$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: JtiBYwOg0cCpwni/V/PGsO2inyBLFjJi8rqwh3cz/Y8= Subject key identifier: 11:64:91:5C:35:5E:F9:F9:1D:6A:B8:28:DA:E5:C0:84:32:B1:DF:07 Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 24C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 24A2 Signing time: Tue 04 Nov 2025 15:51:47 +0000 Manifest this update: Tue 04 Nov 2025 15:51:46 +0000 Manifest next update: Tue 11 Nov 2025 15:51:46 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: Ppbztf/qrM8AZ5OmI5/HplKNiWttao72022Rhj2rWDw=) 2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw=) 3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: GhF9PvzI5x/9vujTT/xlTVo+qNPcjDRdk9u4YkdwFYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9410 (0x24c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Nov 4 15:51:46 2025 GMT Not After : Nov 11 15:51:46 2025 GMT Subject: CN=690a2112-4b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c9:c2:d6:06:d9:57:37:a5:83:f3:e7:71:0e: fe:f6:b7:a0:a2:db:9b:a8:61:64:0b:3d:61:92:d6: 59:a6:cd:48:29:a7:50:c8:1b:98:f9:85:fa:67:00: 15:e7:9b:2f:a6:a7:c6:28:98:75:ed:fd:75:a1:ca: 6f:d5:30:5f:0c:6d:93:23:b1:ec:eb:14:fa:cc:0d: 5b:af:2c:e3:78:8e:f7:06:6a:0e:16:d2:c0:fe:49: 1e:2b:cf:c8:4b:c9:33:ca:ba:23:07:cb:21:82:bd: bb:9b:d3:47:0d:c2:6e:a0:2c:19:53:fb:55:09:9e: 42:0a:d5:70:10:18:f8:81:88:96:0c:2f:0f:e4:27: 4a:4f:f7:0c:4e:d5:2f:f5:68:a1:2d:18:d2:f5:de: a2:79:7f:20:5e:ff:dd:f8:69:55:81:27:94:53:33: 8c:e7:a5:11:e9:bd:97:2c:e0:fc:3b:e8:c3:12:57: 75:d5:34:84:99:3f:22:5e:8a:67:a0:0d:c4:1a:e9: 58:d7:2b:be:cf:51:bf:04:92:35:44:c4:f8:5d:60: 31:80:96:d7:e1:72:fc:f5:2c:ce:49:ce:76:f6:25: b8:18:91:fa:7d:38:39:e3:f3:b1:ae:52:42:7e:a3: 1c:c8:d4:61:80:1a:78:ed:66:63:6b:fa:1b:5e:6f: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:64:91:5C:35:5E:F9:F9:1D:6A:B8:28:DA:E5:C0:84:32:B1:DF:07 X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b7:95:02:08:0e:b2:c6:47:d3:f5:9d:13:1c:04:05:57:bb: d8:66:fb:8e:2b:69:b4:9d:0d:96:49:96:f1:f3:91:04:20:65: 81:34:b5:02:93:86:16:2b:62:fd:87:da:18:1a:43:b4:a4:35: 69:71:e7:71:a5:93:3b:e1:eb:b6:ab:89:6c:ff:2c:f7:4b:8a: 22:53:34:22:c4:18:23:d4:03:15:86:7b:b2:81:23:b4:e1:78: ec:3c:42:c3:46:13:f3:e3:bf:46:1d:16:a6:53:b6:1c:80:83: f5:3a:41:f0:75:5f:50:82:45:c8:94:6c:70:ea:51:59:24:40: e2:3b:98:a2:f9:e7:54:42:c0:8e:2c:77:f8:42:df:8c:11:1b: 26:f8:93:65:a1:a2:1c:a6:91:ae:76:f1:a8:e4:f9:1c:54:cc: 0a:40:04:4f:c8:15:26:4d:cf:06:b7:10:3f:8f:c2:a7:d2:e0: 55:15:b1:e4:b4:01:54:17:6c:e2:4b:ff:d7:87:ff:aa:f0:c9: 18:eb:05:5e:bc:58:d7:c8:fd:96:24:de:7c:ac:85:1b:06:1d: 0a:9f:91:ba:87:75:32:d1:1b:24:48:da:5d:39:12:30:ff:1e: d1:4a:a6:51:89:4c:3c:62:5d:59:71:24:3c:5d:ef:38:69:0b: da:3c:4a:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjUxMTA0MTU1MTQ2WhcNMjUxMTExMTU1MTQ2WjAYMRYwFAYD VQQDEw02OTBhMjExMi00Yjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcnC1gbZVzelg/PncQ7+9regotubqGFkCz1hktZZps1IKadQyBuY+YX6ZwAV 55svpqfGKJh17f11ocpv1TBfDG2TI7Hs6xT6zA1bryzjeI73BmoOFtLA/kkeK8/I S8kzyrojB8shgr27m9NHDcJuoCwZU/tVCZ5CCtVwEBj4gYiWDC8P5CdKT/cMTtUv 9WihLRjS9d6ieX8gXv/d+GlVgSeUUzOM56UR6b2XLOD8O+jDEld11TSEmT8iXopn oA3EGulY1yu+z1G/BJI1RMT4XWAxgJbX4XL89SzOSc529iW4GJH6fTg54/OxrlJC fqMcyNRhgBp47WZja/obXm8WYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFkkVw1 Xvn5HWq4KNrlwIQysd8HMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1t5UCCA6yxkfT9Z0THAQFV7vYZvuOK2m0nQ2WSZbx85EEIGWBNLUC k4YWK2L9h9oYGkO0pDVpcedxpZM74eu2q4ls/yz3S4oiUzQixBgj1AMVhnuygSO0 4XjsPELDRhPz479GHRamU7YcgIP1OkHwdV9QgkXIlGxw6lFZJEDiO5ii+edUQsCO LHf4Qt+MERsm+JNloaIcppGudvGo5PkcVMwKQARPyBUmTc8GtxA/j8Kn0uBVFbHk tAFUF2ziS//Xh/+q8MkY6wVevFjXyP2WJN58rIUbBh0Kn5G6h3Uy0RskSNpdORIw /x7RSqZRiUw8Yl1ZcSQ8Xe84aQvaPEpX -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:15 2025 by rpki-client