$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: t58h7niDieEEnw2eW799X6ZopKJ0ed/Utr802H3yzzs= Subject key identifier: 44:4A:CA:B7:F7:14:BA:D5:AC:08:A8:43:B0:95:41:61:E8:D2:2E:E8 Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 14B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 1491 Signing time: Tue 04 Nov 2025 16:59:10 +0000 Manifest this update: Tue 04 Nov 2025 16:59:09 +0000 Manifest next update: Tue 11 Nov 2025 16:59:09 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: C1gnwzfI0FJmrMKGPX7zofUf/v8IAgZHT8GNOdiRoUs=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: bw2KVyHN6CitUBxUyBMWnfwdT8P8OVOkY8BYkur67D8=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: u7oqRMExCmv2yUvpdQUhy93ikSgUZkKJq35cWOYkBRM=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: F7sXs8wz7vi0K+MviVDC99PWP7OiPZ+mlBu4ZQRrCgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5298 (0x14b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Nov 4 16:59:09 2025 GMT Not After : Nov 11 16:59:09 2025 GMT Subject: CN=690a30dd-d02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:d4:71:74:2c:2e:48:13:1f:71:02:98:eb: 47:58:d2:b1:40:ab:e4:79:37:3f:e8:8a:c4:b1:7e: a2:07:68:92:9f:31:1e:fe:3f:7a:12:13:2b:af:b7: 35:b9:ae:cf:e4:3e:10:16:c9:8d:e5:8f:ad:02:ce: 5d:1f:a0:66:5a:c6:37:62:5b:72:37:4d:84:7d:53: 6e:48:93:e5:35:02:b6:64:bf:cd:c5:22:3a:b3:bd: ef:5c:21:70:66:9d:28:5c:5c:1d:ba:a7:67:16:1d: 2f:2e:87:06:3d:36:86:ba:b4:f2:b5:69:b8:05:06: 8d:94:bc:f2:17:a8:e3:f7:48:2d:61:b5:4a:31:61: 76:d9:b6:53:b4:2e:15:5e:d3:c6:b3:16:24:f8:84: f1:63:34:62:b4:e3:13:dd:08:1c:d6:53:a3:64:34: 8d:47:c4:70:21:43:0e:a5:e1:8d:aa:76:da:bd:24: 2b:64:f5:e1:26:99:75:08:cf:b2:e1:3c:c0:c2:29: 91:5f:ff:f3:90:27:70:98:f4:e6:03:29:a8:db:ab: 76:89:98:81:b1:1f:f9:00:85:b2:a0:39:e6:d3:14: 35:22:d4:c9:be:d9:93:b9:a0:a4:a3:f7:ae:f3:5e: 1c:05:9c:01:b6:b8:94:2c:d6:c1:d2:8a:ec:6c:bd: dc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4A:CA:B7:F7:14:BA:D5:AC:08:A8:43:B0:95:41:61:E8:D2:2E:E8 X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:87:b4:75:42:9b:88:01:f2:45:2e:5e:ec:d0:c3:e0:8e:f1: 3f:09:d8:31:f6:2b:fd:db:41:d0:77:ef:36:52:2b:f8:c9:d7: 21:a4:86:20:97:28:96:c7:57:84:8c:ec:ad:71:2e:6b:04:f9: 15:c5:a1:b8:7a:72:5b:91:c3:45:a7:b8:6f:15:72:68:1a:04: 12:00:2f:c4:e8:84:49:1f:9c:9f:65:9c:47:fc:12:1d:5b:07: f8:ce:8b:0a:27:1b:cd:44:fb:dc:73:d3:1f:e0:5b:10:0d:38: c3:8b:54:26:12:37:58:67:8c:2b:5a:54:2f:99:1c:89:ab:43: 95:f3:45:59:9a:e8:d5:23:b7:bf:c4:09:54:a4:ec:e8:52:cd: 63:9d:37:17:f4:57:6c:4f:51:3c:c2:d8:5f:1f:8a:73:aa:1d: 3a:6f:a5:af:98:07:40:f7:43:05:d9:2c:85:46:f8:3a:09:48: ed:20:4d:0b:8a:2f:c6:25:15:1d:fe:a5:5c:04:83:cf:a8:fa: e7:f1:2b:cc:d1:2e:da:f4:9e:f3:92:fb:d6:70:c1:7d:0b:33: e1:fe:91:20:36:d8:b4:ce:77:5c:6c:22:70:f3:61:18:38:d5: 5c:29:eb:1c:00:b2:76:74:97:3f:a2:ea:93:0f:97:45:ed:9a: 77:6e:00:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUxMTA0MTY1OTA5WhcNMjUxMTExMTY1OTA5WjAYMRYwFAYD VQQDEw02OTBhMzBkZC1kMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykTUcXQsLkgTH3ECmOtHWNKxQKvkeTc/6IrEsX6iB2iSnzEe/j96EhMrr7c1 ua7P5D4QFsmN5Y+tAs5dH6BmWsY3YltyN02EfVNuSJPlNQK2ZL/NxSI6s73vXCFw Zp0oXFwduqdnFh0vLocGPTaGurTytWm4BQaNlLzyF6jj90gtYbVKMWF22bZTtC4V XtPGsxYk+ITxYzRitOMT3Qgc1lOjZDSNR8RwIUMOpeGNqnbavSQrZPXhJpl1CM+y 4TzAwimRX//zkCdwmPTmAymo26t2iZiBsR/5AIWyoDnm0xQ1ItTJvtmTuaCko/eu 814cBZwBtriULNbB0orsbL3cRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERKyrf3 FLrVrAioQ7CVQWHo0i7oMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATh7R1QpuIAfJFLl7s0MPgjvE/Cdgx9iv920HQd+82Uiv4ydchpIYg lyiWx1eEjOytcS5rBPkVxaG4enJbkcNFp7hvFXJoGgQSAC/E6IRJH5yfZZxH/BId Wwf4zosKJxvNRPvcc9Mf4FsQDTjDi1QmEjdYZ4wrWlQvmRyJq0OV80VZmujVI7e/ xAlUpOzoUs1jnTcX9FdsT1E8wthfH4pzqh06b6WvmAdA90MF2SyFRvg6CUjtIE0L ii/GJRUd/qVcBIPPqPrn8SvM0S7a9J7zkvvWcMF9CzPh/pEgNti0zndcbCJw82EY ONVcKescALJ2dJc/ouqTD5dF7Zp3bgCA -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:47 2025 by rpki-client