$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: J6BWVCF7LMklAz/PHlP8ZvB6NynEJziUCRiqCiBjuUs= Subject key identifier: 43:CE:48:92:50:DF:4E:B8:93:66:51:D6:A9:0C:A1:F4:E0:B0:CE:2C Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 4B Signing time: Sun 19 Oct 2025 10:46:36 +0000 Manifest this update: Sun 19 Oct 2025 10:46:36 +0000 Manifest next update: Sun 26 Oct 2025 10:46:36 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: S0Pko07F61aL38y8VkVlIWvRiEuwtDdgM+SaygGGgPI=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Oct 19 10:46:36 2025 GMT Not After : Oct 26 10:46:36 2025 GMT Subject: CN=68f4c18c-7035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:56:17:c2:ae:08:f8:cc:7b:74:39:38:98: 39:19:d6:f2:da:73:01:e5:0f:c0:ae:8c:64:97:d3: ff:60:c9:36:45:6e:9b:5b:91:71:82:44:b8:99:d7: 9d:36:fe:2b:25:84:f2:ff:72:3d:98:93:79:c8:dd: 2b:c7:bb:c0:58:6f:bd:ce:56:47:c0:25:24:fe:1c: f1:cd:70:3f:e5:b5:0e:3d:ea:28:bc:fc:53:40:0e: db:b2:cf:fb:fd:19:85:48:cd:a6:5e:d4:24:33:a8: 5c:2a:d2:5d:fd:98:c6:59:f6:e6:5c:d5:00:a5:df: db:f6:2f:60:b4:53:ba:9f:ed:f8:73:14:d8:47:0f: 93:00:ad:83:61:0e:6e:6b:b5:ee:8b:dd:e8:ab:1e: 08:1b:bb:00:9f:e7:6d:99:65:78:4b:75:fc:9d:7c: 1f:80:2d:a1:d1:46:c0:f6:f3:92:92:27:e1:a9:70: 2f:da:17:d8:32:92:e2:fe:14:97:bb:3a:3e:96:2f: e2:07:c5:0c:78:78:0a:d0:44:39:1c:c4:7e:f8:3f: 04:90:42:20:c1:9b:d5:41:09:64:52:c5:04:2d:de: 38:9e:37:eb:05:37:c6:6d:e2:b5:bb:4d:be:f0:4f: 84:7e:3e:2a:64:a7:c9:e8:19:69:65:cf:5c:01:8a: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CE:48:92:50:DF:4E:B8:93:66:51:D6:A9:0C:A1:F4:E0:B0:CE:2C X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:83:71:63:12:d8:c9:8b:9c:84:51:04:2f:9a:7f:f6:98:47: 71:2e:28:96:25:ab:47:a8:dc:5a:f2:36:85:3b:17:84:41:fe: db:58:4f:4a:e3:92:37:80:12:9c:dc:1a:7e:d9:3f:0a:be:26: 7b:0b:50:a1:01:68:91:15:1d:ca:87:e0:94:25:54:6a:80:c5: cf:f2:3c:5f:f9:17:c6:ea:d8:a0:6f:e3:20:5f:7c:1e:7d:3e: 5f:b7:a4:a6:fa:6a:8c:51:db:22:00:57:4e:8d:d2:9c:9c:3c: cc:0f:f1:23:a2:4b:c5:7a:26:3c:aa:fe:6b:bd:1d:f7:94:5a: c6:03:ee:5b:b6:5f:1d:ec:36:bd:1a:9e:ca:74:2d:25:a7:ab: 1d:0d:63:38:f9:87:ca:0d:0e:89:6b:de:4d:bd:f8:be:e1:23: 66:3b:cf:bf:96:9e:76:fc:61:eb:dc:73:c0:da:43:68:c1:d3: 53:ea:3a:7a:ab:ff:ae:2f:59:58:4b:70:2c:15:50:1f:eb:63: 8e:0b:71:ad:0e:36:95:df:48:59:fc:20:99:9e:27:60:ae:f2: 37:d6:10:a3:99:02:4f:c4:b0:87:d9:a7:df:ce:9f:54:94:71: 13:08:1b:6a:0a:ac:a6:d1:3c:51:1a:0d:a3:6c:9c:ac:48:71: 70:64:c1:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNTEwMTkxMDQ2MzZaFw0yNTEwMjYxMDQ2MzZaMBgxFjAUBgNV BAMTDTY4ZjRjMThjLTcwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXB1YXwq4I+Mx7dDk4mDkZ1vLacwHlD8CujGSX0/9gyTZFbptbkXGCRLiZ1502 /islhPL/cj2Yk3nI3SvHu8BYb73OVkfAJST+HPHNcD/ltQ496ii8/FNADtuyz/v9 GYVIzaZe1CQzqFwq0l39mMZZ9uZc1QCl39v2L2C0U7qf7fhzFNhHD5MArYNhDm5r te6L3eirHggbuwCf522ZZXhLdfydfB+ALaHRRsD285KSJ+GpcC/aF9gykuL+FJe7 Oj6WL+IHxQx4eArQRDkcxH74PwSQQiDBm9VBCWRSxQQt3jieN+sFN8Zt4rW7Tb7w T4R+Pipkp8noGWllz1wBioubAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ85IklDf TriTZlHWqQyh9OCwziwwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALWDcWMS2MmLnIRRBC+af/aYR3EuKJYlq0eo3FryNoU7F4RB/ttYT0rj kjeAEpzcGn7ZPwq+JnsLUKEBaJEVHcqH4JQlVGqAxc/yPF/5F8bq2KBv4yBffB59 Pl+3pKb6aoxR2yIAV06N0pycPMwP8SOiS8V6Jjyq/mu9HfeUWsYD7lu2Xx3sNr0a nsp0LSWnqx0NYzj5h8oNDolr3k29+L7hI2Y7z7+Wnnb8Yevcc8DaQ2jB01PqOnqr /64vWVhLcCwVUB/rY44Lca0ONpXfSFn8IJmeJ2Cu8jfWEKOZAk/EsIfZp9/On1SU cRMIG2oKrKbRPFEaDaNsnKxIcXBkwTU= -----END CERTIFICATE-----Generated at Tue Oct 21 08:06:59 2025 by rpki-client