$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json) Hash identifier: qx9fVe/e/zl88myde82ZBHRvrXHpOfGXHa6UekA5y34= Subject key identifier: 1F:F1:68:B8:44:61:D6:58:DC:54:0B:9A:1F:1F:3C:A1:1C:E1:F5:AF Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft Manifest number: 55 Signing time: Mon 03 Nov 2025 07:11:46 +0000 Manifest this update: Mon 03 Nov 2025 07:11:46 +0000 Manifest next update: Mon 10 Nov 2025 07:11:46 +0000 Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: WFdQEuNF+N/NHXM5iMmSLrYYh9J4LuLJ0h90J4DaEuc=) 2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: uo101jV5D+ClspePQe5MSA2kQIWF4csGlLsFWkLTXVc=) 3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: 8dvGtU4/STS35lWSdlUQSQ3IYG+2zjb7Ya5wIRb/kvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Validity Not Before: Nov 3 07:11:46 2025 GMT Not After : Nov 10 07:11:46 2025 GMT Subject: CN=690855b2-2954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:fb:2a:0c:51:11:09:41:5b:dc:0c:63:5d: 89:e3:8c:e1:2d:bb:54:57:e3:bd:7c:72:47:52:25: d0:3e:68:65:40:31:70:ac:2f:d0:01:67:de:52:f1: 17:79:a0:1f:42:b1:c0:95:b5:18:be:6e:cd:bd:6e: 6f:00:f9:48:5b:1e:00:15:02:0e:a4:8e:4a:bc:ec: 57:16:8f:6f:a9:7c:ae:ae:1b:c5:d5:f9:1b:ab:59: 89:76:35:98:70:3d:c7:98:9b:f7:25:5b:b0:83:f6: d9:73:eb:15:1b:34:5f:88:70:d3:56:f3:45:60:40: 52:09:b7:b7:0e:fa:21:c1:c7:48:19:4e:26:21:ce: 92:c9:06:32:39:be:cc:da:a9:8c:7c:f7:f0:d3:f0: 2e:cf:fb:ff:0c:a2:1e:8a:e0:f7:a6:7d:cd:68:a1: 13:d9:16:a0:4f:72:16:56:59:90:de:63:f2:12:f5: d9:8b:f6:c0:f3:92:ac:dc:b3:5b:8c:c5:13:a0:08: a7:5a:91:0c:24:65:64:c9:aa:5f:31:e1:09:6f:81: e1:5c:d6:22:76:55:69:1f:8f:c2:eb:98:fb:dc:95: 83:28:61:64:3b:f2:98:ee:45:fe:5d:50:cb:c2:b5: 81:cc:44:fe:ae:d0:24:33:be:c8:f9:d5:31:39:98: 6f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F1:68:B8:44:61:D6:58:DC:54:0B:9A:1F:1F:3C:A1:1C:E1:F5:AF X509v3 Authority Key Identifier: keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:41:db:11:2f:19:cb:fd:c0:4a:5b:0a:a6:1c:63:05:a6:93: 01:97:c4:28:39:b6:84:66:00:3f:51:56:c7:87:e1:6a:00:03: 2a:c9:97:de:c3:29:3a:ae:8f:67:82:8d:f8:9c:5f:ef:47:0e: 60:87:0a:aa:0d:f3:f7:fa:f8:c0:48:c1:0d:e3:33:28:a4:97: c1:f6:7b:c2:ce:29:27:c9:8e:25:7d:33:da:ab:a1:3b:f5:c3: 6e:1b:bf:14:9a:9c:dc:63:b4:53:0a:8f:8a:a8:ab:28:65:5e: 9e:16:54:11:48:28:f7:bd:35:73:0d:37:4b:a7:b6:73:90:23: db:81:4c:a6:83:3c:d5:27:71:43:a6:66:13:95:7e:a7:52:37: f0:65:f2:64:25:52:33:19:61:23:fc:bf:e4:f3:da:07:cc:af: bb:71:1d:ff:b9:46:21:30:73:b5:3f:15:3c:b0:67:24:24:b8: ad:f8:bb:ca:69:70:3a:20:6b:39:cd:18:0d:36:ae:4c:36:a2: 59:5d:91:cd:ed:ae:41:48:87:2e:1e:ed:13:e4:f2:df:7b:b5: 02:7a:6b:e1:48:a5:73:1d:63:e4:17:04:ea:3b:a0:1b:f8:fb: 1a:e7:3e:29:1c:46:db:65:f9:9a:5c:3e:53:fa:b6:ed:d2:8e: 4b:3a:36:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDkxNjExMC8GA1UEBRMoNkZDMjJEMzBGMzE5Q0Q2NURCNUUzRjZGRkM1RDE0MUNE MDE2Njg4MjAeFw0yNTExMDMwNzExNDZaFw0yNTExMTAwNzExNDZaMBgxFjAUBgNV BAMTDTY5MDg1NWIyLTI5NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVMPsqDFERCUFb3AxjXYnjjOEtu1RX4718ckdSJdA+aGVAMXCsL9ABZ95S8Rd5 oB9CscCVtRi+bs29bm8A+UhbHgAVAg6kjkq87FcWj2+pfK6uG8XV+RurWYl2NZhw PceYm/clW7CD9tlz6xUbNF+IcNNW80VgQFIJt7cO+iHBx0gZTiYhzpLJBjI5vsza qYx89/DT8C7P+/8Moh6K4Pemfc1ooRPZFqBPchZWWZDeY/IS9dmL9sDzkqzcs1uM xROgCKdakQwkZWTJql8x4QlvgeFc1iJ2VWkfj8LrmPvclYMoYWQ78pjuRf5dUMvC tYHMRP6u0CQzvsj51TE5mG/tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH/FouERh 1ljcVAuaHx88oRzh9a8wHwYDVR0jBBgwFoAUb8ItMPMZzWXbXj9v/F0UHNAWaIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwOTE2LzA0MEI4N0JBMzY0 QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldYYlhqOXZfRjBVSE5BV2FJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjhJdE1QTVp6V1hiWGo5dl9GMFVITkFXYUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw OTE2LzA0MEI4N0JBMzY0QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldY YlhqOXZfRjBVSE5BV2FJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJVB2xEvGcv9wEpbCqYcYwWmkwGXxCg5toRmAD9RVseH4WoAAyrJl97D KTquj2eCjficX+9HDmCHCqoN8/f6+MBIwQ3jMyikl8H2e8LOKSfJjiV9M9qroTv1 w24bvxSanNxjtFMKj4qoqyhlXp4WVBFIKPe9NXMNN0untnOQI9uBTKaDPNUncUOm ZhOVfqdSN/Bl8mQlUjMZYSP8v+Tz2gfMr7txHf+5RiEwc7U/FTywZyQkuK34u8pp cDogaznNGA02rkw2olldkc3trkFIhy4e7RPk8t97tQJ6a+FIpXMdY+QXBOo7oBv4 +xrnPikcRttl+ZpcPlP6tu3Sjks6NgA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:43 2025 by rpki-client