$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: AC0FcS8l5/smVg1bY3NBLkQWVdznzix0OgXcq2ebSs8= Subject key identifier: 12:FD:9B:82:E2:77:A9:DB:8C:76:C9:D7:D0:F1:98:2A:53:C7:EB:86 Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 0169 Signing time: Mon 03 Nov 2025 03:54:43 +0000 Manifest this update: Mon 03 Nov 2025 03:54:43 +0000 Manifest next update: Mon 10 Nov 2025 03:54:43 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: PsoL/vpCEqYtR23rmEVLvVRDjIHPPcJyTSYAaDntgec=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: sPbI4s6oqdRUOiNi18Y1/q6iWjlYMVf5hdTw+xVFaMo=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: AVP7CNVml5F9ogjZv8lDcpc3+J0u+jj8KPjr/y0/brc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Nov 3 03:54:43 2025 GMT Not After : Nov 10 03:54:43 2025 GMT Subject: CN=69082783-6b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:22:fb:5c:df:5c:e9:80:19:43:15:c7:43:8a: ba:0e:2b:61:44:99:7e:d0:42:05:5b:de:62:08:3f: bf:1c:ca:19:fc:25:40:d8:0a:73:7f:d3:47:1e:4b: 7a:7c:15:0f:5e:48:a4:24:be:cf:15:51:ad:85:fd: cf:c8:12:dc:47:b2:fc:5d:6f:9b:4d:2c:5a:54:76: f1:f3:97:77:23:da:e4:b9:4a:b5:98:e5:af:4b:e3: 15:0a:2c:9b:39:ac:b0:79:af:47:4d:94:1a:2f:db: b3:3c:d7:a9:98:dc:93:4b:70:03:ef:9b:60:5c:1e: 40:80:8e:46:85:e1:72:d9:19:10:50:2f:ba:88:16: cf:ec:66:2d:93:72:1d:3a:17:e4:cc:b6:f3:7b:2e: 24:83:70:90:0b:62:31:e0:a9:3b:b0:1f:2e:46:2e: 28:33:f3:a3:68:8b:41:9f:f1:ca:45:2a:df:85:81: a7:2d:fe:45:68:c2:b9:5b:22:68:66:aa:11:68:38: ae:96:12:c8:a1:00:88:e9:ec:d7:18:a1:05:6b:6d: db:d2:b4:bb:6b:cc:04:fd:88:29:f6:9e:2c:13:d1: 96:c2:6f:61:18:c4:51:79:51:6c:e8:e4:04:94:09: af:29:d9:ec:7f:df:f1:6e:c5:2b:32:b4:3f:48:3d: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FD:9B:82:E2:77:A9:DB:8C:76:C9:D7:D0:F1:98:2A:53:C7:EB:86 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b7:a0:57:e3:de:68:30:30:fc:1d:83:74:94:77:be:16:10: 28:51:af:cd:c9:57:21:dd:aa:11:26:3a:44:9e:9d:4c:85:e8: e4:15:2f:bd:9f:a5:f9:61:c7:74:9b:50:8a:68:51:cd:d6:41: 78:04:b3:46:46:7e:4a:3b:07:f8:14:aa:a1:0d:99:9b:13:af: cd:a9:0e:0d:75:11:0f:8a:9c:cd:8f:18:52:c2:b5:3a:5a:4c: ed:37:d8:d6:c1:ca:9a:fb:90:38:e0:78:e1:f8:13:1b:dd:21: 20:c8:79:a3:9b:05:76:76:26:da:e1:bc:9b:e9:84:6e:69:72: 61:98:30:4b:e2:c4:45:50:fd:9d:0f:1a:a5:b5:5e:30:32:84: 3e:de:72:a3:6e:bc:78:7c:af:89:48:ed:14:06:9a:e8:29:01: 3f:b7:f5:75:7e:cf:14:1c:19:99:af:4a:29:50:fe:91:e0:31: 02:32:66:3f:61:8c:00:a7:eb:6c:3b:79:cf:d8:26:0a:b1:cd: 73:54:b8:52:93:94:03:85:90:63:fb:1c:63:19:12:bc:f0:ee: 8a:5f:d2:11:d2:ee:12:c5:bd:94:e2:c7:79:f9:13:c0:5c:6d: 82:63:05:d0:71:e9:bd:88:95:a2:7f:92:a4:1f:52:e5:1d:32: 5a:3b:54:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjUxMTAzMDM1NDQzWhcNMjUxMTEwMDM1NDQzWjAYMRYwFAYD VQQDEw02OTA4Mjc4My02YjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8iL7XN9c6YAZQxXHQ4q6DithRJl+0EIFW95iCD+/HMoZ/CVA2Apzf9NHHkt6 fBUPXkikJL7PFVGthf3PyBLcR7L8XW+bTSxaVHbx85d3I9rkuUq1mOWvS+MVCiyb Oaywea9HTZQaL9uzPNepmNyTS3AD75tgXB5AgI5GheFy2RkQUC+6iBbP7GYtk3Id OhfkzLbzey4kg3CQC2Ix4Kk7sB8uRi4oM/OjaItBn/HKRSrfhYGnLf5FaMK5WyJo ZqoRaDiulhLIoQCI6ezXGKEFa23b0rS7a8wE/Ygp9p4sE9GWwm9hGMRReVFs6OQE lAmvKdnsf9/xbsUrMrQ/SD3NSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBL9m4Li d6nbjHbJ19DxmCpTx+uGMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSt6BX495oMDD8HYN0lHe+FhAoUa/NyVch3aoRJjpEnp1MhejkFS+9 n6X5Ycd0m1CKaFHN1kF4BLNGRn5KOwf4FKqhDZmbE6/NqQ4NdREPipzNjxhSwrU6 WkztN9jWwcqa+5A44Hjh+BMb3SEgyHmjmwV2diba4byb6YRuaXJhmDBL4sRFUP2d DxqltV4wMoQ+3nKjbrx4fK+JSO0UBproKQE/t/V1fs8UHBmZr0opUP6R4DECMmY/ YYwAp+tsO3nP2CYKsc1zVLhSk5QDhZBj+xxjGRK88O6KX9IR0u4Sxb2U4sd5+RPA XG2CYwXQcem9iJWif5KkH1LlHTJaO1SJ -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:23 2025 by rpki-client