$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: mAfKdi0ERs/0wIgOR2qj+MeRw7nt4XPIPCtnwgVP7qM= Subject key identifier: 2F:41:AD:AD:62:41:56:24:E3:D0:9E:2A:BA:AC:24:50:B2:F9:9A:37 Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0BBA Signing time: Tue 04 Nov 2025 19:01:40 +0000 Manifest this update: Tue 04 Nov 2025 19:01:40 +0000 Manifest next update: Tue 11 Nov 2025 19:01:40 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: Z3LbNi9t4A2bbWvlB/k1AdfZbVknh3NvPDGtlITIT+Y=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: bGuYSNzp5mZo+7E7IQsquXftEwJF3nV1lzs2MqWhd58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Nov 4 19:01:40 2025 GMT Not After : Nov 11 19:01:40 2025 GMT Subject: CN=690a4d94-976b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:99:a4:ed:71:72:cf:b0:2f:78:e2:7f:fa: 7c:8e:49:67:fc:89:23:4f:d6:2b:69:b4:c3:47:a6: 93:a3:c0:d5:96:c9:cf:14:18:8d:21:18:7e:ae:1d: 8f:d3:7d:75:ac:b4:74:95:fa:2b:79:01:70:cd:90: 3b:93:4f:03:f2:28:2c:d9:47:0e:d0:96:f2:c6:dd: dd:41:3f:17:45:1d:f3:46:78:89:4f:52:7e:f9:8e: 5c:63:f8:3d:ec:74:32:42:05:6d:81:41:48:82:4b: cd:0a:98:4e:de:9a:ac:d7:3c:3e:b6:22:b5:19:4d: 23:bf:56:84:b8:67:d3:97:6b:78:00:d7:94:2e:dc: dd:86:10:69:75:a8:62:8a:96:62:6c:9f:45:a4:c8: fd:b5:e8:b8:10:e4:72:12:04:97:a1:32:8d:00:3e: 7c:ca:d1:b3:86:5e:09:aa:db:a2:61:67:92:93:62: 8f:8b:cd:2a:e1:66:fd:b3:36:72:91:be:60:10:8a: 62:7e:c5:ac:0c:ef:79:54:40:6f:92:6f:d6:7f:b2: d1:b6:f6:26:a1:89:bb:93:43:a1:a6:22:8b:20:1c: 19:4a:18:5f:26:8f:2a:40:08:2c:d2:bb:62:ab:ef: 75:ab:27:54:55:45:10:6b:3b:17:96:ab:73:0b:d1: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:41:AD:AD:62:41:56:24:E3:D0:9E:2A:BA:AC:24:50:B2:F9:9A:37 X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6c:2d:73:c8:0b:4d:c3:aa:65:d0:e3:e1:e0:a4:be:70:58: 1c:0c:0b:33:1a:14:bf:28:37:c5:f9:76:22:e8:78:6a:b6:27: 94:7c:04:ec:e2:ff:ba:8f:49:e1:aa:de:1a:b6:a5:73:d7:80: be:75:14:70:8e:4d:5a:18:97:3e:e4:8b:ac:e2:56:ca:84:6d: 46:9b:fb:23:46:7e:f3:a1:f0:df:73:15:fa:61:f3:95:50:c1: 06:4e:44:c6:de:ce:f9:c9:94:8f:9c:41:f7:46:c8:51:0f:55: c9:24:63:e3:1f:71:0c:80:3a:69:3b:1b:e8:cd:b8:d8:c7:c2: 75:c9:1f:a9:1c:e2:87:58:0d:e8:42:73:2a:29:49:79:be:c3: d0:a0:82:d1:86:ec:7a:f6:bf:13:bd:4f:02:63:c3:b2:51:f7: f1:24:97:a6:e1:51:56:3c:00:ff:23:a0:3f:c7:72:9f:3d:53: 57:43:97:66:37:63:82:e9:78:ef:fb:78:f4:a1:31:b6:cc:75: 07:2c:e1:22:d7:68:01:5d:73:7f:f3:65:f6:37:50:f0:93:f8: a3:ce:5e:53:83:69:db:f1:31:db:31:e9:c6:03:ff:8d:12:7a: ec:2a:24:5e:8b:d4:d3:c0:35:f9:fc:ca:0f:28:f5:4d:78:ea: 37:ee:63:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjUxMTA0MTkwMTQwWhcNMjUxMTExMTkwMTQwWjAYMRYwFAYD VQQDEw02OTBhNGQ5NC05NzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRuZpO1xcs+wL3jif/p8jkln/IkjT9YrabTDR6aTo8DVlsnPFBiNIRh+rh2P 0311rLR0lforeQFwzZA7k08D8igs2UcO0Jbyxt3dQT8XRR3zRniJT1J++Y5cY/g9 7HQyQgVtgUFIgkvNCphO3pqs1zw+tiK1GU0jv1aEuGfTl2t4ANeULtzdhhBpdahi ipZibJ9FpMj9tei4EORyEgSXoTKNAD58ytGzhl4JqtuiYWeSk2KPi80q4Wb9szZy kb5gEIpifsWsDO95VEBvkm/Wf7LRtvYmoYm7k0OhpiKLIBwZShhfJo8qQAgs0rti q+91qydUVUUQazsXlqtzC9FzEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9Bra1i QVYk49CeKrqsJFCy+Zo3MB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcbC1zyAtNw6pl0OPh4KS+cFgcDAszGhS/KDfF+XYi6HhqtieUfATs 4v+6j0nhqt4atqVz14C+dRRwjk1aGJc+5Ius4lbKhG1Gm/sjRn7zofDfcxX6YfOV UMEGTkTG3s75yZSPnEH3RshRD1XJJGPjH3EMgDppOxvozbjYx8J1yR+pHOKHWA3o QnMqKUl5vsPQoILRhux69r8TvU8CY8OyUffxJJem4VFWPAD/I6A/x3KfPVNXQ5dm N2OC6Xjv+3j0oTG2zHUHLOEi12gBXXN/82X2N1Dwk/ijzl5Tg2nb8THbMenGA/+N EnrsKiRei9TTwDX5/MoPKPVNeOo37mO7 -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:20 2025 by rpki-client