$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft File: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft (raw, json) Hash identifier: j7JGm5+WvZpsdsyydMj/LMshcNJSdvS5VQi8jxb+vnY= Subject key identifier: 6B:4D:DF:B8:7E:E9:96:AA:EC:B4:C3:B7:E2:15:FA:B9:DB:0B:64:3E Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B Certificate issuer: /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft Manifest number: 058E Signing time: Tue 04 Nov 2025 23:20:21 +0000 Manifest this update: Tue 04 Nov 2025 23:20:20 +0000 Manifest next update: Tue 11 Nov 2025 23:20:20 +0000 Files and hashes: 1: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl (hash: chJ0ckFYaVMuDiUzI2yu/hOPRTriC0X4j4Df1lmzQkw=) 2: F18DB130603911EF930C0567C4F9AE02.roa (hash: qmLSTL1wvxJ3Xrfha1oWGF4hujLBIbfMxUdEAe6twrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056, serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Validity Not Before: Nov 4 23:20:20 2025 GMT Not After : Nov 11 23:20:20 2025 GMT Subject: CN=690a8a34-9414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:54:11:30:e3:bd:31:45:74:fe:83:6c:22: fa:19:62:09:19:e7:c7:f7:a0:e8:49:6b:c3:a0:b6: a4:3a:ec:b7:a4:dd:88:23:e1:a5:ec:17:b1:65:a3: b8:b3:f1:c4:71:27:17:7b:ea:5b:08:0f:29:70:16: 14:3f:60:05:71:08:1e:6f:0e:74:51:4e:5e:8a:e4: f8:b2:43:f4:40:78:fc:61:13:cc:6f:fe:60:40:23: a2:b1:c6:aa:5a:f3:01:7d:e0:e1:6a:ba:1e:20:23: 95:5d:07:17:fa:d9:ae:60:43:03:69:c5:da:7a:df: b0:3c:ad:01:84:dd:4b:92:c4:6c:01:22:b2:85:e9: 40:9f:e7:f6:3e:36:00:d1:45:39:c1:67:54:1c:64: 0c:73:59:40:15:76:f1:24:1d:69:33:16:7e:4f:5c: 34:82:92:8f:12:87:2d:d5:40:1f:8a:87:6c:c2:8f: c8:ad:98:63:58:bf:57:5a:90:a0:43:60:92:ff:6c: 35:bd:54:14:a0:00:ab:c6:2e:e3:5b:c2:d8:4d:42: b1:b3:2b:2b:0b:cf:c3:99:b3:73:df:7d:12:f5:55: 2f:af:2d:7f:97:88:a7:a9:6e:34:b2:b7:ce:e5:7f: 73:17:5b:f5:42:70:0c:a7:cf:1a:2d:92:b4:83:8d: 36:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4D:DF:B8:7E:E9:96:AA:EC:B4:C3:B7:E2:15:FA:B9:DB:0B:64:3E X509v3 Authority Key Identifier: keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:52:5d:53:d0:4a:db:c9:2c:7a:5d:a3:31:53:69:71:d7:9b: ab:eb:ee:2d:dc:99:7c:54:22:fd:89:15:9b:95:30:63:57:69: 21:85:0c:3c:62:cf:19:19:12:57:d7:04:73:85:44:a1:98:95: 55:52:bc:ff:71:29:b4:32:29:fa:ac:30:62:c3:aa:1d:e3:2e: d9:e8:d0:f2:0a:00:7a:a9:16:7a:fc:45:a4:ec:8d:9e:e6:1f: b3:54:44:15:b7:32:8c:96:2b:3d:41:bf:68:1b:46:5d:b6:88: 34:ac:5e:06:bc:c4:a6:2d:d8:ef:37:80:06:97:df:0b:ab:60: 21:5c:da:60:19:38:34:2a:bf:7a:00:a3:a6:35:c0:be:02:ae: 52:17:d2:f1:a7:ef:48:b8:a3:12:5f:8f:a9:80:3b:75:2c:89: db:81:b2:8d:fd:b5:a8:d0:f3:72:e3:36:10:da:ae:50:82:3d: 96:7b:cd:81:bb:54:43:e1:04:de:11:24:e3:5b:27:6d:20:b9: 24:d1:2c:59:6e:a0:d0:62:a8:3e:fa:04:14:24:ce:34:3f:e0: f2:40:2e:4b:27:ca:1d:46:84:01:82:01:67:1c:19:73:fa:fd: 20:e0:2f:a9:22:f6:9c:1d:b5:c0:94:24:b0:68:f6:0e:64:6e: a6:95:77:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDhCQzAxQ0VBNDREM0VEODhGNDE1MzE3MkI3OTI0NTY3 MTVDNTI2MEIwHhcNMjUxMTA0MjMyMDIwWhcNMjUxMTExMjMyMDIwWjAYMRYwFAYD VQQDEw02OTBhOGEzNC05NDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLVUETDjvTFFdP6DbCL6GWIJGefH96DoSWvDoLakOuy3pN2II+Gl7BexZaO4 s/HEcScXe+pbCA8pcBYUP2AFcQgebw50UU5eiuT4skP0QHj8YRPMb/5gQCOiscaq WvMBfeDharoeICOVXQcX+tmuYEMDacXaet+wPK0BhN1LksRsASKyhelAn+f2PjYA 0UU5wWdUHGQMc1lAFXbxJB1pMxZ+T1w0gpKPEoct1UAfiodswo/IrZhjWL9XWpCg Q2CS/2w1vVQUoACrxi7jW8LYTUKxsysrC8/DmbNz330S9VUvry1/l4inqW40srfO 5X9zF1v1QnAMp88aLZK0g402/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtN37h+ 6Zaq7LTDt+IV+rnbC2Q+MB8GA1UdIwQYMBaAFIvAHOpE0+2I9BUxcreSRWcVxSYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni9GQjU5MzQ0RUZC MUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZajBGVEZ5dDVKRlp4WEZK Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k4QWM2a1RUN1lqMEZURnl0NUpGWnhYRkpncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni9GQjU5MzQ0RUZCMUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZ ajBGVEZ5dDVKRlp4WEZKZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaUl1T0ErbySx6XaMxU2lx15ur6+4t3Jl8VCL9iRWblTBjV2khhQw8 Ys8ZGRJX1wRzhUShmJVVUrz/cSm0Min6rDBiw6od4y7Z6NDyCgB6qRZ6/EWk7I2e 5h+zVEQVtzKMlis9Qb9oG0Zdtog0rF4GvMSmLdjvN4AGl98Lq2AhXNpgGTg0Kr96 AKOmNcC+Aq5SF9Lxp+9IuKMSX4+pgDt1LInbgbKN/bWo0PNy4zYQ2q5Qgj2We82B u1RD4QTeESTjWydtILkk0SxZbqDQYqg++gQUJM40P+DyQC5LJ8odRoQBggFnHBlz +v0g4C+pIvacHbXAlCSwaPYOZG6mlXeE -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:29 2025 by rpki-client