$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: vSw5y/6quftjn6WaaR/LaetwOV93CcYtGAoHanQMUy0= Subject key identifier: 02:9A:75:9D:CA:1D:48:70:C2:64:BB:69:33:8B:F2:D5:8C:DB:DF:E7 Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 03BF Signing time: Wed 05 Nov 2025 00:45:38 +0000 Manifest this update: Wed 05 Nov 2025 00:45:37 +0000 Manifest next update: Wed 12 Nov 2025 00:45:37 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: xFq5QjO/SiCFs1IFMmwFIQ80xP/zHKt/91G67nTToMM=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Nov 5 00:45:37 2025 GMT Not After : Nov 12 00:45:37 2025 GMT Subject: CN=690a9e32-9fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:9f:20:48:a0:e7:57:e9:18:19:96:2e:e1: 19:e1:67:e3:c8:34:09:3d:37:0b:d5:59:69:b7:04: e3:88:4a:71:54:41:43:66:8c:dd:16:a5:e2:73:13: ac:db:20:ca:96:c7:d2:e2:cd:6c:6c:57:78:05:c3: 28:9f:6f:f7:12:31:64:06:f4:e7:6f:0b:54:a5:a5: b8:0d:ae:36:3e:cf:b0:0b:c3:5f:3c:11:ba:75:26: 10:1a:9a:79:4e:7a:e1:34:0f:7e:06:1e:72:c9:03: fc:ab:23:5f:99:06:ed:35:11:08:90:31:04:7e:17: 7e:ef:0e:bb:5f:8f:f4:cf:65:0a:eb:5e:a3:3a:31: 80:78:71:0d:91:0e:18:ce:3b:1b:8a:6a:d9:e6:42: 06:4d:ae:d7:36:65:68:e4:1b:d1:84:3c:ee:6c:14: 4b:d7:39:d7:1c:86:9d:14:5c:0e:a5:b0:6e:3d:78: 19:f6:a0:7f:8f:f1:69:fa:70:ea:2b:19:6b:86:b7: e5:f2:50:ba:d0:e5:3c:d3:d4:94:3d:70:a0:0d:95: 77:bf:0b:f2:fc:19:70:a1:de:80:b1:9a:58:d5:af: 28:48:ae:bf:ca:6b:a7:48:bc:f3:7d:af:56:6d:b0: 65:1e:63:55:0a:de:59:c7:7b:3f:68:ac:0a:05:96: 7f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9A:75:9D:CA:1D:48:70:C2:64:BB:69:33:8B:F2:D5:8C:DB:DF:E7 X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:33:94:d4:5a:f0:6f:f9:d7:b0:f8:22:10:2f:3b:75:90:96: 02:32:73:3a:28:5a:fb:cb:93:96:50:1c:18:b1:4d:17:a4:d8: 69:83:0b:43:b0:61:12:a7:62:26:4d:16:b0:af:7f:f3:88:31: 24:68:90:b4:f9:81:e0:2a:16:e4:96:9c:ff:88:d9:bc:9c:99: 7f:fa:35:28:9a:61:28:e8:a7:02:99:97:99:d5:1c:2c:5f:be: 36:9d:c7:eb:0c:b3:70:3a:c0:3d:bb:a4:28:2a:b9:3e:6e:69: be:8c:1b:22:75:46:b5:24:44:a0:ef:05:df:eb:43:bc:54:78: 34:fd:c1:45:95:5d:4d:7f:a3:c9:3f:81:2e:6d:82:e0:33:f2: 4c:c9:5a:1f:60:eb:82:55:ee:cb:d9:0b:d3:ef:e6:79:d2:ba: c0:82:ee:4a:22:88:63:c1:18:55:9c:ef:50:ab:ec:e6:b5:0e: a9:9b:04:32:c8:89:c2:88:ba:bb:0f:a6:cc:0c:03:0d:2c:04: 3f:1b:d9:52:65:07:a6:fd:87:90:27:5e:9b:45:66:31:87:4e: 88:d7:34:48:2e:b5:39:7d:17:b5:e2:68:12:44:ff:e1:05:8a: ee:f9:4b:57:e8:99:8d:6f:5f:78:5e:e7:bf:2a:3b:e9:2d:76: 78:e4:fc:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjUxMTA1MDA0NTM3WhcNMjUxMTEyMDA0NTM3WjAYMRYwFAYD VQQDEw02OTBhOWUzMi05ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUqfIEig51fpGBmWLuEZ4WfjyDQJPTcL1VlptwTjiEpxVEFDZozdFqXicxOs 2yDKlsfS4s1sbFd4BcMon2/3EjFkBvTnbwtUpaW4Da42Ps+wC8NfPBG6dSYQGpp5 TnrhNA9+Bh5yyQP8qyNfmQbtNREIkDEEfhd+7w67X4/0z2UK616jOjGAeHENkQ4Y zjsbimrZ5kIGTa7XNmVo5BvRhDzubBRL1znXHIadFFwOpbBuPXgZ9qB/j/Fp+nDq Kxlrhrfl8lC60OU809SUPXCgDZV3vwvy/Blwod6AsZpY1a8oSK6/ymunSLzzfa9W bbBlHmNVCt5Zx3s/aKwKBZZ/FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKadZ3K HUhwwmS7aTOL8tWM29/nMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaM5TUWvBv+dew+CIQLzt1kJYCMnM6KFr7y5OWUBwYsU0XpNhpgwtD sGESp2ImTRawr3/ziDEkaJC0+YHgKhbklpz/iNm8nJl/+jUommEo6KcCmZeZ1Rws X742ncfrDLNwOsA9u6QoKrk+bmm+jBsidUa1JESg7wXf60O8VHg0/cFFlV1Nf6PJ P4EubYLgM/JMyVofYOuCVe7L2QvT7+Z50rrAgu5KIohjwRhVnO9Qq+zmtQ6pmwQy yInCiLq7D6bMDAMNLAQ/G9lSZQem/YeQJ16bRWYxh06I1zRILrU5fRe14mgSRP/h BYru+UtX6JmNb194Xue/KjvpLXZ45Pyq -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:35 2025 by rpki-client