$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: nPfArP1YrfFp4qgvah+Rx6aXXStP9mZU3V22cjnTmzg= Subject key identifier: 72:1B:92:C5:B0:CB:DB:0C:32:98:04:BD:6F:E2:1C:32:8F:A7:D7:6A Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 085C Signing time: Tue 04 Nov 2025 20:45:34 +0000 Manifest this update: Tue 04 Nov 2025 20:45:33 +0000 Manifest next update: Tue 11 Nov 2025 20:45:33 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: mYS2VLrrWE61fcyY3XV2HrM6lek/ymVh9h/w1qUiEIQ=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: pAtkMYoP9pyBPl/xXuNkKMm/3mhUwbxuTSTQt0etagU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: Nov 4 20:45:33 2025 GMT Not After : Nov 11 20:45:33 2025 GMT Subject: CN=690a65ee-e908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:72:39:11:29:c4:52:76:c0:72:56:33:a8: 98:58:18:e9:79:57:77:14:71:62:7f:04:75:05:db: a9:65:ca:0c:4b:3c:22:0b:54:07:29:f9:89:79:3c: 0e:86:fb:07:ce:7d:d9:ba:05:8c:d6:5e:12:c0:71: 7a:7c:e0:97:1f:a4:bb:f3:9d:b1:f8:b7:f9:ad:2a: d1:98:98:8f:00:bd:d2:39:11:5a:38:e3:2f:95:b0: e2:6a:91:8e:fd:4e:42:63:ed:ec:25:1c:d5:9c:f1: f0:7d:88:ed:79:2d:0c:2c:7b:73:06:01:55:9c:1f: 9f:6f:3f:3d:af:18:46:6f:79:0d:ce:42:9a:56:87: ed:f8:b0:f9:a2:75:46:03:5c:c9:98:75:1d:59:63: b8:67:03:73:67:99:89:db:dd:5a:89:73:d0:b1:c8: be:cb:02:46:43:e6:c9:b5:e4:0e:e2:60:1a:e7:1f: 87:c1:73:25:7c:55:75:3e:44:ab:44:8b:40:d7:02: fa:fe:c1:9c:54:1b:78:09:c2:29:86:97:3b:cb:0f: 34:1c:84:dd:3e:eb:42:81:db:37:69:a5:02:d7:ed: 88:ab:04:85:da:6c:34:30:a5:3a:be:8d:12:51:0e: b0:af:9c:fc:42:d9:66:56:b3:67:72:6d:c8:f2:1d: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1B:92:C5:B0:CB:DB:0C:32:98:04:BD:6F:E2:1C:32:8F:A7:D7:6A X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f6:16:e2:ed:69:55:6f:fb:d4:02:52:4b:17:73:0f:58:48: 89:63:a2:9c:1e:2d:57:72:b0:e3:22:17:7d:7c:02:bf:36:f3: 86:ed:31:1c:26:03:3f:48:5d:1e:86:94:9b:ab:fe:4e:8a:5c: cd:54:c1:5a:f3:5e:fd:72:34:26:a1:c9:f2:73:1c:ca:2c:04: 32:d8:31:5a:5f:ef:f2:b7:de:95:b2:1e:20:53:28:4b:2d:c8: b5:00:c5:56:98:f1:63:f8:b3:fb:2c:20:76:e1:e4:9c:49:3c: 84:86:c3:3e:88:1b:c1:bc:d8:79:4c:68:49:e9:20:42:65:4c: 88:c6:3a:66:3a:cc:1c:0a:81:92:49:f1:77:7c:57:81:22:91: 4c:51:ef:39:9f:69:f1:d4:da:d9:1f:37:73:f3:54:23:d4:6a: 49:8b:57:e6:b4:f3:cd:c7:9e:e3:49:40:aa:95:ec:3a:38:11: 5f:e5:5e:e2:aa:8c:c9:f6:28:b6:ba:29:c2:43:6d:a3:e5:29: a9:e6:44:86:62:39:af:09:ba:43:f8:5e:43:e3:d5:b2:c1:89: df:52:5d:63:37:41:86:77:05:e0:86:78:ed:4d:c8:55:e4:81: d7:7b:2e:0d:77:60:42:96:a0:d7:80:f3:3a:3f:86:86:60:a7: 7b:8d:78:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjUxMTA0MjA0NTMzWhcNMjUxMTExMjA0NTMzWjAYMRYwFAYD VQQDEw02OTBhNjVlZS1lOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZFyOREpxFJ2wHJWM6iYWBjpeVd3FHFifwR1BdupZcoMSzwiC1QHKfmJeTwO hvsHzn3ZugWM1l4SwHF6fOCXH6S7852x+Lf5rSrRmJiPAL3SORFaOOMvlbDiapGO /U5CY+3sJRzVnPHwfYjteS0MLHtzBgFVnB+fbz89rxhGb3kNzkKaVoft+LD5onVG A1zJmHUdWWO4ZwNzZ5mJ291aiXPQsci+ywJGQ+bJteQO4mAa5x+HwXMlfFV1PkSr RItA1wL6/sGcVBt4CcIphpc7yw80HITdPutCgds3aaUC1+2IqwSF2mw0MKU6vo0S UQ6wr5z8QtlmVrNncm3I8h2UswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIbksWw y9sMMpgEvW/iHDKPp9dqMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC9hbi7WlVb/vUAlJLF3MPWEiJY6KcHi1XcrDjIhd9fAK/NvOG7TEc JgM/SF0ehpSbq/5OilzNVMFa8179cjQmocnycxzKLAQy2DFaX+/yt96Vsh4gUyhL Lci1AMVWmPFj+LP7LCB24eScSTyEhsM+iBvBvNh5TGhJ6SBCZUyIxjpmOswcCoGS SfF3fFeBIpFMUe85n2nx1NrZHzdz81Qj1GpJi1fmtPPNx57jSUCqlew6OBFf5V7i qozJ9ii2uinCQ22j5Smp5kSGYjmvCbpD+F5D49WywYnfUl1jN0GGdwXghnjtTchV 5IHXey4Nd2BClqDXgPM6P4aGYKd7jXjs -----END CERTIFICATE-----Generated at Thu Nov 6 00:08:53 2025 by rpki-client