$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: 87TnDkmV1ttU/I7sd3OVC3SALNyZlqrOOKZiVHcvJyg= Subject key identifier: 61:DD:28:57:7D:7F:B9:01:06:BB:27:26:EE:76:B5:CF:02:C8:2A:CF Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 06F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 06EC Signing time: Tue 04 Nov 2025 22:03:18 +0000 Manifest this update: Tue 04 Nov 2025 22:03:18 +0000 Manifest next update: Tue 11 Nov 2025 22:03:18 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: HFckdlupGW9AOrhM0fzdkoo0EhnUlwNAmVphLOrqzdg=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: vqxIsO24S1XTFLTcdT7l0irFCtFiMiUdze/w33SKZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: Nov 4 22:03:18 2025 GMT Not After : Nov 11 22:03:18 2025 GMT Subject: CN=690a7826-b8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:4d:79:38:c6:87:77:e8:15:73:ce:0c:3e: 5c:4b:a8:c2:48:16:ba:97:03:1a:fb:fc:60:f9:1a: 2f:10:0c:96:72:68:bd:cb:b2:74:af:72:d0:d0:bb: 2a:14:70:12:b2:ae:43:9e:bd:ae:71:c4:3b:95:17: d9:29:39:f8:00:75:f2:18:3f:1f:76:af:4e:33:57: 65:8d:a2:88:48:1d:3a:5c:7c:b9:c2:87:06:ce:b6: c8:bd:b6:56:85:c2:c6:26:1d:78:a5:65:f0:71:9a: 23:ed:ec:39:14:e3:9b:de:5f:eb:70:da:cf:95:ce: 2c:ae:7b:77:ec:ad:cd:71:a9:c4:0f:2e:1f:ae:a5: b0:64:82:31:60:93:02:71:33:c9:ee:72:82:4a:97: 97:f0:73:fb:e1:ed:00:29:34:e0:70:cf:ba:95:4d: 75:db:83:06:cf:33:2c:b9:20:d3:3b:75:78:4f:4a: d7:a9:32:81:82:51:96:e5:14:dd:0e:c5:dd:da:b4: 71:3a:57:7d:2a:5a:d3:ba:43:c4:68:c6:49:63:cf: 1a:c2:3d:14:c0:25:94:42:ad:33:6b:90:f0:10:97: e0:73:f8:36:0e:9d:79:67:b2:2d:f7:99:c1:27:a5: 1a:fb:a9:46:e5:21:9c:14:42:dc:0a:8c:81:d1:81: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DD:28:57:7D:7F:B9:01:06:BB:27:26:EE:76:B5:CF:02:C8:2A:CF X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c8:c6:4d:1f:fe:9f:9b:ff:67:e6:18:55:f4:a2:26:83:e2: ed:5b:1d:f1:fa:d8:bd:75:6a:2b:6f:fe:58:40:cf:7a:c1:69: 5b:57:24:2e:f6:88:13:f7:12:fa:b2:20:6d:63:59:2c:69:d6: 40:6c:3d:f1:89:dd:91:75:31:6b:11:b4:5b:59:40:c0:6b:84: 71:54:77:dd:1d:0b:80:67:01:fa:b0:fc:de:0c:0d:f8:38:74: 2e:af:f9:e5:63:50:5a:c0:e0:6a:83:07:33:f4:3d:6d:e4:26: 63:00:22:1d:42:4f:23:b4:57:a7:81:3b:dc:4e:82:48:93:9c: 6e:7e:40:2d:c7:cf:b7:cf:d8:0e:cd:39:de:62:57:c3:ff:d2: ad:f4:84:23:5a:ba:47:2a:0e:51:a0:f6:39:65:7b:2a:f5:07: c1:3d:11:c4:1c:d2:30:07:bc:d6:24:95:25:f5:20:5b:32:12: e6:73:3a:2b:ab:7b:ed:4c:4a:77:1b:3c:89:56:f7:18:bf:0c: 43:20:43:f2:f4:02:ed:26:5e:d9:85:e4:c3:d6:80:82:f6:f9: f3:ed:8d:32:93:31:3a:c8:a6:89:99:e3:6b:b0:b9:1e:74:43: dd:c5:2c:b0:75:e2:fb:83:e4:f0:5f:c4:76:dc:80:00:d6:0e: 92:59:43:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjUxMTA0MjIwMzE4WhcNMjUxMTExMjIwMzE4WjAYMRYwFAYD VQQDEw02OTBhNzgyNi1iOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJdNeTjGh3foFXPODD5cS6jCSBa6lwMa+/xg+RovEAyWcmi9y7J0r3LQ0Lsq FHASsq5Dnr2uccQ7lRfZKTn4AHXyGD8fdq9OM1dljaKISB06XHy5wocGzrbIvbZW hcLGJh14pWXwcZoj7ew5FOOb3l/rcNrPlc4srnt37K3NcanEDy4frqWwZIIxYJMC cTPJ7nKCSpeX8HP74e0AKTTgcM+6lU1124MGzzMsuSDTO3V4T0rXqTKBglGW5RTd DsXd2rRxOld9KlrTukPEaMZJY88awj0UwCWUQq0za5DwEJfgc/g2Dp15Z7It95nB J6Ua+6lG5SGcFELcCoyB0YEHyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHdKFd9 f7kBBrsnJu52tc8CyCrPMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiyMZNH/6fm/9n5hhV9KImg+LtWx3x+ti9dWorb/5YQM96wWlbVyQu 9ogT9xL6siBtY1ksadZAbD3xid2RdTFrEbRbWUDAa4RxVHfdHQuAZwH6sPzeDA34 OHQur/nlY1BawOBqgwcz9D1t5CZjACIdQk8jtFengTvcToJIk5xufkAtx8+3z9gO zTneYlfD/9Kt9IQjWrpHKg5RoPY5ZXsq9QfBPRHEHNIwB7zWJJUl9SBbMhLmczor q3vtTEp3GzyJVvcYvwxDIEPy9ALtJl7ZheTD1oCC9vnz7Y0ykzE6yKaJmeNrsLke dEPdxSywdeL7g+TwX8R23IAA1g6SWUMI -----END CERTIFICATE-----Generated at Wed Nov 5 16:45:31 2025 by rpki-client