$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json) Hash identifier: jWs2U6tNZAL8QiXjdplmFOLcEUAXglKKkT53RIVy7pQ= Subject key identifier: 5B:06:71:7F:03:32:D9:38:6E:A7:0D:9E:73:33:85:44:31:5A:BB:03 Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft Manifest number: 0510 Signing time: Wed 05 Nov 2025 00:33:28 +0000 Manifest this update: Wed 05 Nov 2025 00:33:28 +0000 Manifest next update: Wed 12 Nov 2025 00:33:28 +0000 Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: J8SCqLUmYdt509WNf3XFENLfLExeqtumWmlT43YFMjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Validity Not Before: Nov 5 00:33:28 2025 GMT Not After : Nov 12 00:33:28 2025 GMT Subject: CN=690a9b58-e30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3e:b1:29:75:f1:6b:5b:25:2e:44:e1:7c:10: 34:26:d4:19:17:01:e1:81:e5:e7:13:36:2d:09:2d: 28:d1:97:4e:ad:fe:84:73:0d:de:9c:28:a5:a3:78: d7:2a:b5:9c:f0:02:23:68:64:27:d8:48:0b:c8:07: 5b:05:98:7c:d0:98:ab:e8:82:33:7b:d0:d6:4b:9b: 24:e8:7b:6e:51:45:d9:d3:87:e3:a7:6d:1d:5a:76: e3:46:da:c9:9d:89:fc:98:24:12:63:a1:55:72:1b: 18:0a:fd:4a:44:84:59:9b:7d:b7:90:1c:c6:8c:ce: 5e:0d:f4:8c:79:d0:d5:af:f7:1c:3b:4c:ca:89:3c: 67:eb:90:36:2c:2b:ba:7f:84:8f:6c:cc:49:53:f0: 9e:48:91:76:41:f8:1e:f0:e5:71:02:05:78:87:ed: 20:75:62:f7:94:53:83:03:f4:2c:16:69:0c:d7:4a: 74:48:bd:1d:1d:50:5f:1e:32:ad:d9:15:fb:2c:72: 25:01:3f:b2:e8:4e:72:05:bb:ab:f6:4d:42:fd:15: dc:5c:9d:b3:6d:82:79:70:b6:60:4f:01:6e:a8:7c: c7:44:ce:88:fa:05:eb:0a:46:6f:7b:5b:6b:2b:b1: 87:6d:9b:ee:36:e8:f9:f5:81:ce:d7:ca:87:1d:d9: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:06:71:7F:03:32:D9:38:6E:A7:0D:9E:73:33:85:44:31:5A:BB:03 X509v3 Authority Key Identifier: keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1b:bb:c7:da:e7:b4:ad:62:d6:39:67:fd:ad:ab:65:9f:67: ca:56:a3:e8:72:b1:f3:5f:78:bc:35:1b:22:f2:4a:67:5d:5c: 5e:b9:fb:e3:b3:0a:c4:5f:13:7f:88:1d:a3:d4:cd:a1:e2:8b: cc:36:ef:36:10:f4:69:5c:bd:37:f3:b9:2d:70:bd:49:8b:f3: 8f:57:c9:63:e1:88:01:38:36:15:1e:91:85:83:ee:b1:ed:3e: b1:a0:4c:94:1a:e0:ed:08:cf:14:3d:63:4f:9d:79:12:99:54: d4:f5:9b:af:cd:f4:7a:98:d3:ad:d7:b4:6e:96:4f:d0:41:02: f5:0d:ec:a7:bc:f8:50:41:82:f4:44:2c:e6:d0:f0:99:0f:7a: b5:0b:dd:8f:7c:dd:3a:6e:c4:cf:e2:4d:21:b6:45:9f:18:ec: 83:58:3c:50:49:11:14:c1:7c:f4:18:0f:ef:ec:f2:9f:95:16: 0d:ba:1b:7c:40:8d:21:aa:63:1e:04:36:c3:c8:ab:2f:ca:65: 36:34:1e:10:0e:a6:25:1b:ee:ae:6a:f9:5b:21:1c:9a:79:19: d7:cc:4f:18:68:59:b3:29:b1:9a:a0:a4:e9:76:26:3c:2a:e8: b3:2d:a7:ef:27:3b:b7:d4:da:1c:41:b7:bb:8e:f3:41:73:bf: b7:e2:2e:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw NTBGRDFENDYwHhcNMjUxMTA1MDAzMzI4WhcNMjUxMTEyMDAzMzI4WjAYMRYwFAYD VQQDEw02OTBhOWI1OC1lMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnz6xKXXxa1slLkThfBA0JtQZFwHhgeXnEzYtCS0o0ZdOrf6Ecw3enCilo3jX KrWc8AIjaGQn2EgLyAdbBZh80Jir6IIze9DWS5sk6HtuUUXZ04fjp20dWnbjRtrJ nYn8mCQSY6FVchsYCv1KRIRZm323kBzGjM5eDfSMedDVr/ccO0zKiTxn65A2LCu6 f4SPbMxJU/CeSJF2Qfge8OVxAgV4h+0gdWL3lFODA/QsFmkM10p0SL0dHVBfHjKt 2RX7LHIlAT+y6E5yBbur9k1C/RXcXJ2zbYJ5cLZgTwFuqHzHRM6I+gXrCkZve1tr K7GHbZvuNuj59YHO18qHHdlkZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsGcX8D Mtk4bqcNnnMzhUQxWrsDMB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF MGM2MTA1bWxBYllGRDlIVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuG7vH2ue0rWLWOWf9ratln2fKVqPocrHzX3i8NRsi8kpnXVxeufvj swrEXxN/iB2j1M2h4ovMNu82EPRpXL0387ktcL1Ji/OPV8lj4YgBODYVHpGFg+6x 7T6xoEyUGuDtCM8UPWNPnXkSmVTU9ZuvzfR6mNOt17Rulk/QQQL1DeynvPhQQYL0 RCzm0PCZD3q1C92PfN06bsTP4k0htkWfGOyDWDxQSREUwXz0GA/v7PKflRYNuht8 QI0hqmMeBDbDyKsvymU2NB4QDqYlG+6uavlbIRyaeRnXzE8YaFmzKbGaoKTpdiY8 KuizLafvJzu31NocQbe7jvNBc7+34i4k -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:32 2025 by rpki-client