$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: tMofmzUqNSI48gjuSheewacIzjhSzGQMMOsAOsMqnGE= Subject key identifier: 92:97:2E:EB:38:C8:AA:D6:8E:14:B5:EA:30:80:E0:D4:BB:65:1A:33 Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 0804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 0836 Signing time: Tue 04 Nov 2025 21:05:05 +0000 Manifest this update: Tue 04 Nov 2025 21:05:04 +0000 Manifest next update: Tue 11 Nov 2025 21:05:04 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: X6+vycgjTn/J0jLz99pg2VI7Wz0Arx3OGc1bZu2M5Fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: Nov 4 21:05:04 2025 GMT Not After : Nov 11 21:05:04 2025 GMT Subject: CN=690a6a80-ac9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:18:fd:2b:d3:b8:46:24:d3:b4:ba:4d:74: cd:79:52:5b:56:6b:f5:99:5b:15:5e:8b:32:c2:0f: 96:69:df:3a:ea:71:49:e7:39:36:d9:7b:01:8b:b2: ca:62:92:6f:64:b7:32:c2:5c:55:ce:22:1a:04:3b: cc:d0:10:75:90:00:07:e1:77:5d:41:43:16:c1:73: 4a:be:33:e7:dd:e1:de:64:31:af:ce:55:f9:5d:7a: ed:25:4f:1d:9a:6e:39:89:bc:2e:4d:8a:f2:71:7a: 1e:16:f5:f9:09:e0:9c:81:a1:58:e5:69:49:ff:8c: 10:48:f5:48:03:5a:57:3e:a5:ff:d7:b7:33:bc:23: c1:7c:8c:3b:48:a7:ae:d7:9a:ce:84:c0:70:1a:64: e3:a1:4b:89:a8:da:74:79:91:aa:7a:47:1e:d7:0a: ff:04:16:e8:40:93:08:ba:c8:93:a9:76:fd:b2:a0: 50:9a:d9:63:c6:cb:1d:3a:d6:81:6c:63:8b:5a:91: 1c:e7:e9:35:84:23:60:56:e3:a3:8f:a8:fe:ee:dd: ba:32:df:44:ea:52:d5:70:80:0e:f8:ce:a2:71:4f: 60:51:d6:ff:e4:cd:c2:42:2e:09:eb:7e:c2:e5:c1: 8e:73:81:e3:7d:1a:e2:96:40:2f:0c:36:79:24:9c: 94:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:97:2E:EB:38:C8:AA:D6:8E:14:B5:EA:30:80:E0:D4:BB:65:1A:33 X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:29:d6:1a:6d:a3:42:9c:dc:85:6f:e4:f4:4c:3c:28:6a:51: f8:70:b1:d6:8b:0b:c4:1c:e6:95:f3:72:d8:d5:cd:be:f8:e3: 10:c4:57:54:64:15:2a:16:02:a6:80:e5:fa:55:05:f5:f1:ba: 54:7c:3d:ec:58:62:2d:24:91:0e:8d:c7:c7:b6:a6:af:c1:e7: f4:e6:a2:cc:15:aa:12:33:af:ff:d2:39:a3:8f:33:e6:44:6d: b4:f1:87:13:83:e6:2e:c6:ce:00:74:7f:7c:e0:d7:1c:f3:30: ca:1c:d2:69:07:4f:c1:ad:aa:9b:20:35:1a:d5:6c:dc:50:1a: d6:fa:da:69:70:de:dc:4a:dc:40:a8:55:c9:f6:96:ba:d7:c9: 9d:b5:19:25:e4:96:db:cf:67:f0:e4:9c:82:f7:bb:03:80:9f: 3c:c9:88:f9:13:d5:45:ad:8b:4b:ff:d8:36:cd:75:7e:6c:cd: 89:ed:db:ea:e9:ac:21:25:db:1a:c6:73:4e:6b:8b:f2:98:7e: 00:8c:3c:55:fc:17:a4:9a:1d:9c:a3:04:3c:9e:fb:60:c3:c2: bf:4b:8c:25:f0:2e:9b:d2:c4:5a:4c:ef:1e:6f:21:fb:95:ce: a3:90:c0:0a:75:27:b3:a2:13:38:b8:5f:1c:51:e4:ea:ac:0a: 95:c8:08:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjUxMTA0MjEwNTA0WhcNMjUxMTExMjEwNTA0WjAYMRYwFAYD VQQDEw02OTBhNmE4MC1hYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytEY/SvTuEYk07S6TXTNeVJbVmv1mVsVXosywg+Wad866nFJ5zk22XsBi7LK YpJvZLcywlxVziIaBDvM0BB1kAAH4XddQUMWwXNKvjPn3eHeZDGvzlX5XXrtJU8d mm45ibwuTYrycXoeFvX5CeCcgaFY5WlJ/4wQSPVIA1pXPqX/17czvCPBfIw7SKeu 15rOhMBwGmTjoUuJqNp0eZGqekce1wr/BBboQJMIusiTqXb9sqBQmtljxssdOtaB bGOLWpEc5+k1hCNgVuOjj6j+7t26Mt9E6lLVcIAO+M6icU9gUdb/5M3CQi4J637C 5cGOc4HjfRrilkAvDDZ5JJyUKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKXLus4 yKrWjhS16jCA4NS7ZRozMB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwKdYabaNCnNyFb+T0TDwoalH4cLHWiwvEHOaV83LY1c2++OMQxFdU ZBUqFgKmgOX6VQX18bpUfD3sWGItJJEOjcfHtqavwef05qLMFaoSM6//0jmjjzPm RG208YcTg+Yuxs4AdH984Ncc8zDKHNJpB0/BraqbIDUa1WzcUBrW+tppcN7cStxA qFXJ9pa618mdtRkl5Jbbz2fw5JyC97sDgJ88yYj5E9VFrYtL/9g2zXV+bM2J7dvq 6awhJdsaxnNOa4vymH4AjDxV/Bekmh2cowQ8nvtgw8K/S4wl8C6b0sRaTO8ebyH7 lc6jkMAKdSezohM4uF8cUeTqrAqVyAis -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:09 2025 by rpki-client