$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: AYxoiTdtVcNyekgSKgV9MkoHC9SV2RRN6pXgSFSq194= Subject key identifier: B4:B9:F0:B1:AD:05:8F:21:C9:3F:8E:EC:D0:F7:BC:D0:42:35:11:8C Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 151A Signing time: Tue 04 Nov 2025 18:31:58 +0000 Manifest this update: Tue 04 Nov 2025 18:31:57 +0000 Manifest next update: Tue 11 Nov 2025 18:31:57 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: 2F2BQWvsy+GKklvy5Q8Tns+1BCbeZNP/+s3c+w4OQRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: Nov 4 18:31:57 2025 GMT Not After : Nov 11 18:31:57 2025 GMT Subject: CN=690a469e-0e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:68:bb:35:8e:0f:b7:74:e0:40:17:64:5c: 4b:f8:bc:ff:20:3d:de:fe:a2:4a:39:a9:62:66:41: a6:4d:53:c9:51:f7:0d:79:f2:cd:27:0d:2b:98:59: 56:a8:3a:d0:60:89:4a:1a:b5:57:bf:08:d6:fa:65: 38:70:3a:1e:ef:21:3f:3c:29:bd:c9:62:ee:5e:9c: 64:3c:1d:e8:98:f0:2f:2d:1c:5c:a2:ad:ed:88:62: e8:a5:8c:22:64:09:48:35:9a:ed:44:f8:52:d3:5d: c6:c1:56:db:52:1b:5c:4b:54:1f:37:74:28:2e:8c: e1:df:f0:1a:b0:55:02:04:b1:3c:0d:40:dc:ae:e5: fe:38:34:96:82:3f:41:4f:05:1f:19:63:fb:0e:24: 18:ea:03:a7:15:f2:b1:b5:45:c3:64:69:43:0b:f0: 88:33:cf:3c:7f:4f:ff:d6:f6:f3:1d:70:f7:0b:0e: 8b:2d:f8:05:f2:d1:2d:d8:be:10:b8:2b:ff:ab:b1: 23:e9:32:b2:e7:3d:d5:a7:d3:75:95:78:f6:d6:44: 15:4f:e4:70:17:6f:a4:d3:42:c6:b0:93:3e:4b:fb: 14:70:7d:97:67:7f:9d:a2:0a:ca:83:62:53:21:1b: 70:93:69:48:f4:e8:16:8d:b8:7e:a0:0f:1c:43:d1: ad:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B9:F0:B1:AD:05:8F:21:C9:3F:8E:EC:D0:F7:BC:D0:42:35:11:8C X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:df:3d:9d:ba:2c:26:01:c5:d3:39:e7:0f:88:42:ce:13:5b: cc:69:43:55:7b:6b:4d:c7:7f:df:e7:ad:57:f2:47:b0:e1:18: a3:1e:3e:f5:d9:7d:00:52:fe:72:b8:f0:ab:24:97:f2:ed:58: 89:4b:4e:1f:7a:f6:aa:e1:fa:b7:cd:5f:da:7e:04:e1:21:3d: 31:77:7b:7d:01:09:ed:a7:07:5c:4c:41:93:2b:b5:09:0c:82: 21:a4:d9:51:8e:31:cb:1a:2e:96:56:b0:25:22:69:75:e3:e5: c0:b1:cb:68:a1:40:18:b6:e0:b3:7c:38:d5:be:94:ed:34:52: 87:dc:8f:75:41:dc:38:45:8f:9b:01:5a:55:98:a8:82:40:73: 46:8e:40:d7:79:60:0c:7b:7f:d3:79:17:e3:a4:d5:ca:28:b8: 53:fe:01:f1:7b:08:68:eb:3c:85:56:da:a9:b4:2a:4d:b2:1b: 52:23:b0:3e:b5:91:f9:bc:47:37:c1:f3:61:4e:18:ee:a7:6d: 89:0a:29:af:e5:c4:57:15:09:79:1e:9f:05:a4:f8:6f:ae:ae: 2c:c0:3b:f6:96:3a:a9:f0:65:70:96:18:3e:bf:f1:88:16:88: da:f9:1b:c6:72:13:14:18:35:96:50:d6:b7:2b:18:0e:91:34: ef:50:56:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjUxMTA0MTgzMTU3WhcNMjUxMTExMTgzMTU3WjAYMRYwFAYD VQQDEw02OTBhNDY5ZS0wZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhBouzWOD7d04EAXZFxL+Lz/ID3e/qJKOaliZkGmTVPJUfcNefLNJw0rmFlW qDrQYIlKGrVXvwjW+mU4cDoe7yE/PCm9yWLuXpxkPB3omPAvLRxcoq3tiGLopYwi ZAlINZrtRPhS013GwVbbUhtcS1QfN3QoLozh3/AasFUCBLE8DUDcruX+ODSWgj9B TwUfGWP7DiQY6gOnFfKxtUXDZGlDC/CIM888f0//1vbzHXD3Cw6LLfgF8tEt2L4Q uCv/q7Ej6TKy5z3Vp9N1lXj21kQVT+RwF2+k00LGsJM+S/sUcH2XZ3+dogrKg2JT IRtwk2lI9OgWjbh+oA8cQ9Gt3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLS58LGt BY8hyT+O7ND3vNBCNRGMMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb3z2duiwmAcXTOecPiELOE1vMaUNVe2tNx3/f561X8kew4RijHj71 2X0AUv5yuPCrJJfy7ViJS04fevaq4fq3zV/afgThIT0xd3t9AQntpwdcTEGTK7UJ DIIhpNlRjjHLGi6WVrAlIml14+XAsctooUAYtuCzfDjVvpTtNFKH3I91Qdw4RY+b AVpVmKiCQHNGjkDXeWAMe3/TeRfjpNXKKLhT/gHxewho6zyFVtqptCpNshtSI7A+ tZH5vEc3wfNhThjup22JCimv5cRXFQl5Hp8FpPhvrq4swDv2ljqp8GVwlhg+v/GI Foja+RvGchMUGDWWUNa3KxgOkTTvUFaB -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:42 2025 by rpki-client