$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json) Hash identifier: 77R/UdopYh5VxWpLqW3gB3hHjz7a+RKzwQ0dolUEyA8= Subject key identifier: 2A:D6:EB:7C:5C:FB:B1:AB:08:39:6D:81:BB:18:9E:88:2A:3A:70:BE Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691 Certificate serial: 323C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft Manifest number: 323C Signing time: Tue 04 Nov 2025 15:26:49 +0000 Manifest this update: Tue 04 Nov 2025 15:26:49 +0000 Manifest next update: Tue 11 Nov 2025 15:26:49 +0000 Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: Hrf9mLctHcpx9BNPQMrOx6eKWLCEz9w8sYD+zK9451o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12860 (0x323c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691 Validity Not Before: Nov 4 15:26:49 2025 GMT Not After : Nov 11 15:26:49 2025 GMT Subject: CN=690a1b39-2c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c8:16:cc:9b:d1:e9:8a:c1:3b:a8:58:f2:9b: 36:26:c1:bd:17:02:aa:33:c0:a1:a4:52:96:7c:3d: 6c:ec:63:d7:9d:bc:8b:53:7c:2a:67:8d:aa:84:11: 37:24:73:35:27:bd:06:e0:3d:2b:22:98:1f:f7:78: 36:03:31:2c:62:3b:01:ad:28:90:0c:5e:35:db:7d: 06:b7:f9:4c:90:a4:e2:33:dd:be:2c:a8:43:53:59: d4:e1:4a:51:2a:38:31:35:c3:c1:13:9f:23:62:6c: a1:1a:a6:ac:53:7f:6c:b1:96:4b:48:6c:16:84:82: 0a:1d:95:40:92:bb:03:f0:80:49:d3:d4:a1:dc:5e: 7d:5e:ca:ab:1b:86:a5:9f:19:94:66:bf:0c:70:7e: 86:5f:78:18:a6:51:4e:8a:d4:38:1c:de:cc:d6:34: 47:14:85:ef:68:d5:5f:d3:10:4f:4c:68:4a:5c:77: c5:00:0a:f8:b5:4e:17:8d:d2:41:08:8d:d5:b9:1b: 6c:cb:d5:54:a5:fc:5b:89:8b:cd:6d:51:f7:62:0d: 40:eb:9e:0c:2f:43:74:13:7c:4e:cd:81:90:f1:36: ea:8e:be:cf:52:7f:61:93:54:70:70:56:8a:3e:0e: 41:c0:8d:f5:28:02:7c:7b:57:fa:37:8c:1e:a3:bc: 8a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D6:EB:7C:5C:FB:B1:AB:08:39:6D:81:BB:18:9E:88:2A:3A:70:BE X509v3 Authority Key Identifier: keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2f:b6:e4:3f:d4:3e:bd:0f:79:a8:4f:13:61:8f:14:b7:98: ae:97:9a:04:4f:56:dd:71:d1:e1:18:a3:99:30:9e:5c:64:0c: a3:fb:f7:ef:6c:12:7a:ab:15:e6:67:e1:03:fb:77:b9:58:c4: ce:dc:af:90:a2:09:d9:1b:8c:21:94:24:a4:da:7c:9b:89:4f: 23:1a:e3:c1:1a:23:a1:f8:36:ac:4e:38:11:2d:00:a3:6e:97: ca:3c:98:09:ad:6b:d3:a7:6c:82:4d:02:d1:e5:02:d3:a1:f8: 86:d2:d9:40:6a:f8:81:bd:b0:9e:8d:d1:29:e6:31:31:de:84: 6d:1c:c9:13:aa:df:3b:1d:67:7d:1d:0f:de:58:44:05:38:1f: 20:b8:94:0c:dd:61:de:76:9d:53:b6:20:2d:41:e7:bf:d9:4f: 59:fa:76:a4:3b:52:5f:ed:ee:34:09:a4:0e:68:5b:94:a5:f8: d6:ce:51:ee:9b:dc:b2:07:7b:ee:40:c6:73:38:8f:57:3f:ed: 11:39:aa:82:70:ba:a3:c0:10:22:44:0a:56:45:35:59:bc:c2: 06:1a:4a:e8:8b:1c:7e:33:d8:72:e7:b6:0a:77:47:52:b3:98: c0:27:df:b4:d9:34:18:09:28:07:56:87:a4:29:7e:ab:f4:67: d8:88:2f:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3 QTU2Njg2OTEwHhcNMjUxMTA0MTUyNjQ5WhcNMjUxMTExMTUyNjQ5WjAYMRYwFAYD VQQDEw02OTBhMWIzOS0yYzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08gWzJvR6YrBO6hY8ps2JsG9FwKqM8ChpFKWfD1s7GPXnbyLU3wqZ42qhBE3 JHM1J70G4D0rIpgf93g2AzEsYjsBrSiQDF41230Gt/lMkKTiM92+LKhDU1nU4UpR KjgxNcPBE58jYmyhGqasU39ssZZLSGwWhIIKHZVAkrsD8IBJ09Sh3F59XsqrG4al nxmUZr8McH6GX3gYplFOitQ4HN7M1jRHFIXvaNVf0xBPTGhKXHfFAAr4tU4XjdJB CI3VuRtsy9VUpfxbiYvNbVH3Yg1A654ML0N0E3xOzYGQ8Tbqjr7PUn9hk1RwcFaK Pg5BwI31KAJ8e1f6N4weo7yKlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrW63xc +7GrCDltgbsYnogqOnC+MB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLL7bkP9Q+vQ95qE8TYY8Ut5iul5oET1bdcdHhGKOZMJ5cZAyj+/fv bBJ6qxXmZ+ED+3e5WMTO3K+QognZG4whlCSk2nybiU8jGuPBGiOh+DasTjgRLQCj bpfKPJgJrWvTp2yCTQLR5QLTofiG0tlAaviBvbCejdEp5jEx3oRtHMkTqt87HWd9 HQ/eWEQFOB8guJQM3WHedp1TtiAtQee/2U9Z+nakO1Jf7e40CaQOaFuUpfjWzlHu m9yyB3vuQMZzOI9XP+0ROaqCcLqjwBAiRApWRTVZvMIGGkroixx+M9hy57YKd0dS s5jAJ9+02TQYCSgHVoekKX6r9GfYiC8F -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:28 2025 by rpki-client