$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: HLn80tfRxP5cxuzwEwSrWZ96nKtQPEJEPbNTtlUoj90= Subject key identifier: 88:06:D8:14:A6:51:75:FF:09:23:83:07:3A:6F:0F:07:42:FE:0D:D2 Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: B5 Signing time: Mon 03 Nov 2025 06:21:59 +0000 Manifest this update: Mon 03 Nov 2025 06:21:59 +0000 Manifest next update: Mon 10 Nov 2025 06:21:59 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: ujedHVyHEFt8tfgKJS4esi86J/Ar+ErXrdzwet+fAWg=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: Vl4anvJxGj00QWX5m+Dlfx86DkUFERQcopj8hiwYg24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Nov 3 06:21:59 2025 GMT Not After : Nov 10 06:21:59 2025 GMT Subject: CN=69084a07-a70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:e7:82:09:10:5b:d9:5f:f6:3e:ed:d8:4e: 6d:53:67:16:09:d4:2c:ef:cf:04:ea:c8:db:8c:f6: 87:6f:e4:88:3e:d7:ba:0a:33:4d:61:a4:1e:fa:1d: 89:dd:9d:5a:96:31:3a:3d:87:75:2c:96:9b:c3:30: aa:2c:44:53:d8:99:53:66:3e:34:85:94:20:d1:dc: b6:67:93:24:66:43:9c:30:37:24:37:84:b0:66:4b: 3d:87:7d:c7:db:c7:52:f5:10:95:dc:df:20:fe:07: 23:fe:07:8e:23:f2:ca:7d:f3:61:14:0b:57:8d:5b: 92:b1:ec:7e:eb:d0:ae:49:6a:bd:02:18:51:60:06: 1f:be:a1:1c:10:e8:1c:4a:8a:c9:1d:30:ec:85:95: a5:b8:0b:70:1a:a9:55:d6:9b:11:1c:7e:6c:1e:39: d3:0c:5d:4f:c7:f7:62:e5:fb:83:6f:46:b8:9e:1a: 35:68:5e:7f:a0:6d:b5:f6:63:1b:b3:d8:10:2d:40: 41:b3:77:85:5c:61:8a:c2:65:67:40:13:3b:08:83: 36:41:42:d7:85:10:55:87:23:a1:43:07:3e:c7:99: cd:b0:41:aa:8a:f5:8b:d4:2c:2d:9f:3c:f3:69:e3: ca:61:c1:33:ef:35:41:46:9e:e2:18:fc:74:fc:e7: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:06:D8:14:A6:51:75:FF:09:23:83:07:3A:6F:0F:07:42:FE:0D:D2 X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:98:86:58:88:ac:65:d9:51:47:82:2c:40:c4:8e:60:0b:6f: 94:40:a6:63:47:8e:07:8b:27:0b:5c:31:78:6d:41:c2:e8:ce: 83:0a:bc:ee:96:06:98:02:f2:7d:db:cf:71:14:ef:91:d5:cd: df:e6:9e:1d:2c:36:f6:dd:5b:2f:1b:87:78:6f:b4:14:63:2e: 84:92:bd:1c:ec:b4:d3:d3:25:a3:a9:46:30:4f:4d:f5:22:79: 79:b9:1e:c4:d0:87:20:af:e2:d5:0a:8c:ab:25:b8:48:f6:d5: fc:a4:16:b3:69:95:2c:a4:e5:13:50:6c:f2:77:b9:1f:47:33: 10:f2:15:fb:0f:36:a1:9c:e0:c5:02:78:91:5e:cf:6b:7d:d4: 8b:f8:9b:d4:94:3b:d1:01:01:ac:9c:2a:7c:a1:fb:2d:99:6d: 12:0d:1a:58:e2:23:ca:c8:be:92:d9:56:fd:bb:1e:35:57:8f: 45:63:3a:3d:ed:e7:28:03:9f:7d:9b:6b:88:98:c6:5a:56:1e: 3c:0e:ca:f0:60:c5:3b:ed:06:90:6a:4c:1b:87:49:cc:fa:55: e0:25:37:70:ad:d1:72:96:9a:4f:34:b7:aa:ad:5a:ae:bf:ce: ef:ba:a5:1b:74:75:f1:68:0e:0b:c5:d3:86:3e:19:42:35:5f: 05:02:cb:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKEYwNDkyOUVGNzQzQzU0QzA4QjQ1RTE5Q0ZDNTFCRjJB QTU1OURBQTEwHhcNMjUxMTAzMDYyMTU5WhcNMjUxMTEwMDYyMTU5WjAYMRYwFAYD VQQDEw02OTA4NGEwNy1hNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4eHnggkQW9lf9j7t2E5tU2cWCdQs788E6sjbjPaHb+SIPte6CjNNYaQe+h2J 3Z1aljE6PYd1LJabwzCqLERT2JlTZj40hZQg0dy2Z5MkZkOcMDckN4SwZks9h33H 28dS9RCV3N8g/gcj/geOI/LKffNhFAtXjVuSsex+69CuSWq9AhhRYAYfvqEcEOgc SorJHTDshZWluAtwGqlV1psRHH5sHjnTDF1Px/di5fuDb0a4nho1aF5/oG219mMb s9gQLUBBs3eFXGGKwmVnQBM7CIM2QULXhRBVhyOhQwc+x5nNsEGqivWL1Cwtnzzz aePKYcEz7zVBRp7iGPx0/Oed4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgG2BSm UXX/CSODBzpvDwdC/g3SMB8GA1UdIwQYMBaAFPBJKe90PFTAi0XhnPxRvyqlWdqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84QzIxNDk3NEE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZNQ0xSZUdjX0ZHX0txVloy cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84QzIxNDk3NEE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZN Q0xSZUdjX0ZHX0txVloycUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9mIZYiKxl2VFHgixAxI5gC2+UQKZjR44HiycLXDF4bUHC6M6DCrzu lgaYAvJ9289xFO+R1c3f5p4dLDb23VsvG4d4b7QUYy6Ekr0c7LTT0yWjqUYwT031 Inl5uR7E0Icgr+LVCoyrJbhI9tX8pBazaZUspOUTUGzyd7kfRzMQ8hX7DzahnODF AniRXs9rfdSL+JvUlDvRAQGsnCp8ofstmW0SDRpY4iPKyL6S2Vb9ux41V49FYzo9 7ecoA599m2uImMZaVh48DsrwYMU77QaQakwbh0nM+lXgJTdwrdFylppPNLeqrVqu v87vuqUbdHXxaA4LxdOGPhlCNV8FAss+ -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:40 2025 by rpki-client