$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: Gt35+t4/WdkqvMh3kHb9liERstEIVAHYunlxLHOkp5Q= Subject key identifier: 8D:FD:9F:A1:35:30:E8:14:B7:76:8D:8A:96:84:24:8E:89:18:6E:07 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 0502 Signing time: Sun 19 Oct 2025 01:25:35 +0000 Manifest this update: Sun 19 Oct 2025 01:25:34 +0000 Manifest next update: Sun 26 Oct 2025 01:25:34 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: 8D6GSWeymO0X5NlLJPiogKlYhsbZmIrgSA4YJ7MyXRA=) 2: 308C0A50A13C11F08C94C134C4F9AE02.roa (hash: f+FwTVfeUI4vK/noyKsiUau7ZLzW194Ge45dviz5o4I=) 3: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: 1ktTKLaHDR+wG+DGC+Do5GbZiT98DyxymaKRoe63e+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Oct 19 01:25:34 2025 GMT Not After : Oct 26 01:25:34 2025 GMT Subject: CN=68f43e0e-9422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:74:04:d1:8b:69:cd:28:91:09:60:e4:38: 47:3c:95:26:5f:bf:57:96:2e:38:07:bd:ed:3d:33: 06:61:b9:14:34:09:b4:a8:4b:2f:66:2b:4e:0e:28: 6e:b6:2d:f7:fb:8f:7b:db:11:2c:72:1a:66:2a:40: 21:59:fb:1c:68:85:b4:bf:17:31:d2:a8:92:95:b2: 62:2b:d4:1f:13:22:6d:e0:7d:08:44:c0:ad:eb:ed: ce:e0:ad:91:9e:71:21:c3:b0:53:39:e5:18:54:23: 6a:c6:34:f9:fe:56:ed:75:a7:86:c7:a7:61:8d:dd: 84:ec:fb:9c:0d:2c:d4:c2:d3:9f:cc:cd:5b:cc:d3: cb:97:cc:b4:67:8a:8a:a7:a7:6f:7b:98:74:be:20: 35:18:11:67:25:06:1e:bf:99:da:cf:e5:6c:01:fa: d6:59:27:a3:df:f5:98:68:03:ab:a8:57:b5:b5:55: 75:35:1d:cf:54:88:d8:13:68:9c:c1:c6:bc:e5:e8: 4a:ed:1f:da:38:7e:e6:5f:66:e2:6f:80:f1:bd:ce: 01:bc:08:49:5b:1d:a1:22:fa:27:9b:96:a8:85:09: af:69:52:59:18:88:bf:61:35:a8:ca:97:3c:c4:f7: 4b:74:14:8a:ef:5d:3c:b4:ea:a2:ff:c1:de:c5:0d: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FD:9F:A1:35:30:E8:14:B7:76:8D:8A:96:84:24:8E:89:18:6E:07 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7d:bd:87:90:7f:1d:5b:b3:99:9a:8a:8a:a0:5e:55:44:28: 7e:82:f9:3a:f5:08:17:ae:50:56:e9:8f:39:6f:8a:2a:de:b0: 1a:c8:d3:06:cc:56:4f:f5:1b:44:0b:4b:d8:71:ff:b6:46:ad: e3:03:64:42:49:81:4f:9e:39:d4:e2:f4:a6:9f:28:30:ba:89: 32:2c:10:43:37:42:74:2d:3a:c1:8d:14:75:8a:de:08:84:31: 2c:b4:08:bd:5e:54:65:7f:82:5f:0d:e9:64:f8:90:a4:1f:ee: 90:70:d7:f5:0c:4d:2d:0e:44:fb:71:30:75:21:11:b7:3c:ed: 16:47:6a:83:ac:4b:38:7c:0d:73:5a:4f:f4:49:5a:81:a1:14: 15:ce:fe:80:47:d3:2e:d3:e6:59:5b:fd:20:9d:67:05:99:d3: e6:13:a6:65:d8:6b:24:a7:3c:14:b0:93:1c:67:a9:be:3f:ec: ae:7f:15:0a:49:21:11:52:07:2f:b7:40:d8:e5:35:3b:09:37: f2:5c:c7:0b:00:9c:68:5a:9a:4a:a7:06:9a:ad:19:44:e7:66: 68:41:81:a7:3a:c6:39:5d:72:a3:05:7d:cf:6c:fc:77:06:88: 10:7f:b0:3d:67:9c:0b:8f:4b:ff:d5:23:e9:b5:63:b7:0c:af: eb:e1:68:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUxMDE5MDEyNTM0WhcNMjUxMDI2MDEyNTM0WjAYMRYwFAYD VQQDEw02OGY0M2UwZS05NDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16J0BNGLac0okQlg5DhHPJUmX79Xli44B73tPTMGYbkUNAm0qEsvZitODihu ti33+4972xEschpmKkAhWfscaIW0vxcx0qiSlbJiK9QfEyJt4H0IRMCt6+3O4K2R nnEhw7BTOeUYVCNqxjT5/lbtdaeGx6dhjd2E7PucDSzUwtOfzM1bzNPLl8y0Z4qK p6dve5h0viA1GBFnJQYev5naz+VsAfrWWSej3/WYaAOrqFe1tVV1NR3PVIjYE2ic wca85ehK7R/aOH7mX2bib4Dxvc4BvAhJWx2hIvonm5aohQmvaVJZGIi/YTWoypc8 xPdLdBSK7108tOqi/8HexQ3IywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI39n6E1 MOgUt3aNipaEJI6JGG4HMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqfb2HkH8dW7OZmoqKoF5VRCh+gvk69QgXrlBW6Y85b4oq3rAayNMG zFZP9RtEC0vYcf+2Rq3jA2RCSYFPnjnU4vSmnygwuokyLBBDN0J0LTrBjRR1it4I hDEstAi9XlRlf4JfDelk+JCkH+6QcNf1DE0tDkT7cTB1IRG3PO0WR2qDrEs4fA1z Wk/0SVqBoRQVzv6AR9Mu0+ZZW/0gnWcFmdPmE6Zl2GskpzwUsJMcZ6m+P+yufxUK SSERUgcvt0DY5TU7CTfyXMcLAJxoWppKpwaarRlE52ZoQYGnOsY5XXKjBX3PbPx3 BogQf7A9Z5wLj0v/1SPptWO3DK/r4Wj/ -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:49 2025 by rpki-client