$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json) Hash identifier: VsQig57T2uA95LsdbRYXRipLKsnOPKK4yrmPfTPdkcU= Subject key identifier: E5:FA:A7:21:3A:52:4A:76:1C:73:32:7B:93:C8:B8:64:3E:5F:43:43 Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft Manifest number: 0364 Signing time: Wed 05 Nov 2025 01:00:34 +0000 Manifest this update: Wed 05 Nov 2025 01:00:33 +0000 Manifest next update: Wed 12 Nov 2025 01:00:33 +0000 Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: vYo0OkwPD8z+Se0GeGDraEuQ/RvU1egBnTnRLTjJsJ8=) 2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: 2T9vsc4C1WKjq9QaM+1XQHhjEU7ftzmE6rg4euSNxbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Validity Not Before: Nov 5 01:00:33 2025 GMT Not After : Nov 12 01:00:33 2025 GMT Subject: CN=690aa1b2-f6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:19:55:41:2e:9b:fe:ef:4f:32:08:66:ec: 33:66:3a:93:fe:ae:5c:79:89:05:a2:ab:f8:25:bc: 69:78:bc:28:93:7b:c9:80:8a:16:c9:7c:c8:ba:32: 7c:21:75:3f:5a:13:0e:d5:07:89:3f:67:f0:fe:51: 74:0b:68:2e:4f:d5:ce:7a:04:bd:cb:eb:2e:31:60: f9:e4:a6:13:4a:04:44:5a:4d:ad:14:2d:88:5b:59: b5:35:56:08:70:a9:02:ce:4b:cb:23:94:fa:da:26: cf:50:6d:c9:59:50:39:f5:3b:f6:b5:17:61:f1:fd: 67:28:60:4d:77:08:22:ca:af:32:4d:a8:88:76:b6: 6a:2c:ef:72:96:a3:7b:a4:76:05:05:56:7c:2d:a8: 77:28:04:99:2f:d4:e3:16:96:7c:30:9f:6e:70:21: 52:62:20:c2:e7:59:39:e3:23:ee:dc:59:e3:07:25: 12:39:1d:5b:01:fc:b6:13:82:91:1b:ad:0e:e2:d1: 3d:e2:be:f9:f9:8c:b6:5f:8c:6d:ad:33:1c:3e:ae: d2:6e:13:ef:9d:89:82:81:1a:cc:63:e2:70:11:8a: 62:1e:bf:f7:8c:c4:68:0f:db:e4:ab:79:7d:e0:04: 46:c5:59:3e:96:ad:2f:19:3e:53:0a:27:73:aa:0c: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FA:A7:21:3A:52:4A:76:1C:73:32:7B:93:C8:B8:64:3E:5F:43:43 X509v3 Authority Key Identifier: keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ee:b8:f3:b9:fd:03:d7:9c:53:08:eb:a7:e9:04:c7:ac:dc: 51:98:df:3f:9b:fe:b0:dc:8e:11:57:47:bf:fa:3d:5f:6b:5d: 5f:e3:48:12:77:a7:e9:ad:aa:ff:d3:4a:b1:2e:b7:a0:27:4d: 55:23:55:16:e6:90:80:77:2f:7e:8a:b6:27:1a:ab:fe:2e:c8: 19:b4:46:ef:b7:ee:70:ab:da:40:12:f2:57:f5:0f:d1:4f:ba: 58:c4:57:a3:17:4f:1e:9d:45:9e:4c:da:f5:3a:3c:f9:20:21: b7:90:cc:aa:1a:29:c1:53:58:98:ae:38:ab:87:ef:f7:16:60: 8b:49:03:46:29:7d:80:2f:db:0a:64:1f:32:30:ae:cf:0e:54: 76:b4:d3:ab:1c:c8:9a:29:ef:34:ba:be:28:85:53:91:91:57: f9:65:2b:e4:38:f1:81:6c:33:0e:d6:37:5b:0a:e0:2a:68:83: 46:83:c3:7b:9a:aa:42:b1:b5:9d:60:2b:85:41:01:ad:c5:c3: 00:55:ae:5f:bd:ac:35:4e:eb:ad:e9:dd:67:db:dd:89:05:da: ff:c5:67:58:5b:b0:cd:25:1b:0a:2d:10:c6:23:5a:54:46:b4: 52:32:68:b6:05:66:29:40:f6:58:76:43:04:61:f6:f3:04:56: e0:26:51:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMzQxMTAvBgNVBAUTKEQzQzYyMkU3OTBGMURFRjE2OTI4QkJFNTU0MTgxNzI3 Q0Y4Qzg4RjgwHhcNMjUxMTA1MDEwMDMzWhcNMjUxMTEyMDEwMDMzWjAYMRYwFAYD VQQDEw02OTBhYTFiMi1mNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuAZVUEum/7vTzIIZuwzZjqT/q5ceYkFoqv4JbxpeLwok3vJgIoWyXzIujJ8 IXU/WhMO1QeJP2fw/lF0C2guT9XOegS9y+suMWD55KYTSgREWk2tFC2IW1m1NVYI cKkCzkvLI5T62ibPUG3JWVA59Tv2tRdh8f1nKGBNdwgiyq8yTaiIdrZqLO9ylqN7 pHYFBVZ8Lah3KASZL9TjFpZ8MJ9ucCFSYiDC51k54yPu3FnjByUSOR1bAfy2E4KR G60O4tE94r75+Yy2X4xtrTMcPq7SbhPvnYmCgRrMY+JwEYpiHr/3jMRoD9vkq3l9 4ARGxVk+lq0vGT5TCidzqgxO5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOX6pyE6 Ukp2HHMye5PIuGQ+X0NDMB8GA1UdIwQYMBaAFNPGIueQ8d7xaSi75VQYFyfPjIj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIzNC9CMEZGMzBGRUQw MjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2RnBLTHZsVkJnWEo4LU1p UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WWk1NUR4M3ZGcEtMdmxWQmdYSjgtTWlQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIzNC9CMEZGMzBGRUQwMjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2 RnBLTHZsVkJnWEo4LU1pUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX7rjzuf0D15xTCOun6QTHrNxRmN8/m/6w3I4RV0e/+j1fa11f40gS d6fprar/00qxLregJ01VI1UW5pCAdy9+irYnGqv+LsgZtEbvt+5wq9pAEvJX9Q/R T7pYxFejF08enUWeTNr1Ojz5ICG3kMyqGinBU1iYrjirh+/3FmCLSQNGKX2AL9sK ZB8yMK7PDlR2tNOrHMiaKe80ur4ohVORkVf5ZSvkOPGBbDMO1jdbCuAqaINGg8N7 mqpCsbWdYCuFQQGtxcMAVa5fvaw1Tuut6d1n292JBdr/xWdYW7DNJRsKLRDGI1pU RrRSMmi2BWYpQPZYdkMEYfbzBFbgJlG7 -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:04 2025 by rpki-client