$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft File: 8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json) Hash identifier: 1wBiz5E67PD3fSrfxnI+uNHqhW+62EczjjtWfkSSAmw= Subject key identifier: 0B:69:18:21:BC:82:1D:53:11:1D:85:D2:80:3B:5B:77:30:4B:33:2C Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Certificate serial: 06EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft Manifest number: 06E9 Signing time: Sun 02 Nov 2025 21:56:50 +0000 Manifest this update: Sun 02 Nov 2025 21:56:49 +0000 Manifest next update: Sun 09 Nov 2025 21:56:49 +0000 Files and hashes: 1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: aNe0F86oQtqyPDi6hlnaKqDfvDI8KwHalNVcnVcQRJc=) 2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: 52JrCnBm7L06RLcpZu8B4A+YSslnAZRmYTLK9Jex7Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Validity Not Before: Nov 2 21:56:49 2025 GMT Not After : Nov 9 21:56:49 2025 GMT Subject: CN=6907d3a2-0df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:54:ab:a5:06:1d:ab:72:26:4e:b8:7c:d2:55: 57:81:f5:47:80:51:79:31:6b:f8:8a:c9:7f:60:09: da:52:46:56:6f:0f:94:39:bd:4a:90:66:c5:d5:91: 14:8d:65:32:fe:69:7a:c3:cd:b4:07:17:96:be:e3: 15:2b:77:80:dd:f9:53:be:6e:56:ec:0b:4a:33:2e: 27:89:90:d6:09:f1:d3:49:3e:51:dc:3c:61:3f:5d: 9f:66:15:ae:db:67:ae:9f:16:7c:68:35:05:9a:88: be:d4:1c:83:3d:76:26:89:2f:03:b9:8d:86:38:7b: 76:aa:79:24:e2:40:d6:42:c9:f5:6a:a9:36:b3:0b: 4b:17:0b:47:fc:97:49:2f:f7:12:7c:b4:43:eb:cd: eb:0b:29:f7:16:ba:fc:54:af:75:22:c6:7e:8c:07: 61:11:f7:62:d3:8b:67:8d:d7:ac:89:e0:10:13:6b: 26:02:83:91:c1:a7:77:12:cf:2b:04:01:2d:1c:57: aa:e7:75:70:44:e1:6a:00:8a:af:99:00:33:64:c4: db:19:63:7a:a6:76:86:75:56:81:68:75:57:5d:95: ff:d1:0b:37:b0:e8:dd:4c:f5:0b:ce:76:c2:83:aa: 61:0e:53:e9:64:e3:bb:4b:57:da:e2:89:44:e8:69: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:69:18:21:BC:82:1D:53:11:1D:85:D2:80:3B:5B:77:30:4B:33:2C X509v3 Authority Key Identifier: keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c5:2c:f8:ad:5d:8d:91:a6:4f:2b:cb:58:fc:ab:6b:78:a5: 7a:90:d5:9a:52:63:c2:e7:3c:94:32:9d:bc:ca:cb:7c:9b:af: 10:03:1a:22:d4:d3:9d:21:af:af:c1:3d:5a:00:cf:ec:b6:56: 64:9c:d6:5d:8c:5b:ec:f2:b7:70:d2:12:f3:b0:37:77:9a:7c: b1:5e:02:77:5b:66:13:41:f3:58:71:02:96:7f:b6:76:4f:43: af:8c:51:f2:4c:3e:c9:3a:7c:d1:ec:6e:dd:1c:51:aa:c5:ed: 43:05:b9:a7:8f:7c:da:62:d0:b0:8f:e7:1a:82:0e:d1:b1:4f: 78:a4:10:4d:c1:d5:e1:aa:38:ed:ce:61:f9:6a:b3:46:f3:e1: 20:18:b8:80:f5:e7:88:c1:2a:d6:f2:85:8c:48:4e:cf:a0:c8: 8a:1a:d4:de:f7:4d:16:b3:7e:32:e5:52:e6:96:8a:d4:e4:f2: 2b:0a:95:f0:4c:8a:74:9a:f8:c1:43:c2:53:58:f6:2d:ff:2c: 90:3a:58:2c:43:e6:b6:ad:ba:9f:23:15:b5:86:2e:e2:8d:3a: e9:ed:00:b6:0e:77:e6:34:46:54:ac:f5:ac:9f:79:35:26:63: c3:ce:b6:19:0b:94:d6:52:bb:35:8f:d4:62:7f:48:dc:19:23: 60:bf:01:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MDUxMTAvBgNVBAUTKEYwNDY5MEJCMDNFMEQzOTYyQjQ4MDhFNEQwNkNCMjZB MzQ5MEU1MTYwHhcNMjUxMTAyMjE1NjQ5WhcNMjUxMTA5MjE1NjQ5WjAYMRYwFAYD VQQDEw02OTA3ZDNhMi0wZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VSrpQYdq3ImTrh80lVXgfVHgFF5MWv4isl/YAnaUkZWbw+UOb1KkGbF1ZEU jWUy/ml6w820BxeWvuMVK3eA3flTvm5W7AtKMy4niZDWCfHTST5R3DxhP12fZhWu 22eunxZ8aDUFmoi+1ByDPXYmiS8DuY2GOHt2qnkk4kDWQsn1aqk2swtLFwtH/JdJ L/cSfLRD683rCyn3Frr8VK91IsZ+jAdhEfdi04tnjdesieAQE2smAoORwad3Es8r BAEtHFeq53VwROFqAIqvmQAzZMTbGWN6pnaGdVaBaHVXXZX/0Qs3sOjdTPULznbC g6phDlPpZOO7S1fa4olE6Gk5NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtpGCG8 gh1TER2F0oA7W3cwSzMsMB8GA1UdIwQYMBaAFPBGkLsD4NOWK0gI5NBssmo0kOUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYwNS83MjUwQ0E0NDZD MzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1WXJTQWprMEd5eWFqU1E1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFYVF1d1BnMDVZclNBamswR3l5YWpTUTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYwNS83MjUwQ0E0NDZDMzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1 WXJTQWprMEd5eWFqU1E1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIxSz4rV2NkaZPK8tY/KtreKV6kNWaUmPC5zyUMp28yst8m68QAxoi 1NOdIa+vwT1aAM/stlZknNZdjFvs8rdw0hLzsDd3mnyxXgJ3W2YTQfNYcQKWf7Z2 T0OvjFHyTD7JOnzR7G7dHFGqxe1DBbmnj3zaYtCwj+cagg7RsU94pBBNwdXhqjjt zmH5arNG8+EgGLiA9eeIwSrW8oWMSE7PoMiKGtTe900Ws34y5VLmlorU5PIrCpXw TIp0mvjBQ8JTWPYt/yyQOlgsQ+a2rbqfIxW1hi7ijTrp7QC2DnfmNEZUrPWsn3k1 JmPDzrYZC5TWUrs1j9Rif0jcGSNgvwFY -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:57 2025 by rpki-client