$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft File: 8GBCLBdcmuWu18weKBDySX-NlZo.mft (raw, json) Hash identifier: lJ/i2Yb8Ag5T1kBvFzkMazdgoSxq0x8d1j2lThI1abY= Subject key identifier: DC:D3:9E:74:E1:55:1D:DD:C3:DB:7A:B2:C2:0B:4E:08:F8:92:F6:43 Authority key identifier: F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A Certificate issuer: /CN=A91491CC/serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft Manifest number: 16 Signing time: Mon 03 Nov 2025 07:53:30 +0000 Manifest this update: Mon 03 Nov 2025 07:53:30 +0000 Manifest next update: Mon 10 Nov 2025 07:53:30 +0000 Files and hashes: 1: 8GBCLBdcmuWu18weKBDySX-NlZo.crl (hash: 4nEFuGJuHGGXjBOlAUDXUD53boMdlAHrGWNmxzAVVe8=) 2: 3283B8BE9A0F11F0BC057E7DC4F9AE02.roa (hash: 5nJEi+gK08dqnKCqeNdYXt9YEVy/CsaGnAGB6m4ykBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A Validity Not Before: Nov 3 07:53:30 2025 GMT Not After : Nov 10 07:53:30 2025 GMT Subject: CN=69085f7a-78e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:55:a9:26:1e:c3:ea:b0:f5:57:77:3b:9b: 80:3f:25:ee:45:19:e8:6b:1d:6c:5a:4d:8d:38:58: ba:41:ba:fa:bf:f2:da:51:b4:6a:17:03:e2:d2:5b: c0:c8:56:ba:a8:33:3a:8d:6c:ca:e7:1c:2f:8f:04: b5:7f:7c:48:1d:11:0d:44:1d:c4:10:04:0e:fc:ff: b9:1f:e9:1f:70:0a:45:30:d3:dc:19:19:7b:01:cf: aa:6c:cf:be:80:18:08:cd:3d:cd:8e:7f:f6:3c:a9: 7b:b1:e2:2c:a6:88:27:b2:a2:75:c5:24:db:03:8f: ce:13:4d:36:8c:1d:dd:90:69:2a:1b:b9:85:1a:ac: 9b:51:b9:da:30:d1:09:2e:42:a1:19:f8:ee:ee:86: 16:0e:ae:43:c1:c8:4f:86:4d:47:26:de:47:6b:8e: 11:33:4a:be:bc:07:9d:82:d2:18:0d:fd:55:a2:35: 94:56:f8:2b:eb:ae:55:ee:d9:16:bc:85:95:96:cc: c7:c5:8d:b2:f2:cc:43:be:c0:a2:42:2e:38:de:8e: fa:9e:d0:6a:c2:80:09:9f:41:39:ff:1c:80:19:ad: 02:5f:a7:03:ca:9a:2e:be:5b:80:69:b7:56:5e:a5: 4d:0c:85:83:42:4b:0f:38:27:52:45:48:1c:96:37: ca:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D3:9E:74:E1:55:1D:DD:C3:DB:7A:B2:C2:0B:4E:08:F8:92:F6:43 X509v3 Authority Key Identifier: keyid:F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:30:2d:1f:14:49:72:d7:97:02:08:02:0f:74:7a:a9:d3:cd: c5:95:82:59:5c:72:ed:f1:14:19:80:46:8c:6f:01:92:2c:77: 02:c2:5a:9c:b1:1f:0a:09:92:65:6f:46:66:61:0b:d5:3b:43: b8:9c:53:13:b4:b6:ba:61:1e:82:c2:8e:bb:4e:35:42:9b:1c: b1:ba:8e:d4:8b:31:12:75:18:68:8a:db:7a:38:0f:3e:c3:51: d9:7b:16:40:07:13:a6:21:b4:1b:54:8d:63:bc:3c:fd:6e:c0: 44:f0:e7:61:75:dd:33:2d:e2:2f:53:5e:14:2b:b9:93:eb:92: a2:22:5c:0d:c9:49:31:f6:b2:a2:be:5a:06:86:1d:22:5b:c4: 41:d2:ac:1a:e0:c7:a4:c3:5b:bc:5b:bb:55:05:7b:3b:b3:24: 51:5f:d1:12:b7:f6:26:2c:44:14:2c:d6:27:b9:85:5e:67:eb: 86:fd:87:41:b1:6c:1a:1c:b2:88:e3:50:00:6c:7a:97:74:3c: f4:5e:b3:17:dd:68:a5:c6:37:32:7d:94:e9:7a:88:53:84:df: 4f:10:77:30:79:44:b8:8f:e8:7d:e6:20:b9:63:cc:d5:85:62: 51:bd:63:eb:ea:14:12:09:ad:74:c4:8e:7d:76:9f:e9:8b:80: c8:df:e0:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTFDQzExMC8GA1UEBRMoRjA2MDQyMkMxNzVDOUFFNUFFRDdDQzFFMjgxMEYyNDk3 RjhEOTU5QTAeFw0yNTExMDMwNzUzMzBaFw0yNTExMTAwNzUzMzBaMBgxFjAUBgNV BAMTDTY5MDg1ZjdhLTc4ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7U1WpJh7D6rD1V3c7m4A/Je5FGehrHWxaTY04WLpBuvq/8tpRtGoXA+LSW8DI VrqoMzqNbMrnHC+PBLV/fEgdEQ1EHcQQBA78/7kf6R9wCkUw09wZGXsBz6psz76A GAjNPc2Of/Y8qXux4iymiCeyonXFJNsDj84TTTaMHd2QaSobuYUarJtRudow0Qku QqEZ+O7uhhYOrkPByE+GTUcm3kdrjhEzSr68B52C0hgN/VWiNZRW+CvrrlXu2Ra8 hZWWzMfFjbLyzEO+wKJCLjjejvqe0GrCgAmfQTn/HIAZrQJfpwPKmi6+W4Bpt1Ze pU0MhYNCSw84J1JFSByWN8opAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3NOedOFV Hd3D23qywgtOCPiS9kMwHwYDVR0jBBgwFoAU8GBCLBdcmuWu18weKBDySX+NlZow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5MUNDL0E2RTIzQjc4OUEw RTExRjA4OUM4OEI3Q0M0RjlBRTAyLzhHQkNMQmRjbXVXdTE4d2VLQkR5U1gtTmxa by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEdCQ0xCZGNtdVd1MTh3ZUtCRHlTWC1ObFpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 MUNDL0E2RTIzQjc4OUEwRTExRjA4OUM4OEI3Q0M0RjlBRTAyLzhHQkNMQmRjbXVX dTE4d2VLQkR5U1gtTmxaby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHMwLR8USXLXlwIIAg90eqnTzcWVgllccu3xFBmARoxvAZIsdwLCWpyx HwoJkmVvRmZhC9U7Q7icUxO0trphHoLCjrtONUKbHLG6jtSLMRJ1GGiK23o4Dz7D Udl7FkAHE6YhtBtUjWO8PP1uwETw52F13TMt4i9TXhQruZPrkqIiXA3JSTH2sqK+ WgaGHSJbxEHSrBrgx6TDW7xbu1UFezuzJFFf0RK39iYsRBQs1ie5hV5n64b9h0Gx bBocsojjUABsepd0PPResxfdaKXGNzJ9lOl6iFOE308QdzB5RLiP6H3mILljzNWF YlG9Y+vqFBIJrXTEjn12n+mLgMjf4KU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:42:27 2025 by rpki-client