$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: r3N4MDpoymaEUKic0vBUmlJTMlcjAO3IMPBdf2q/x6c= Subject key identifier: F0:46:97:33:22:90:16:17:BA:CA:16:D8:75:4C:AF:C4:AC:FA:4E:60 Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 01A8 Signing time: Mon 03 Nov 2025 03:13:13 +0000 Manifest this update: Mon 03 Nov 2025 03:13:13 +0000 Manifest next update: Mon 10 Nov 2025 03:13:13 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: Zp7xoI+Sm3hvZtGTu0lUUMmD5pouW+llHaRmq5s4hSo=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Nov 3 03:13:13 2025 GMT Not After : Nov 10 03:13:13 2025 GMT Subject: CN=69081dc9-d453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:f3:6d:31:90:8a:19:2a:53:c0:7a:6a:5a: db:7e:73:16:a0:b5:31:a6:87:30:8c:e4:95:e0:63: dd:17:34:92:8f:b7:01:82:24:9b:80:0a:d1:cf:0a: 9b:1f:9f:46:99:ce:f8:3b:31:61:5d:f8:26:60:cd: d7:fd:af:df:c3:4e:9e:ed:df:c7:4c:5a:28:bb:d1: 6f:a9:08:c2:7b:1e:21:c6:6e:b1:b3:87:28:59:61: a5:5f:12:60:af:6b:df:1f:27:6d:bf:71:32:4f:37: 1a:a0:ce:1b:fb:ac:27:e8:50:59:92:1e:9a:26:36: ed:09:31:a5:92:19:03:1f:97:2d:0e:1a:f5:e5:f1: 78:8c:ab:3b:9b:91:43:8c:70:42:61:07:e8:63:ec: 76:44:92:1b:4e:54:e1:df:f9:84:66:7d:da:1d:64: 68:c9:75:53:73:7c:03:1d:85:da:5d:67:0f:a5:3b: ec:7b:88:bf:a3:ac:29:13:92:73:d5:1d:d1:5c:e6: 66:7a:aa:19:85:b5:f5:67:aa:1e:e4:89:10:1f:e5: 20:fd:a4:1f:db:83:13:40:8e:4b:91:d1:f2:9f:9b: 18:0f:d1:13:08:eb:8b:81:62:41:39:a2:2b:4f:0f: 84:12:2c:57:dd:c8:9c:8c:72:22:b7:5a:1f:5e:0b: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:46:97:33:22:90:16:17:BA:CA:16:D8:75:4C:AF:C4:AC:FA:4E:60 X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cf:ae:02:d9:38:7d:c2:ad:50:aa:5b:03:30:b9:e4:89:fb: 95:2d:c5:61:7f:5f:d0:f5:82:7d:68:41:c1:d5:8e:47:82:35: e3:26:54:de:6c:46:8e:be:49:06:18:b4:6c:c3:f7:18:3e:98: 27:1f:a9:9d:ff:d5:a2:73:91:07:1a:aa:27:b9:7b:08:27:d2: fe:86:2a:e0:36:9a:5e:db:e9:a1:bd:60:b1:27:db:dc:4e:7c: 59:c6:29:d1:a9:57:63:36:4a:45:00:ce:e0:6d:ab:f6:d1:92: 29:bb:2f:25:8b:a4:98:d7:7e:f0:de:d7:0b:1a:6e:a8:c0:72: ae:b5:16:9b:36:66:73:0a:9c:87:d4:58:70:81:93:57:73:28: 02:e8:15:42:9d:7a:07:ae:2f:13:6a:5e:ac:69:12:ac:c7:46: 04:2c:da:8e:fd:8d:e6:08:0c:aa:95:20:82:bf:dc:74:de:c1: a2:34:ce:30:08:65:a1:6c:9e:a4:93:9e:bd:54:5c:30:8c:73: 6b:4f:9a:84:65:ed:67:ff:d4:48:f3:5f:e9:f7:88:d2:fe:d7: 93:a4:8a:21:43:60:16:95:85:3f:93:4b:62:a9:41:41:bd:f0: 52:18:07:24:2f:98:72:ea:77:8c:34:f2:5b:eb:f7:35:47:8f: 9b:04:8a:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUxMTAzMDMxMzEzWhcNMjUxMTEwMDMxMzEzWjAYMRYwFAYD VQQDEw02OTA4MWRjOS1kNDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yzzbTGQihkqU8B6alrbfnMWoLUxpocwjOSV4GPdFzSSj7cBgiSbgArRzwqb H59Gmc74OzFhXfgmYM3X/a/fw06e7d/HTFoou9FvqQjCex4hxm6xs4coWWGlXxJg r2vfHydtv3EyTzcaoM4b+6wn6FBZkh6aJjbtCTGlkhkDH5ctDhr15fF4jKs7m5FD jHBCYQfoY+x2RJIbTlTh3/mEZn3aHWRoyXVTc3wDHYXaXWcPpTvse4i/o6wpE5Jz 1R3RXOZmeqoZhbX1Z6oe5IkQH+Ug/aQf24MTQI5LkdHyn5sYD9ETCOuLgWJBOaIr Tw+EEixX3cicjHIit1ofXgvzBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBGlzMi kBYXusoW2HVMr8Ss+k5gMB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+z64C2Th9wq1QqlsDMLnkifuVLcVhf1/Q9YJ9aEHB1Y5HgjXjJlTe bEaOvkkGGLRsw/cYPpgnH6md/9Wic5EHGqonuXsIJ9L+hirgNppe2+mhvWCxJ9vc TnxZxinRqVdjNkpFAM7gbav20ZIpuy8li6SY137w3tcLGm6owHKutRabNmZzCpyH 1FhwgZNXcygC6BVCnXoHri8Tal6saRKsx0YELNqO/Y3mCAyqlSCCv9x03sGiNM4w CGWhbJ6kk569VFwwjHNrT5qEZe1n/9RI81/p94jS/teTpIohQ2AWlYU/k0tiqUFB vfBSGAckL5hy6neMNPJb6/c1R4+bBIrF -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:47 2025 by rpki-client