$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: 1/iv3TIGGgc4dgJvyAex2anJImZwt2hFAh8sKERS2f8= Subject key identifier: CB:78:D3:E3:B5:F6:7A:27:7B:03:35:A5:0D:8F:91:BF:4A:DD:79:5A Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 0701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 06FC Signing time: Tue 04 Nov 2025 22:01:30 +0000 Manifest this update: Tue 04 Nov 2025 22:01:29 +0000 Manifest next update: Tue 11 Nov 2025 22:01:29 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: 9qvLkmtMLGElAY4tGgb7IBbGMGwbLY4Rlv+eqxGqLgM=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Nov 4 22:01:29 2025 GMT Not After : Nov 11 22:01:29 2025 GMT Subject: CN=690a77ba-a933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:7b:7e:fb:4b:c3:6b:d7:b7:fe:b6:d2:39: c8:a5:71:a8:d6:cd:fe:55:da:e4:85:8d:53:38:a1: 55:1c:01:9d:59:3c:2a:89:4b:7f:7c:5d:bb:71:b3: c8:86:71:87:02:e3:7f:c2:26:7a:01:63:29:27:73: 46:15:93:9d:ab:ae:12:1b:54:7e:59:cd:02:83:96: ab:28:b8:5f:c7:a3:02:56:7a:a9:19:a4:65:b9:11: e6:20:36:6b:9d:f3:0e:d9:02:b9:4e:f9:a6:6d:76: ff:fe:ef:88:d6:7a:0c:f8:88:da:4e:8e:53:57:81: ce:bc:9a:cd:7a:06:96:53:76:92:f0:38:e6:8d:49: 2a:39:e2:8c:1e:e8:db:5a:4b:34:a5:5f:5d:31:1d: 4d:9b:e8:52:03:18:26:a7:5c:5e:6c:cb:25:07:3b: e6:86:d9:a9:fe:fa:35:ec:79:6c:b3:ba:fa:4d:58: fa:8e:58:95:3e:ba:60:82:74:5e:82:8a:6e:4a:92: f6:52:39:9b:e8:f2:bd:9d:0c:a6:e2:48:fb:b0:df: 81:51:88:c9:13:48:46:3a:9a:0e:bb:d4:17:32:dc: 7c:5f:8a:48:c8:d9:82:e8:22:c1:4e:70:09:74:9d: 50:e9:1d:dd:59:a5:6c:68:f9:9b:64:34:11:fe:73: 2e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:78:D3:E3:B5:F6:7A:27:7B:03:35:A5:0D:8F:91:BF:4A:DD:79:5A X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:06:70:0b:27:8e:8d:ff:04:b9:21:bf:42:5f:f4:b3:cf:cb: 0e:31:10:8f:06:c1:aa:31:1e:8f:b0:42:84:72:14:5d:e5:87: 12:20:6e:42:10:21:15:a1:3b:f8:4b:fe:b0:0f:8a:07:34:0c: 9b:59:ae:f4:62:19:4a:dd:9f:82:c5:5d:da:cf:6f:29:a8:f3: 53:d9:6f:4d:b4:4a:2e:45:bd:db:eb:24:a4:e3:99:56:bc:b7: 32:79:d0:49:2a:5a:04:7a:f0:9f:95:64:36:bc:c2:09:71:3d: 80:41:3e:26:a0:37:07:54:b8:e9:48:82:3b:b6:97:c8:83:92: e2:f9:15:e6:da:72:e2:c2:78:5e:66:34:e3:99:04:33:ca:db: 02:22:22:13:a3:0c:ba:84:4a:46:9b:5b:4a:d9:05:13:43:98: 0b:09:82:d8:e8:41:86:a2:d4:a9:ef:89:a6:17:5f:6e:ce:0a: 20:f2:19:40:c3:46:ed:3b:57:18:de:97:30:60:04:eb:d6:41: 4b:ba:87:d4:31:40:78:7f:dc:ce:d1:fc:3d:4d:0a:27:21:11: 5a:23:cc:ca:b7:57:a1:11:69:c4:57:2b:fe:4a:e0:57:15:5f: 09:09:92:b1:d8:a0:da:c0:de:57:f4:b3:c2:a2:84:20:fd:b4: 69:01:31:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjUxMTA0MjIwMTI5WhcNMjUxMTExMjIwMTI5WjAYMRYwFAYD VQQDEw02OTBhNzdiYS1hOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl97fvtLw2vXt/620jnIpXGo1s3+VdrkhY1TOKFVHAGdWTwqiUt/fF27cbPI hnGHAuN/wiZ6AWMpJ3NGFZOdq64SG1R+Wc0Cg5arKLhfx6MCVnqpGaRluRHmIDZr nfMO2QK5TvmmbXb//u+I1noM+IjaTo5TV4HOvJrNegaWU3aS8DjmjUkqOeKMHujb Wks0pV9dMR1Nm+hSAxgmp1xebMslBzvmhtmp/vo17Hlss7r6TVj6jliVPrpggnRe gopuSpL2Ujmb6PK9nQym4kj7sN+BUYjJE0hGOpoOu9QXMtx8X4pIyNmC6CLBTnAJ dJ1Q6R3dWaVsaPmbZDQR/nMuEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMt40+O1 9nonewM1pQ2Pkb9K3XlaMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUBnALJ46N/wS5Ib9CX/Szz8sOMRCPBsGqMR6PsEKEchRd5YcSIG5C ECEVoTv4S/6wD4oHNAybWa70YhlK3Z+CxV3az28pqPNT2W9NtEouRb3b6ySk45lW vLcyedBJKloEevCflWQ2vMIJcT2AQT4moDcHVLjpSII7tpfIg5Li+RXm2nLiwnhe ZjTjmQQzytsCIiITowy6hEpGm1tK2QUTQ5gLCYLY6EGGotSp74mmF19uzgog8hlA w0btO1cY3pcwYATr1kFLuofUMUB4f9zO0fw9TQonIRFaI8zKt1ehEWnEVyv+SuBX FV8JCZKx2KDawN5X9LPCooQg/bRpATHg -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:34 2025 by rpki-client