$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: QsKz8yMWa9hayCKYRECzk2XjdQsPaoQZVO8YUXuoKmA= Subject key identifier: 0E:75:1D:EB:D2:3E:7B:A6:AE:3B:EC:02:00:C9:39:4B:C6:E9:1A:91 Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 01BF Signing time: Mon 03 Nov 2025 02:58:55 +0000 Manifest this update: Mon 03 Nov 2025 02:58:54 +0000 Manifest next update: Mon 10 Nov 2025 02:58:54 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: u7AK+I7HWC+t2aNj+Zio4hpnETvY3CIc4OoGvTza8XU=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: 6xfHA0xOfSf1bsWXYgETgvu/Qg0LpdZ4QedkQYTwxII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Nov 3 02:58:54 2025 GMT Not After : Nov 10 02:58:54 2025 GMT Subject: CN=69081a6e-0334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:10:11:42:7c:44:08:b1:9b:5b:51:e7:e1: 6d:7d:d9:d3:7e:f5:6b:cb:da:d0:41:3a:75:53:82: 6d:53:31:a0:c7:00:5c:c3:76:4a:71:09:47:00:e5: 80:54:62:87:bf:33:f0:21:3b:6b:44:98:91:a6:00: 81:d8:3f:d2:54:c6:06:b0:67:1a:5f:cb:20:cb:1c: b1:5f:53:82:f4:84:c2:e9:71:e4:ec:72:01:04:f7: 25:b4:70:46:1b:78:4a:cd:63:78:f5:9a:7c:7f:ef: 14:18:c7:68:1b:c3:97:90:b6:11:54:cc:6b:f7:9c: 30:ad:cf:72:bd:d8:0a:1d:5b:91:88:f9:aa:0b:e1: 70:f8:57:44:c6:1d:d0:ea:3d:2e:fe:da:56:2d:60: 3a:9e:f3:e9:ca:e5:a5:18:b8:71:f4:eb:09:7a:47: c4:97:80:b3:42:b3:3f:17:24:4d:71:95:3e:65:18: 3d:3a:ef:0b:c8:10:a2:08:93:e5:7d:f1:d2:6c:da: 24:b8:e8:87:24:fb:ba:67:e1:39:28:79:89:13:ce: 23:1b:7c:a0:14:eb:b8:56:1a:5d:b8:a1:78:d0:12: aa:a3:96:8f:08:e0:dd:1a:ae:46:6a:c5:fe:0e:fe: a8:08:0d:aa:4b:a8:82:5e:26:08:c6:d6:60:8b:69: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:75:1D:EB:D2:3E:7B:A6:AE:3B:EC:02:00:C9:39:4B:C6:E9:1A:91 X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7d:5c:a6:cd:f3:be:36:21:a7:7b:de:6e:2a:54:c8:bd:08: df:1e:d9:df:0a:0e:f0:40:86:90:75:41:eb:1d:19:81:8a:53: 0b:eb:99:47:bf:e7:46:94:c9:76:16:67:d0:b7:7f:14:c3:59: bc:c4:c7:72:43:b1:13:83:f7:a6:96:c0:16:af:18:f6:7b:da: 0b:6e:f1:80:63:96:dc:78:8b:29:ba:0d:0e:24:2f:db:b3:cf: 94:fd:86:cc:52:f4:67:97:93:3b:2a:fd:27:38:94:73:21:3c: 24:cc:72:6d:d0:80:a1:db:14:0b:d3:b7:9f:ea:86:2a:ec:94: a0:65:a9:e6:0a:d6:f2:3c:be:d9:a5:b4:9e:ea:fa:76:79:a7: b9:57:ad:b2:6e:87:89:b6:5d:52:21:7c:5e:ff:29:15:22:15: 4c:13:c7:6e:61:fb:5a:49:f2:1e:b0:18:a6:92:23:0e:64:3b: ca:06:91:23:0d:a1:eb:09:07:d9:25:7f:3b:42:c5:a0:6b:2e: 9f:c6:f2:8e:51:90:28:48:21:10:63:60:04:b8:e5:be:43:70: 59:f6:52:f5:b6:95:49:80:80:9c:2f:e7:28:01:53:79:35:cf: 24:91:1c:b7:00:72:d9:3a:5e:d5:4b:af:02:6e:ad:f9:7a:41: cb:21:2d:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUxMTAzMDI1ODU0WhcNMjUxMTEwMDI1ODU0WjAYMRYwFAYD VQQDEw02OTA4MWE2ZS0wMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprMQEUJ8RAixm1tR5+FtfdnTfvVry9rQQTp1U4JtUzGgxwBcw3ZKcQlHAOWA VGKHvzPwITtrRJiRpgCB2D/SVMYGsGcaX8sgyxyxX1OC9ITC6XHk7HIBBPcltHBG G3hKzWN49Zp8f+8UGMdoG8OXkLYRVMxr95wwrc9yvdgKHVuRiPmqC+Fw+FdExh3Q 6j0u/tpWLWA6nvPpyuWlGLhx9OsJekfEl4CzQrM/FyRNcZU+ZRg9Ou8LyBCiCJPl ffHSbNokuOiHJPu6Z+E5KHmJE84jG3ygFOu4VhpduKF40BKqo5aPCODdGq5GasX+ Dv6oCA2qS6iCXiYIxtZgi2mLywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA51HevS PnumrjvsAgDJOUvG6RqRMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGfVymzfO+NiGne95uKlTIvQjfHtnfCg7wQIaQdUHrHRmBilML65lH v+dGlMl2FmfQt38Uw1m8xMdyQ7ETg/emlsAWrxj2e9oLbvGAY5bceIspug0OJC/b s8+U/YbMUvRnl5M7Kv0nOJRzITwkzHJt0ICh2xQL07ef6oYq7JSgZanmCtbyPL7Z pbSe6vp2eae5V62yboeJtl1SIXxe/ykVIhVME8duYftaSfIesBimkiMOZDvKBpEj DaHrCQfZJX87QsWgay6fxvKOUZAoSCEQY2AEuOW+Q3BZ9lL1tpVJgICcL+coAVN5 Nc8kkRy3AHLZOl7VS68Cbq35ekHLIS2x -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:25 2025 by rpki-client