$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json) Hash identifier: MmY2hTpla/XiT716k2iHGFtDBONWO5JXVEbcylVqYYw= Subject key identifier: E7:24:E7:BE:AE:8D:4D:01:AB:1A:EB:27:AE:77:73:4C:DC:DE:9D:B4 Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft Manifest number: 050E Signing time: Mon 03 Nov 2025 00:25:45 +0000 Manifest this update: Mon 03 Nov 2025 00:25:44 +0000 Manifest next update: Mon 10 Nov 2025 00:25:44 +0000 Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: dRpFM0i/Lpb9TzVjexHqWSJpFnJWpPbE1JCjIlYDrNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Validity Not Before: Nov 3 00:25:44 2025 GMT Not After : Nov 10 00:25:44 2025 GMT Subject: CN=6907f688-b6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:1b:b2:93:0e:59:c6:28:7e:d7:5d:cc:2b: d6:15:b8:ee:a6:4b:d6:68:31:7c:9f:64:e7:fa:ed: 31:ab:16:a0:3b:06:ed:bb:e7:f9:cb:32:47:c6:42: 89:5c:65:0d:d3:8e:7f:6b:7e:2e:67:39:bf:f2:d8: fd:63:b0:b6:75:cc:39:55:13:55:e9:39:cb:b5:57: 67:ea:01:22:6e:26:0e:f9:b5:7b:bd:91:be:d8:fc: 5a:8a:b4:33:78:ec:66:c5:d1:e4:e8:d4:27:74:f7: b8:e5:7e:dd:27:9c:cf:f3:dc:02:c6:d2:26:f5:ac: e2:66:3c:79:44:8f:08:2d:43:19:a6:e0:b3:3b:0d: 78:1d:7c:a5:ac:99:74:09:7d:a5:b1:9a:26:fb:14: b9:41:25:ec:d9:7b:0d:12:8b:df:b0:b8:d4:f0:99: 9e:de:32:62:0b:39:86:d5:d9:89:3b:ff:66:c9:94: 6d:8a:c0:16:5b:8d:fc:53:ef:0b:d9:d7:ad:ba:b6: 2e:c8:e6:75:64:d8:f4:40:5e:1c:36:ef:fd:bc:59: 24:71:92:e5:4d:f0:bb:b3:b2:13:47:bc:85:49:e1: ff:3e:5a:da:aa:14:c2:60:62:67:37:ff:72:f6:f9: a8:52:03:9b:81:f9:5d:9f:80:be:06:1d:80:b3:e7: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:24:E7:BE:AE:8D:4D:01:AB:1A:EB:27:AE:77:73:4C:DC:DE:9D:B4 X509v3 Authority Key Identifier: keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4a:bb:90:3b:7b:64:83:2b:13:d8:4b:65:b3:93:e3:ca:c6: e5:f2:fb:6f:7a:bd:47:0f:ed:f9:23:71:cd:88:a9:35:49:21: 6b:62:8d:87:4f:99:cd:0c:4d:d9:c0:77:03:b2:c0:f3:8d:4d: 02:8c:c1:d5:1a:c2:22:eb:d7:47:bd:b6:13:09:ec:7c:c1:c8: cd:6b:ed:2b:a7:54:f5:56:0b:94:3c:17:e4:6a:9b:43:2b:07: 6d:99:c1:2b:40:63:8e:9d:8c:1c:c9:53:d1:1b:45:65:c0:40: 2f:de:77:28:7d:4e:64:6e:b9:eb:74:2b:71:8c:cc:82:8d:00: 9c:76:0b:06:8e:8b:cf:5d:2d:5e:30:47:d3:18:f0:25:f3:1f: f2:bf:59:49:31:83:20:b6:1c:a7:7c:55:82:0f:79:71:ac:40: a4:26:eb:f2:50:47:22:aa:8e:68:bd:f4:88:07:d5:2a:47:92: 99:b9:b0:51:d1:d3:f1:24:34:32:14:c0:70:e9:e7:99:50:9d: 2f:69:e9:9c:40:46:98:b3:b9:b9:63:2a:8a:77:dd:c7:42:40: 3b:a5:9d:5f:5d:15:4c:e5:d2:ff:0d:ea:b2:b9:75:60:a0:4c: b2:cd:e5:23:ba:2b:5b:fe:5c:24:13:49:89:07:b3:20:b8:5b: 96:b9:16:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw NTBGRDFENDYwHhcNMjUxMTAzMDAyNTQ0WhcNMjUxMTEwMDAyNTQ0WjAYMRYwFAYD VQQDEw02OTA3ZjY4OC1iNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdwbspMOWcYoftddzCvWFbjupkvWaDF8n2Tn+u0xqxagOwbtu+f5yzJHxkKJ XGUN045/a34uZzm/8tj9Y7C2dcw5VRNV6TnLtVdn6gEibiYO+bV7vZG+2PxairQz eOxmxdHk6NQndPe45X7dJ5zP89wCxtIm9aziZjx5RI8ILUMZpuCzOw14HXylrJl0 CX2lsZom+xS5QSXs2XsNEovfsLjU8Jme3jJiCzmG1dmJO/9myZRtisAWW438U+8L 2deturYuyOZ1ZNj0QF4cNu/9vFkkcZLlTfC7s7ITR7yFSeH/PlraqhTCYGJnN/9y 9vmoUgObgfldn4C+Bh2As+dCuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOck576u jU0BqxrrJ653c0zc3p20MB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF MGM2MTA1bWxBYllGRDlIVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlSruQO3tkgysT2Etls5Pjysbl8vtver1HD+35I3HNiKk1SSFrYo2H T5nNDE3ZwHcDssDzjU0CjMHVGsIi69dHvbYTCex8wcjNa+0rp1T1VguUPBfkaptD KwdtmcErQGOOnYwcyVPRG0VlwEAv3ncofU5kbrnrdCtxjMyCjQCcdgsGjovPXS1e MEfTGPAl8x/yv1lJMYMgthynfFWCD3lxrECkJuvyUEciqo5ovfSIB9UqR5KZubBR 0dPxJDQyFMBw6eeZUJ0vaemcQEaYs7m5YyqKd93HQkA7pZ1fXRVM5dL/DeqyuXVg oEyyzeUjuitb/lwkE0mJB7MguFuWuRZ5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:05 2025 by rpki-client