$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json) Hash identifier: IWDyOfDc0aJIcRSJHr/YyFs4nfqDSI1DCk6rrOijnXE= Subject key identifier: BE:05:0E:89:96:A4:42:FF:E0:4A:B8:CD:48:19:58:F2:76:CB:8B:6F Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft Manifest number: 07E7 Signing time: Tue 04 Nov 2025 21:21:33 +0000 Manifest this update: Tue 04 Nov 2025 21:21:33 +0000 Manifest next update: Tue 11 Nov 2025 21:21:33 +0000 Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: W5iQ2wYFN1QcV5/ysp8OZSDF3Yl0Xj/NegBDq795IuE=) 2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: rQ3HbUHQH7eVX3Cnh8/MApZL6I89rN2JY57V2VKSths=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Validity Not Before: Nov 4 21:21:33 2025 GMT Not After : Nov 11 21:21:33 2025 GMT Subject: CN=690a6e5d-5e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:9c:a1:ab:db:6f:94:41:8e:5c:a6:73:38: f0:9d:fe:5b:4f:44:6f:70:fa:ba:97:5d:cc:98:37: 4b:4c:ef:93:7e:68:4c:cf:a9:dc:2e:56:3d:d8:79: 2e:c8:07:13:0d:2e:fb:75:cc:8d:1e:8c:7b:a7:54: 83:02:a1:80:32:e9:d1:fa:86:ea:23:40:86:8f:42: 34:46:ba:5b:9f:67:77:e1:ef:36:4e:a1:77:3e:e8: b2:5d:23:de:b0:e3:73:7a:f6:ea:15:3e:0b:aa:8e: 6b:59:04:a2:fa:2b:26:4d:e8:76:70:d8:29:01:92: bd:63:84:1e:1a:3b:fe:48:bb:3a:cb:e1:ee:89:6b: 99:c8:22:47:6e:10:f3:17:30:37:ab:06:e9:1d:7c: ab:a4:5a:35:6e:44:de:e8:32:b3:2b:8f:e9:3f:b9: f2:85:75:a5:61:a6:9d:e8:20:27:6c:e6:83:2d:ae: 51:7c:6b:e0:89:d1:3b:1d:55:49:ee:29:1c:87:ef: 21:8c:13:58:21:d2:82:25:1c:7d:b9:06:a3:d4:93: 09:e4:62:b6:9f:64:65:60:67:13:08:e1:cf:f7:00: 1d:0b:e3:30:b0:f6:24:20:1b:c8:64:94:01:89:1f: 9b:e5:4b:2c:af:6b:e5:06:0f:c7:ec:f7:ab:13:ea: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:05:0E:89:96:A4:42:FF:E0:4A:B8:CD:48:19:58:F2:76:CB:8B:6F X509v3 Authority Key Identifier: keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:80:df:bf:89:02:5a:b2:fe:58:ff:7e:5a:23:f5:7f:18:3d: 68:b5:e4:51:44:4b:79:75:34:20:c6:df:40:2c:68:54:10:46: 56:9b:d8:d4:7e:f9:54:ee:8b:1c:85:24:f0:cd:11:3a:f3:34: 1b:76:f7:b3:7e:a1:a6:2c:48:fd:27:be:92:1f:d6:11:99:37: be:b8:e1:bb:cd:d9:94:98:cf:9f:02:5f:8b:18:6d:57:7d:10: 25:b6:98:f2:7c:64:da:da:47:d8:c5:46:56:63:87:d4:66:3f: c6:84:fb:86:2c:7f:d6:3a:60:0a:c5:da:94:de:42:fc:a6:c7: 94:d1:09:dc:e2:0d:8d:e0:a3:83:86:be:39:f8:fd:20:6b:4a: a8:36:b3:83:6f:6d:dc:37:6d:06:2a:e1:23:a8:f6:2d:6e:2e: de:9f:58:5a:e5:2e:da:84:22:bc:7c:86:53:88:7b:bb:ff:36: d9:3f:49:dd:5e:39:f7:03:dc:19:6d:ed:ae:5c:91:0b:b2:4e: ac:13:f8:54:d9:44:d3:51:23:8a:ff:6a:8e:25:b1:8b:21:3b: 80:a7:a1:5e:61:ce:91:9a:23:3a:22:cc:79:18:29:a4:ff:b3: 52:f4:43:72:98:47:7b:2b:fc:d7:29:18:40:1a:a6:4e:19:7f: df:82:8c:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND NUE3Mzk0OEUwHhcNMjUxMTA0MjEyMTMzWhcNMjUxMTExMjEyMTMzWjAYMRYwFAYD VQQDEw02OTBhNmU1ZC01ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkOcoavbb5RBjlymczjwnf5bT0RvcPq6l13MmDdLTO+TfmhMz6ncLlY92Hku yAcTDS77dcyNHox7p1SDAqGAMunR+obqI0CGj0I0Rrpbn2d34e82TqF3PuiyXSPe sONzevbqFT4Lqo5rWQSi+ismTeh2cNgpAZK9Y4QeGjv+SLs6y+HuiWuZyCJHbhDz FzA3qwbpHXyrpFo1bkTe6DKzK4/pP7nyhXWlYaad6CAnbOaDLa5RfGvgidE7HVVJ 7ikch+8hjBNYIdKCJRx9uQaj1JMJ5GK2n2RlYGcTCOHP9wAdC+MwsPYkIBvIZJQB iR+b5Ussr2vlBg/H7PerE+pJVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4FDomW pEL/4Eq4zUgZWPJ2y4tvMB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1 MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REJFOC85RDM2MzE3ODE1MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0w Q0tEUmlPQzMwQXpGcHpsSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCogN+/iQJasv5Y/35aI/V/GD1oteRRREt5dTQgxt9ALGhUEEZWm9jU fvlU7oschSTwzRE68zQbdvezfqGmLEj9J76SH9YRmTe+uOG7zdmUmM+fAl+LGG1X fRAltpjyfGTa2kfYxUZWY4fUZj/GhPuGLH/WOmAKxdqU3kL8pseU0Qnc4g2N4KOD hr45+P0ga0qoNrODb23cN20GKuEjqPYtbi7en1ha5S7ahCK8fIZTiHu7/zbZP0nd Xjn3A9wZbe2uXJELsk6sE/hU2UTTUSOK/2qOJbGLITuAp6FeYc6RmiM6Isx5GCmk /7NS9ENymEd7K/zXKRhAGqZOGX/fgoxT -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:38 2025 by rpki-client