$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: 8Fah68r48H/VbIEld29AEId41rqrvqDm3n+z8PnaukE= Subject key identifier: 21:CC:C1:C3:25:52:0C:B5:F5:D5:71:E0:45:E8:C9:F2:C4:5F:C7:59 Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 1518 Signing time: Sun 02 Nov 2025 18:26:14 +0000 Manifest this update: Sun 02 Nov 2025 18:26:14 +0000 Manifest next update: Sun 09 Nov 2025 18:26:14 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: 1gwPG8YH8J0JAz5T82IZzP5gdNa9H3rwmWuuvcfx2Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: Nov 2 18:26:14 2025 GMT Not After : Nov 9 18:26:14 2025 GMT Subject: CN=6907a246-520a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:3c:0b:3d:43:79:9d:f4:1c:bb:3a:37:fb: 37:aa:7d:9f:a3:96:e5:e5:8d:57:95:33:37:a3:01: 1d:09:f6:cc:55:f2:87:e7:a6:ba:91:a9:4d:bf:3e: ac:6b:b2:0b:d6:51:eb:3a:10:ef:88:14:f3:f0:11: b7:e5:bd:79:56:8f:c2:ce:ea:bb:80:2b:ed:2d:56: e8:d7:55:4e:5a:d5:90:c6:9f:c9:e6:f2:7f:0a:39: bf:3a:58:0f:ac:6e:ab:7d:6b:bf:79:c2:6d:a3:56: 19:13:d5:6c:1c:6f:bf:e9:ab:3d:bb:77:84:5a:78: 07:5b:2c:03:f7:1f:21:37:8f:19:f1:cd:3b:60:a4: 67:55:c3:be:13:68:97:f0:a2:1f:d1:d6:4f:8d:7e: d4:0f:94:ee:32:a2:ee:95:6d:aa:43:58:93:4d:7f: 19:3a:e1:b1:26:42:23:3d:7e:a7:4a:ac:5d:9e:ff: b6:51:99:f5:17:b1:8c:e8:7b:54:10:c4:ff:23:0a: 10:7b:50:bd:e2:c3:56:09:7a:68:7f:52:8e:ad:a8: e4:ee:a3:79:9c:59:f9:70:53:51:84:53:92:29:59: 7e:f5:76:76:25:96:eb:c9:00:49:78:94:0e:e6:1d: fd:7a:80:3e:2a:93:41:ed:0a:b5:9b:81:2f:07:c7: e3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CC:C1:C3:25:52:0C:B5:F5:D5:71:E0:45:E8:C9:F2:C4:5F:C7:59 X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:60:18:0b:d4:f7:e5:45:dc:41:5d:0f:9d:dc:95:14:84:7f: 2c:fb:f2:a6:fa:c1:57:de:56:f0:78:a2:df:19:6d:10:d3:f1: d7:3f:d6:71:43:e8:0b:b9:29:35:dd:61:01:e7:a5:21:14:7c: d6:0b:60:81:ad:8c:ef:52:6c:08:2c:e8:23:31:94:5d:83:ed: 0a:3c:86:2f:d9:96:2c:5c:83:4c:fd:99:7e:b4:9e:66:41:fe: b4:ec:3a:d6:2a:39:b8:58:77:88:b7:63:0e:68:df:87:1f:7d: e5:cf:f5:bb:d8:96:06:49:8b:af:b0:43:c7:9e:ad:e4:fe:34: 8d:db:88:37:23:41:95:ad:78:18:c4:17:d9:24:22:53:9c:ed: 8d:fa:7a:35:27:8d:70:45:16:00:d3:e0:57:67:54:8d:04:51: fd:6d:17:2b:33:00:55:6a:30:c9:11:6a:d7:1e:66:f2:a8:af: 20:7e:80:ff:91:df:0b:9e:bf:6c:01:cc:88:fd:7d:39:b7:b9: 2e:fb:4a:a1:a7:2a:c8:e8:f1:4a:7e:f6:32:4b:a4:86:1a:29: e9:19:22:b6:eb:ee:46:94:6b:2a:bd:24:cd:32:3c:3a:f2:b1: 46:8a:63:14:59:8f:b1:d2:90:72:88:03:82:56:bb:76:a5:25: 9f:7d:fd:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjUxMTAyMTgyNjE0WhcNMjUxMTA5MTgyNjE0WjAYMRYwFAYD VQQDEw02OTA3YTI0Ni01MjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys08Cz1DeZ30HLs6N/s3qn2fo5bl5Y1XlTM3owEdCfbMVfKH56a6kalNvz6s a7IL1lHrOhDviBTz8BG35b15Vo/Czuq7gCvtLVbo11VOWtWQxp/J5vJ/Cjm/OlgP rG6rfWu/ecJto1YZE9VsHG+/6as9u3eEWngHWywD9x8hN48Z8c07YKRnVcO+E2iX 8KIf0dZPjX7UD5TuMqLulW2qQ1iTTX8ZOuGxJkIjPX6nSqxdnv+2UZn1F7GM6HtU EMT/IwoQe1C94sNWCXpof1KOrajk7qN5nFn5cFNRhFOSKVl+9XZ2JZbryQBJeJQO 5h39eoA+KpNB7Qq1m4EvB8fj2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHMwcMl Ugy19dVx4EXoyfLEX8dZMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZYBgL1PflRdxBXQ+d3JUUhH8s+/Km+sFX3lbweKLfGW0Q0/HXP9Zx Q+gLuSk13WEB56UhFHzWC2CBrYzvUmwILOgjMZRdg+0KPIYv2ZYsXINM/Zl+tJ5m Qf607DrWKjm4WHeIt2MOaN+HH33lz/W72JYGSYuvsEPHnq3k/jSN24g3I0GVrXgY xBfZJCJTnO2N+no1J41wRRYA0+BXZ1SNBFH9bRcrMwBVajDJEWrXHmbyqK8gfoD/ kd8Lnr9sAcyI/X05t7ku+0qhpyrI6PFKfvYyS6SGGinpGSK26+5GlGsqvSTNMjw6 8rFGimMUWY+x0pByiAOCVrt2pSWfff3b -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:32 2025 by rpki-client