$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: DNZsiinzalfYjeOsPmVBxuu863Ncrsy/oTYPNCsZnU8= Subject key identifier: 5B:B7:32:76:8A:DC:3E:14:3B:D3:49:35:C7:C5:58:77:33:FB:63:F5 Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 07E5 Signing time: Sun 02 Nov 2025 21:07:09 +0000 Manifest this update: Sun 02 Nov 2025 21:07:09 +0000 Manifest next update: Sun 09 Nov 2025 21:07:09 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: 50SaZJ3/V/sQ1aq5018zuYmVQAy+vI5qZttPR07dnRc=) 2: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: nNMfwVwGreVHShqHhiSA1wDrVojq2wBr5IqezlVe7oA=) 3: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: lqzj6YduHCJKV8dYpz5WAfuKsZiHyQ1FWQ0JXN7wCvU=) 4: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: npjQiEYYdVjWG8dKeFVFQ6M5ppQB2z0yEbCwP4ngirc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Nov 2 21:07:09 2025 GMT Not After : Nov 9 21:07:09 2025 GMT Subject: CN=6907c7fd-7686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:84:0b:f9:a3:47:e1:94:2d:95:32:35:e9: e8:1e:37:ad:73:7e:d5:6e:ef:e1:69:01:2a:55:77: 85:c6:0e:5e:b9:fe:00:69:bb:cc:f6:d3:3b:d5:cc: 89:4e:79:21:87:23:3d:a1:9e:58:22:6c:f3:e0:4d: b6:2f:42:d3:aa:0f:d4:6a:08:f5:65:d5:08:c2:54: fa:b5:db:6b:f5:50:2b:f7:1e:64:e7:e4:44:51:2d: 34:da:88:64:2f:52:59:d0:87:e3:cb:81:f6:72:75: 61:56:f4:8c:2f:9c:13:cf:d1:d9:10:92:52:86:10: 28:71:fd:9b:9b:87:f8:fe:90:c1:43:bd:cd:b3:35: 12:a1:93:f6:a3:2e:8c:6a:00:a1:df:a4:8a:42:b0: 5f:2e:65:38:57:0a:33:8b:c0:d5:f5:d7:49:c6:8b: 86:eb:dc:91:e6:ff:97:51:55:3a:41:02:1d:d6:86: 13:de:25:be:1a:c3:05:65:eb:94:ac:fe:5f:f3:72: 0c:6e:cb:c3:51:f3:ce:78:b4:dc:da:89:9b:84:39: 45:59:66:14:66:1d:64:80:f3:ed:44:45:cd:6a:b0: 1f:2c:92:80:9d:bc:b3:5d:f4:de:2b:c2:e1:90:6e: 8f:16:3f:c3:3e:b5:17:65:fa:27:45:b2:a7:e5:42: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B7:32:76:8A:DC:3E:14:3B:D3:49:35:C7:C5:58:77:33:FB:63:F5 X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:7b:c8:8e:a3:51:08:22:70:84:27:41:48:01:02:80:86:5a: bf:b2:b9:fd:03:91:2e:4c:e7:2b:8e:44:82:02:a7:c0:64:30: d1:cb:ac:f7:a1:d6:9c:d8:7b:da:e9:ea:b2:e4:85:a2:94:8b: 0e:6f:35:8e:9a:87:33:19:db:d8:a2:7c:1a:a8:e4:0e:96:85: fb:53:87:79:58:9b:8f:5a:e5:06:e8:b2:be:77:70:89:b2:b5: 14:47:67:3e:e9:2d:a6:3b:6e:17:90:97:b5:b6:ab:7e:7e:4c: 29:7d:1f:bf:00:d0:83:e5:c9:65:cb:45:34:67:67:ca:05:7d: ba:ff:3f:12:ee:a3:24:35:42:f2:05:73:97:42:05:20:74:4b: 8b:74:4a:f7:c3:07:14:ed:2e:ba:17:c9:ae:c3:a9:f7:85:f4: f5:7f:d6:b4:32:2d:d3:35:cc:f6:95:16:ba:71:e9:16:39:c1: fb:a1:69:cc:8f:25:a8:d9:af:24:54:34:88:3b:e1:b5:7d:9c: 99:85:b0:e8:bd:a4:62:5d:b2:cb:2b:37:8f:90:b6:62:91:9f: 9f:d8:38:14:10:d4:1d:ed:19:f7:51:a2:77:96:ef:00:2c:77: b1:cf:e4:15:91:84:c7:01:8b:6d:18:9f:3a:28:b1:4b:19:b6: 63:cb:ee:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjUxMTAyMjEwNzA5WhcNMjUxMTA5MjEwNzA5WjAYMRYwFAYD VQQDEw02OTA3YzdmZC03Njg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFyEC/mjR+GULZUyNenoHjetc37Vbu/haQEqVXeFxg5euf4AabvM9tM71cyJ TnkhhyM9oZ5YImzz4E22L0LTqg/Uagj1ZdUIwlT6tdtr9VAr9x5k5+REUS002ohk L1JZ0Ifjy4H2cnVhVvSML5wTz9HZEJJShhAocf2bm4f4/pDBQ73NszUSoZP2oy6M agCh36SKQrBfLmU4Vwozi8DV9ddJxouG69yR5v+XUVU6QQId1oYT3iW+GsMFZeuU rP5f83IMbsvDUfPOeLTc2ombhDlFWWYUZh1kgPPtREXNarAfLJKAnbyzXfTeK8Lh kG6PFj/DPrUXZfonRbKn5UISvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu3MnaK 3D4UO9NJNcfFWHcz+2P1MB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJe8iOo1EIInCEJ0FIAQKAhlq/srn9A5EuTOcrjkSCAqfAZDDRy6z3 odac2Hva6eqy5IWilIsObzWOmoczGdvYonwaqOQOloX7U4d5WJuPWuUG6LK+d3CJ srUUR2c+6S2mO24XkJe1tqt+fkwpfR+/ANCD5clly0U0Z2fKBX26/z8S7qMkNULy BXOXQgUgdEuLdEr3wwcU7S66F8muw6n3hfT1f9a0Mi3TNcz2lRa6cekWOcH7oWnM jyWo2a8kVDSIO+G1fZyZhbDovaRiXbLLKzePkLZikZ+f2DgUENQd7Rn3UaJ3lu8A LHexz+QVkYTHAYttGJ86KLFLGbZjy+6P -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:27 2025 by rpki-client