$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: Isrojljz6o9mYvOI62op7DF76fzSRVaMjY/Ep2mR2jk= Subject key identifier: A3:C5:83:35:2E:30:AF:7D:32:F7:0C:74:84:6F:DF:14:2A:CC:5F:15 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 08BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 08B9 Signing time: Tue 04 Nov 2025 20:33:45 +0000 Manifest this update: Tue 04 Nov 2025 20:33:44 +0000 Manifest next update: Tue 11 Nov 2025 20:33:44 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: QP5WqCUIWKY/XCWBX8rfsPTC9H3K1VvXt0M3vePR/XQ=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: aGXCfIMMPiIdkB1VXV5Wr23hUeKQclg0bIflcTFqVx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Nov 4 20:33:44 2025 GMT Not After : Nov 11 20:33:44 2025 GMT Subject: CN=690a6329-6c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:67:da:ba:6f:8e:a3:6e:0c:49:8f:a5:ad: f3:22:72:d3:86:04:d9:21:ec:be:07:29:f8:85:5e: 84:19:81:87:de:f1:25:95:e0:12:5d:00:0a:34:81: 6c:33:20:f4:d8:0c:43:20:31:42:ab:7f:ef:2a:87: fe:a7:c1:e0:3b:a0:88:98:09:f0:25:10:31:c4:27: 9f:25:f9:1d:3a:7d:99:ae:2e:9e:05:c0:b8:41:e5: ee:9c:ba:81:4b:75:21:5c:d2:a2:a8:1a:86:54:4c: e3:f4:5b:b4:a8:30:24:68:71:88:ca:4d:19:62:09: a3:4a:44:e8:f3:20:a1:0b:38:da:52:ac:f0:33:e8: 60:6f:42:8d:62:e4:3b:00:b9:64:a3:35:31:ce:81: 37:07:fa:05:e6:fd:fa:34:a8:7e:bd:7f:22:0c:4d: 4d:03:30:aa:98:a7:9b:d2:dd:22:bc:dc:dd:0d:3c: 01:77:ea:fd:b4:7d:e2:a3:0f:d2:18:1b:56:1b:47: fc:68:05:e0:3f:d2:e6:98:26:46:7a:af:41:53:ce: af:4a:83:50:00:e8:8c:95:7c:47:7b:5e:49:b4:49: b2:d4:59:73:fb:5e:15:50:62:14:55:15:cf:5f:3c: f6:19:f5:aa:dc:9e:7f:49:90:5c:cc:13:21:e5:d8: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C5:83:35:2E:30:AF:7D:32:F7:0C:74:84:6F:DF:14:2A:CC:5F:15 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:1f:a3:ba:41:03:b5:7b:be:c2:39:d8:4b:29:1d:6d:f0:c9: 1d:08:79:9f:bf:22:45:37:33:10:3f:b4:fc:29:cc:2d:8e:a4: 92:9d:6e:73:5c:2c:b6:43:e4:fd:83:bd:c9:47:b7:91:bd:83: 57:a6:38:68:29:42:7a:d6:9a:0a:33:ca:98:91:c5:bf:9e:e4: 4c:c4:4d:d7:47:d1:22:97:c3:bf:3a:3d:be:0a:27:db:29:45: 9b:e8:15:80:df:b9:b8:65:85:55:c6:6a:13:3a:f7:4f:9b:56: d7:37:02:57:6b:e6:bb:5a:ea:d5:13:03:bf:67:aa:cf:24:b3: 7c:80:a2:f5:d8:bf:31:69:9c:7a:23:dc:6e:97:fa:55:cc:35: 3a:af:f5:05:aa:42:bd:c8:03:21:8d:37:0d:92:7e:d5:3e:48: ac:3d:9b:ea:33:89:38:dc:ed:7b:e1:df:54:77:e2:27:0c:4d: 69:07:72:77:db:91:44:7b:a7:49:56:a3:df:a0:e2:f4:80:f0: 82:b1:5a:58:ae:69:8b:d3:1a:32:60:18:3e:7e:6b:60:77:71: 6a:1b:82:07:15:ca:58:15:28:ed:40:3d:c3:c4:24:05:17:6b: 40:99:59:08:8c:57:e4:e0:ae:07:34:ef:66:ce:b9:1f:67:2e: 6d:0c:22:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUxMTA0MjAzMzQ0WhcNMjUxMTExMjAzMzQ0WjAYMRYwFAYD VQQDEw02OTBhNjMyOS02Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRVn2rpvjqNuDEmPpa3zInLThgTZIey+Byn4hV6EGYGH3vElleASXQAKNIFs MyD02AxDIDFCq3/vKof+p8HgO6CImAnwJRAxxCefJfkdOn2Zri6eBcC4QeXunLqB S3UhXNKiqBqGVEzj9Fu0qDAkaHGIyk0ZYgmjSkTo8yChCzjaUqzwM+hgb0KNYuQ7 ALlkozUxzoE3B/oF5v36NKh+vX8iDE1NAzCqmKeb0t0ivNzdDTwBd+r9tH3iow/S GBtWG0f8aAXgP9LmmCZGeq9BU86vSoNQAOiMlXxHe15JtEmy1Flz+14VUGIUVRXP Xzz2GfWq3J5/SZBczBMh5dg7JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPFgzUu MK99MvcMdIRv3xQqzF8VMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAH6O6QQO1e77COdhLKR1t8MkdCHmfvyJFNzMQP7T8KcwtjqSSnW5z XCy2Q+T9g73JR7eRvYNXpjhoKUJ61poKM8qYkcW/nuRMxE3XR9Eil8O/Oj2+Cifb KUWb6BWA37m4ZYVVxmoTOvdPm1bXNwJXa+a7WurVEwO/Z6rPJLN8gKL12L8xaZx6 I9xul/pVzDU6r/UFqkK9yAMhjTcNkn7VPkisPZvqM4k43O174d9Ud+InDE1pB3J3 25FEe6dJVqPfoOL0gPCCsVpYrmmL0xoyYBg+fmtgd3FqG4IHFcpYFSjtQD3DxCQF F2tAmVkIjFfk4K4HNO9mzrkfZy5tDCKK -----END CERTIFICATE-----Generated at Thu Nov 6 02:38:52 2025 by rpki-client