$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json) Hash identifier: bbX8i1bgGAA4ny4F7t80nG9IAhaLRF06PnAB+K089nY= Subject key identifier: 79:E5:29:05:14:FA:EE:93:67:D5:99:53:09:0D:B4:5B:8D:F2:FF:19 Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Certificate serial: 0FA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft Manifest number: 0F99 Signing time: Sun 02 Nov 2025 17:33:27 +0000 Manifest this update: Sun 02 Nov 2025 17:33:26 +0000 Manifest next update: Sun 09 Nov 2025 17:33:26 +0000 Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: yq/rdksETonsRR1ES0nVqDd+eNw6V5BKj6l3lFDIo7M=) 2: 1CA64426AEFF11F09900E227C4F9AE02.roa (hash: CblOBlSAAnUcRhgwxLFjqfSNnGuGZY+46SwgFWnyUU8=) 3: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: H75rCk5vM8kD4h9GxneHBI+FagArNRGg0zjNp/brQWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Validity Not Before: Nov 2 17:33:26 2025 GMT Not After : Nov 9 17:33:26 2025 GMT Subject: CN=690795e6-b2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:a0:5a:0f:42:71:9c:c0:07:54:28:b3:45: 70:ff:a9:0f:06:8b:30:c1:2c:4e:ef:20:3e:55:6c: 81:7f:7c:90:5a:12:ad:fa:e4:a0:fc:eb:19:ce:25: b5:aa:94:f2:31:44:ab:c9:e8:c2:68:07:70:1e:fe: 20:43:03:31:b3:bb:bc:dd:0a:ac:f8:e7:2f:32:55: c1:93:12:2e:e3:2f:5c:72:0b:7d:30:c0:41:3a:99: 6a:b8:b3:a4:5d:67:b1:e3:47:35:9c:8e:03:e3:4f: 71:62:fb:e1:a7:3a:17:fe:b0:91:3a:c8:5d:1c:0e: 4b:e3:a5:86:92:c6:52:38:86:ee:df:dd:73:88:53: c3:1f:f6:73:18:49:6f:ca:63:f1:34:9b:81:8a:2f: 59:52:1c:d9:46:3e:e8:44:48:06:9b:6e:be:5a:7b: e8:26:fb:16:ce:c2:d7:9b:0c:15:e8:63:a3:1f:56: 84:ed:c7:87:5e:bf:bd:11:95:ee:54:5e:7e:cf:86: b8:c8:0d:0c:63:1a:51:bd:9e:4f:65:47:63:f3:fe: b2:32:f9:17:3e:c4:34:25:af:39:2c:28:73:e3:4f: 9d:b9:dc:22:fe:71:dd:42:d4:1a:94:7f:96:f7:6e: 1a:0e:9d:1a:62:d8:8d:d0:66:52:3e:dc:b4:17:a7: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E5:29:05:14:FA:EE:93:67:D5:99:53:09:0D:B4:5B:8D:F2:FF:19 X509v3 Authority Key Identifier: keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:29:e1:92:88:ae:1a:b1:74:7c:f4:7f:a4:ca:a1:ed:f2:09: ce:8b:5d:08:89:cd:99:e4:fa:3e:bd:26:01:1d:40:ee:38:f2: 77:7d:7e:f3:0a:b4:4f:c1:93:3f:f8:b4:a7:7b:b2:ab:61:b3: 8d:e7:46:51:82:30:e0:e3:a5:6c:01:42:16:20:5d:f9:39:8a: 9f:e4:39:d4:6c:4e:9e:e9:99:8f:4d:51:00:3e:1d:b6:fe:0a: e3:a4:32:66:b0:7e:e5:bf:a6:79:4b:fa:29:50:e5:72:9d:35: 69:99:1f:b0:2a:9a:6b:16:af:09:c4:37:4f:96:41:a9:f3:48: c4:ee:89:2b:2f:b6:51:71:30:cb:46:f6:f3:19:38:b0:8b:01: 6d:d0:e4:43:1b:b3:04:42:6a:8e:51:4b:80:c2:ee:39:0c:2f: f2:9c:87:15:6f:9e:07:f9:06:db:50:46:41:dd:3f:71:e7:5e: b9:2f:4b:e2:a5:15:b1:b8:de:34:ea:db:e3:22:90:ba:07:a6: c4:61:d9:fa:00:4c:19:7b:0d:7a:ec:ec:e5:fc:01:3a:77:04: 5e:fe:92:6d:ed:79:9c:5d:8d:80:67:b3:9b:37:eb:0e:28:45: 6c:69:b1:1d:6f:c6:f2:58:fd:99:e2:30:09:41:b1:ec:19:22: 53:3e:19:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKEQ4QUYzNzcxMkQ1NkIxQjY5M0VGNkQwM0UzNDZDMDBD RjNGMDQ5M0UwHhcNMjUxMTAyMTczMzI2WhcNMjUxMTA5MTczMzI2WjAYMRYwFAYD VQQDEw02OTA3OTVlNi1iMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C6gWg9CcZzAB1Qos0Vw/6kPBoswwSxO7yA+VWyBf3yQWhKt+uSg/OsZziW1 qpTyMUSryejCaAdwHv4gQwMxs7u83Qqs+OcvMlXBkxIu4y9ccgt9MMBBOplquLOk XWex40c1nI4D409xYvvhpzoX/rCROshdHA5L46WGksZSOIbu391ziFPDH/ZzGElv ymPxNJuBii9ZUhzZRj7oREgGm26+WnvoJvsWzsLXmwwV6GOjH1aE7ceHXr+9EZXu VF5+z4a4yA0MYxpRvZ5PZUdj8/6yMvkXPsQ0Ja85LChz40+dudwi/nHdQtQalH+W 924aDp0aYtiN0GZSPty0F6dZTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnlKQUU +u6TZ9WZUwkNtFuN8v8ZMB8GA1UdIwQYMBaAFNivN3EtVrG2k+9tA+NGwAzz8Ek+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC9GQTc4QjA0NDZG Q0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3NiYVQ3MjBENDBiQURQUHdT VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLODNjUzFXc2JhVDcyMEQ0MGJBRFBQd1NUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC9GQTc4QjA0NDZGQ0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3Ni YVQ3MjBENDBiQURQUHdTVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1KeGSiK4asXR89H+kyqHt8gnOi10Iic2Z5Po+vSYBHUDuOPJ3fX7z CrRPwZM/+LSne7KrYbON50ZRgjDg46VsAUIWIF35OYqf5DnUbE6e6ZmPTVEAPh22 /grjpDJmsH7lv6Z5S/opUOVynTVpmR+wKpprFq8JxDdPlkGp80jE7okrL7ZRcTDL RvbzGTiwiwFt0ORDG7MEQmqOUUuAwu45DC/ynIcVb54H+QbbUEZB3T9x5165L0vi pRWxuN406tvjIpC6B6bEYdn6AEwZew167Ozl/AE6dwRe/pJt7XmcXY2AZ7ObN+sO KEVsabEdb8byWP2Z4jAJQbHsGSJTPhnT -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:06 2025 by rpki-client