$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: iPMZlUKVgmUg82iCEViQo0SQjqWU5WL270UkptMdeRc= Subject key identifier: 1B:23:3D:27:89:AE:00:F2:5B:7D:29:B7:B9:BF:15:F9:A3:4D:81:EA Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 21C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 21BC Signing time: Tue 04 Nov 2025 15:59:48 +0000 Manifest this update: Tue 04 Nov 2025 15:59:48 +0000 Manifest next update: Tue 11 Nov 2025 15:59:48 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: R40ufg24YvuhbmIIrnLMWSn4DLGvP/23ZV8bCeUJye8=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: PxUOEDED+JHKJelWKhOvajOHx5KTZi4sFxCqv9/Wuds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8646 (0x21c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Nov 4 15:59:48 2025 GMT Not After : Nov 11 15:59:48 2025 GMT Subject: CN=690a22f4-dcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:29:77:94:44:39:30:ce:80:e9:23:ae:f8: bf:e2:7c:51:38:ec:46:4d:89:8e:49:fd:2e:dd:9c: f4:65:2e:27:75:bd:5a:f6:d9:b8:07:d7:da:10:ab: 0e:c7:fd:18:a1:d5:66:15:9c:1f:73:40:8d:36:5c: 9f:5f:c6:b1:c0:56:54:2e:4a:34:b5:69:48:26:ce: 30:99:3c:2a:e9:8c:e5:60:dd:38:4b:ef:32:fc:e3: 60:3f:40:ae:ea:a3:5d:34:f2:3b:0b:93:3c:cf:da: 1c:25:d9:92:c8:6e:59:bd:9c:af:07:e7:d8:83:cb: 2d:e2:77:88:56:38:75:04:e8:88:2b:ec:5a:52:84: 28:66:81:4f:4c:32:25:74:35:52:9c:72:e8:df:12: ff:19:b6:37:9c:11:aa:dd:47:fb:d1:f6:9f:d9:eb: d8:cf:d8:12:3e:f3:ad:12:2c:7e:71:ce:fc:b1:72: 4f:3d:cd:6b:21:05:44:e0:62:56:63:91:80:6e:99: eb:3b:f2:2e:37:60:5f:c2:dd:b1:15:b3:84:ec:f2: 17:ce:10:a9:b7:12:79:09:07:e7:74:06:54:81:82: 58:15:af:e7:ec:8d:a5:7a:93:d9:5e:a5:10:0c:40: f6:10:54:bc:5f:9b:5c:26:28:f6:7b:99:33:90:35: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:23:3D:27:89:AE:00:F2:5B:7D:29:B7:B9:BF:15:F9:A3:4D:81:EA X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:7b:67:14:78:5b:2f:2e:3d:23:d9:c3:f3:3a:d6:41:d4:ad: 78:3c:b3:5e:85:60:3c:d2:64:a0:8c:f6:be:74:3b:a3:02:ad: 4b:fe:4c:01:f4:96:17:73:68:b5:ed:d5:cf:51:a3:ef:a0:f7: 81:bb:54:f2:84:db:3c:be:f5:a3:ec:62:4f:c8:fd:76:19:4b: a5:df:3e:82:9c:9b:18:87:d1:5d:11:5f:6e:ea:a0:f8:d7:a4: c3:f9:5d:d9:b1:d1:50:d9:55:b8:09:3b:4d:fb:c1:18:10:19: 98:ba:ad:9d:3b:51:4e:c4:66:ca:e9:4c:aa:13:54:bd:38:80: 8d:76:ab:c6:8d:8b:9b:ee:3e:a4:ab:9e:bc:ae:05:5b:b1:32: fb:d1:c4:33:59:29:08:ca:7e:3f:67:8f:cd:71:52:a9:ca:c9: 42:bf:8c:ca:47:93:a2:c4:5f:34:72:48:da:cc:08:5a:05:1f: 3d:74:29:4d:e1:de:e8:e0:5a:92:70:3e:cd:68:b3:16:7e:38: c8:2a:81:12:0b:55:e9:4a:29:c1:2a:a0:f1:36:2c:78:f7:e6: 12:40:0e:06:d9:d6:52:f5:c1:f5:9a:6f:cd:d0:4a:9e:5f:fa: ef:0a:cf:2f:b8:30:67:c6:6b:c8:12:ef:cb:71:f7:b8:61:ba: 5e:49:7b:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUxMTA0MTU1OTQ4WhcNMjUxMTExMTU1OTQ4WjAYMRYwFAYD VQQDEw02OTBhMjJmNC1kY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7Qpd5REOTDOgOkjrvi/4nxROOxGTYmOSf0u3Zz0ZS4ndb1a9tm4B9faEKsO x/0YodVmFZwfc0CNNlyfX8axwFZULko0tWlIJs4wmTwq6YzlYN04S+8y/ONgP0Cu 6qNdNPI7C5M8z9ocJdmSyG5ZvZyvB+fYg8st4neIVjh1BOiIK+xaUoQoZoFPTDIl dDVSnHLo3xL/GbY3nBGq3Uf70faf2evYz9gSPvOtEix+cc78sXJPPc1rIQVE4GJW Y5GAbpnrO/IuN2Bfwt2xFbOE7PIXzhCptxJ5CQfndAZUgYJYFa/n7I2lepPZXqUQ DED2EFS8X5tcJij2e5kzkDVlZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsjPSeJ rgDyW30pt7m/FfmjTYHqMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXe2cUeFsvLj0j2cPzOtZB1K14PLNehWA80mSgjPa+dDujAq1L/kwB 9JYXc2i17dXPUaPvoPeBu1TyhNs8vvWj7GJPyP12GUul3z6CnJsYh9FdEV9u6qD4 16TD+V3ZsdFQ2VW4CTtN+8EYEBmYuq2dO1FOxGbK6UyqE1S9OICNdqvGjYub7j6k q568rgVbsTL70cQzWSkIyn4/Z4/NcVKpyslCv4zKR5OixF80ckjazAhaBR89dClN 4d7o4FqScD7NaLMWfjjIKoESC1XpSinBKqDxNix49+YSQA4G2dZS9cH1mm/N0Eqe X/rvCs8vuDBnxmvIEu/Lcfe4YbpeSXuB -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:38 2025 by rpki-client