$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: OEMAN1n1H6tQh44ArLWYoQ+5V6etXIr3ccQbhdTOKUI= Subject key identifier: 04:D9:8B:12:23:2C:EF:5F:80:F2:40:02:2B:D7:DC:88:09:37:35:51 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 01AF Signing time: Wed 05 Nov 2025 03:16:12 +0000 Manifest this update: Wed 05 Nov 2025 03:16:12 +0000 Manifest next update: Wed 12 Nov 2025 03:16:12 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: 1OrMhzH8KKx02x1yQ7/A8Xlm/hh7VJcQ85f8PHZyD80=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: JUSU1VmCrt2YGTrN+Q0jV8oiBs7Aumf+6ve9iuHLrvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Nov 5 03:16:12 2025 GMT Not After : Nov 12 03:16:12 2025 GMT Subject: CN=690ac17c-32d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:18:a4:e0:f1:68:f4:36:78:77:a1:e1:5c:f0: b6:95:8f:fc:ee:37:1b:1c:10:4f:e0:13:f0:9c:bf: 44:fc:40:2f:25:ff:9c:d3:d3:16:c1:27:8d:72:3e: 05:fc:2d:c9:ed:34:4a:d0:1e:31:39:36:94:3a:61: 24:6e:bb:0b:01:67:aa:b0:b1:4e:7f:5b:e8:8f:f8: 47:80:63:32:9a:3e:86:43:c7:29:ea:64:da:1a:b5: 51:cb:0c:ee:b5:64:1f:42:96:26:13:a9:2a:10:9f: e8:83:62:5d:13:01:8c:d7:36:38:a0:69:71:48:f0: 5e:7f:d9:27:fb:cb:f3:99:63:92:eb:5c:34:20:a1: ac:a3:e8:74:d3:ae:22:58:ff:27:ad:65:88:8b:be: 72:62:f9:91:ed:3c:69:fc:ee:f1:96:79:52:ca:62: 1f:c9:0f:b6:1e:65:ab:d8:19:54:ac:22:b2:61:b9: 98:a8:9e:21:10:e2:13:61:d4:d4:49:fd:93:6b:f4: d5:e5:a4:96:45:63:61:d6:49:ab:b8:39:e6:44:25: de:41:31:9c:50:42:4a:ba:d7:a2:50:77:77:5d:27: 9d:6b:48:34:8f:09:a9:42:c2:6c:2f:04:a4:93:90: 35:db:92:e2:67:72:80:3f:e1:69:dd:35:5b:d0:60: 47:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D9:8B:12:23:2C:EF:5F:80:F2:40:02:2B:D7:DC:88:09:37:35:51 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c8:ec:55:4f:67:d8:72:e2:91:c5:ac:fd:9d:bb:04:a3:64: c9:08:84:6c:19:02:2c:d9:24:c9:3b:68:1c:ea:a0:58:a3:66: 75:e3:46:21:f8:12:90:62:cc:0f:38:3a:6f:5f:e9:89:c7:02: 23:0f:1f:7d:82:3a:78:47:ee:c6:11:c8:67:6b:c6:41:d4:01: 63:9e:a2:ba:84:56:62:bc:39:79:51:f7:c3:45:c5:d2:b4:52: 64:74:e8:48:f7:d9:b2:fc:16:98:6b:cc:4e:c7:52:00:98:92: 49:f7:2f:f3:50:58:a3:b7:de:ce:d9:d2:72:86:c0:11:8d:4a: 7a:6d:b0:7a:a1:cb:dd:79:42:20:cd:8d:8d:40:1a:9d:87:00: ee:80:88:40:f1:71:75:78:ec:80:74:15:b2:41:f2:04:52:23: be:7a:cb:df:6b:12:68:00:5c:66:a2:fc:ce:e6:5f:ed:21:bf: 9b:71:cb:9d:51:ec:f3:30:50:a6:68:53:de:b4:de:03:77:2d: 31:38:6f:32:7d:0d:af:b2:5f:2c:f1:44:fd:86:e4:b8:1f:97: 78:27:22:44:42:2a:df:f9:59:18:16:4a:d0:c4:ea:58:d7:7d: 57:2b:2c:45:5d:12:77:ec:60:a3:3d:87:bf:32:9c:e1:76:b0: f5:aa:ed:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUxMTA1MDMxNjEyWhcNMjUxMTEyMDMxNjEyWjAYMRYwFAYD VQQDEw02OTBhYzE3Yy0zMmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hik4PFo9DZ4d6HhXPC2lY/87jcbHBBP4BPwnL9E/EAvJf+c09MWwSeNcj4F /C3J7TRK0B4xOTaUOmEkbrsLAWeqsLFOf1voj/hHgGMymj6GQ8cp6mTaGrVRywzu tWQfQpYmE6kqEJ/og2JdEwGM1zY4oGlxSPBef9kn+8vzmWOS61w0IKGso+h0064i WP8nrWWIi75yYvmR7Txp/O7xlnlSymIfyQ+2HmWr2BlUrCKyYbmYqJ4hEOITYdTU Sf2Ta/TV5aSWRWNh1kmruDnmRCXeQTGcUEJKuteiUHd3XSeda0g0jwmpQsJsLwSk k5A125LiZ3KAP+Fp3TVb0GBHmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATZixIj LO9fgPJAAivX3IgJNzVRMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVyOxVT2fYcuKRxaz9nbsEo2TJCIRsGQIs2STJO2gc6qBYo2Z140Yh +BKQYswPODpvX+mJxwIjDx99gjp4R+7GEchna8ZB1AFjnqK6hFZivDl5UffDRcXS tFJkdOhI99my/BaYa8xOx1IAmJJJ9y/zUFijt97O2dJyhsARjUp6bbB6ocvdeUIg zY2NQBqdhwDugIhA8XF1eOyAdBWyQfIEUiO+esvfaxJoAFxmovzO5l/tIb+bccud UezzMFCmaFPetN4Ddy0xOG8yfQ2vsl8s8UT9huS4H5d4JyJEQirf+VkYFkrQxOpY 131XKyxFXRJ37GCjPYe/MpzhdrD1qu0U -----END CERTIFICATE-----Generated at Wed Nov 5 12:22:30 2025 by rpki-client