$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json) Hash identifier: +IeCh6NcwdLIX5hqdW5I0mxWujS5XTsfwcwMnUEvsXM= Subject key identifier: 82:9A:D4:30:B4:0E:CC:C4:4D:59:C1:E7:4D:D5:45:FF:AC:81:74:39 Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Certificate serial: 14FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft Manifest number: 14F2 Signing time: Tue 04 Nov 2025 16:56:06 +0000 Manifest this update: Tue 04 Nov 2025 16:56:06 +0000 Manifest next update: Tue 11 Nov 2025 16:56:06 +0000 Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: zZPPiHfV1NuIhH4rxLym62o4iroenRBNJoH7ENLgZY0=) 2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: oH35QJywcYwQK9w172Dp8G4g95WEClMxQ6f9cBdl364=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5372 (0x14fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91499BB, serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Validity Not Before: Nov 4 16:56:06 2025 GMT Not After : Nov 11 16:56:06 2025 GMT Subject: CN=690a3026-a4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:75:35:33:e8:67:4b:8d:08:f3:f9:84:2a: 2e:36:30:cd:41:0f:ff:7b:df:52:00:41:4f:7b:64: a1:ea:f0:61:d0:33:3a:a2:6b:64:80:bb:66:01:c4: c6:d7:95:ac:5d:1c:b2:1e:28:3d:05:6e:b2:27:0c: 69:07:f5:9f:1c:ae:e6:64:1b:e6:4d:19:61:7f:80: 15:92:ae:3d:4c:62:29:7e:10:df:7c:f5:f0:73:1e: d8:52:0e:c7:eb:82:98:5a:5c:a5:73:62:c9:4f:71: bd:4f:8e:a3:ee:9a:95:b2:1c:8d:b1:cd:8f:b3:ef: e2:63:12:b3:fb:42:75:61:c3:c7:ed:46:65:7b:60: 44:a1:d1:3c:48:6d:6d:63:31:84:da:5a:27:a7:22: 15:74:7a:2d:63:6e:9c:0a:23:6a:72:73:84:57:51: ce:d7:aa:59:6d:e1:e8:ca:e6:53:3d:54:f4:f8:e1: 9b:be:a4:08:62:4b:b1:05:4c:82:57:b6:50:5b:94: 22:08:c7:d1:0f:a6:8e:39:f6:9d:71:74:74:50:09: 2b:97:70:7c:80:69:92:63:8c:b2:95:8b:90:e8:f2: 6b:a9:87:ec:ca:04:f0:77:dc:32:d1:19:68:06:22: 9c:be:78:a6:43:e4:d5:b8:5c:0d:ff:7a:69:be:09: 9e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9A:D4:30:B4:0E:CC:C4:4D:59:C1:E7:4D:D5:45:FF:AC:81:74:39 X509v3 Authority Key Identifier: keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:3d:3e:b1:90:d0:2d:ee:c1:6b:b6:d0:fe:6c:2d:f6:fd:d1: 1c:0e:85:73:de:b4:13:aa:dd:1c:aa:a8:41:80:1e:5a:e8:59: 78:aa:1e:32:c4:11:67:e0:02:4c:20:1f:5a:bd:9d:fa:99:75: c0:18:06:66:23:ed:2e:61:83:52:64:7d:5b:b9:10:b6:47:59: 4a:9a:6c:91:86:ba:71:53:38:e6:13:ab:dd:ad:7d:32:e7:3e: 94:58:12:16:b4:bb:09:0f:b0:74:d6:71:4f:e6:f9:00:8f:38: b0:1b:52:80:6f:c6:89:04:e5:eb:8e:d1:f2:55:e6:18:50:78: bb:97:1d:1d:0c:65:fa:9a:f0:4a:3f:e3:8f:d4:98:35:10:19: 0e:df:4e:bb:9b:f1:4d:e9:af:8d:10:23:ea:69:de:bf:26:b0: 96:80:13:35:49:49:b7:05:6a:30:ce:e5:90:2c:ec:12:94:43: c4:8d:80:08:e7:1a:e0:db:47:fb:6a:6b:c0:25:c8:82:ac:aa: 05:37:2f:f8:2b:01:c8:e4:e8:66:22:9f:c3:45:89:a2:51:2a: d1:26:9c:4a:ba:74:45:eb:e1:17:29:77:af:4e:83:01:60:62: 56:25:7c:56:74:12:ba:a0:8f:cf:c5:d8:63:f7:cf:48:a5:0c: bb:34:09:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1QUNGQjdCNEFE QzU1RjM0NTgwHhcNMjUxMTA0MTY1NjA2WhcNMjUxMTExMTY1NjA2WjAYMRYwFAYD VQQDEw02OTBhMzAyNi1hNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8V1NTPoZ0uNCPP5hCouNjDNQQ//e99SAEFPe2Sh6vBh0DM6omtkgLtmAcTG 15WsXRyyHig9BW6yJwxpB/WfHK7mZBvmTRlhf4AVkq49TGIpfhDffPXwcx7YUg7H 64KYWlylc2LJT3G9T46j7pqVshyNsc2Ps+/iYxKz+0J1YcPH7UZle2BEodE8SG1t YzGE2lonpyIVdHotY26cCiNqcnOEV1HO16pZbeHoyuZTPVT0+OGbvqQIYkuxBUyC V7ZQW5QiCMfRD6aOOfadcXR0UAkrl3B8gGmSY4yylYuQ6PJrqYfsygTwd9wy0Rlo BiKcvnimQ+TVuFwN/3ppvgme6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKa1DC0 DszETVnB503VRf+sgXQ5MB8GA1UdIwQYMBaAFPDrPRHw7K5oc2ldWs+3tK3FXzRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTlCQi9BQjFDQUM4NjYw OTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3JtaHphVjFhejdlMHJjVmZO RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPczlFZkRzcm1oemFWMWF6N2UwcmNWZk5GZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTlCQi9BQjFDQUM4NjYwOTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3Jt aHphVjFhejdlMHJjVmZORmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSPT6xkNAt7sFrttD+bC32/dEcDoVz3rQTqt0cqqhBgB5a6Fl4qh4y xBFn4AJMIB9avZ36mXXAGAZmI+0uYYNSZH1buRC2R1lKmmyRhrpxUzjmE6vdrX0y 5z6UWBIWtLsJD7B01nFP5vkAjziwG1KAb8aJBOXrjtHyVeYYUHi7lx0dDGX6mvBK P+OP1Jg1EBkO3067m/FN6a+NECPqad6/JrCWgBM1SUm3BWowzuWQLOwSlEPEjYAI 5xrg20f7amvAJciCrKoFNy/4KwHI5OhmIp/DRYmiUSrRJpxKunRF6+EXKXevToMB YGJWJXxWdBK6oI/Pxdhj989IpQy7NAn6 -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:12 2025 by rpki-client