$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft File: 80xSFZH7LNAtxnvdctzyiwekL_Y.mft (raw, json) Hash identifier: 9HkWn8U3FVgIAPr7wftvrhy4om9fmp1oMwGOKIUiedM= Subject key identifier: DA:E4:E7:F8:0A:CD:85:35:8F:C6:9C:3E:23:E8:85:54:5F:2F:11:DE Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6 Certificate issuer: /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft Manifest number: 2B Signing time: Mon 03 Nov 2025 07:39:37 +0000 Manifest this update: Mon 03 Nov 2025 07:39:36 +0000 Manifest next update: Mon 10 Nov 2025 07:39:36 +0000 Files and hashes: 1: 80xSFZH7LNAtxnvdctzyiwekL_Y.crl (hash: MhZ3vdpa3VIYr4XumzB7vfpcL68T+kOhMhc4gmqvwvs=) 2: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (hash: 6XTjIZuui64Zt7h8q158hY/yPZ00zRaoK7PVf/jp3D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6 Validity Not Before: Nov 3 07:39:36 2025 GMT Not After : Nov 10 07:39:36 2025 GMT Subject: CN=69085c39-0c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:73:f9:61:c8:28:62:1d:08:03:a2:59:7f: a1:cd:a2:af:50:33:a2:31:62:1b:3b:9a:78:e9:46: be:84:e1:a5:d8:bf:2f:a2:c2:6a:5e:bd:31:fa:66: 39:cd:39:05:3b:e8:54:8c:fb:1a:22:52:53:1a:11: 2c:5c:72:a4:ed:ee:c3:6c:fe:03:02:03:c7:e5:b0: 41:53:61:24:90:52:db:f3:d2:ce:d3:f0:97:e6:48: ec:cc:c8:8d:43:2f:52:4e:a0:81:a3:7e:9c:d8:3e: bc:04:0c:40:5a:ce:20:48:7c:a6:bf:05:82:d9:d9: 8a:02:ac:ef:2e:93:4b:11:44:b7:1d:c6:b1:18:e7: 15:16:f5:92:23:4c:e1:12:24:63:04:f8:4f:1c:90: 6d:69:ba:a8:6e:21:ac:33:9f:64:cf:90:b9:47:6b: 43:e8:ec:a6:8b:9e:ef:d6:a6:31:28:6e:53:ab:3d: 6f:1b:02:7d:9a:4d:1e:55:5a:c3:a8:08:74:b7:a3: e6:4f:0f:71:9a:e8:a8:3b:94:1d:90:fe:40:65:6d: 30:64:7c:74:a9:25:80:a3:59:11:d7:2b:95:48:d6: 12:93:27:e3:5e:aa:57:fe:d7:d1:3d:7a:fa:d7:7e: 0b:fa:d2:7e:c9:f0:a7:a6:29:b6:dc:66:80:71:75: aa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E4:E7:F8:0A:CD:85:35:8F:C6:9C:3E:23:E8:85:54:5F:2F:11:DE X509v3 Authority Key Identifier: keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3a:af:22:f6:e2:6b:cb:39:93:b1:da:12:3f:ad:68:e6:d0: 2b:c1:48:77:b6:57:ad:08:d3:00:73:1d:68:bd:b6:38:0c:4f: 98:2b:cf:73:9d:95:45:42:2b:1c:8f:c8:b7:04:ca:06:4d:79: c1:28:70:d3:e0:12:e4:9d:74:3a:90:df:85:71:71:42:c2:7f: a7:62:43:10:69:13:47:f2:eb:16:f3:59:7e:22:24:e1:0a:3f: 73:5b:74:e0:6a:d7:a4:a6:1c:77:8d:e1:36:e3:40:a9:30:34: e8:88:84:73:89:a8:1c:91:e0:8c:90:e9:89:5a:10:0d:ea:ef: a1:ef:db:e9:25:a8:a9:fc:d5:78:ee:22:73:24:9e:9a:80:76: 04:4f:38:72:88:c1:f9:a6:d1:9c:c5:34:e0:9d:d2:d5:4c:eb: 1f:df:11:1b:38:f5:a5:ba:91:9c:7d:76:a1:6c:d6:74:50:c7: 8d:ca:a8:5f:df:fc:c1:9c:7e:7d:d6:1b:75:a6:07:de:c5:ca: 37:8f:4a:c3:ca:80:ec:95:40:f6:0f:a2:49:81:34:55:8d:19: 4a:87:bd:f6:92:b6:46:0d:ca:ec:8b:7f:78:c5:30:ce:09:65: 71:99:de:09:45:fe:22:d9:f6:70:a0:88:03:8b:6d:8b:98:75: 4b:b4:bf:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OENFMTExMC8GA1UEBRMoRjM0QzUyMTU5MUZCMkNEMDJEQzY3QkRENzJEQ0YyOEIw N0E0MkZGNjAeFw0yNTExMDMwNzM5MzZaFw0yNTExMTAwNzM5MzZaMBgxFjAUBgNV BAMTDTY5MDg1YzM5LTBjMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0UnP5YcgoYh0IA6JZf6HNoq9QM6IxYhs7mnjpRr6E4aXYvy+iwmpevTH6ZjnN OQU76FSM+xoiUlMaESxccqTt7sNs/gMCA8flsEFTYSSQUtvz0s7T8JfmSOzMyI1D L1JOoIGjfpzYPrwEDEBaziBIfKa/BYLZ2YoCrO8uk0sRRLcdxrEY5xUW9ZIjTOES JGME+E8ckG1puqhuIawzn2TPkLlHa0Po7KaLnu/WpjEoblOrPW8bAn2aTR5VWsOo CHS3o+ZPD3Ga6Kg7lB2Q/kBlbTBkfHSpJYCjWRHXK5VI1hKTJ+Neqlf+19E9evrX fgv60n7J8KemKbbcZoBxdaonAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2uTn+ArN hTWPxpw+I+iFVF8vEd4wHwYDVR0jBBgwFoAU80xSFZH7LNAtxnvdctzyiwekL/Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4Q0UxLzY3OTBCRTVDNzdD RTExRjBCNTU3NDA0Q0M0RjlBRTAyLzgweFNGWkg3TE5BdHhudmRjdHp5aXdla0xf WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODB4U0ZaSDdMTkF0eG52ZGN0enlpd2VrTF9ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 Q0UxLzY3OTBCRTVDNzdDRTExRjBCNTU3NDA0Q0M0RjlBRTAyLzgweFNGWkg3TE5B dHhudmRjdHp5aXdla0xfWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFo6ryL24mvLOZOx2hI/rWjm0CvBSHe2V60I0wBzHWi9tjgMT5grz3Od lUVCKxyPyLcEygZNecEocNPgEuSddDqQ34VxcULCf6diQxBpE0fy6xbzWX4iJOEK P3NbdOBq16SmHHeN4TbjQKkwNOiIhHOJqByR4IyQ6YlaEA3q76Hv2+klqKn81Xju InMknpqAdgRPOHKIwfmm0ZzFNOCd0tVM6x/fERs49aW6kZx9dqFs1nRQx43KqF/f /MGcfn3WG3WmB97FyjePSsPKgOyVQPYPokmBNFWNGUqHvfaStkYNyuyLf3jFMM4J ZXGZ3glF/iLZ9nCgiAOLbYuYdUu0vyI= -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:25 2025 by rpki-client