$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft File: 8bt55W0rCYaSzH0fIm91bHlh4Zs.mft (raw, json) Hash identifier: liW/62pp9+93QF7aWdUVfWNc1kAPmtbR5Puew8SWLas= Subject key identifier: 28:EE:6B:8E:3A:F4:13:96:B4:FE:87:F9:4C:A8:5F:29:0A:55:70:BF Authority key identifier: F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B Certificate issuer: /CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft Manifest number: 07B5 Signing time: Tue 04 Nov 2025 21:28:07 +0000 Manifest this update: Tue 04 Nov 2025 21:28:06 +0000 Manifest next update: Tue 11 Nov 2025 21:28:06 +0000 Files and hashes: 1: 8bt55W0rCYaSzH0fIm91bHlh4Zs.crl (hash: UNShtL5O4h5XpIsv0y8Ur2XSXOohFZ6AwgzmSGieGaM=) 2: FD33BACA1E5211EBA055EE2BC4F9AE02.roa (hash: Dkqf9iSh4QQJs2mZkJEMgbT0BzwzhORuJVYaCkXmjeU=) 3: D39C89F8B85D11F08E813B1BC4F9AE02.roa (hash: CKukLwiY2YCCZ2/mXRrRk0YTk3jfh0JJwF1Hg6Cz4Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29A1, serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B Validity Not Before: Nov 4 21:28:06 2025 GMT Not After : Nov 11 21:28:06 2025 GMT Subject: CN=690a6fe6-2947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e8:42:c2:ed:6e:f8:4c:e4:73:5b:fd:ca:24: 0a:21:36:82:a4:1f:e9:b4:c5:f9:e4:7e:9f:88:ed: 25:33:6c:b5:86:1d:ab:95:f1:14:49:6e:8e:8b:09: 2b:fb:26:62:ca:a0:0c:ae:2f:29:5c:99:db:00:fe: 3d:02:0b:1a:cf:55:c8:26:50:5a:98:5b:a0:78:9c: 65:dc:1d:d9:2a:cb:b6:d7:26:18:11:c3:c8:16:41: 08:a0:93:4f:1b:44:0a:87:86:4e:8e:cd:fc:08:e4: f4:07:a0:de:16:e9:cb:26:6a:a6:c1:74:23:70:e8: 56:81:a3:4e:48:54:38:2c:96:58:30:72:5d:3c:7b: f2:c8:07:f2:96:81:80:ba:d9:59:77:9e:96:d7:aa: 71:39:f8:31:df:80:a6:bc:04:0a:96:28:bb:b4:fd: ed:01:11:4f:3f:fd:17:51:aa:99:eb:a4:8d:1a:97: be:71:2e:6b:91:92:bf:f5:de:76:9b:a1:3b:d4:e0: 20:52:79:ef:b5:4e:59:73:5f:f2:9b:b7:05:76:52: cd:34:e9:9d:0c:c4:54:c0:2a:f1:ed:b1:53:df:b9: 80:92:53:4a:82:9e:85:51:9c:42:fe:e4:c4:f6:46: 1e:e5:ab:ec:81:ef:90:bd:dc:00:64:19:5d:1a:4a: 50:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EE:6B:8E:3A:F4:13:96:B4:FE:87:F9:4C:A8:5F:29:0A:55:70:BF X509v3 Authority Key Identifier: keyid:F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:9b:8e:a2:74:c2:4a:95:dc:46:08:13:0d:15:4b:f0:af:8e: af:52:29:05:c3:7a:73:d5:8e:76:c4:d8:f7:48:fc:9c:7c:7a: 51:0d:01:c1:98:c7:fd:54:66:f3:cb:51:98:88:57:5c:dc:4a: 72:3f:a2:ce:fc:d2:cd:d7:af:5c:6b:97:26:39:5b:e7:ab:bf: 9f:50:9a:20:72:91:62:f4:8d:f7:62:69:97:ee:18:be:18:f5: 79:78:39:16:21:2e:a8:80:9a:9d:ab:ce:2b:6a:23:d7:68:c4: bc:3d:ca:70:08:b7:db:87:e1:e9:06:17:fb:28:39:0b:18:f2: bb:c1:97:de:1c:a0:49:64:1c:6b:c9:b4:af:8a:20:50:03:a0: 17:86:ce:5b:35:b7:70:a7:34:e7:37:86:fb:e3:99:1f:cb:d7: 8e:bb:66:0f:e5:3c:a1:29:cf:62:1f:36:b1:05:cc:2c:79:e2: 7e:e8:3b:c4:f0:19:00:a1:6e:ad:ce:9c:2c:77:66:d1:c3:15: ca:f9:a8:3f:4f:65:ae:c7:a8:fb:c6:f1:34:e1:d5:66:67:03: dc:97:b9:2c:ff:d2:09:a7:54:5d:c6:84:5a:c6:9a:1c:09:f3: ef:1e:ce:5d:e7:b5:d1:89:bf:9e:62:05:1e:a3:2a:94:9a:59: 1b:c7:8f:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5QTExMTAvBgNVBAUTKEYxQkI3OUU1NkQyQjA5ODY5MkNDN0QxRjIyNkY3NTZD Nzk2MUUxOUIwHhcNMjUxMTA0MjEyODA2WhcNMjUxMTExMjEyODA2WjAYMRYwFAYD VQQDEw02OTBhNmZlNi0yOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9OhCwu1u+Ezkc1v9yiQKITaCpB/ptMX55H6fiO0lM2y1hh2rlfEUSW6Oiwkr +yZiyqAMri8pXJnbAP49Agsaz1XIJlBamFugeJxl3B3ZKsu21yYYEcPIFkEIoJNP G0QKh4ZOjs38COT0B6DeFunLJmqmwXQjcOhWgaNOSFQ4LJZYMHJdPHvyyAfyloGA utlZd56W16pxOfgx34CmvAQKlii7tP3tARFPP/0XUaqZ66SNGpe+cS5rkZK/9d52 m6E71OAgUnnvtU5Zc1/ym7cFdlLNNOmdDMRUwCrx7bFT37mAklNKgp6FUZxC/uTE 9kYe5avsge+QvdwAZBldGkpQcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjua446 9BOWtP6H+UyoXykKVXC/MB8GA1UdIwQYMBaAFPG7eeVtKwmGksx9HyJvdWx5YeGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlBMS9GOEYwRUM5NjFF NTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZYVN6SDBmSW05MWJIbGg0 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhidDU1VzByQ1lhU3pIMGZJbTkxYkhsaDRacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlBMS9GOEYwRUM5NjFFNTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZ YVN6SDBmSW05MWJIbGg0WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHm46idMJKldxGCBMNFUvwr46vUikFw3pz1Y52xNj3SPycfHpRDQHB mMf9VGbzy1GYiFdc3EpyP6LO/NLN169ca5cmOVvnq7+fUJogcpFi9I33YmmX7hi+ GPV5eDkWIS6ogJqdq84raiPXaMS8PcpwCLfbh+HpBhf7KDkLGPK7wZfeHKBJZBxr ybSviiBQA6AXhs5bNbdwpzTnN4b745kfy9eOu2YP5TyhKc9iHzaxBcwseeJ+6DvE 8BkAoW6tzpwsd2bRwxXK+ag/T2Wux6j7xvE04dVmZwPcl7ks/9IJp1RdxoRaxpoc CfPvHs5d57XRib+eYgUeoyqUmlkbx4/V -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:42 2025 by rpki-client