$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: bzOyourrUqm6Uzo9euj63eqD6EOZk/GeZ68/eFYWOvY= Subject key identifier: 6D:47:06:79:70:F0:43:12:30:39:BE:6A:3D:35:CF:61:B5:9F:3A:B0 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 05F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 05D9 Signing time: Tue 04 Nov 2025 23:08:53 +0000 Manifest this update: Tue 04 Nov 2025 23:08:52 +0000 Manifest next update: Tue 11 Nov 2025 23:08:52 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: OTs/eeY7Mjni+04Es/rKyZDOado5VHeY6g6jA4WWADU=) 2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: eZp28/ZhhARP0YeFheqkwTLrrVm+pDubRXIX/coSMO4=) 3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: UjG7oDUQ214221eoKLkpu49JL/kh+6CSjcDdtuUyQv4=) 4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: K5rdCvcUlROQ0BuNDtcUQ3F8rgeuD4032+cfZuPHo+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1520 (0x5f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Nov 4 23:08:52 2025 GMT Not After : Nov 11 23:08:52 2025 GMT Subject: CN=690a8785-3b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:7c:80:c6:dc:38:f0:64:69:cb:1f:11:f7: cb:99:6f:14:7d:0b:c0:83:4f:c6:37:f8:7a:e7:f2: dd:9d:a6:5f:04:6f:20:b4:53:e8:79:43:14:b8:cf: 43:f0:e1:86:61:80:75:a9:ae:e4:d7:53:83:f9:7e: 32:7c:67:1a:8f:1f:e0:cc:a4:f2:b2:46:7d:90:3f: a4:39:a4:c0:e9:22:4c:3e:15:06:ca:8b:64:51:da: 38:28:e6:32:09:7e:dd:38:5b:45:a8:87:04:51:d7: 1d:a7:a8:2d:c0:6f:bd:d5:4f:8a:10:07:e9:c2:7b: 82:ca:2c:60:57:48:4b:7c:53:c8:da:6b:5f:5b:96: 98:e3:94:00:d5:aa:a1:0b:d6:6a:79:24:a6:dc:2d: 99:76:9d:fe:b0:6e:eb:46:e6:ea:12:59:1d:c5:41: 6a:b1:64:ae:c5:08:95:a1:2d:de:74:d3:87:ba:bb: d0:75:2e:65:cb:c0:c3:58:93:bd:6e:60:85:de:d4: be:68:99:09:d8:f6:97:d4:45:76:11:42:c2:ae:ec: 30:b3:29:0d:6e:99:62:f4:ac:13:96:37:01:04:a1: 8b:2f:36:01:6f:5e:64:b9:4d:4b:1c:aa:f5:a5:b5: e1:2f:9f:5a:6d:4f:50:30:6f:e1:7b:71:9d:cc:a6: 84:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:06:79:70:F0:43:12:30:39:BE:6A:3D:35:CF:61:B5:9F:3A:B0 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:4e:a4:aa:c6:19:a5:07:82:a0:f4:94:30:ae:69:12:a1:99: d7:e1:81:06:9c:ae:01:7e:1e:70:e6:55:9e:48:14:2c:66:e2: 18:7d:63:f6:f3:5b:01:56:0f:2e:60:85:8b:b5:b8:b8:0c:7b: 13:22:c3:4e:ac:25:43:4f:f8:ae:ab:56:a2:5c:7f:bd:f9:ea: c7:dc:60:9b:f8:4c:39:dd:7f:5a:24:d7:96:3f:de:65:22:9e: ef:54:33:3e:63:23:b3:b9:3a:d6:f3:31:c2:89:4f:5b:9b:85: 2a:59:20:73:b1:55:d3:4c:76:36:0b:08:09:11:20:bf:a9:66: c9:47:a9:6f:32:ee:ab:4d:2b:6e:e6:55:dc:13:25:af:32:eb: 48:ca:bc:a4:14:fa:71:2e:2c:a8:35:ac:da:a3:19:22:a3:7e: 0a:9e:00:57:1a:ea:51:f3:1f:c6:fd:24:fb:93:d4:34:00:aa: da:35:6b:26:d4:22:28:6c:dc:35:53:5c:ba:0d:77:ca:e1:a4: c1:02:13:b3:84:9e:3c:d1:6e:bc:f7:15:b0:80:64:31:a8:87: ba:34:f6:6a:cd:56:49:c0:d6:8e:98:ea:58:90:0c:6e:1b:d3: 50:4c:ac:20:7c:08:41:3f:b2:4c:ca:0a:b0:9f:e2:b8:8e:30: 39:75:bd:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjUxMTA0MjMwODUyWhcNMjUxMTExMjMwODUyWjAYMRYwFAYD VQQDEw02OTBhODc4NS0zYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOd8gMbcOPBkacsfEffLmW8UfQvAg0/GN/h65/LdnaZfBG8gtFPoeUMUuM9D 8OGGYYB1qa7k11OD+X4yfGcajx/gzKTyskZ9kD+kOaTA6SJMPhUGyotkUdo4KOYy CX7dOFtFqIcEUdcdp6gtwG+91U+KEAfpwnuCyixgV0hLfFPI2mtfW5aY45QA1aqh C9ZqeSSm3C2Zdp3+sG7rRubqElkdxUFqsWSuxQiVoS3edNOHurvQdS5ly8DDWJO9 bmCF3tS+aJkJ2PaX1EV2EULCruwwsykNbpli9KwTljcBBKGLLzYBb15kuU1LHKr1 pbXhL59abU9QMG/he3GdzKaEQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1HBnlw 8EMSMDm+aj01z2G1nzqwMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDTqSqxhmlB4Kg9JQwrmkSoZnX4YEGnK4Bfh5w5lWeSBQsZuIYfWP2 81sBVg8uYIWLtbi4DHsTIsNOrCVDT/iuq1aiXH+9+erH3GCb+Ew53X9aJNeWP95l Ip7vVDM+YyOzuTrW8zHCiU9bm4UqWSBzsVXTTHY2CwgJESC/qWbJR6lvMu6rTStu 5lXcEyWvMutIyrykFPpxLiyoNazaoxkio34KngBXGupR8x/G/ST7k9Q0AKraNWsm 1CIobNw1U1y6DXfK4aTBAhOzhJ480W689xWwgGQxqIe6NPZqzVZJwNaOmOpYkAxu G9NQTKwgfAhBP7JMygqwn+K4jjA5db3Z -----END CERTIFICATE-----Generated at Wed Nov 5 02:40:43 2025 by rpki-client