$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft File: 8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json) Hash identifier: bJp34Ur5tDYZmMgog5gnyrpH7yi9gjU7bSGITrS6zyc= Subject key identifier: 4D:46:3A:1D:9D:0E:88:5F:59:FE:27:99:DB:73:98:95:95:18:AF:64 Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft Manifest number: 11 Signing time: Mon 03 Nov 2025 07:56:21 +0000 Manifest this update: Mon 03 Nov 2025 07:56:21 +0000 Manifest next update: Mon 10 Nov 2025 07:56:21 +0000 Files and hashes: 1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: uKzlypU9tG5OIVnwvY1FmmcUE94N1yEAeewaS3uHWIw=) 2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: Qyc81RIKSdu+FLrquo5aMNKuhSqU44VyZkyWHyn1G+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Validity Not Before: Nov 3 07:56:21 2025 GMT Not After : Nov 10 07:56:21 2025 GMT Subject: CN=69086025-be1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:97:49:38:34:30:69:52:1d:6a:41:b3:b9: 89:3b:46:e9:b8:1e:98:37:68:78:b6:4f:29:a1:e1: 0c:90:ec:de:cf:b8:80:d6:7d:4a:6e:5b:76:a5:dd: 09:64:eb:33:f4:97:ed:ad:82:cf:20:38:7a:a8:66: be:a7:91:5a:b5:10:7a:6a:fb:b9:04:0d:b2:3f:6c: 9b:0c:15:61:44:d7:bd:e1:26:cd:26:e7:19:1a:74: 3f:5c:26:6e:f3:5d:17:23:d4:b1:47:e6:b2:b8:7c: 7c:04:d1:44:4e:3f:2c:33:7e:9d:52:69:7a:bc:79: b7:bb:9e:52:d2:49:8e:d4:3b:50:90:f7:97:09:8c: d9:3d:67:54:e3:f0:65:f3:46:2f:7b:75:ce:24:1c: dc:c0:3b:3f:89:c9:02:55:cf:1a:03:c6:d7:ab:6e: 32:ea:26:44:c6:49:c3:4a:13:26:4b:d0:67:97:e0: 70:7e:be:f3:53:7f:08:78:01:3f:ea:24:5b:1a:46: d4:a8:27:80:ed:df:91:82:39:2d:18:8a:3d:af:a0: 72:8b:68:fc:7c:32:18:64:56:7e:67:25:c4:53:fa: 27:6c:7f:24:7f:76:d0:3f:64:23:84:b5:7b:41:f4: 43:38:a3:e8:79:ee:30:96:08:af:90:a8:48:d9:ac: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:46:3A:1D:9D:0E:88:5F:59:FE:27:99:DB:73:98:95:95:18:AF:64 X509v3 Authority Key Identifier: keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:62:ba:d8:69:99:58:a4:0e:4b:3d:65:91:68:3b:af:ff:6a: 94:c5:1c:00:e2:24:f3:e9:c5:7a:45:6f:c4:e2:0f:13:c9:e4: ab:12:78:3b:3f:51:af:59:b1:89:b3:e7:83:56:28:b0:a5:d4: 93:d8:0e:69:a6:0b:df:02:08:f3:69:7e:ec:9b:55:d6:4d:ed: bb:01:a3:39:02:03:d7:5b:eb:77:0f:13:09:46:d5:c1:b3:a1: 8a:d4:4f:25:4c:13:6a:e3:41:35:38:25:3d:c3:bd:c0:12:12: 8f:3a:a6:06:f1:7a:83:48:09:a5:e0:28:b3:34:60:64:81:f7: 6f:c0:de:09:b8:c7:3c:e1:0f:6c:1d:50:8b:0d:56:e4:76:af: 04:a1:fb:ef:a9:b6:f8:37:c9:62:8d:49:5f:07:05:96:87:65: a6:ed:dc:71:e1:a3:d6:e2:88:f1:36:6e:3e:ed:39:11:8a:8a: 1f:ae:a3:bf:7a:1e:89:2d:38:00:61:bc:53:bb:6f:92:4d:c8: 7a:d0:17:62:c2:49:c1:a4:d7:4c:c5:ff:92:a4:c9:9c:46:05: 07:31:91:58:6a:fc:b1:a7:4e:63:27:cd:3c:43:ae:c0:9d:a6: b7:aa:fe:e4:43:e5:0c:ad:3a:52:18:f5:e5:92:ec:b6:25:66: 09:73:ca:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoRjI2MTdBNTU0MTU3Q0U5OTIwOUUzOUZERkI1M0Q1MTZE RERFNzhGODAeFw0yNTExMDMwNzU2MjFaFw0yNTExMTAwNzU2MjFaMBgxFjAUBgNV BAMTDTY5MDg2MDI1LWJlMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy8pdJODQwaVIdakGzuYk7Rum4Hpg3aHi2Tymh4QyQ7N7PuIDWfUpuW3al3Qlk 6zP0l+2tgs8gOHqoZr6nkVq1EHpq+7kEDbI/bJsMFWFE173hJs0m5xkadD9cJm7z XRcj1LFH5rK4fHwE0UROPywzfp1SaXq8ebe7nlLSSY7UO1CQ95cJjNk9Z1Tj8GXz Ri97dc4kHNzAOz+JyQJVzxoDxterbjLqJkTGScNKEyZL0GeX4HB+vvNTfwh4AT/q JFsaRtSoJ4Dt35GCOS0Yij2voHKLaPx8MhhkVn5nJcRT+idsfyR/dtA/ZCOEtXtB 9EM4o+h57jCWCK+QqEjZrK/9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTUY6HZ0O iF9Z/ieZ23OYlZUYr2QwHwYDVR0jBBgwFoAU8mF6VUFXzpkgnjn9+1PVFt3eePgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzNGMzc1RDI2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBrZ25qbjktMVBWRnQzZWVQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOG1GNlZVRlh6cGtnbmpuOS0xUFZGdDNlZVBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzNGMzc1RDI2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBr Z25qbjktMVBWRnQzZWVQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB9iuthpmVikDks9ZZFoO6//apTFHADiJPPpxXpFb8TiDxPJ5KsSeDs/ Ua9ZsYmz54NWKLCl1JPYDmmmC98CCPNpfuybVdZN7bsBozkCA9db63cPEwlG1cGz oYrUTyVME2rjQTU4JT3DvcASEo86pgbxeoNICaXgKLM0YGSB92/A3gm4xzzhD2wd UIsNVuR2rwSh+++ptvg3yWKNSV8HBZaHZabt3HHho9biiPE2bj7tORGKih+uo796 HoktOABhvFO7b5JNyHrQF2LCScGk10zF/5KkyZxGBQcxkVhq/LGnTmMnzTxDrsCd preq/uRD5QytOlIY9eWS7LYlZglzyhQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:09 2025 by rpki-client