$ rpki-client -vvf rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft File: b-8AlyoeLPhUsuqBXRBOPG72o6g.mft (raw, json) Hash identifier: d3f7un7lrMEqnEgdKz/CuKmlPKaB3wzIBKcD88OiRcE= Subject key identifier: F0:AC:A9:17:FA:B8:3D:6E:B4:EA:74:A8:A8:CD:A8:88:14:08:4C:AE Authority key identifier: 6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 Certificate issuer: /CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft Manifest number: 0504 Signing time: Tue 04 Nov 2025 23:43:40 +0000 Manifest this update: Tue 04 Nov 2025 23:43:40 +0000 Manifest next update: Tue 11 Nov 2025 23:43:40 +0000 Files and hashes: 1: b-8AlyoeLPhUsuqBXRBOPG72o6g.crl (hash: OIGSuMZJU/1PZpa8lwZqo7PJuYS8OmY0wzy6Loldg/8=) 2: 8E80453E23EF11EF8A1CE76FC4F9AE02.roa (hash: FfWhc8CE7AXjM2zJsOdKxO4u+IWsNBnU54fEgTxpN1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A836A, serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Validity Not Before: Nov 4 23:43:40 2025 GMT Not After : Nov 11 23:43:40 2025 GMT Subject: CN=690a8fac-2652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:89:f3:cb:46:b8:fb:c3:ae:79:e5:ac:27:aa: 65:6e:0a:59:d5:cc:b8:bd:7b:5a:64:3e:46:61:fc: aa:5a:80:23:f4:63:fa:bb:e2:99:24:c5:94:41:02: 3d:f8:95:4c:ad:5c:fa:02:3d:97:87:2c:a6:71:4f: 06:be:4d:df:c1:79:a6:02:41:d5:d9:3f:66:f8:c3: c6:09:6d:15:85:7f:88:e6:d2:e1:0d:6f:cd:df:50: 5c:60:fa:08:77:d7:fb:fe:a8:be:f7:01:cb:69:41: a3:8d:72:6f:91:f7:0b:ad:ec:61:bc:4b:64:c5:34: f9:de:33:b0:8f:2d:2c:0a:ba:b4:79:09:02:d6:a7: a4:54:0f:bd:e7:8f:3a:8b:23:b2:a9:72:52:77:18: 34:11:5d:ee:9f:6e:75:3e:bc:dd:e4:0f:15:dc:6e: c6:e2:81:2f:d3:1e:33:94:f2:d9:88:3b:c7:06:24: 10:91:bb:f6:1e:2f:bc:d1:9f:16:5c:aa:c5:55:f7: 7f:9a:6b:ed:da:c8:78:f0:92:5f:a6:f8:cb:5e:50: 53:da:bc:84:87:c2:dd:94:a7:dc:08:96:93:cd:fc: 4c:90:d3:34:32:98:37:86:3f:66:c8:ce:b0:2c:46: 8a:66:14:8d:2f:b4:7f:ee:e7:ac:40:2a:25:fa:18: d2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AC:A9:17:FA:B8:3D:6E:B4:EA:74:A8:A8:CD:A8:88:14:08:4C:AE X509v3 Authority Key Identifier: keyid:6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:85:a4:88:b3:f8:d3:c1:8f:40:e5:19:b1:ab:3a:b7:d5:f5: 7b:c5:b7:f9:84:2a:c9:38:3a:5c:e5:c9:4d:45:d2:b9:95:ea: 4c:1a:ea:49:65:b8:5a:af:ec:6a:9c:0c:da:a6:4e:8a:72:6a: ae:2c:e1:0d:7b:96:74:5f:3b:19:c3:b5:d1:a9:c3:1c:a6:48: a4:2f:cd:e6:2f:9d:79:68:4b:9f:1a:8d:50:92:48:b3:06:7a: da:c6:93:9e:8f:29:4c:18:57:e8:eb:21:fc:e0:13:de:ad:3b: 94:d5:d6:9a:64:7d:05:8e:38:f4:ba:db:76:90:d5:48:40:73: d3:1a:6e:ff:db:b8:b3:04:f7:95:4d:f1:45:e0:a2:92:67:0b: 35:23:2e:c1:38:f4:5f:77:d7:5c:b3:e5:23:cb:ae:8e:32:93: 98:d0:2f:97:3a:5a:e2:f0:ef:d9:f2:6b:c5:46:2e:02:88:1f: be:98:bf:17:3d:88:fb:d9:da:0d:ba:f9:f8:e9:8c:2f:60:db: d1:ed:22:0a:c0:a0:e4:ae:38:42:9a:2a:a9:4c:a3:c5:d2:81: d0:1b:1a:a2:30:7a:d2:84:1a:1a:5b:5a:38:fd:1c:11:25:d3: 99:29:8f:52:67:70:38:f6:1c:07:fe:ca:8c:a9:35:89:2a:51: f3:2b:b9:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzNkExMTAvBgNVBAUTKDZGRUYwMDk3MkExRTJDRjg1NEIyRUE4MTVEMTA0RTND NkVGNkEzQTgwHhcNMjUxMTA0MjM0MzQwWhcNMjUxMTExMjM0MzQwWjAYMRYwFAYD VQQDEw02OTBhOGZhYy0yNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4nzy0a4+8OueeWsJ6plbgpZ1cy4vXtaZD5GYfyqWoAj9GP6u+KZJMWUQQI9 +JVMrVz6Aj2XhyymcU8Gvk3fwXmmAkHV2T9m+MPGCW0VhX+I5tLhDW/N31BcYPoI d9f7/qi+9wHLaUGjjXJvkfcLrexhvEtkxTT53jOwjy0sCrq0eQkC1qekVA+95486 iyOyqXJSdxg0EV3un251Przd5A8V3G7G4oEv0x4zlPLZiDvHBiQQkbv2Hi+80Z8W XKrFVfd/mmvt2sh48JJfpvjLXlBT2ryEh8LdlKfcCJaTzfxMkNM0Mpg3hj9myM6w LEaKZhSNL7R/7uesQCol+hjSOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCsqRf6 uD1utOp0qKjNqIgUCEyuMB8GA1UdIwQYMBaAFG/vAJcqHiz4VLLqgV0QTjxu9qOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODM2QS9DMUY0QUI3QzJG MzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQaFVzdXFCWFJCT1BHNzJv NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ItOEFseW9lTFBoVXN1cUJYUkJPUEc3Mm82Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODM2QS9DMUY0QUI3QzJGMzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQ aFVzdXFCWFJCT1BHNzJvNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHhaSIs/jTwY9A5Rmxqzq31fV7xbf5hCrJODpc5clNRdK5lepMGupJ Zbhar+xqnAzapk6KcmquLOENe5Z0XzsZw7XRqcMcpkikL83mL515aEufGo1Qkkiz BnraxpOejylMGFfo6yH84BPerTuU1daaZH0Fjjj0utt2kNVIQHPTGm7/27izBPeV TfFF4KKSZws1Iy7BOPRfd9dcs+Ujy66OMpOY0C+XOlri8O/Z8mvFRi4CiB++mL8X PYj72doNuvn46YwvYNvR7SIKwKDkrjhCmiqpTKPF0oHQGxqiMHrShBoaW1o4/RwR JdOZKY9SZ3A49hwH/sqMqTWJKlHzK7kr -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:21 2025 by rpki-client