$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: gvrbq+cL5JFbIR0+U2uMlFQN0qLbTYjUduqOyoV0c80= Subject key identifier: F8:DA:8C:57:63:63:15:97:FB:53:47:39:5C:A1:5E:7C:74:F2:AA:8F Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0EB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0EB3 Signing time: Sat 18 Oct 2025 18:16:27 +0000 Manifest this update: Sat 18 Oct 2025 18:16:26 +0000 Manifest next update: Sat 25 Oct 2025 18:16:26 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: o0sx+JBxi6m5HOLJzsDqQi9Ta3Q1VmJuNG+x/u0ADb4=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: U9KBsxBRcXn+lvll9K6vuuTm2toDlFCHVWsbee/fhwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3769 (0xeb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Oct 18 18:16:26 2025 GMT Not After : Oct 25 18:16:26 2025 GMT Subject: CN=68f3d97b-6a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:cb:c9:0b:14:1f:cc:46:e1:63:e6:e6:f1: bd:25:f0:27:85:32:85:f2:95:67:d3:0f:03:91:69: b6:23:58:2c:05:e2:27:c0:21:2a:8e:9a:21:14:e8: 9e:1e:4a:50:4d:83:cd:2a:32:c2:1d:ec:3e:f5:52: ee:4f:fc:f4:67:c2:63:a3:0e:d3:51:20:03:21:d8: c7:e1:a2:95:e8:83:84:1f:d5:35:7f:3b:81:98:2a: c8:c7:ea:bf:0b:3b:d5:7d:d4:97:c3:dc:0f:49:a6: 45:08:aa:9f:d4:56:79:7a:fa:35:88:7b:52:3d:b9: 28:34:1b:7b:62:17:30:70:fb:6f:ab:ac:20:88:13: b8:9a:65:75:85:c4:e4:b5:92:84:72:0a:c6:7a:52: 05:4d:22:02:f9:9c:bf:74:60:58:6a:b6:21:fd:da: 45:48:06:2e:18:0d:34:31:90:7b:bc:6f:dd:76:91: 75:15:f4:1c:91:13:1c:fc:63:cc:45:8c:d9:9b:c2: 54:ba:80:77:07:ef:2f:09:23:d6:58:63:3e:7e:de: e9:c6:cf:d2:1b:9c:7e:54:ef:56:80:88:31:56:53: 72:39:d7:92:aa:c7:54:ff:8b:9e:e4:d3:1c:f7:62: 3b:ab:d3:f5:41:51:9b:df:4e:78:45:44:ce:95:ad: 3b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DA:8C:57:63:63:15:97:FB:53:47:39:5C:A1:5E:7C:74:F2:AA:8F X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8a:35:e2:b9:8b:27:d0:fc:10:1e:b3:e0:50:6d:9a:71:fc: 03:91:b2:ec:10:83:76:a1:02:e4:28:e8:b7:32:a9:71:d1:fb: fb:f7:e4:dc:29:44:f5:8c:7b:b1:e1:74:aa:92:21:e4:df:d7: 39:8d:a0:52:bf:78:1d:4e:08:21:b4:29:71:44:b8:de:30:fb: b0:0d:3d:fa:e3:e5:d5:35:11:93:04:cd:c6:0f:0f:14:2b:2b: c8:06:60:4e:4b:59:85:9c:42:fa:17:0d:c5:96:2d:a5:d6:48: 7e:87:a9:70:dc:18:54:47:27:6e:aa:8f:b5:fa:7a:74:77:eb: 36:83:b9:db:f7:2e:ae:35:60:55:ea:fc:cc:09:3d:ac:07:20: 23:3d:0d:59:a5:9a:3c:5a:3e:05:19:22:14:af:80:97:aa:45: 26:98:1c:0d:de:19:36:a4:b0:ff:6a:ee:ab:9d:18:91:91:39: ae:73:b8:22:ad:d6:25:56:1f:b9:ee:08:77:a9:13:cc:26:cb: 74:f5:c3:ec:b1:7c:33:ba:2a:5e:6d:e6:b5:bf:9e:22:e8:7d: 4d:94:37:0d:70:b0:76:23:f8:fd:af:72:55:5d:27:d0:7f:eb: cb:fc:6e:29:2c:c5:cb:b1:67:f6:b1:88:6c:21:3d:b4:b5:ba: 1c:30:fb:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjUxMDE4MTgxNjI2WhcNMjUxMDI1MTgxNjI2WjAYMRYwFAYD VQQDEw02OGYzZDk3Yi02YTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtvLyQsUH8xG4WPm5vG9JfAnhTKF8pVn0w8DkWm2I1gsBeInwCEqjpohFOie HkpQTYPNKjLCHew+9VLuT/z0Z8Jjow7TUSADIdjH4aKV6IOEH9U1fzuBmCrIx+q/ CzvVfdSXw9wPSaZFCKqf1FZ5evo1iHtSPbkoNBt7YhcwcPtvq6wgiBO4mmV1hcTk tZKEcgrGelIFTSIC+Zy/dGBYarYh/dpFSAYuGA00MZB7vG/ddpF1FfQckRMc/GPM RYzZm8JUuoB3B+8vCSPWWGM+ft7pxs/SG5x+VO9WgIgxVlNyOdeSqsdU/4ue5NMc 92I7q9P1QVGb3054RUTOla07dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjajFdj YxWX+1NHOVyhXnx08qqPMB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuijXiuYsn0PwQHrPgUG2acfwDkbLsEIN2oQLkKOi3Mqlx0fv79+Tc KUT1jHux4XSqkiHk39c5jaBSv3gdTgghtClxRLjeMPuwDT364+XVNRGTBM3GDw8U KyvIBmBOS1mFnEL6Fw3Fli2l1kh+h6lw3BhURyduqo+1+np0d+s2g7nb9y6uNWBV 6vzMCT2sByAjPQ1ZpZo8Wj4FGSIUr4CXqkUmmBwN3hk2pLD/au6rnRiRkTmuc7gi rdYlVh+57gh3qRPMJst09cPssXwzuipebea1v54i6H1NlDcNcLB2I/j9r3JVXSfQ f+vL/G4pLMXLsWf2sYhsIT20tbocMPuK -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:00 2025 by rpki-client