$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: 3ERlpxRL4X9ZSd9I9uWpRcFu1wBgNyn5z2nm7XpnX54= Subject key identifier: 46:D0:43:B6:49:CF:EA:07:A3:48:9A:49:B2:23:DE:4F:6C:3D:9D:8C Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0C9E Signing time: Tue 04 Nov 2025 18:23:49 +0000 Manifest this update: Tue 04 Nov 2025 18:23:49 +0000 Manifest next update: Tue 11 Nov 2025 18:23:49 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: +5fK6k85FG6i9pAZQIc9dGrmV2LblB/6IHvwpGsroXA=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Nov 4 18:23:49 2025 GMT Not After : Nov 11 18:23:49 2025 GMT Subject: CN=690a44b5-f47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:48:16:a6:90:05:43:7d:98:07:fa:fd:cc: c8:68:cc:4c:47:92:19:75:19:c3:6e:95:62:11:6c: 51:ed:0a:69:8e:24:8d:c8:eb:28:48:63:f2:19:5c: 11:9b:0b:9b:08:b3:66:ad:4f:b8:2a:f7:ae:ea:e9: c3:77:83:0e:2d:de:6f:b7:de:fb:2d:69:d7:22:72: a1:3a:0c:4e:ad:02:e8:ab:83:fc:bf:fb:cd:db:55: 4b:c2:0c:1c:98:f3:42:a0:c6:6d:4b:f5:39:b2:44: 74:97:1f:9b:d6:07:f3:1b:63:19:87:e7:bd:14:ba: f9:c2:2f:ff:9a:c8:f5:15:da:56:a2:25:36:c0:5e: 74:55:7d:d9:61:41:a8:74:a0:8c:90:07:f1:53:48: 14:46:b8:23:7f:6b:8f:20:4c:3c:90:0c:b9:bc:89: e6:57:a7:f5:a6:50:0f:14:bb:b0:f8:c4:d9:cb:b1: 53:94:87:66:69:6a:08:9c:e8:1d:36:20:bc:65:95: 07:e3:16:2f:d7:47:a8:b9:79:11:87:c5:57:76:d5: 5f:0b:cd:32:19:59:1f:4b:0a:13:ed:b2:05:b3:8a: 3f:ab:d6:1f:e7:d9:de:37:d1:10:b9:bc:0b:4e:aa: 9d:02:c2:35:85:d9:78:24:38:8d:5d:bd:eb:e5:d9: 1d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D0:43:B6:49:CF:EA:07:A3:48:9A:49:B2:23:DE:4F:6C:3D:9D:8C X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:a1:9d:c3:54:c1:da:74:39:79:be:17:cb:ee:91:16:0a:f8: 2f:a8:1b:ef:33:c5:8c:cd:56:9d:79:cf:7d:b8:61:07:32:1a: 69:4f:8b:23:fc:d6:c7:69:f0:5e:a4:cb:1e:fc:f1:2c:8a:c4: 7c:bf:90:16:d7:55:0e:84:e4:12:73:11:dc:30:6a:bb:98:e7: c0:5a:76:7c:aa:b7:94:44:a1:dd:c6:08:e6:fa:e5:cb:94:2d: 6d:9b:7b:66:4d:82:1b:86:f1:4a:eb:58:8a:24:d7:ac:78:f4: 33:f6:b0:63:c3:8d:79:6b:53:62:85:2d:c5:8f:28:a6:21:f5: 6a:7f:0a:27:07:79:bd:c0:0f:a8:80:3e:d5:53:e0:e2:b3:45: fd:c0:c8:18:f6:cb:9d:ce:64:0f:d4:2d:3a:63:d6:3a:ff:e2: 37:37:06:95:70:26:0f:f8:c5:17:6f:32:04:c4:09:98:32:20: 5e:25:22:0d:ed:67:b8:b2:3a:cf:0a:39:f5:5e:1f:df:17:e7: a1:93:fc:2b:f2:fb:de:29:4b:e7:30:36:52:55:9f:e0:c5:83: f9:e9:00:fb:29:31:4a:d3:8b:ac:fe:9a:77:1a:25:a2:54:4f: d2:25:74:f4:5a:58:b4:a1:1f:4a:cd:20:f7:66:55:13:35:e1: f5:9b:51:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjUxMTA0MTgyMzQ5WhcNMjUxMTExMTgyMzQ5WjAYMRYwFAYD VQQDEw02OTBhNDRiNS1mNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnRIFqaQBUN9mAf6/czIaMxMR5IZdRnDbpViEWxR7QppjiSNyOsoSGPyGVwR mwubCLNmrU+4Kveu6unDd4MOLd5vt977LWnXInKhOgxOrQLoq4P8v/vN21VLwgwc mPNCoMZtS/U5skR0lx+b1gfzG2MZh+e9FLr5wi//msj1FdpWoiU2wF50VX3ZYUGo dKCMkAfxU0gURrgjf2uPIEw8kAy5vInmV6f1plAPFLuw+MTZy7FTlIdmaWoInOgd NiC8ZZUH4xYv10eouXkRh8VXdtVfC80yGVkfSwoT7bIFs4o/q9Yf59neN9EQubwL TqqdAsI1hdl4JDiNXb3r5dkdVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbQQ7ZJ z+oHo0iaSbIj3k9sPZ2MMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADoZ3DVMHadDl5vhfL7pEWCvgvqBvvM8WMzVadec99uGEHMhppT4sj /NbHafBepMse/PEsisR8v5AW11UOhOQScxHcMGq7mOfAWnZ8qreURKHdxgjm+uXL lC1tm3tmTYIbhvFK61iKJNesePQz9rBjw415a1NihS3FjyimIfVqfwonB3m9wA+o gD7VU+Dis0X9wMgY9sudzmQP1C06Y9Y6/+I3NwaVcCYP+MUXbzIExAmYMiBeJSIN 7We4sjrPCjn1Xh/fF+ehk/wr8vveKUvnMDZSVZ/gxYP56QD7KTFK04us/pp3GiWi VE/SJXT0Wli0oR9KzSD3ZlUTNeH1m1Gw -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:23 2025 by rpki-client