$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: M+D0Qb2CguRbtKgPOszhwyjjW8L4xca6TVgL/D5i8G8= Subject key identifier: E9:8D:10:24:D1:8D:E2:4B:D6:A1:60:85:62:B8:1C:B8:09:B4:18:0E Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 08B8 Signing time: Sun 02 Nov 2025 20:26:10 +0000 Manifest this update: Sun 02 Nov 2025 20:26:10 +0000 Manifest next update: Sun 09 Nov 2025 20:26:10 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: MTHgC4++TpgAmGjwq+Lwfbq+QEj6WQSuxft87GFZN4U=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: Nov 2 20:26:10 2025 GMT Not After : Nov 9 20:26:10 2025 GMT Subject: CN=6907be62-c227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:49:a8:0d:7a:a1:a9:d1:76:0d:77:8e:66: be:08:63:ab:29:0a:aa:c7:bf:83:ca:9c:a3:d9:9a: 73:ba:fb:73:87:c2:22:50:18:2b:b4:82:60:83:f3: 7d:27:1d:12:57:6c:e0:ac:e4:6d:f7:2e:99:3c:b4: 88:38:7f:41:1f:e2:11:02:dd:7c:90:5e:56:2d:1b: 70:c3:25:85:97:58:64:44:f0:9d:5b:9d:b4:b7:1e: e7:5f:0a:05:57:93:52:e6:93:9e:94:e9:4e:80:86: 96:97:51:fb:4c:b1:e5:f4:d1:1b:21:58:7b:07:28: e8:1b:75:9d:a2:9f:09:fc:2d:f3:a8:25:24:8f:94: a7:1d:b8:fb:b5:ef:df:56:44:45:8d:91:87:8a:5f: 81:14:40:72:9f:86:07:a1:63:21:23:d4:32:51:1e: 79:6c:23:f6:3c:30:4f:41:de:94:a8:52:e1:83:9e: 94:b0:97:67:df:60:c1:ee:58:52:ad:39:92:c0:d7: 04:99:1c:9a:35:bb:43:14:6c:74:50:e5:d0:52:92: 47:73:53:2d:39:28:91:9d:b2:e8:1f:28:c0:ac:f4: 41:ff:47:75:f9:ec:ea:52:65:63:a4:58:33:91:2e: 19:74:3b:f3:7f:da:7d:6a:d2:4e:43:7a:ce:ce:71: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8D:10:24:D1:8D:E2:4B:D6:A1:60:85:62:B8:1C:B8:09:B4:18:0E X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b8:15:2a:1c:ea:2f:7f:5f:4f:9c:00:b8:92:1d:11:92:cd: 60:44:f5:34:6b:1d:b4:b4:b7:85:97:53:60:fd:12:0c:51:f2: 36:c6:23:87:6d:7e:0a:92:89:8d:db:33:16:c1:33:42:9a:a1: ac:40:df:bd:19:bd:68:19:ba:a2:b0:ab:01:de:ba:a7:88:86: 75:a9:35:0d:ff:37:df:61:6c:a4:c9:91:a4:59:28:a5:54:c0: 7f:21:7f:2e:eb:50:57:5e:20:e4:01:96:cf:5d:44:86:76:3d: 9c:b9:3a:06:21:44:52:0e:9c:45:ee:73:c0:0f:80:87:ac:9e: a1:54:a3:e7:b7:15:8c:d8:ce:31:42:13:d5:29:b8:c5:70:de: 2a:11:cb:ac:7b:41:d5:c8:e0:53:13:d2:d7:7b:4a:4f:39:b9: 45:68:74:71:88:33:fe:a3:bb:74:9a:cf:7b:28:c0:4b:76:8c: 1f:f7:72:27:44:07:cb:0c:41:d0:13:78:eb:6a:4e:6c:4e:3c: 12:02:d3:bc:76:d8:13:f4:42:51:4c:2d:49:58:9b:e1:fd:11: 61:e3:80:1f:85:20:c8:1f:19:0a:00:08:e4:9f:d2:85:39:3e: 21:56:8c:fb:3f:52:fa:35:30:be:75:b5:39:aa:fa:4a:52:b1: d1:f1:44:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjUxMTAyMjAyNjEwWhcNMjUxMTA5MjAyNjEwWjAYMRYwFAYD VQQDEw02OTA3YmU2Mi1jMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQFJqA16oanRdg13jma+CGOrKQqqx7+Dypyj2Zpzuvtzh8IiUBgrtIJgg/N9 Jx0SV2zgrORt9y6ZPLSIOH9BH+IRAt18kF5WLRtwwyWFl1hkRPCdW520tx7nXwoF V5NS5pOelOlOgIaWl1H7TLHl9NEbIVh7ByjoG3Wdop8J/C3zqCUkj5SnHbj7te/f VkRFjZGHil+BFEByn4YHoWMhI9QyUR55bCP2PDBPQd6UqFLhg56UsJdn32DB7lhS rTmSwNcEmRyaNbtDFGx0UOXQUpJHc1MtOSiRnbLoHyjArPRB/0d1+ezqUmVjpFgz kS4ZdDvzf9p9atJOQ3rOznG42wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmNECTR jeJL1qFghWK4HLgJtBgOMB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9uBUqHOovf19PnAC4kh0Rks1gRPU0ax20tLeFl1Ng/RIMUfI2xiOH bX4KkomN2zMWwTNCmqGsQN+9Gb1oGbqisKsB3rqniIZ1qTUN/zffYWykyZGkWSil VMB/IX8u61BXXiDkAZbPXUSGdj2cuToGIURSDpxF7nPAD4CHrJ6hVKPntxWM2M4x QhPVKbjFcN4qEcuse0HVyOBTE9LXe0pPOblFaHRxiDP+o7t0ms97KMBLdowf93In RAfLDEHQE3jrak5sTjwSAtO8dtgT9EJRTC1JWJvh/RFh44AfhSDIHxkKAAjkn9KF OT4hVoz7P1L6NTC+dbU5qvpKUrHR8UQl -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:46 2025 by rpki-client