$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json) Hash identifier: o7XbBvf4wIAqs56J42FcuWSK07DJ00DZoL+0Wk/JIr4= Subject key identifier: 5B:54:EC:00:A9:5A:59:76:53:A6:43:26:DC:4D:6E:7E:A6:B6:93:CF Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 09A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft Manifest number: 09A0 Signing time: Sat 18 Oct 2025 21:05:56 +0000 Manifest this update: Sat 18 Oct 2025 21:05:55 +0000 Manifest next update: Sat 25 Oct 2025 21:05:55 +0000 Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: KotcNQ1l0FX3t3owKg/FpRJrZnuFZVf0ZHMTERT9Pfg=) 2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: IM9yFzmqS+Is/NhhSreqHJdhDGFnp0WA0QJtpqV2ULo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2471 (0x9a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Validity Not Before: Oct 18 21:05:55 2025 GMT Not After : Oct 25 21:05:55 2025 GMT Subject: CN=68f40134-6b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:05:ba:57:40:ff:31:45:b9:43:19:58:27: a7:f5:cb:bb:31:4b:2c:e5:79:22:1e:67:63:26:e9: cf:4c:93:0a:7f:66:35:d7:57:0e:dd:8a:ed:c8:78: 33:1f:66:51:2b:fa:80:0d:b5:07:41:5c:ae:c8:ec: 3b:d6:71:96:f1:01:79:9f:01:a6:04:88:8f:51:be: cc:92:77:2f:3c:d0:a2:ae:87:ac:ee:ec:e7:7d:be: e1:f8:56:a0:5c:bf:1b:9c:c6:28:de:32:e4:08:72: 09:5b:dd:0a:2f:fc:f5:9a:67:ec:76:9f:98:d3:16: 7f:81:f6:37:9c:9a:39:9e:d6:9f:f8:48:01:01:14: 0b:09:c5:50:b0:ec:77:92:7b:b8:2a:31:49:ca:c7: 99:0c:96:e1:80:dc:41:e5:9a:3c:91:af:ab:30:b1: a3:9e:ea:a3:ce:e7:c6:aa:8d:45:80:fd:30:d6:b6: 4a:74:29:da:43:bc:1e:a0:63:78:a0:7e:7c:fa:9e: 87:3a:ef:49:5b:4c:fb:97:e3:8b:b3:be:5b:2b:8c: 16:9a:da:ca:76:07:db:46:d8:2d:31:6d:cb:9b:8f: cd:7a:77:56:86:51:1e:9e:08:c5:75:be:ca:63:78: 09:dd:db:9d:b9:ba:ac:91:f7:1f:09:b8:40:77:ed: 70:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:54:EC:00:A9:5A:59:76:53:A6:43:26:DC:4D:6E:7E:A6:B6:93:CF X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:05:14:b2:30:c5:a5:ae:01:52:ca:8b:72:5c:08:af:48:73: dc:95:e4:19:3f:2d:cd:d3:3a:10:00:c7:02:7f:8a:d9:e1:34: ad:c8:b1:1b:26:71:d9:81:c4:d7:98:b6:86:0d:cc:9f:27:ea: 99:8f:f7:7a:94:08:04:ae:fa:f9:56:d9:83:90:2e:c6:6b:cf: 1e:f6:34:91:a9:95:bd:1b:8b:87:21:86:bd:62:f3:50:cc:e7: 24:fb:97:a0:72:e3:ef:58:a4:e0:75:81:6d:59:a2:50:99:8a: 27:66:ab:c8:3c:59:4c:f9:c1:2c:da:51:5c:a1:03:60:b7:88: 2c:23:d1:7e:3b:93:24:c8:38:0a:dc:39:c3:34:ce:ef:d1:b0: 82:8f:0c:14:ce:aa:b7:91:d0:5c:e6:0f:6b:0b:ea:e2:34:51: 46:e6:8f:65:26:5d:23:1d:26:44:cb:e5:b8:ca:1c:ee:61:e0: ed:19:bd:71:4e:d2:2f:e0:b7:34:6c:ec:6b:e9:51:7e:d9:76: 5d:c6:36:82:45:f4:3d:75:4e:b2:2d:e7:c2:6c:e9:cd:d2:22: 9d:16:a1:83:5d:a6:b9:b8:70:72:dc:e7:13:0c:ba:19:14:5f: 43:c2:19:ce:e7:86:57:39:48:c9:f1:c3:13:5b:c8:ee:25:4c: 19:1f:66:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjUxMDE4MjEwNTU1WhcNMjUxMDI1MjEwNTU1WjAYMRYwFAYD VQQDEw02OGY0MDEzNC02Yjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwUFuldA/zFFuUMZWCen9cu7MUss5XkiHmdjJunPTJMKf2Y111cO3YrtyHgz H2ZRK/qADbUHQVyuyOw71nGW8QF5nwGmBIiPUb7MkncvPNCiroes7uznfb7h+Fag XL8bnMYo3jLkCHIJW90KL/z1mmfsdp+Y0xZ/gfY3nJo5ntaf+EgBARQLCcVQsOx3 knu4KjFJyseZDJbhgNxB5Zo8ka+rMLGjnuqjzufGqo1FgP0w1rZKdCnaQ7weoGN4 oH58+p6HOu9JW0z7l+OLs75bK4wWmtrKdgfbRtgtMW3Lm4/NendWhlEengjFdb7K Y3gJ3dudubqskfcfCbhAd+1w5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtU7ACp Wll2U6ZDJtxNbn6mtpPPMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw Tng1TXdZVkluX3JpRXlJMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtBRSyMMWlrgFSyotyXAivSHPcleQZPy3N0zoQAMcCf4rZ4TStyLEb JnHZgcTXmLaGDcyfJ+qZj/d6lAgErvr5VtmDkC7Ga88e9jSRqZW9G4uHIYa9YvNQ zOck+5egcuPvWKTgdYFtWaJQmYonZqvIPFlM+cEs2lFcoQNgt4gsI9F+O5MkyDgK 3DnDNM7v0bCCjwwUzqq3kdBc5g9rC+riNFFG5o9lJl0jHSZEy+W4yhzuYeDtGb1x TtIv4Lc0bOxr6VF+2XZdxjaCRfQ9dU6yLefCbOnN0iKdFqGDXaa5uHBy3OcTDLoZ FF9DwhnO54ZXOUjJ8cMTW8juJUwZH2aa -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:42 2025 by rpki-client