$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: IEGpKiO2fbCd5bNc8xd+iLWQNvh2oiUPrr+PBMsCass= Subject key identifier: D9:FE:BD:66:63:62:B6:29:A3:4F:B2:02:E0:A2:BC:28:8F:B3:9B:93 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 0185 Signing time: Mon 03 Nov 2025 03:37:14 +0000 Manifest this update: Mon 03 Nov 2025 03:37:14 +0000 Manifest next update: Mon 10 Nov 2025 03:37:14 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: TglVbQjQ7tHdGGvQM/B5bVt0KRXRCnK0+xiuzsRDd1Q=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: Er3/MAuCzoGUHkL9sYAa/oK9eluVmQp9z5pkVAw9cAM=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: smI8KFtozrldpJMIbPknM0ia5ZaENjQghxfBZjdwPy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Nov 3 03:37:14 2025 GMT Not After : Nov 10 03:37:14 2025 GMT Subject: CN=6908236a-6bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6c:14:d2:d8:1f:47:f9:ed:88:76:20:cf:a8: 6c:49:9e:d6:6e:b3:17:1c:5d:b8:cd:05:93:53:be: fb:b3:d4:0c:fb:40:42:4f:cd:ee:51:5a:8a:f2:90: a7:79:cf:64:a3:ad:ac:a1:11:1d:ee:7e:be:12:bd: be:ec:e3:99:e4:bf:52:25:e4:62:23:b9:e5:43:50: 9d:d7:34:b3:f9:85:92:73:f8:13:a4:ff:66:c2:4f: ca:d7:8d:11:65:7f:96:90:c5:91:50:26:c2:17:89: 14:8d:ca:7d:71:d8:f1:8c:7b:8a:5d:8e:45:00:97: 42:db:dc:96:9b:ce:83:e4:5b:07:6d:d0:bf:3b:48: 8a:4f:f9:d4:ab:c4:66:3b:a1:d9:a0:3c:9f:7c:3c: f4:c4:6f:ee:1a:70:d0:3d:8b:93:54:47:3f:a0:ad: 85:ee:d8:3f:98:1c:f5:af:61:72:89:a1:3b:11:0f: 05:e0:f3:d2:1d:bc:d7:a8:1b:0a:f9:4d:1a:f2:3c: be:c4:80:22:15:93:28:e1:c5:0e:06:06:09:a4:82: bd:da:a2:28:60:7c:d9:27:2c:ec:a0:13:51:90:60: 3a:6b:c9:9b:ca:6b:d1:db:a5:96:d9:c1:5d:cd:e3: 5b:77:39:80:d1:b7:af:ff:41:1b:e6:ca:00:0d:4d: ce:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FE:BD:66:63:62:B6:29:A3:4F:B2:02:E0:A2:BC:28:8F:B3:9B:93 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:30:9b:0c:df:58:ed:1c:b2:fb:35:07:b4:44:6d:8a:c3:c2: 8d:fa:30:04:73:7b:a6:4b:68:21:ea:0a:b6:74:ff:fd:de:a7: 95:9f:22:5b:ea:ae:9f:87:f4:83:23:ad:9f:e9:4b:65:4b:15: 16:50:c7:2e:7b:8f:d2:2e:ae:2b:a4:87:e8:10:bb:4e:ce:99: 37:bc:47:a1:59:af:7a:cd:3b:a0:cb:b9:18:cf:29:19:c8:cf: 27:62:6a:8b:f6:f4:16:d1:2a:43:60:fa:40:b0:4d:a3:60:41: dc:db:56:f5:a4:68:10:d0:ec:f0:ec:02:2c:a4:b8:03:7d:1a: ec:e0:04:60:30:c5:54:a3:4b:63:46:03:95:11:98:ea:42:36: 43:06:7c:b1:6d:5c:e9:d6:f8:80:27:fd:c8:95:c5:a6:93:fe: 18:c9:24:3a:02:0e:12:30:d7:ad:94:72:96:f9:a0:76:a3:82: 18:ee:f0:ae:16:e7:7a:c0:2c:14:75:0c:6f:d0:db:8d:65:0a: e6:9a:b7:e8:c6:ed:a4:3a:9f:52:3f:2c:31:d7:01:5c:64:d8: 2a:90:4d:86:99:2b:14:c7:a4:30:69:b7:68:26:ba:f2:54:50: 10:c7:7b:6b:e3:a1:f2:9e:bf:cc:eb:84:b6:57:b9:b6:30:14: 88:7a:88:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjUxMTAzMDMzNzE0WhcNMjUxMTEwMDMzNzE0WjAYMRYwFAYD VQQDEw02OTA4MjM2YS02YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWwU0tgfR/ntiHYgz6hsSZ7WbrMXHF24zQWTU777s9QM+0BCT83uUVqK8pCn ec9ko62soREd7n6+Er2+7OOZ5L9SJeRiI7nlQ1Cd1zSz+YWSc/gTpP9mwk/K140R ZX+WkMWRUCbCF4kUjcp9cdjxjHuKXY5FAJdC29yWm86D5FsHbdC/O0iKT/nUq8Rm O6HZoDyffDz0xG/uGnDQPYuTVEc/oK2F7tg/mBz1r2FyiaE7EQ8F4PPSHbzXqBsK +U0a8jy+xIAiFZMo4cUOBgYJpIK92qIoYHzZJyzsoBNRkGA6a8mbymvR26WW2cFd zeNbdzmA0bev/0Eb5soADU3OMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn+vWZj YrYpo0+yAuCivCiPs5uTMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQMJsM31jtHLL7NQe0RG2Kw8KN+jAEc3umS2gh6gq2dP/93qeVnyJb 6q6fh/SDI62f6UtlSxUWUMcue4/SLq4rpIfoELtOzpk3vEehWa96zTugy7kYzykZ yM8nYmqL9vQW0SpDYPpAsE2jYEHc21b1pGgQ0Ozw7AIspLgDfRrs4ARgMMVUo0tj RgOVEZjqQjZDBnyxbVzp1viAJ/3IlcWmk/4YySQ6Ag4SMNetlHKW+aB2o4IY7vCu Fud6wCwUdQxv0NuNZQrmmrfoxu2kOp9SPywx1wFcZNgqkE2GmSsUx6QwabdoJrry VFAQx3tr46Hynr/M64S2V7m2MBSIeoip -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:20 2025 by rpki-client