$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: vzFHTBp6NuYdcua8d3iqk0fGnybXUtHsmAJoh8+aIOg= Subject key identifier: 23:90:D1:52:F1:B1:9E:D4:F1:47:DE:A1:14:5C:33:14:CC:94:F6:41 Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 04EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 04E7 Signing time: Tue 04 Nov 2025 23:50:53 +0000 Manifest this update: Tue 04 Nov 2025 23:50:53 +0000 Manifest next update: Tue 11 Nov 2025 23:50:53 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: 1B5iJ/Pj95x8u5oyDLRyZGgQM66Vdlm/JEsbQKsueAQ=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: ytiI82E6VCnTYlGo/bVg7G4jwjvMMnWPkOJQayi3ook=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Nov 4 23:50:53 2025 GMT Not After : Nov 11 23:50:53 2025 GMT Subject: CN=690a915d-db04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2c:32:9a:ad:33:a2:0e:1e:ff:39:72:0d:f5: b9:ec:cd:4c:43:fd:e9:34:d8:bd:2d:13:cf:1c:10: 64:e3:70:5c:28:73:00:ab:f7:f3:6f:16:42:45:59: 53:c9:72:c5:ea:2d:0c:7e:de:ec:f4:4c:dc:6e:76: cb:f7:75:1a:2b:b6:23:90:04:4c:42:07:e7:06:db: 9b:22:47:50:81:df:cc:26:4b:a4:5e:6c:1c:71:5d: 88:96:8f:b5:58:02:5a:cb:74:7e:85:5d:c8:18:c5: 04:44:30:c3:a5:f9:96:33:4c:0c:28:8d:59:c8:30: 09:77:ff:fc:a4:4d:38:6d:e7:d1:1b:c2:10:b9:bc: 1c:62:bd:e1:2d:c3:b9:cc:2c:37:7f:17:d9:eb:be: f3:90:30:aa:4f:2e:40:95:a9:e3:c0:62:19:ba:94: c3:56:ed:1d:94:5a:0a:20:62:67:6b:dc:f7:5e:a0: bd:6f:d6:ad:5e:fd:f2:db:b9:ff:45:0b:86:a6:db: be:69:93:d7:12:df:2c:82:14:fd:cc:dc:18:50:00: 88:65:f5:00:75:d4:fe:9d:5f:67:48:80:31:37:ad: 21:d4:35:30:00:9d:c8:3c:fd:ec:0a:04:c0:eb:86: 7f:e1:73:26:13:19:a7:ed:fa:2c:23:5c:80:4e:bb: ea:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:90:D1:52:F1:B1:9E:D4:F1:47:DE:A1:14:5C:33:14:CC:94:F6:41 X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:93:98:55:8c:5b:0a:3d:77:0c:42:3d:ae:23:98:6e:4b:e7: 6f:52:dd:9b:cb:92:5d:cf:e5:32:82:2a:49:3d:b8:c5:cf:df: 75:51:97:a5:f1:f3:1c:83:c4:4f:0a:29:53:c8:82:20:79:51: 99:a2:f9:dc:99:83:df:7c:43:62:24:cf:36:66:29:32:c5:7d: cf:bc:78:64:21:64:54:c9:78:f0:cd:85:46:a8:66:6c:9c:3e: 94:53:31:77:5f:7a:d6:0a:06:91:98:a8:7a:e6:93:3e:cf:53: cf:fc:bd:0b:f9:dd:07:fe:1a:e0:ac:9e:b3:53:97:54:fa:ca: 40:0c:d2:ef:d4:b5:c6:06:cf:2c:2f:52:ba:d0:d6:1f:64:92: 13:81:00:3c:99:e1:7d:62:8c:b3:d0:c6:22:45:0e:44:ff:c2: f4:43:21:49:2c:bf:47:01:e6:7f:aa:1a:4e:c1:6a:1a:6e:79: 89:eb:3e:82:6e:71:c5:7c:bc:b6:3c:07:86:0c:37:26:1b:7c: a7:27:35:3d:62:f9:c5:e2:76:1c:0d:3c:9b:e4:18:65:ce:fa: 2c:00:34:cb:c3:2d:b0:22:8c:80:37:a0:93:86:7c:68:03:f2: cb:69:cc:bd:00:ac:2f:89:eb:7f:b2:7a:ba:56:56:54:e1:36: a3:d5:ac:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjUxMTA0MjM1MDUzWhcNMjUxMTExMjM1MDUzWjAYMRYwFAYD VQQDEw02OTBhOTE1ZC1kYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iwymq0zog4e/zlyDfW57M1MQ/3pNNi9LRPPHBBk43BcKHMAq/fzbxZCRVlT yXLF6i0Mft7s9EzcbnbL93UaK7YjkARMQgfnBtubIkdQgd/MJkukXmwccV2Ilo+1 WAJay3R+hV3IGMUERDDDpfmWM0wMKI1ZyDAJd//8pE04befRG8IQubwcYr3hLcO5 zCw3fxfZ677zkDCqTy5AlanjwGIZupTDVu0dlFoKIGJna9z3XqC9b9atXv3y27n/ RQuGptu+aZPXEt8sghT9zNwYUACIZfUAddT+nV9nSIAxN60h1DUwAJ3IPP3sCgTA 64Z/4XMmExmn7fosI1yATrvqwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOQ0VLx sZ7U8UfeoRRcMxTMlPZBMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCak5hVjFsKPXcMQj2uI5huS+dvUt2by5Jdz+UygipJPbjFz991UZel 8fMcg8RPCilTyIIgeVGZovncmYPffENiJM82ZikyxX3PvHhkIWRUyXjwzYVGqGZs nD6UUzF3X3rWCgaRmKh65pM+z1PP/L0L+d0H/hrgrJ6zU5dU+spADNLv1LXGBs8s L1K60NYfZJITgQA8meF9Yoyz0MYiRQ5E/8L0QyFJLL9HAeZ/qhpOwWoabnmJ6z6C bnHFfLy2PAeGDDcmG3ynJzU9YvnF4nYcDTyb5BhlzvosADTLwy2wIoyAN6CThnxo A/LLacy9AKwviet/snq6VlZU4Taj1aw9 -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:43 2025 by rpki-client