$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: YRcEyLo8XnHWgWyd3fdDViq3l8R51yNUlxDDf4+DhdU= Subject key identifier: 72:F8:B0:6F:44:7C:B3:8A:C3:21:27:46:5A:97:42:14:79:12:F9:7D Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0CF9 Signing time: Tue 04 Nov 2025 21:26:13 +0000 Manifest this update: Tue 04 Nov 2025 21:26:13 +0000 Manifest next update: Tue 11 Nov 2025 21:26:13 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: Khh52SPY78J7eBP/4WN8k9IZ+mTvX2UAj+zHRp2IJgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Nov 4 21:26:13 2025 GMT Not After : Nov 11 21:26:13 2025 GMT Subject: CN=690a6f75-cb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:9a:92:da:80:ec:c2:ac:a3:24:76:a1:3c: e9:9a:3a:9a:72:cd:9c:0e:f2:65:14:e8:67:69:7d: 6f:8e:93:df:e8:88:77:03:20:36:d1:d7:1c:a8:a8: 18:a7:23:f6:15:a9:f7:c7:30:fc:d5:65:3a:77:b7: 7c:c0:45:84:a8:f4:79:ea:6c:90:fc:c5:1b:ee:a4: d3:ea:b5:e7:ae:69:9a:cd:b2:62:0d:63:71:b5:a3: 27:c3:87:b1:f7:8a:39:62:41:e3:63:74:92:1d:0c: 49:66:6b:2a:88:ee:5a:88:6c:4a:0f:7e:fd:b8:c7: f0:23:26:ac:39:74:30:93:91:70:37:4f:15:08:87: e4:2a:bd:cc:67:2a:fd:6a:7a:37:2b:a8:4a:30:d0: 8f:77:81:64:23:4a:69:51:36:65:ed:cc:aa:1a:87: 48:34:9f:76:44:78:e5:08:6d:aa:28:e2:66:38:be: e5:47:55:70:a1:e9:d2:b4:eb:e7:8f:0e:3f:73:81: d7:ca:64:7d:d1:bf:88:5b:81:7e:88:1b:fd:6b:3a: e7:87:cc:cc:c7:85:1b:1c:86:6b:bc:84:d4:7c:45: cc:78:15:16:ac:37:30:a9:4f:11:5b:ef:ea:80:ba: fe:66:e7:96:52:9e:a5:6b:a5:7c:d0:9a:b4:6b:6e: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F8:B0:6F:44:7C:B3:8A:C3:21:27:46:5A:97:42:14:79:12:F9:7D X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a9:7b:82:45:85:c9:d7:3b:98:c8:19:e7:6b:2f:0b:79:1d: fa:e7:ef:c4:28:84:3b:e6:c4:a0:60:d5:ec:77:fa:aa:b0:83: df:8c:06:42:69:35:07:cc:60:52:0d:1c:33:32:b0:72:05:0c: 2e:7f:7b:29:36:53:f5:f5:bf:e0:f2:e3:d3:26:70:2b:9f:0e: bd:04:4d:d2:bf:b8:0d:b8:1f:b3:94:8e:05:20:4a:ec:89:ae: c9:84:03:43:74:c4:14:f2:e5:9c:11:ac:3f:6d:8a:3e:5d:c1: 6c:e0:a5:4f:f6:85:d2:37:b2:85:be:69:97:6d:ed:b8:f6:9f: 4b:0a:11:77:d2:d3:dd:86:ca:4b:2b:5d:a1:4c:4b:38:74:03: f2:6b:0d:af:10:fb:57:32:93:cc:73:64:b6:a0:05:95:e9:32: b2:ac:ee:a6:98:bb:ab:3f:25:fd:a3:2f:9a:a2:e4:14:eb:5a: f9:05:20:ef:fd:5a:ea:72:8a:9b:80:80:7a:73:87:5e:ec:df: 73:f5:ab:c7:76:8e:24:db:7f:9a:6a:57:fb:cf:31:08:5c:8c: e9:fc:82:12:2a:12:d2:4c:f8:85:65:68:73:cd:17:c0:8c:16: 8e:ca:6f:58:43:cf:87:f3:c6:3f:41:46:9a:f8:20:45:17:91: e7:53:55:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUxMTA0MjEyNjEzWhcNMjUxMTExMjEyNjEzWjAYMRYwFAYD VQQDEw02OTBhNmY3NS1jYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxiaktqA7MKsoyR2oTzpmjqacs2cDvJlFOhnaX1vjpPf6Ih3AyA20dccqKgY pyP2Fan3xzD81WU6d7d8wEWEqPR56myQ/MUb7qTT6rXnrmmazbJiDWNxtaMnw4ex 94o5YkHjY3SSHQxJZmsqiO5aiGxKD379uMfwIyasOXQwk5FwN08VCIfkKr3MZyr9 ano3K6hKMNCPd4FkI0ppUTZl7cyqGodINJ92RHjlCG2qKOJmOL7lR1VwoenStOvn jw4/c4HXymR90b+IW4F+iBv9azrnh8zMx4UbHIZrvITUfEXMeBUWrDcwqU8RW+/q gLr+ZueWUp6la6V80Jq0a26epQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL4sG9E fLOKwyEnRlqXQhR5Evl9MB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWqXuCRYXJ1zuYyBnnay8LeR365+/EKIQ75sSgYNXsd/qqsIPfjAZC aTUHzGBSDRwzMrByBQwuf3spNlP19b/g8uPTJnArnw69BE3Sv7gNuB+zlI4FIErs ia7JhANDdMQU8uWcEaw/bYo+XcFs4KVP9oXSN7KFvmmXbe249p9LChF30tPdhspL K12hTEs4dAPyaw2vEPtXMpPMc2S2oAWV6TKyrO6mmLurPyX9oy+aouQU61r5BSDv /VrqcoqbgIB6c4de7N9z9avHdo4k23+aalf7zzEIXIzp/IISKhLSTPiFZWhzzRfA jBaOym9YQ8+H88Y/QUaa+CBFF5HnU1U6 -----END CERTIFICATE-----Generated at Wed Nov 5 15:14:34 2025 by rpki-client