$ rpki-client -vvf rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft File: x8MjS9JtrWKeLX70REhP5UHYFI4.mft (raw, json) Hash identifier: Qtv2aBRUzdeEPzGTqgDsh9wdg5ztS5pWvU7PDQJ88F4= Subject key identifier: 76:E3:88:D8:9F:AF:81:EA:26:8B:86:D9:40:CD:3C:6D:7F:D1:30:58 Authority key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E Certificate issuer: /CN=A91E36C4/serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft Manifest number: 7C Signing time: Wed 05 Nov 2025 06:59:21 +0000 Manifest this update: Wed 05 Nov 2025 06:59:21 +0000 Manifest next update: Wed 12 Nov 2025 06:59:21 +0000 Files and hashes: 1: x8MjS9JtrWKeLX70REhP5UHYFI4.crl (hash: 4zN6FjGJdk7o4FELpa3Zn5gtEZo+FsHDa+KeH4UCTqY=) 2: FA429FD6FEED11EF826A3F81C4F9AE02.roa (hash: 39w+18fUPSiKVB8OhUL0ki9Bi8qUl1J3wP6kCBvBYqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Validity Not Before: Nov 5 06:59:21 2025 GMT Not After : Nov 12 06:59:21 2025 GMT Subject: CN=690af5c9-f3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:fd:b2:71:02:0e:6c:5a:a2:d0:11:74:93: a0:62:a1:61:e4:6f:04:02:f2:8b:fa:c0:1e:e6:1f: 39:11:d2:28:73:54:ac:f7:f8:9f:98:66:18:7e:eb: 22:ba:b4:d0:cd:11:91:f9:75:32:ae:f4:22:3b:53: e7:95:ff:f9:bc:23:29:3d:f9:3c:29:3b:70:e4:a5: 57:bc:0c:1e:85:26:8a:62:cf:c4:90:1a:d6:64:88: 49:a8:69:ae:5e:50:5c:a8:c5:5c:5a:63:97:5a:62: d6:ab:4b:20:79:80:8b:89:74:23:25:9e:3e:16:5b: c2:23:21:15:7f:87:c7:95:3a:ea:02:2c:45:56:b3: 53:62:6f:94:f0:43:e4:f6:45:3c:ae:b1:6a:97:e6: b2:70:54:9a:86:24:a8:32:56:07:40:1f:7e:7a:12: 28:3a:66:c0:b6:0d:00:8a:a6:1e:c5:35:94:9d:2f: db:35:16:19:4b:17:03:cc:2a:b1:60:55:a4:4c:be: 24:64:90:8f:b0:24:02:07:83:a1:70:6f:d2:5e:7e: 65:94:f3:fe:4d:85:95:92:fd:f5:ac:1a:02:5a:fc: 9a:23:99:47:65:9b:3d:76:63:5c:f4:2e:a3:9e:6b: e2:f4:cc:fe:9f:1e:9c:90:20:f9:39:95:23:af:96: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E3:88:D8:9F:AF:81:EA:26:8B:86:D9:40:CD:3C:6D:7F:D1:30:58 X509v3 Authority Key Identifier: keyid:C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:28:48:a3:a3:1d:fc:01:03:0b:7b:0a:b6:1a:24:ee:f4:b3: aa:3c:81:45:0f:84:93:55:19:c8:30:8f:0c:22:bc:9f:bd:da: 43:a8:b4:8c:48:de:00:b2:e4:78:77:55:03:97:3f:4f:df:3a: d7:0b:4d:18:5b:84:2c:43:c6:6a:17:15:7b:74:67:13:e0:34: a9:1d:eb:ee:ad:c6:df:71:04:bd:48:24:f7:bf:49:f6:3f:f2: c5:ae:2b:40:e3:3f:b1:f4:0c:87:35:0c:61:4e:97:9a:c2:5f: a5:42:10:61:4c:98:65:72:15:20:fa:8c:de:8a:70:35:46:be: 75:9a:7a:c7:b6:8a:e6:92:e7:2b:9d:63:10:a8:78:f9:99:3a: e1:55:02:e5:4c:f1:dd:4d:c7:cd:29:ad:14:29:e9:7c:7e:89: 92:63:aa:38:25:c2:4c:dc:4c:c9:aa:f1:bf:b9:e5:fc:7b:68: d0:ca:58:a5:c0:e6:21:13:87:72:f1:f3:cd:f3:ef:43:0b:ac: 71:40:a7:e7:d7:c2:26:2b:c1:52:9a:f2:e7:30:e5:c2:f0:52: 29:93:69:5a:a7:33:82:c8:3f:c3:53:0a:52:b7:ea:b5:e3:1c: 75:84:d5:7a:cf:d9:45:01:2f:0a:00:bd:44:f3:bc:e5:f0:c1: c2:89:11:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzZDNDExMC8GA1UEBRMoQzdDMzIzNEJEMjZEQUQ2MjlFMkQ3RUY0NDQ0ODRGRTU0 MUQ4MTQ4RTAeFw0yNTExMDUwNjU5MjFaFw0yNTExMTIwNjU5MjFaMBgxFjAUBgNV BAMTDTY5MGFmNWM5LWYzZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHSP2ycQIObFqi0BF0k6BioWHkbwQC8ov6wB7mHzkR0ihzVKz3+J+YZhh+6yK6 tNDNEZH5dTKu9CI7U+eV//m8Iyk9+TwpO3DkpVe8DB6FJopiz8SQGtZkiEmoaa5e UFyoxVxaY5daYtarSyB5gIuJdCMlnj4WW8IjIRV/h8eVOuoCLEVWs1Nib5TwQ+T2 RTyusWqX5rJwVJqGJKgyVgdAH356Eig6ZsC2DQCKph7FNZSdL9s1FhlLFwPMKrFg VaRMviRkkI+wJAIHg6Fwb9JefmWU8/5NhZWS/fWsGgJa/JojmUdlmz12Y1z0LqOe a+L0zP6fHpyQIPk5lSOvlu+bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUduOI2J+v geomi4bZQM08bX/RMFgwHwYDVR0jBBgwFoAUx8MjS9JtrWKeLX70REhP5UHYFI4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNkM0L0MxNjA1ODUyRkVF RDExRUY5RkY2Q0U4MEM0RjlBRTAyL3g4TWpTOUp0cldLZUxYNzBSRWhQNVVIWUZJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDhNalM5SnRyV0tlTFg3MFJFaFA1VUhZRkk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NkM0L0MxNjA1ODUyRkVFRDExRUY5RkY2Q0U4MEM0RjlBRTAyL3g4TWpTOUp0cldL ZUxYNzBSRWhQNVVIWUZJNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwoSKOjHfwBAwt7CrYaJO70s6o8gUUPhJNVGcgwjwwivJ+92kOotIxI 3gCy5Hh3VQOXP0/fOtcLTRhbhCxDxmoXFXt0ZxPgNKkd6+6txt9xBL1IJPe/SfY/ 8sWuK0DjP7H0DIc1DGFOl5rCX6VCEGFMmGVyFSD6jN6KcDVGvnWaese2iuaS5yud YxCoePmZOuFVAuVM8d1Nx80prRQp6Xx+iZJjqjglwkzcTMmq8b+55fx7aNDKWKXA 5iETh3Lx883z70MLrHFAp+fXwiYrwVKa8ucw5cLwUimTaVqnM4LIP8NTClK36rXj HHWE1XrP2UUBLwoAvUTzvOXwwcKJEX4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:48 2025 by rpki-client