$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: 1NUNhrHLh8avz8dtMGbHBw6lNOwKs5Lx0ueJpI4N6T0= Subject key identifier: 8F:93:0A:85:8B:69:78:30:A4:85:53:7B:D4:2B:93:65:64:9E:1F:E0 Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: 012E Signing time: Mon 03 Nov 2025 04:40:07 +0000 Manifest this update: Mon 03 Nov 2025 04:40:06 +0000 Manifest next update: Mon 10 Nov 2025 04:40:06 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: 4ZEbD4aMu4uwWe75CKPMqMLrAf3e1Taozoz8E+Aa9M4=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: IW95bSZsBV41wSCyDVp5L0J87U9yD7MOcR2qX+Jqshk=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 2lCm+k56qwvoxDHPy2MJ2gVzKL/gSEiow6ar2mDrask=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Nov 3 04:40:06 2025 GMT Not After : Nov 10 04:40:06 2025 GMT Subject: CN=69083227-3612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:57:2a:cc:0f:69:9d:6f:54:6b:82:fb:ff: 3f:c8:c2:0c:d3:ff:57:c1:43:1b:63:18:ac:71:97: 41:12:b2:e4:9d:92:b1:d6:89:f7:d7:57:fa:ad:6b: 25:df:53:ba:ba:b5:df:63:d3:43:08:0c:f6:e3:62: 1d:fa:44:e0:2e:53:8e:e1:53:60:33:98:46:aa:54: 88:46:48:9d:61:28:17:6b:de:4f:c5:7f:58:e0:24: c3:de:1c:45:b4:83:eb:de:57:9b:f7:d4:2e:71:77: 4b:71:dc:32:df:9a:9f:60:0e:98:ea:08:2e:2d:21: 4c:15:18:ec:8f:e1:fa:58:67:fe:5e:4b:dd:2f:ed: 3c:cf:39:4b:7f:9b:4a:d3:28:6f:1a:9a:38:03:8e: 50:7c:06:c5:59:cc:28:95:7b:32:1b:ff:a1:34:e2: 96:48:97:70:ed:48:5e:50:5e:74:ed:92:0c:2e:df: df:59:6c:00:71:d0:7e:66:40:d0:ff:52:93:ff:b8: d8:b2:90:ba:aa:4b:b8:27:b8:d5:6b:79:20:62:fc: 62:dc:2b:41:23:3a:e0:db:93:76:a7:f7:73:c8:a1: bf:5c:c7:42:1f:1a:99:6d:f7:20:42:27:a9:c5:c5: f4:c0:99:d3:bf:fd:15:f8:1d:44:d1:6a:41:b1:c8: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:93:0A:85:8B:69:78:30:A4:85:53:7B:D4:2B:93:65:64:9E:1F:E0 X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:18:d1:5f:8d:46:bf:73:e2:95:a9:b9:05:bc:6b:70:34:b7: 35:d0:21:16:77:2f:76:2b:3e:4e:e3:70:4f:9f:ac:78:ea:04: 0f:fe:9d:52:0c:cc:f8:0b:ae:7e:af:9c:0a:e2:2a:0b:88:cb: 8d:37:50:77:2a:25:2f:d9:be:a4:04:10:2c:2c:ce:32:9b:4c: ac:e0:f1:d1:0e:42:b6:df:9c:9d:37:a2:92:d6:2f:1f:21:87: 5e:c2:cb:48:e9:c2:e4:68:bf:c5:26:03:02:e9:8b:03:ea:58: 01:99:87:76:6c:ec:db:2b:a0:a5:e6:35:22:be:9b:8d:7f:c8: 68:d3:e6:7e:f1:61:2f:55:80:d1:c2:3e:2c:76:59:c2:e5:e8: 42:8d:57:78:97:39:c4:23:e4:b7:e7:7f:e1:90:43:96:8b:5d: b3:fc:0b:85:a7:5e:df:19:bf:21:76:5a:60:63:62:00:fd:b7: 58:68:1e:1a:70:aa:ab:f2:e3:6c:30:1e:7f:b8:d8:46:b3:1a: ea:0c:75:e6:ac:46:c0:57:2e:cc:4e:49:fa:9a:c2:7a:79:cc: 6e:13:c9:c1:52:c3:c5:20:25:75:0b:61:fc:d6:23:69:7c:0d: 06:13:00:65:19:78:a4:1b:bb:97:0c:f3:e4:9a:35:0b:62:e0: 28:30:94:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUxMTAzMDQ0MDA2WhcNMjUxMTEwMDQ0MDA2WjAYMRYwFAYD VQQDEw02OTA4MzIyNy0zNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWJXKswPaZ1vVGuC+/8/yMIM0/9XwUMbYxiscZdBErLknZKx1on311f6rWsl 31O6urXfY9NDCAz242Id+kTgLlOO4VNgM5hGqlSIRkidYSgXa95PxX9Y4CTD3hxF tIPr3leb99QucXdLcdwy35qfYA6Y6gguLSFMFRjsj+H6WGf+XkvdL+08zzlLf5tK 0yhvGpo4A45QfAbFWcwolXsyG/+hNOKWSJdw7UheUF507ZIMLt/fWWwAcdB+ZkDQ /1KT/7jYspC6qku4J7jVa3kgYvxi3CtBIzrg25N2p/dzyKG/XMdCHxqZbfcgQiep xcX0wJnTv/0V+B1E0WpBscjSSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+TCoWL aXgwpIVTe9Qrk2Vknh/gMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEGNFfjUa/c+KVqbkFvGtwNLc10CEWdy92Kz5O43BPn6x46gQP/p1S DMz4C65+r5wK4ioLiMuNN1B3KiUv2b6kBBAsLM4ym0ys4PHRDkK235ydN6KS1i8f IYdewstI6cLkaL/FJgMC6YsD6lgBmYd2bOzbK6Cl5jUivpuNf8ho0+Z+8WEvVYDR wj4sdlnC5ehCjVd4lznEI+S353/hkEOWi12z/AuFp17fGb8hdlpgY2IA/bdYaB4a cKqr8uNsMB5/uNhGsxrqDHXmrEbAVy7MTkn6msJ6ecxuE8nBUsPFICV1C2H81iNp fA0GEwBlGXikG7uXDPPkmjULYuAoMJRa -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:12 2025 by rpki-client