$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json) Hash identifier: pCt12uNhNN9LD0+VqN+fNs8NyzMbhOP9FsddwNqH+nw= Subject key identifier: 4B:D3:4C:A6:09:EA:FE:66:0D:E2:E0:66:00:F3:F7:27:68:C6:5E:E9 Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft Manifest number: FE Signing time: Mon 03 Nov 2025 05:05:44 +0000 Manifest this update: Mon 03 Nov 2025 05:05:43 +0000 Manifest next update: Mon 10 Nov 2025 05:05:43 +0000 Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: J5rkqgXbTr0pxKpSVyAA/3BJzVdzE1+9ZBrpc9UOUWk=) 2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: H9iBAev1i2fVG9Su0JRgr3VpHwr3qa10u8oippD4Mno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: Nov 3 05:05:43 2025 GMT Not After : Nov 10 05:05:43 2025 GMT Subject: CN=69083828-3a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:ba:49:b5:11:19:29:d8:e6:b4:42:a4:6b: 77:1b:38:28:60:85:ea:7c:e8:b7:d8:d8:fa:93:3b: 22:8b:7c:47:e2:a1:f6:1b:64:01:64:c1:e0:53:1a: 55:a6:f1:34:46:20:a1:52:c6:3e:34:58:22:0f:9a: 36:31:09:3c:37:df:ba:1f:d2:fb:ef:ab:1d:df:06: ab:3c:d4:5e:71:31:81:4c:c5:ea:2c:0f:20:bb:76: 23:56:52:63:6c:50:8a:71:bd:97:48:8d:76:d8:b2: 45:0a:72:60:3a:b6:9b:b6:8d:6b:90:eb:e9:db:0d: 50:7d:65:94:e8:0c:3e:ce:da:a2:43:34:cf:19:3b: 93:4b:c2:16:dc:c6:2a:fa:61:30:30:62:6a:4f:ca: bd:15:3f:70:48:a1:bc:bc:e0:97:34:44:f3:7b:7a: fc:35:4e:5e:7e:25:79:63:33:95:96:96:9f:e3:89: e0:bb:e1:d7:6d:87:95:72:3b:de:f8:e9:f4:7c:49: 19:ff:87:a3:8f:73:6a:69:d0:05:7f:00:96:81:22: 7b:27:10:82:27:32:88:e0:da:7f:9f:89:51:9c:d5: 28:6e:72:b2:45:49:24:33:99:0e:b2:25:11:5b:ff: ad:1e:8d:98:fe:3b:f4:d6:23:5a:e1:f9:ea:ce:54: db:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D3:4C:A6:09:EA:FE:66:0D:E2:E0:66:00:F3:F7:27:68:C6:5E:E9 X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9e:42:72:1b:10:dd:b1:c4:73:20:c3:f5:57:79:6c:ec:57: b4:8f:4e:7e:4f:46:28:9b:e0:d0:de:2d:70:1a:b8:dc:65:a5: 0b:45:73:27:e9:6d:ad:3d:44:b8:d4:cf:1c:43:06:dd:89:7f: e8:57:ad:33:97:2d:26:95:75:7e:d1:77:12:b4:57:11:b1:b0: 63:aa:c2:6c:8b:bf:5a:59:71:9e:24:96:e3:fa:3f:bc:3e:1a: db:dc:09:89:02:0c:f7:9c:19:be:90:e9:75:da:a3:09:d1:01: 1a:1b:9a:f6:5e:80:38:ff:8e:16:91:cc:93:08:a9:1f:80:a5: b4:d4:61:84:0f:ac:1c:14:41:54:cc:7e:fb:b0:dd:b5:6a:2f: 11:0d:3e:e6:8a:be:61:34:b3:f7:1f:fd:ea:b4:14:cb:08:25: be:85:85:b8:30:58:86:8c:8a:f0:6f:82:b7:25:af:4c:95:90: 46:04:9f:40:3f:90:85:05:5b:3c:e7:44:bf:35:aa:5f:fd:48: 60:96:41:77:c7:bb:1f:e0:1e:40:49:14:63:18:e6:db:75:98: 1f:68:fb:59:53:ce:09:ce:b4:44:ac:85:cc:4f:71:9f:eb:eb: 95:0b:d3:05:09:f2:a3:a3:60:f0:e6:a1:2f:ef:90:26:40:5c: 5f:fc:57:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUxMTAzMDUwNTQzWhcNMjUxMTEwMDUwNTQzWjAYMRYwFAYD VQQDEw02OTA4MzgyOC0zYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvE+6SbURGSnY5rRCpGt3GzgoYIXqfOi32Nj6kzsii3xH4qH2G2QBZMHgUxpV pvE0RiChUsY+NFgiD5o2MQk8N9+6H9L776sd3warPNRecTGBTMXqLA8gu3YjVlJj bFCKcb2XSI122LJFCnJgOrabto1rkOvp2w1QfWWU6Aw+ztqiQzTPGTuTS8IW3MYq +mEwMGJqT8q9FT9wSKG8vOCXNETze3r8NU5efiV5YzOVlpaf44ngu+HXbYeVcjve +On0fEkZ/4ejj3NqadAFfwCWgSJ7JxCCJzKI4Np/n4lRnNUobnKyRUkkM5kOsiUR W/+tHo2Y/jv01iNa4fnqzlTb7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvTTKYJ 6v5mDeLgZgDz9ydoxl7pMB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZ RGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBynkJyGxDdscRzIMP1V3ls7Fe0j05+T0Yom+DQ3i1wGrjcZaULRXMn 6W2tPUS41M8cQwbdiX/oV60zly0mlXV+0XcStFcRsbBjqsJsi79aWXGeJJbj+j+8 Phrb3AmJAgz3nBm+kOl12qMJ0QEaG5r2XoA4/44WkcyTCKkfgKW01GGED6wcFEFU zH77sN21ai8RDT7mir5hNLP3H/3qtBTLCCW+hYW4MFiGjIrwb4K3Ja9MlZBGBJ9A P5CFBVs850S/Napf/UhglkF3x7sf4B5ASRRjGObbdZgfaPtZU84JzrRErIXMT3Gf 6+uVC9MFCfKjo2Dw5qEv75AmQFxf/FeZ -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:13 2025 by rpki-client