$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: s8MUrbTPjdOnflKqxRcdioMbrItk5MKLWyml3Ael7ks= Subject key identifier: AE:D9:6C:1F:85:82:E4:9B:5E:62:A0:DE:87:4D:39:86:07:BB:55:E5 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0D60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0D48 Signing time: Tue 04 Nov 2025 18:06:50 +0000 Manifest this update: Tue 04 Nov 2025 18:06:50 +0000 Manifest next update: Tue 11 Nov 2025 18:06:50 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: Vc2I+32anH8nsXNNBn3NVK2w8mozqWwJxDCZh9zRgFI=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: 6tESd18bNlTp7MTJWPASDnQ/QZ789nFYaqEj8964Wuk=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: EPhvpVKPmBr1gw4zNjYoBtmyt2pNt1yo4gY/5g2PubM=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: lEs75gKOPCCArPAlQAMhTBdgUk348a94N0Kq8VMlq+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Nov 4 18:06:50 2025 GMT Not After : Nov 11 18:06:50 2025 GMT Subject: CN=690a40ba-6bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:26:78:76:9d:4c:41:54:6a:dc:6a:d6:45: 65:00:bd:e7:c8:7f:4e:8d:f9:b6:58:d1:d1:6a:55: 63:bb:51:1d:82:db:42:7f:40:e1:2a:8d:47:8e:f2: 7f:46:26:b0:90:4f:ad:d8:78:99:90:d4:f8:b3:da: d6:3e:1e:82:06:4f:f1:04:f1:cb:bf:12:6b:96:9d: 2f:09:03:46:58:ad:58:21:33:12:61:58:0e:e1:ff: a6:23:bb:0f:db:83:36:60:23:cb:d2:06:a2:a7:23: 07:7d:57:bf:93:eb:16:e0:dd:6f:bb:df:aa:a2:ae: 80:00:8d:4f:91:50:e5:e7:c9:47:cd:52:c2:36:cb: ff:83:f7:34:c2:f4:61:7b:4b:ff:1f:ca:1c:26:55: 90:6c:69:e5:05:bc:af:41:55:95:29:a3:95:66:83: 43:a8:82:f7:3a:d2:58:41:10:b4:d6:dc:fb:a7:69: 7d:be:24:92:53:e1:72:de:56:08:09:f7:ae:e0:e9: 04:1e:83:31:82:72:fb:f2:23:12:f6:69:52:1c:e8: 65:10:74:96:2f:7b:47:a2:e9:98:38:39:e4:4e:87: 5e:b1:10:c2:80:c2:6b:7b:75:5f:b0:a1:75:e6:3c: 61:f5:ed:1e:9c:65:d1:f3:14:78:19:cc:72:d8:0b: 5b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D9:6C:1F:85:82:E4:9B:5E:62:A0:DE:87:4D:39:86:07:BB:55:E5 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:e1:5e:00:91:03:53:2b:93:89:7b:5f:37:f4:88:e2:d8:a9: 9a:39:ee:5a:b1:3b:6a:42:37:be:68:61:40:eb:5f:f6:39:84: 01:6d:91:ce:f0:83:26:5f:e1:bf:5a:b0:e9:6c:58:04:ad:9b: 86:d8:a2:cb:1a:44:42:69:60:7d:ec:53:c2:a8:c2:26:f3:40: ad:a1:14:07:8e:13:fb:05:af:9a:7b:af:2e:f0:81:49:07:62: e4:e6:fc:8f:e2:b7:e4:74:b6:fd:af:80:ea:cb:6d:cf:8e:20: cf:6d:7f:14:e0:e9:39:19:69:af:4d:82:92:ef:30:ec:27:92: f7:0b:ef:ad:0f:1c:f6:c4:d1:49:c5:96:67:30:36:82:ce:88: 20:7d:c4:bf:0f:cd:88:42:68:9f:ab:98:21:f8:f5:8b:e6:73: 92:82:60:82:8d:3b:fd:96:b7:8a:c1:61:5d:e5:41:9c:c7:94: 66:b1:16:a0:d6:5a:fb:1c:c3:12:ec:95:b0:68:cd:a8:1c:60: 56:a6:8c:e5:f6:75:e1:36:58:43:0d:76:9a:f8:ba:ea:d7:5f: 6a:09:d2:e9:be:8f:0a:3a:2b:5d:1f:18:f5:ff:c5:37:4b:9a: df:26:58:9c:66:96:f3:41:82:35:ac:1f:b1:30:2c:7f:32:d7: da:ee:58:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjUxMTA0MTgwNjUwWhcNMjUxMTExMTgwNjUwWjAYMRYwFAYD VQQDEw02OTBhNDBiYS02YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/omeHadTEFUatxq1kVlAL3nyH9Ojfm2WNHRalVju1EdgttCf0DhKo1HjvJ/ RiawkE+t2HiZkNT4s9rWPh6CBk/xBPHLvxJrlp0vCQNGWK1YITMSYVgO4f+mI7sP 24M2YCPL0gaipyMHfVe/k+sW4N1vu9+qoq6AAI1PkVDl58lHzVLCNsv/g/c0wvRh e0v/H8ocJlWQbGnlBbyvQVWVKaOVZoNDqIL3OtJYQRC01tz7p2l9viSSU+Fy3lYI Cfeu4OkEHoMxgnL78iMS9mlSHOhlEHSWL3tHoumYODnkTodesRDCgMJre3VfsKF1 5jxh9e0enGXR8xR4Gcxy2AtbxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7ZbB+F guSbXmKg3odNOYYHu1XlMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB54V4AkQNTK5OJe1839Iji2KmaOe5asTtqQje+aGFA61/2OYQBbZHO 8IMmX+G/WrDpbFgErZuG2KLLGkRCaWB97FPCqMIm80CtoRQHjhP7Ba+ae68u8IFJ B2Lk5vyP4rfkdLb9r4Dqy23PjiDPbX8U4Ok5GWmvTYKS7zDsJ5L3C++tDxz2xNFJ xZZnMDaCzoggfcS/D82IQmifq5gh+PWL5nOSgmCCjTv9lreKwWFd5UGcx5RmsRag 1lr7HMMS7JWwaM2oHGBWpozl9nXhNlhDDXaa+Lrq119qCdLpvo8KOitdHxj1/8U3 S5rfJlicZpbzQYI1rB+xMCx/Mtfa7lhJ -----END CERTIFICATE-----Generated at Wed Nov 5 00:14:05 2025 by rpki-client