98:60:3c:a5:2c: 68:9e:37:ec:66:3f:f1:82:41:5b:4b:02:62:94:3f: a7:6f:0a:de:71:d3:ee:4a:b3:63:0d:99:93:43:ae: 0c:b3:29:d6:f9:8a:77:ed:22:ee:9b:83:88:2b:a5: be:bf:99:b3:b3:d8:ef:c6:e8:86:a8:ce:49:62:d4: ca:0d:70:a5:46:e9:1b:7d:5b:6a:4c:fa:f1:78:e8: 19:db:ca:51:a9:d1:d6:d3:0d:26:b4:80:41:27:35: 0b:ef:cf:e1:68:50:dd:ca:55:9c:d6:19:f9:44:d8: ef:67:08:3f:ec:2c:22:44:3a:ba:d6:79:9e:ec:27: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6C:B9:A5:43:48:DF:CE:03:1B:21:D1:66:BD:67:C1:7D:53:5E:46 X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:e2:74:a0:1b:2d:9d:5d:f3:5c:81:6c:ca:2f:f4:92:06:28: 1b:d5:f6:2f:c1:e7:fb:0a:26:d4:79:45:b8:99:e1:9c:27:f1: f9:9f:79:13:0d:4e:24:c0:1b:9d:88:67:f8:04:36:38:a9:83: 3d:7b:22:07:ea:3d:29:31:c0:02:c3:c9:f7:59:63:c3:ea:f7: 09:f1:ce:7e:b1:66:2b:14:34:70:b2:c6:27:0a:84:7d:da:30: 98:c3:8b:f1:c5:26:fb:89:c5:53:ac:92:bb:a8:ad:aa:74:e3: 32:52:9e:33:fc:59:c8:58:17:1a:a0:04:91:5e:0e:1f:41:39: 2b:0c:9a:41:6e:63:cd:e8:dd:83:6c:d1:0f:93:76:ca:2b:a6: 7b:b5:46:b1:38:0c:e3:66:0c:69:b8:82:5e:f5:b4:bb:61:22: 7c:12:37:f5:d6:df:4d:da:fd:f8:4f:47:24:2f:bc:be:b5:91: 3d:5e:24:b2:f1:91:54:27:ad:51:30:0b:3b:bd:02:90:b3:8b: c3:74:70:bd:af:02:49:d1:94:a5:51:09:5e:31:dd:a8:f2:52: 75:5c:dc:20:23:32:56:63:d7:5e:2e:af:67:55:87:c9:a1:3b: 92:e2:3e:a9:86:86:f8:4a:9f:8f:67:07:61:2f:f0:f4:96:67: 48:8c:e4:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjUxMTAyMTk1OTExWhcNMjUxMTA5MTk1OTExWjAYMRYwFAYD VQQDEw02OTA3YjgwZi01NGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQRvm1F3+JPi9YVMcw2+sh6eyFoJDQYahKLgU10xkBPBzvuTs5rhO8QaT5xu uonvQg0UUkAuI2CfDLb2gWniewPqUWLsM4v+7Q2yf/pyUfGCUQpifMCzTC3a9jvq NhI27zwXRcKz54hlTnj0UhG+EbiVlX29hG0Uz/NCq96VWShWmGA8pSxonjfsZj/x gkFbSwJilD+nbwrecdPuSrNjDZmTQ64MsynW+Yp37SLum4OIK6W+v5mzs9jvxuiG qM5JYtTKDXClRukbfVtqTPrxeOgZ28pRqdHW0w0mtIBBJzUL78/haFDdylWc1hn5 RNjvZwg/7CwiRDq61nme7CdATQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVsuaVD SN/OAxsh0Wa9Z8F9U15GMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw Tng1TXdZVkluX3JpRXlJMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA54nSgGy2dXfNcgWzKL/SSBigb1fYvwef7CibUeUW4meGcJ/H5n3kT DU4kwBudiGf4BDY4qYM9eyIH6j0pMcACw8n3WWPD6vcJ8c5+sWYrFDRwssYnCoR9 2jCYw4vxxSb7icVTrJK7qK2qdOMyUp4z/FnIWBcaoASRXg4fQTkrDJpBbmPN6N2D bNEPk3bKK6Z7tUaxOAzjZgxpuIJe9bS7YSJ8Ejf11t9N2v34T0ckL7y+tZE9XiSy 8ZFUJ61RMAs7vQKQs4vDdHC9rwJJ0ZSlUQleMd2o8lJ1XNwgIzJWY9deLq9nVYfJ oTuS4j6phob4Sp+PZwdhL/D0lmdIjOT3 -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:37 2025 by rpki-client