$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft File: _M8p58OjX6g2yQkOaCx4DQI56VU.mft (raw, json) Hash identifier: CTMSVO8HueITc6E06H0ne/S2Z2URUZEm9PFJluj6Vr8= Subject key identifier: 47:95:20:9B:0E:1D:09:35:96:B5:59:B5:A5:D9:95:74:48:C4:59:F0 Authority key identifier: FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 Certificate issuer: /CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft Manifest number: 07D7 Signing time: Tue 04 Nov 2025 21:14:47 +0000 Manifest this update: Tue 04 Nov 2025 21:14:47 +0000 Manifest next update: Tue 11 Nov 2025 21:14:47 +0000 Files and hashes: 1: _M8p58OjX6g2yQkOaCx4DQI56VU.crl (hash: jz8UWj3wVYko8Ym7Hme6Qh8izlgx8JhHCjdXMXKQuO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0243, serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Validity Not Before: Nov 4 21:14:47 2025 GMT Not After : Nov 11 21:14:47 2025 GMT Subject: CN=690a6cc7-9d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:81:49:9e:62:3b:2a:5b:d9:20:43:04:40: f0:f7:58:08:34:6b:33:13:5e:df:fe:68:2f:d2:c5: 6a:2d:28:42:8c:af:fb:e1:11:48:07:09:47:6b:d2: 30:de:3d:f9:cf:a0:58:f9:2c:ac:f6:53:fc:3f:48: 98:6b:d6:0f:82:34:41:29:46:06:8f:64:bd:17:d7: 2d:31:35:87:ae:f6:75:b6:af:b0:07:13:bc:73:a8: 66:78:2d:f3:99:f5:60:d8:ec:7f:77:97:36:64:c2: d7:b4:16:38:3e:61:38:2c:b5:42:4d:fc:71:f0:03: 94:12:6f:4d:ff:7b:1e:6c:28:27:20:f7:82:c3:ef: 89:07:e0:e3:0c:7f:0d:26:e7:92:55:68:c5:2c:b9: 46:f3:55:70:f3:ff:47:51:54:f4:c2:ff:1a:eb:6f: b0:41:0a:d9:fe:e1:73:b6:16:64:05:83:a8:4d:fe: f4:76:30:66:b5:85:b0:05:75:2f:36:18:8a:f3:2c: 5b:eb:22:c0:ac:89:41:9f:8d:fb:31:9f:34:b9:9a: 81:4f:c6:b4:72:33:b0:4e:1f:16:27:bc:d7:67:46: 5a:bc:0b:99:f0:08:c9:6d:0b:0e:4f:4d:66:29:10: d9:0c:ad:a1:fc:06:7d:4d:bb:f7:f6:d2:65:c9:36: 9c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:95:20:9B:0E:1D:09:35:96:B5:59:B5:A5:D9:95:74:48:C4:59:F0 X509v3 Authority Key Identifier: keyid:FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:25:d4:49:c6:f7:e9:c6:74:cc:87:c7:d1:25:1f:7d:d7:41: 0c:4f:21:ff:24:84:92:78:f1:53:f8:b8:8c:ce:f8:5b:55:77: d6:41:e7:bd:92:8a:7e:3d:dd:85:79:e1:3b:f6:07:5a:42:eb: 76:be:48:53:9c:6d:84:b9:a7:f5:bc:84:a6:f9:4d:88:51:6a: 08:fe:4f:62:e7:97:d8:4a:ee:51:39:55:81:65:09:89:98:ef: a7:49:cc:b5:c8:0f:eb:7b:4f:b8:39:60:cc:20:bc:c5:18:86: 56:a1:ff:85:16:c6:94:a3:13:79:1a:6a:21:e3:98:44:f9:f6: d0:56:1e:5c:3a:29:c8:38:f4:16:48:e9:a5:86:41:5a:1c:7e: 0a:21:85:64:42:27:89:c0:f6:57:93:a0:97:f5:ec:6b:14:d2: bc:4d:cd:65:b4:f0:69:69:83:31:a8:38:87:b6:e5:95:0d:91: cf:7a:4e:37:46:56:aa:8c:9c:24:05:0f:82:81:1c:96:f8:7d: 31:26:03:7c:74:aa:de:00:c6:9b:bc:49:19:e6:b1:c1:33:1b: 53:89:a0:b6:7e:06:21:b2:1b:a0:16:5e:0d:5e:86:88:6e:e5: f3:ec:4e:5c:84:8a:6f:70:01:9d:ea:d7:be:1c:52:5e:52:bb: 8a:25:0a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAyNDMxMTAvBgNVBAUTKEZDQ0YyOUU3QzNBMzVGQTgzNkM5MDkwRTY4MkM3ODBE MDIzOUU5NTUwHhcNMjUxMTA0MjExNDQ3WhcNMjUxMTExMjExNDQ3WjAYMRYwFAYD VQQDEw02OTBhNmNjNy05ZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKmBSZ5iOypb2SBDBEDw91gINGszE17f/mgv0sVqLShCjK/74RFIBwlHa9Iw 3j35z6BY+Sys9lP8P0iYa9YPgjRBKUYGj2S9F9ctMTWHrvZ1tq+wBxO8c6hmeC3z mfVg2Ox/d5c2ZMLXtBY4PmE4LLVCTfxx8AOUEm9N/3sebCgnIPeCw++JB+DjDH8N JueSVWjFLLlG81Vw8/9HUVT0wv8a62+wQQrZ/uFzthZkBYOoTf70djBmtYWwBXUv NhiK8yxb6yLArIlBn437MZ80uZqBT8a0cjOwTh8WJ7zXZ0ZavAuZ8AjJbQsOT01m KRDZDK2h/AZ9Tbv39tJlyTac3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeVIJsO HQk1lrVZtaXZlXRIxFnwMB8GA1UdIwQYMBaAFPzPKefDo1+oNskJDmgseA0COelV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDI0My8wMTY2RkY2NDBE MUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2ZzJ5UWtPYUN4NERRSTU2 VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NOHA1OE9qWDZnMnlRa09hQ3g0RFFJNTZWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDI0My8wMTY2RkY2NDBEMUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2 ZzJ5UWtPYUN4NERRSTU2VlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcJdRJxvfpxnTMh8fRJR9910EMTyH/JISSePFT+LiMzvhbVXfWQee9 kop+Pd2FeeE79gdaQut2vkhTnG2Euaf1vISm+U2IUWoI/k9i55fYSu5ROVWBZQmJ mO+nScy1yA/re0+4OWDMILzFGIZWof+FFsaUoxN5Gmoh45hE+fbQVh5cOinIOPQW SOmlhkFaHH4KIYVkQieJwPZXk6CX9exrFNK8Tc1ltPBpaYMxqDiHtuWVDZHPek43 RlaqjJwkBQ+CgRyW+H0xJgN8dKreAMabvEkZ5rHBMxtTiaC2fgYhshugFl4NXoaI buXz7E5chIpvcAGd6te+HFJeUruKJQpd -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:36 2025 by rpki-client