$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json) Hash identifier: s9jtVr/+kzh5KYqKQxgf4OUTRoiCcnZno9HWjnQIt4g= Subject key identifier: 0D:BC:49:8C:A1:88:54:D8:D8:0F:54:78:7D:60:D9:FD:AD:6A:98:BC Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft Manifest number: F7 Signing time: Sun 19 Oct 2025 08:08:10 +0000 Manifest this update: Sun 19 Oct 2025 08:08:09 +0000 Manifest next update: Sun 26 Oct 2025 08:08:09 +0000 Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: tdJhPDQNTgDNLLMZMNtR8lYSC9EWBtptL8efmtNJYyU=) 2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: H9iBAev1i2fVG9Su0JRgr3VpHwr3qa10u8oippD4Mno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: Oct 19 08:08:09 2025 GMT Not After : Oct 26 08:08:09 2025 GMT Subject: CN=68f49c69-7a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:f9:b6:c9:e8:20:90:f6:55:89:c4:52:39: 5b:07:d9:c4:a4:3b:04:58:e2:16:45:31:a7:fd:bd: 3f:e2:68:80:43:e8:b7:d3:de:d8:4b:18:c4:56:23: 47:de:2e:55:aa:d0:65:c3:c3:65:d2:c4:28:25:34: 04:9e:9b:66:0e:84:7c:66:69:f4:22:10:99:4d:fc: 23:33:de:1e:4d:e6:3c:74:0d:e9:69:fe:17:6a:ab: d0:c5:06:60:2c:e0:88:e4:63:a5:a3:8c:64:6a:36: 82:a6:1f:5e:d8:ba:e7:72:98:d0:bc:b1:75:4f:91: 09:19:c8:fa:8b:04:3e:1a:20:87:46:01:50:64:b1: 7f:31:14:be:b6:d4:41:17:bf:ac:3b:bf:94:4e:3e: 6a:d7:df:e0:5b:98:33:da:00:5f:82:69:cc:bd:31: 4b:1e:a1:c5:2d:5b:94:09:64:23:09:b3:79:5e:75: e2:cf:a9:77:ee:51:99:65:99:4d:9b:9b:42:99:64: 0c:e3:70:25:40:6d:2b:19:8e:54:12:b6:41:b3:b8: 7f:54:8f:ad:c3:35:48:5d:9a:ae:50:88:8e:49:2c: 69:0e:2f:6c:a8:b9:c4:dc:f9:99:7b:59:2b:ab:dd: 5f:bd:ca:e9:a2:33:e4:f6:00:20:19:6a:3a:47:02: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BC:49:8C:A1:88:54:D8:D8:0F:54:78:7D:60:D9:FD:AD:6A:98:BC X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f5:34:08:20:cf:60:37:89:b4:31:86:98:9b:ae:6c:23:90: d8:fb:b0:96:b6:a6:b4:56:f6:b4:bd:11:ec:4e:ef:56:f9:83: fd:01:93:c0:22:02:92:37:81:16:ef:57:5a:90:80:a1:9f:bc: 7b:a9:07:eb:50:d1:64:7e:59:78:a9:5f:95:7f:cb:88:15:18: 43:e6:85:40:8d:ba:14:00:23:85:91:60:a3:69:66:bd:a8:5d: 14:35:86:0e:67:f3:a1:86:65:fa:85:df:ef:ca:07:2a:70:c8: fe:7d:36:c1:3d:73:60:99:2f:1c:69:29:4c:50:c7:90:87:11: 9c:bf:97:1c:87:21:52:13:51:81:0a:93:63:1b:7a:5a:8f:db: b2:87:b5:f2:e7:82:0d:31:b5:a8:9e:53:05:e9:23:81:83:20: 4d:52:0e:b1:4f:15:26:86:59:c8:f0:72:bb:f6:95:90:96:e0: e7:ea:8c:67:94:70:d7:73:b7:96:db:4b:32:d6:d5:43:94:34: 8d:a7:52:5e:0d:b7:b4:fb:8d:fc:6d:3b:93:d7:d8:c0:69:65: 02:84:f3:a5:c3:bd:5e:bd:bc:1c:6e:e9:64:da:6b:c5:44:eb: 3e:78:42:d7:7d:4c:94:81:ba:d4:e6:84:c8:0f:b3:68:2a:7a: e2:c2:56:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUxMDE5MDgwODA5WhcNMjUxMDI2MDgwODA5WjAYMRYwFAYD VQQDEw02OGY0OWM2OS03YTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2b5tsnoIJD2VYnEUjlbB9nEpDsEWOIWRTGn/b0/4miAQ+i3097YSxjEViNH 3i5VqtBlw8Nl0sQoJTQEnptmDoR8Zmn0IhCZTfwjM94eTeY8dA3paf4XaqvQxQZg LOCI5GOlo4xkajaCph9e2LrncpjQvLF1T5EJGcj6iwQ+GiCHRgFQZLF/MRS+ttRB F7+sO7+UTj5q19/gW5gz2gBfgmnMvTFLHqHFLVuUCWQjCbN5XnXiz6l37lGZZZlN m5tCmWQM43AlQG0rGY5UErZBs7h/VI+twzVIXZquUIiOSSxpDi9sqLnE3PmZe1kr q91fvcrpojPk9gAgGWo6RwJaVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA28SYyh iFTY2A9UeH1g2f2tapi8MB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZ RGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa9TQIIM9gN4m0MYaYm65sI5DY+7CWtqa0Vva0vRHsTu9W+YP9AZPA IgKSN4EW71dakIChn7x7qQfrUNFkfll4qV+Vf8uIFRhD5oVAjboUACOFkWCjaWa9 qF0UNYYOZ/OhhmX6hd/vygcqcMj+fTbBPXNgmS8caSlMUMeQhxGcv5cchyFSE1GB CpNjG3paj9uyh7Xy54INMbWonlMF6SOBgyBNUg6xTxUmhlnI8HK79pWQluDn6oxn lHDXc7eW20sy1tVDlDSNp1JeDbe0+438bTuT19jAaWUChPOlw71evbwcbulk2mvF ROs+eELXfUyUgbrU5oTID7NoKnriwlbZ -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:05 2025 by rpki-client