$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json) Hash identifier: xCLhi4fAmUwYCjueIVsd3RpEONLPd0fbHyv5O6ZKvJY= Subject key identifier: 06:CB:6A:64:84:7D:37:8D:CF:1D:33:26:41:F0:9B:58:7F:44:F3:78 Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft Manifest number: 0191 Signing time: Mon 20 Oct 2025 15:34:27 +0000 Manifest this update: Mon 20 Oct 2025 15:34:26 +0000 Manifest next update: Mon 27 Oct 2025 15:34:26 +0000 Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: ejnGy4tC1kYeiW/Ly7ZzFa+NfW8MXnrZNMLe1ajbA60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Validity Not Before: Oct 20 15:34:26 2025 GMT Not After : Oct 27 15:34:26 2025 GMT Subject: CN=68f65682-89a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:02:a1:d3:79:1f:ae:9f:14:29:73:f7:2e: fe:d8:9b:9e:c6:55:39:27:43:25:dc:d8:f0:1f:5e: 1d:53:3e:b1:42:b7:a7:40:e4:96:c1:c2:47:8a:a2: 9b:00:22:f9:d0:b3:33:49:c3:f3:54:64:8a:c3:1a: 67:de:b9:54:b4:5c:77:a7:39:32:4f:91:20:be:dd: 02:48:dc:c6:4d:b0:72:39:72:57:dd:ad:3b:03:e4: d1:4e:0b:09:f7:96:fe:17:14:00:cb:02:43:d2:7b: f5:b7:0a:46:81:e8:28:53:fb:06:15:71:e2:6c:d2: 28:6a:2f:fc:8c:85:6f:09:1b:e1:e8:fb:1c:36:c4: 46:aa:ea:63:79:a3:33:c6:2f:3f:ac:27:96:d1:b9: 23:87:c3:e7:17:22:f0:8d:82:e0:fb:f2:50:dc:b5: 01:e3:d8:aa:80:9f:c4:a9:a2:25:71:43:41:bf:f5: 03:61:d9:26:67:1e:fd:fb:81:a7:09:5a:35:34:0f: 53:87:a2:b4:3e:89:cc:d2:21:74:5f:da:91:7d:b1: 0a:27:8a:ac:39:f3:a4:d5:7b:13:30:13:2a:b7:b3: 67:93:0e:80:f3:e9:fa:c0:16:73:20:ea:ba:47:16: d6:c0:29:af:0a:ea:c7:d7:4b:02:16:dd:2d:a6:8f: 1f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CB:6A:64:84:7D:37:8D:CF:1D:33:26:41:F0:9B:58:7F:44:F3:78 X509v3 Authority Key Identifier: keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e3:f4:13:77:9e:a9:9c:19:71:4b:fd:2c:48:77:1d:3b:f8: 62:2c:fc:0a:12:89:28:4b:8a:e3:06:db:84:10:0e:28:fc:6f: 8c:9e:9b:77:1d:3c:cd:de:a9:3a:a5:ce:b9:a0:b6:d4:6e:4b: a5:b0:64:f7:68:43:75:82:09:a6:7a:78:8a:49:3d:da:19:33: c8:3c:ff:96:44:88:70:8e:cd:b5:80:ef:7c:6c:be:5e:7c:c8: 71:6e:37:de:f8:3c:1e:8c:9f:f6:1e:93:77:ff:04:78:68:23: f4:a3:68:cc:76:d9:e0:ed:08:95:aa:3b:16:8e:fe:79:0b:ea: d3:8b:69:27:e7:0a:11:2e:4a:0a:78:a7:03:21:a3:19:7e:23: 45:e7:6a:72:90:97:ce:1d:c9:7a:c9:19:83:eb:80:76:cd:d4: 15:2b:29:8e:74:c4:d3:e5:78:e4:d9:0c:5f:9a:04:e5:7c:36: 28:65:69:39:f4:ba:88:0a:4b:36:ce:6e:a3:21:87:48:ae:a9: 16:24:1c:7c:f3:b4:b4:98:46:51:44:21:42:ce:17:00:9a:78: 8c:7a:74:9f:29:c0:1e:cb:15:1c:cf:31:98:10:0d:a1:73:45: 47:c3:84:e2:6a:aa:98:56:27:d9:aa:86:1f:18:85:47:c4:7a: 11:9c:bd:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0 RTdCNDNCMTcwHhcNMjUxMDIwMTUzNDI2WhcNMjUxMDI3MTUzNDI2WjAYMRYwFAYD VQQDEw02OGY2NTY4Mi04OWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvsCodN5H66fFClz9y7+2JuexlU5J0Ml3NjwH14dUz6xQrenQOSWwcJHiqKb ACL50LMzScPzVGSKwxpn3rlUtFx3pzkyT5Egvt0CSNzGTbByOXJX3a07A+TRTgsJ 95b+FxQAywJD0nv1twpGgegoU/sGFXHibNIoai/8jIVvCRvh6PscNsRGqupjeaMz xi8/rCeW0bkjh8PnFyLwjYLg+/JQ3LUB49iqgJ/EqaIlcUNBv/UDYdkmZx79+4Gn CVo1NA9Th6K0PonM0iF0X9qRfbEKJ4qsOfOk1XsTMBMqt7Nnkw6A8+n6wBZzIOq6 RxbWwCmvCurH10sCFt0tpo8fQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbLamSE fTeNzx0zJkHwm1h/RPN4MB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16 MWtjVG9mYkVocUJPZTBPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu4/QTd56pnBlxS/0sSHcdO/hiLPwKEokoS4rjBtuEEA4o/G+Mnpt3 HTzN3qk6pc65oLbUbkulsGT3aEN1ggmmeniKST3aGTPIPP+WRIhwjs21gO98bL5e fMhxbjfe+DwejJ/2HpN3/wR4aCP0o2jMdtng7QiVqjsWjv55C+rTi2kn5woRLkoK eKcDIaMZfiNF52pykJfOHcl6yRmD64B2zdQVKymOdMTT5Xjk2QxfmgTlfDYoZWk5 9LqICks2zm6jIYdIrqkWJBx887S0mEZRRCFCzhcAmniMenSfKcAeyxUczzGYEA2h c0VHw4TiaqqYVifZqoYfGIVHxHoRnL1A -----END CERTIFICATE-----Generated at Tue Oct 21 10:40:36 2025 by rpki-client