$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: oOCn+JM72HkzUZwwo4bEilu3+BrsXzMG0Aj6UgtqnDY= Subject key identifier: 56:84:5E:EC:24:6E:3B:0B:F7:DF:BD:C1:3C:2D:BC:BF:10:7A:53:6E Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0EC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0EBB Signing time: Sun 02 Nov 2025 17:39:47 +0000 Manifest this update: Sun 02 Nov 2025 17:39:46 +0000 Manifest next update: Sun 09 Nov 2025 17:39:46 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: 9dV4CbITUGf2GwytIu8d/Tb/D6lQ0pc7SNAgtBnsW5Y=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: U9KBsxBRcXn+lvll9K6vuuTm2toDlFCHVWsbee/fhwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3777 (0xec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Nov 2 17:39:46 2025 GMT Not After : Nov 9 17:39:46 2025 GMT Subject: CN=69079763-fcf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:55:3e:df:53:77:e6:c7:a4:1b:e1:39:38: 55:6a:77:79:d0:45:4b:80:cf:2c:70:bd:43:77:b8: 13:c6:d5:78:08:22:5f:e6:77:3b:b3:a6:24:75:86: dc:4a:b9:e9:da:b4:84:43:95:0d:55:13:34:0b:df: ef:99:52:a9:2e:40:23:39:90:f0:1a:67:b0:a9:c2: cf:8f:4e:66:70:1c:a4:e3:75:42:ab:1b:b0:e0:1f: 75:31:28:dd:58:b1:15:0e:28:d7:59:e8:44:96:9e: ee:e8:40:91:11:0d:b2:59:9d:54:07:89:2b:75:c0: 61:08:56:69:6e:b3:2e:05:4a:c3:04:1f:1d:5c:04: c0:b0:55:88:fe:7f:da:ee:c5:fb:db:64:fb:aa:fb: 9a:89:50:92:74:a0:35:f0:59:47:2b:e9:e6:26:e2: dc:71:ef:bf:ae:e9:46:96:32:70:6f:fe:a5:43:2a: 26:58:6c:fa:81:6e:cb:9e:62:e7:d0:0a:8c:b5:79: f2:0c:16:9d:36:f7:9a:03:33:d9:60:41:3c:36:86: 32:c0:54:bd:31:df:c3:d1:28:c0:c7:93:d3:f8:e8: e8:72:93:1d:8e:e5:94:ee:6f:f7:ce:89:1d:59:32: d6:bf:25:03:e5:37:81:a4:5a:e8:08:b0:62:af:ef: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:84:5E:EC:24:6E:3B:0B:F7:DF:BD:C1:3C:2D:BC:BF:10:7A:53:6E X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:94:ac:08:ae:0d:d9:44:5d:35:ee:77:68:d6:4e:cf:16:46: 6d:a7:8d:85:cf:d0:4d:37:01:3f:11:23:82:a8:d4:d9:35:33: 0d:38:3a:67:5f:c7:3f:da:11:2d:45:e9:b6:32:f0:f7:3f:3e: 8b:c1:78:ff:48:c0:ff:b3:a3:fb:f6:8d:56:0e:52:d3:ad:4f: c7:29:94:75:49:18:25:45:4c:ee:9d:a0:23:5a:78:51:e4:cb: b4:29:68:c6:fc:39:2c:af:19:e2:71:c0:c4:e2:e5:b3:13:82: de:96:59:df:6c:86:b9:7d:68:c0:56:f3:a8:92:12:c9:38:14: 48:96:33:ed:82:db:9d:5b:9d:0b:af:ff:f0:f9:5d:67:70:38: e8:61:9e:91:08:f2:55:6f:40:0d:81:e1:5f:3b:4b:20:10:08: 2a:d7:12:91:79:a3:5f:6b:d6:33:c5:56:e9:ad:df:87:3f:d6: 37:ea:9a:50:2e:cc:b8:70:f9:a3:70:9b:1f:bf:ac:90:3d:4d: e0:81:9d:f6:8d:50:15:c3:5b:a7:1e:b1:ab:16:74:58:aa:ba: ae:dc:31:bc:86:1b:19:8f:da:cc:8b:34:30:84:51:1f:30:e0: ec:d5:d4:38:03:65:83:ab:38:a0:02:e7:3d:3a:22:c4:25:07: 4c:38:3a:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjUxMTAyMTczOTQ2WhcNMjUxMTA5MTczOTQ2WjAYMRYwFAYD VQQDEw02OTA3OTc2My1mY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPpVPt9Td+bHpBvhOThVand50EVLgM8scL1Dd7gTxtV4CCJf5nc7s6YkdYbc Srnp2rSEQ5UNVRM0C9/vmVKpLkAjOZDwGmewqcLPj05mcByk43VCqxuw4B91MSjd WLEVDijXWehElp7u6ECREQ2yWZ1UB4krdcBhCFZpbrMuBUrDBB8dXATAsFWI/n/a 7sX722T7qvuaiVCSdKA18FlHK+nmJuLcce+/rulGljJwb/6lQyomWGz6gW7LnmLn 0AqMtXnyDBadNveaAzPZYEE8NoYywFS9Md/D0SjAx5PT+OjocpMdjuWU7m/3zokd WTLWvyUD5TeBpFroCLBir+/JKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaEXuwk bjsL99+9wTwtvL8QelNuMB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+lKwIrg3ZRF017ndo1k7PFkZtp42Fz9BNNwE/ESOCqNTZNTMNODpn X8c/2hEtRem2MvD3Pz6LwXj/SMD/s6P79o1WDlLTrU/HKZR1SRglRUzunaAjWnhR 5Mu0KWjG/DksrxniccDE4uWzE4LellnfbIa5fWjAVvOokhLJOBRIljPtgtudW50L r//w+V1ncDjoYZ6RCPJVb0ANgeFfO0sgEAgq1xKReaNfa9YzxVbprd+HP9Y36ppQ Lsy4cPmjcJsfv6yQPU3ggZ32jVAVw1unHrGrFnRYqrqu3DG8hhsZj9rMizQwhFEf MODs1dQ4A2WDqzigAuc9OiLEJQdMODoB -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:24 2025 by rpki-client