$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: v8krDecDH5RIb0Tjv/iYbVqdfcxsrm/HeEcHH2SNR6g= Subject key identifier: 06:AA:82:64:04:15:3B:2D:A0:5C:BC:B7:4E:5B:03:E1:36:A4:3A:A4 Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: B9 Signing time: Wed 05 Nov 2025 06:16:22 +0000 Manifest this update: Wed 05 Nov 2025 06:16:21 +0000 Manifest next update: Wed 12 Nov 2025 06:16:21 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: fU4CTh+lTEYq9tHM7YUqkufA5jb/Q2B8kIdbNknj7YM=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Nov 5 06:16:21 2025 GMT Not After : Nov 12 06:16:21 2025 GMT Subject: CN=690aebb6-4de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:3a:30:07:2e:67:f5:d4:c4:7a:31:c7:15: 9e:74:69:90:05:97:6d:6e:08:26:6b:17:35:e2:90: 85:57:b6:7a:84:36:b0:bd:14:1a:dd:5d:62:a9:30: f5:97:2f:1a:36:f5:e4:18:6c:8c:ba:b5:a5:7a:5b: 10:0f:f8:42:24:3d:14:67:09:54:26:20:70:2c:bf: a9:91:73:24:f8:ed:68:0c:b4:e9:4f:c7:42:63:a0: 31:17:e3:8d:76:0d:db:e6:cf:6c:1a:33:87:3a:10: c1:1d:d1:4d:6d:9c:dc:be:a8:ea:03:d1:05:3f:72: dc:dd:32:8f:33:68:25:1d:ee:93:30:1a:21:fc:eb: 35:9a:4d:8d:40:9a:5e:e6:50:ff:b3:14:5e:f4:e5: b9:fa:85:2a:84:72:38:2e:76:f8:ef:5f:8b:f7:31: bd:36:99:d4:fa:b1:fa:ce:02:59:5b:3c:d7:07:80: a6:b4:d3:42:67:04:75:6f:49:f5:4f:5a:e8:a1:10: 90:1f:a3:e9:76:c3:ae:d2:fe:a1:3d:63:75:b3:fc: ce:d7:fb:8d:f2:29:68:73:41:64:ca:00:be:d7:5c: 10:54:dc:cf:d2:31:cd:8a:84:df:88:89:76:99:ad: b0:57:8b:0f:bc:4e:09:53:56:94:f1:7b:dc:74:ea: a7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AA:82:64:04:15:3B:2D:A0:5C:BC:B7:4E:5B:03:E1:36:A4:3A:A4 X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c5:d2:47:e7:63:34:de:0a:e8:6a:14:fd:d1:04:9b:98:81: fb:89:50:4a:16:50:38:35:cd:5a:4e:94:bf:b1:d4:86:ff:f1: 64:99:01:a4:19:d1:33:c4:87:c2:ac:57:e2:ad:77:5a:77:c0: c5:86:cc:0e:95:1a:46:bc:32:8d:28:9a:97:a2:79:54:9d:6c: d5:fc:61:d8:67:21:74:17:ae:63:fc:ed:6b:cd:71:bd:b4:f4: 13:72:d4:17:12:66:59:ab:80:60:a1:00:29:87:eb:b1:17:55: 34:49:0f:72:17:d5:4b:65:46:a3:ac:32:61:78:30:ce:cb:b5: 47:d5:85:e8:1e:01:ef:57:a1:7a:0a:e6:d1:0e:98:c5:d9:80: 66:8f:fb:e2:59:06:c5:84:c2:1b:04:17:f9:3c:6b:ac:92:3c: ae:75:11:b9:67:6e:88:3e:4a:65:5e:48:4c:eb:a1:62:3a:10: c4:67:71:49:31:66:78:ee:3b:75:98:4c:74:ad:23:56:8a:0d: 1c:b4:ba:3f:81:c6:d5:6b:10:af:6a:51:f6:e7:4e:6d:33:1b: 75:dd:39:9d:0a:cb:29:de:7f:80:c2:1f:c8:f9:d2:be:49:19: 3c:93:7a:ee:cf:5b:e4:29:f2:f4:f3:23:df:c0:ee:49:14:d1: 1a:40:9b:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QkMxMTAvBgNVBAUTKEYxNUQxMTc5MEIwRTc1MzU3NDA2NjExREM1NzA1OEY2 OURDNTc4QTAwHhcNMjUxMTA1MDYxNjIxWhcNMjUxMTEyMDYxNjIxWjAYMRYwFAYD VQQDEw02OTBhZWJiNi00ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hA6MAcuZ/XUxHoxxxWedGmQBZdtbggmaxc14pCFV7Z6hDawvRQa3V1iqTD1 ly8aNvXkGGyMurWlelsQD/hCJD0UZwlUJiBwLL+pkXMk+O1oDLTpT8dCY6AxF+ON dg3b5s9sGjOHOhDBHdFNbZzcvqjqA9EFP3Lc3TKPM2glHe6TMBoh/Os1mk2NQJpe 5lD/sxRe9OW5+oUqhHI4Lnb471+L9zG9NpnU+rH6zgJZWzzXB4CmtNNCZwR1b0n1 T1rooRCQH6PpdsOu0v6hPWN1s/zO1/uN8iloc0FkygC+11wQVNzP0jHNioTfiIl2 ma2wV4sPvE4JU1aU8XvcdOqnjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaqgmQE FTstoFy8t05bA+E2pDqkMB8GA1UdIwQYMBaAFPFdEXkLDnU1dAZhHcVwWPadxXig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCQy9DQjg4MkU3RUE3 MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RUVjBCbUVkeFhCWTlwM0Zl S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9DQjg4MkU3RUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RU VjBCbUVkeFhCWTlwM0ZlS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZxdJH52M03groahT90QSbmIH7iVBKFlA4Nc1aTpS/sdSG//FkmQGk GdEzxIfCrFfirXdad8DFhswOlRpGvDKNKJqXonlUnWzV/GHYZyF0F65j/O1rzXG9 tPQTctQXEmZZq4BgoQAph+uxF1U0SQ9yF9VLZUajrDJheDDOy7VH1YXoHgHvV6F6 CubRDpjF2YBmj/viWQbFhMIbBBf5PGuskjyudRG5Z26IPkplXkhM66FiOhDEZ3FJ MWZ47jt1mEx0rSNWig0ctLo/gcbVaxCvalH2505tMxt13TmdCssp3n+Awh/I+dK+ SRk8k3ruz1vkKfL08yPfwO5JFNEaQJtg -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:51 2025 by rpki-client