$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: 3L1pihBMtkOlNbapxI8/tfth43RFIJ4NQOswjebzm9k= Subject key identifier: C1:A1:28:5B:AB:2B:74:40:C8:A1:FC:64:D6:0E:43:EE:BD:10:C0:18 Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 06F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 06EB Signing time: Sun 02 Nov 2025 21:56:29 +0000 Manifest this update: Sun 02 Nov 2025 21:56:29 +0000 Manifest next update: Sun 09 Nov 2025 21:56:29 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: KwAIV9s5YYeM2A9d8ex0XeU5mFNNUmN7jW/0g+SISIo=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: vqxIsO24S1XTFLTcdT7l0irFCtFiMiUdze/w33SKZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1777 (0x6f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: Nov 2 21:56:29 2025 GMT Not After : Nov 9 21:56:29 2025 GMT Subject: CN=6907d38d-9831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:c6:be:1c:22:78:02:e7:a2:b4:0a:5f:44: d9:9e:81:f9:e6:a0:f1:b9:ea:e1:ba:3c:a5:d3:de: c2:16:dc:bd:47:e3:04:a3:16:ee:d8:94:1b:49:1f: 7a:2c:89:a5:01:e7:26:5e:e9:23:aa:b6:33:de:df: 6d:06:e8:b5:1a:a2:23:88:b3:86:08:b2:53:47:dd: 47:05:66:17:6b:b2:7d:01:1d:fa:74:57:25:b5:2a: ad:c5:71:a4:0e:60:d5:3f:c6:c5:6b:93:42:c2:1e: bc:93:7e:93:ec:62:0b:bb:56:fa:7a:91:96:e3:3e: 2d:0f:95:14:6f:72:8f:a2:c6:e4:6b:76:ea:f1:1c: e4:ef:51:e3:6f:36:2d:1f:65:c9:d6:fc:35:7d:85: df:34:00:2b:1a:85:a3:a3:ba:82:0e:c8:4c:1b:28: be:d8:e0:47:63:01:45:a5:d0:bf:fb:c6:c0:3c:3f: c3:96:41:63:03:5c:c0:6c:f6:89:29:da:69:e9:9f: 95:8f:a2:4d:06:86:5c:56:85:58:5d:45:72:fb:56: 6d:eb:51:7d:56:18:bd:35:8a:b5:1e:24:1e:1b:5c: dd:40:17:37:9c:37:b7:64:96:0c:5b:0b:75:04:fb: 93:d6:87:f2:d6:f0:a5:6a:7a:2a:b4:d3:0b:6f:62: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A1:28:5B:AB:2B:74:40:C8:A1:FC:64:D6:0E:43:EE:BD:10:C0:18 X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:95:1f:b5:2a:42:7c:b2:e4:0a:8e:b8:24:82:2e:24:04:38: 18:99:2d:12:d7:b2:ca:5f:25:72:84:86:97:53:11:29:5d:61: ac:5d:78:c4:3c:7b:7d:09:26:49:9a:b7:fa:97:8a:7f:3a:f6: 9c:46:2a:88:9f:2e:3e:94:bf:7c:5a:21:0f:b1:99:6e:9b:f5: d5:50:95:78:a9:12:74:72:f1:2c:0c:c6:69:e7:f8:37:16:17: c2:ce:8f:d3:f4:db:6b:3f:a5:19:d5:88:91:40:61:9f:1a:0f: 8e:0e:b2:48:52:6e:1c:24:3b:ef:52:bd:29:d4:68:b7:a6:7a: 49:f3:1f:e6:cc:70:94:81:5f:b1:a2:49:7c:7b:e9:da:ea:33: c9:88:35:80:9b:95:3e:04:d3:70:06:c3:fe:b5:c4:f4:85:56: 1b:f7:36:4b:bf:86:a3:58:34:f1:46:09:fe:e6:d6:c5:b0:7d: b4:c1:50:60:d7:8c:1c:5b:44:2e:de:e6:d4:ce:cd:03:7e:ce: 89:98:55:2d:c6:47:fa:a9:28:07:61:49:83:e9:a3:d9:f2:a8: d7:14:b1:8b:cd:ae:0c:c1:8d:26:ed:fb:10:09:f9:ce:0d:dc: e6:24:4e:6d:0d:cb:6f:13:a3:e1:5a:07:4b:f2:cf:f5:80:e7: 42:ec:24:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjUxMTAyMjE1NjI5WhcNMjUxMTA5MjE1NjI5WjAYMRYwFAYD VQQDEw02OTA3ZDM4ZC05ODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwA7GvhwieALnorQKX0TZnoH55qDxuerhujyl097CFty9R+MEoxbu2JQbSR96 LImlAecmXukjqrYz3t9tBui1GqIjiLOGCLJTR91HBWYXa7J9AR36dFcltSqtxXGk DmDVP8bFa5NCwh68k36T7GILu1b6epGW4z4tD5UUb3KPosbka3bq8Rzk71HjbzYt H2XJ1vw1fYXfNAArGoWjo7qCDshMGyi+2OBHYwFFpdC/+8bAPD/DlkFjA1zAbPaJ Kdpp6Z+Vj6JNBoZcVoVYXUVy+1Zt61F9Vhi9NYq1HiQeG1zdQBc3nDe3ZJYMWwt1 BPuT1ofy1vClanoqtNMLb2KdJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGhKFur K3RAyKH8ZNYOQ+69EMAYMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYlR+1KkJ8suQKjrgkgi4kBDgYmS0S17LKXyVyhIaXUxEpXWGsXXjE PHt9CSZJmrf6l4p/OvacRiqIny4+lL98WiEPsZlum/XVUJV4qRJ0cvEsDMZp5/g3 FhfCzo/T9NtrP6UZ1YiRQGGfGg+ODrJIUm4cJDvvUr0p1Gi3pnpJ8x/mzHCUgV+x okl8e+na6jPJiDWAm5U+BNNwBsP+tcT0hVYb9zZLv4ajWDTxRgn+5tbFsH20wVBg 14wcW0Qu3ubUzs0Dfs6JmFUtxkf6qSgHYUmD6aPZ8qjXFLGLza4MwY0m7fsQCfnO DdzmJE5tDctvE6PhWgdL8s/1gOdC7CQx -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:29 2025 by rpki-client