$ rpki-client -vvf rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft File: b-8AlyoeLPhUsuqBXRBOPG72o6g.mft (raw, json) Hash identifier: UBNey/xftX/MNLQnhcGFBizxECzL3Chha3eXCriR5r0= Subject key identifier: 67:E3:D7:93:DE:BE:49:54:82:44:F8:77:B6:DC:06:F1:A4:20:F8:70 Authority key identifier: 6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 Certificate issuer: /CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft Manifest number: 0503 Signing time: Sun 02 Nov 2025 23:37:38 +0000 Manifest this update: Sun 02 Nov 2025 23:37:37 +0000 Manifest next update: Sun 09 Nov 2025 23:37:37 +0000 Files and hashes: 1: b-8AlyoeLPhUsuqBXRBOPG72o6g.crl (hash: TeqT3rrqt9gpF2j7ZTX/zdFklKcp29P9OmXnH7HjH/4=) 2: 8E80453E23EF11EF8A1CE76FC4F9AE02.roa (hash: FfWhc8CE7AXjM2zJsOdKxO4u+IWsNBnU54fEgTxpN1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A836A, serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Validity Not Before: Nov 2 23:37:37 2025 GMT Not After : Nov 9 23:37:37 2025 GMT Subject: CN=6907eb42-b11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:3d:46:0b:8b:33:c4:ea:77:2c:c5:ea:20: 8e:3b:28:d2:5e:07:3b:62:33:19:5a:69:c2:b9:79: 41:96:72:a6:94:bd:47:d1:4c:2e:05:04:d3:05:af: cf:43:21:2e:ac:a1:dc:6a:97:5a:27:a4:c3:12:93: 9a:bb:c6:3d:1e:51:83:7f:a5:a4:3a:91:06:94:63: cf:7c:ad:ab:a1:9c:81:3e:d9:c9:3c:ff:d2:f6:ff: ee:88:5d:59:2d:2d:2d:18:42:80:d4:6d:5c:b0:38: 92:51:5d:7a:a9:21:7e:4a:a8:0c:ee:a3:81:ab:80: 8d:95:19:59:5c:a1:31:2e:ce:ed:4f:dd:57:98:32: 93:78:f7:ea:47:87:4d:94:b8:f6:4c:08:91:52:1a: d8:1f:42:7c:a5:c8:ee:e3:e9:86:5d:52:7e:67:b2: c5:70:d6:fb:b4:1c:e1:a1:64:13:46:ca:96:17:36: 4e:a3:e1:6f:4e:e2:f9:c6:9a:dc:a5:c1:12:e9:71: a2:4b:40:7f:04:43:ca:64:c6:d7:f4:fb:04:14:a9: 8b:8a:ba:17:99:aa:22:31:49:30:e0:f1:a9:9f:ea: 70:b7:4b:5d:d1:17:a6:6e:22:2c:f3:eb:3d:5e:40: 95:8b:b7:33:09:3f:32:fe:9b:08:87:8d:4a:04:87: 9a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E3:D7:93:DE:BE:49:54:82:44:F8:77:B6:DC:06:F1:A4:20:F8:70 X509v3 Authority Key Identifier: keyid:6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:00:c7:c2:30:47:57:50:bf:f2:a9:1c:88:fb:d8:19:4a:c6: 4f:24:4e:cd:f5:27:ef:07:a7:59:15:08:95:8e:69:aa:15:fd: 35:cf:61:28:a2:4e:27:64:e8:16:b2:aa:a8:13:69:48:c6:17: f4:c6:d1:64:cf:0c:3b:d4:ad:7a:07:c4:48:64:46:bf:ac:5a: 4f:a4:55:22:55:f9:32:69:ae:c7:e0:92:6e:00:19:86:56:7b: c1:e6:f5:47:b6:2c:fc:7c:1c:be:2f:77:f9:4a:53:8f:46:c6: 3d:cf:1a:c1:9a:13:8c:b1:36:35:e9:32:2f:95:44:4a:89:16: 6a:08:4b:c9:1b:09:e5:e7:6e:a2:4f:ce:80:73:2e:9b:37:b8: f5:cb:58:02:56:fa:fa:85:26:c3:a7:99:61:65:74:1d:04:fa: 1b:ed:de:20:77:f0:a6:cd:64:8f:a5:8d:e6:86:75:ef:67:06: f4:de:a8:5d:75:bf:60:8c:60:50:8f:a4:6c:df:b0:e2:d3:5a: 13:52:6e:51:eb:05:34:64:82:98:11:88:e8:e3:8a:b8:cc:9f: 89:85:c7:3c:bc:29:a1:36:99:4a:99:2e:53:9c:1a:86:44:db: d1:e9:41:16:23:bf:c4:ef:85:65:7d:85:aa:94:31:7f:45:25: 48:24:53:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzNkExMTAvBgNVBAUTKDZGRUYwMDk3MkExRTJDRjg1NEIyRUE4MTVEMTA0RTND NkVGNkEzQTgwHhcNMjUxMTAyMjMzNzM3WhcNMjUxMTA5MjMzNzM3WjAYMRYwFAYD VQQDEw02OTA3ZWI0Mi1iMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsK89RguLM8TqdyzF6iCOOyjSXgc7YjMZWmnCuXlBlnKmlL1H0UwuBQTTBa/P QyEurKHcapdaJ6TDEpOau8Y9HlGDf6WkOpEGlGPPfK2roZyBPtnJPP/S9v/uiF1Z LS0tGEKA1G1csDiSUV16qSF+SqgM7qOBq4CNlRlZXKExLs7tT91XmDKTePfqR4dN lLj2TAiRUhrYH0J8pcju4+mGXVJ+Z7LFcNb7tBzhoWQTRsqWFzZOo+FvTuL5xprc pcES6XGiS0B/BEPKZMbX9PsEFKmLiroXmaoiMUkw4PGpn+pwt0td0RembiIs8+s9 XkCVi7czCT8y/psIh41KBIeahQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfj15Pe vklUgkT4d7bcBvGkIPhwMB8GA1UdIwQYMBaAFG/vAJcqHiz4VLLqgV0QTjxu9qOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODM2QS9DMUY0QUI3QzJG MzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQaFVzdXFCWFJCT1BHNzJv NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ItOEFseW9lTFBoVXN1cUJYUkJPUEc3Mm82Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODM2QS9DMUY0QUI3QzJGMzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQ aFVzdXFCWFJCT1BHNzJvNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYAMfCMEdXUL/yqRyI+9gZSsZPJE7N9SfvB6dZFQiVjmmqFf01z2Eo ok4nZOgWsqqoE2lIxhf0xtFkzww71K16B8RIZEa/rFpPpFUiVfkyaa7H4JJuABmG VnvB5vVHtiz8fBy+L3f5SlOPRsY9zxrBmhOMsTY16TIvlURKiRZqCEvJGwnl526i T86Acy6bN7j1y1gCVvr6hSbDp5lhZXQdBPob7d4gd/CmzWSPpY3mhnXvZwb03qhd db9gjGBQj6Rs37Di01oTUm5R6wU0ZIKYEYjo44q4zJ+Jhcc8vCmhNplKmS5TnBqG RNvR6UEWI7/E74VlfYWqlDF/RSVIJFMS -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:11 2025 by rpki-client