$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: 7o6n7izJ6xtP7nakwbqADyiDCnphsGFSj4I0/2cAqbM= Subject key identifier: BF:1F:64:42:3A:10:35:49:1F:73:33:64:4F:C8:EE:A8:8E:7D:83:48 Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 97 Signing time: Sun 19 Oct 2025 09:40:36 +0000 Manifest this update: Sun 19 Oct 2025 09:40:36 +0000 Manifest next update: Sun 26 Oct 2025 09:40:35 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: VQGSr+HHbApcpqOVJRO5G4pMResmjMrayWG8IRCt5Sk=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Oct 19 09:40:36 2025 GMT Not After : Oct 26 09:40:35 2025 GMT Subject: CN=68f4b214-9418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:00:4f:0b:e2:9e:dc:7e:41:d1:44:a5:36: 8c:55:9d:92:89:df:75:12:a1:50:7e:57:e2:e6:2d: 35:cf:ff:e3:61:8b:cf:78:61:09:e8:c2:58:c4:08: 99:b8:c1:99:fd:5e:c7:93:1d:aa:ad:ad:4a:16:c7: 68:d5:07:85:7b:16:56:1b:9b:ce:73:67:df:08:9a: dd:fd:d8:db:ae:f2:9d:d9:61:5c:9f:6a:f5:26:95: ed:bb:07:25:94:87:82:a6:41:45:c7:78:6e:d8:e8: 76:48:bb:85:3d:ba:75:08:7e:8b:f1:b8:81:3c:5e: 87:d6:f3:1d:ba:35:55:c5:4b:70:2e:8c:88:73:74: f7:27:8f:c5:7d:b6:86:66:c3:d4:a9:6f:68:35:ce: 3f:de:14:91:e2:9a:98:c6:81:19:3a:b5:3d:f2:c4: ca:b9:37:da:e3:5b:1f:f9:37:ce:81:af:fb:9f:c6: f4:4b:6e:c1:9b:b7:6f:60:ff:87:30:78:e6:ad:87: 5b:77:d9:e4:24:30:9c:5d:c7:f1:38:0a:7e:0d:a0: c0:59:ff:f0:05:58:d2:2a:f5:0e:48:2d:db:eb:0f: 17:e7:a1:80:87:3d:38:05:d3:2d:0e:69:29:9e:e7: 0a:56:1d:77:49:50:4c:38:c6:6f:7a:34:5d:9f:5e: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1F:64:42:3A:10:35:49:1F:73:33:64:4F:C8:EE:A8:8E:7D:83:48 X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:19:34:fb:8b:31:92:1a:90:e6:a6:ab:92:f3:d9:08:7c:a8: 75:3b:3b:4d:c1:76:b9:37:72:ad:41:0b:8f:14:a9:35:63:aa: 35:13:71:d8:2e:ce:28:cc:62:db:5d:d0:78:7b:33:8a:2e:d1: 96:3a:15:24:1f:06:4f:17:37:e4:fb:63:1f:6f:24:e2:7c:a5: 0e:a8:39:8a:70:ea:90:e6:17:b7:d5:c1:01:ca:3b:32:bb:86: 05:98:33:7d:ce:f4:fc:5b:82:32:e3:af:72:2e:88:e2:11:a1: 96:16:b3:a4:d1:d0:16:b0:20:48:50:22:99:3a:f2:54:2f:87: 81:d0:0e:ab:35:b9:11:c4:6d:79:99:b7:70:4a:52:63:e9:8d: b5:22:f0:d7:93:b6:80:33:b9:f3:f4:bf:e0:23:bb:42:e1:6c: 46:66:6b:e3:11:11:b5:ad:d1:64:18:f7:b7:bd:a8:8d:1b:da: 8f:d7:95:bd:39:39:4c:6b:28:6a:a9:4e:97:77:45:db:c1:44: 41:eb:2d:64:93:76:7a:85:a2:96:60:fe:b6:2a:fd:56:c2:f9: 17:51:07:f4:1c:ac:b3:38:76:f6:af:1d:55:5a:88:2f:e4:c2: 93:5e:25:f3:f5:e8:2f:66:f5:0c:71:d2:86:c1:10:4d:ca:f8: 4c:d8:d6:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0 RDFCOUExNTEwHhcNMjUxMDE5MDk0MDM2WhcNMjUxMDI2MDk0MDM1WjAYMRYwFAYD VQQDEw02OGY0YjIxNC05NDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw60ATwvintx+QdFEpTaMVZ2Sid91EqFQflfi5i01z//jYYvPeGEJ6MJYxAiZ uMGZ/V7Hkx2qra1KFsdo1QeFexZWG5vOc2ffCJrd/djbrvKd2WFcn2r1JpXtuwcl lIeCpkFFx3hu2Oh2SLuFPbp1CH6L8biBPF6H1vMdujVVxUtwLoyIc3T3J4/FfbaG ZsPUqW9oNc4/3hSR4pqYxoEZOrU98sTKuTfa41sf+TfOga/7n8b0S27Bm7dvYP+H MHjmrYdbd9nkJDCcXcfxOAp+DaDAWf/wBVjSKvUOSC3b6w8X56GAhz04BdMtDmkp nucKVh13SVBMOMZvejRdn140cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8fZEI6 EDVJH3MzZE/I7qiOfYNIMB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQy SV9wdU1kdXJTYUpORzVvVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2GTT7izGSGpDmpquS89kIfKh1OztNwXa5N3KtQQuPFKk1Y6o1E3HY Ls4ozGLbXdB4ezOKLtGWOhUkHwZPFzfk+2MfbyTifKUOqDmKcOqQ5he31cEByjsy u4YFmDN9zvT8W4Iy469yLojiEaGWFrOk0dAWsCBIUCKZOvJUL4eB0A6rNbkRxG15 mbdwSlJj6Y21IvDXk7aAM7nz9L/gI7tC4WxGZmvjERG1rdFkGPe3vaiNG9qP15W9 OTlMayhqqU6Xd0XbwURB6y1kk3Z6haKWYP62Kv1WwvkXUQf0HKyzOHb2rx1VWogv 5MKTXiXz9egvZvUMcdKGwRBNyvhM2Nbe -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:10 2025 by rpki-client