$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: oTli4jewKxYbGZ12WvRi3B407rzyA4V67YIHgSedb8I= Subject key identifier: 20:02:E5:72:1F:0C:8B:C9:80:A8:DD:D2:0F:0E:BF:80:56:EE:82:98 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 0247 Signing time: Wed 05 Nov 2025 01:56:56 +0000 Manifest this update: Wed 05 Nov 2025 01:56:55 +0000 Manifest next update: Wed 12 Nov 2025 01:56:55 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: I6tb2EYfVC5Z6Yfkcgc3cCXUdRegS1aJRABh19aN0H4=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: F6J0bt8uAa0oxWiVJbAXSFZZKwEQUSnzC9etelTnDPw=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 1uyPmOr/eQOh4UTqlVB7yYLSOK5/gKpoGojSsMkgGQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Nov 5 01:56:55 2025 GMT Not After : Nov 12 01:56:55 2025 GMT Subject: CN=690aaee7-93d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:36:de:c4:55:5c:60:b7:dc:19:90:a9:24: 65:bb:92:f9:dc:e5:09:8b:8e:bf:c2:fc:0c:e2:bb: 91:3b:af:55:3a:2d:58:fa:f1:6c:3a:92:80:3a:ba: 54:5e:7f:1d:b9:e5:83:37:00:08:b8:68:4d:08:e9: d1:ea:66:09:d7:d3:64:2c:0f:9e:2c:61:87:d7:53: 5d:3d:a9:ad:f8:86:f1:f7:e1:af:91:51:02:d5:d8: 0e:86:c0:97:32:ad:70:da:f8:87:7d:55:60:ab:fe: 82:60:eb:2a:cf:e9:b5:9b:92:2e:81:f3:6f:de:cc: ab:6f:9e:80:bf:08:18:a5:c6:6e:68:df:59:cd:bb: c5:ea:dc:c0:0d:64:bc:73:95:e1:38:05:03:f9:23: e1:d2:b1:b4:db:3f:1a:28:6d:ce:64:34:11:6b:89: bb:41:30:e5:3c:97:05:98:6b:2a:45:e4:84:84:70: b5:16:44:e9:23:c2:1b:cb:b0:e6:b6:eb:41:4e:3c: 86:68:8a:8f:8c:55:d2:67:dd:ee:92:bf:d8:cc:d2: ba:c9:66:64:93:60:91:e2:dd:93:79:da:4b:18:4b: fe:03:31:bc:59:dd:f2:61:dd:86:48:8a:ea:56:f1: 80:e3:9a:bf:cf:3f:fe:df:9c:42:2b:56:89:e8:c6: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:02:E5:72:1F:0C:8B:C9:80:A8:DD:D2:0F:0E:BF:80:56:EE:82:98 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:fb:9d:db:e0:f5:60:23:c6:26:55:97:50:d5:9a:16:7e:fd: 91:5f:c7:4d:5f:fa:04:68:b1:a5:da:f1:3e:be:e3:9f:0c:0f: aa:ba:05:41:a7:35:b1:8f:f6:09:af:13:0b:84:01:1a:31:09: 6e:fa:ac:a5:d6:0d:7d:3a:ef:23:9a:a2:e9:c7:b5:ba:38:3f: f9:8d:b8:23:0b:16:4e:8f:fb:4d:56:0c:e0:78:5d:52:6d:33: af:93:2f:ec:2c:f1:2f:ab:e4:eb:ec:e3:cb:97:c2:dc:0a:81: be:c5:29:cb:aa:44:83:e5:02:70:33:64:5d:43:f0:92:94:e8: 0d:2b:11:88:62:46:35:0b:12:7d:3f:25:96:7f:fe:ca:2f:a6: 95:ba:dc:9b:9a:eb:e2:e4:2c:c8:32:37:b4:10:36:43:f1:18: ce:a2:c6:28:24:5f:3a:6b:d2:59:d4:7c:8f:18:01:86:d0:f7: 9e:ee:08:be:01:99:0b:37:6b:a9:0a:23:f9:c2:98:7f:69:49: dd:d5:d8:89:22:30:0a:57:14:6a:a3:ad:40:9a:c9:16:d6:83: 06:12:6a:27:88:a9:11:88:3c:2e:51:99:9a:c1:7c:a4:eb:bb: ba:1d:1b:c9:de:c2:e7:55:5a:d8:58:9a:52:33:83:f5:71:56: 11:ce:de:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjUxMTA1MDE1NjU1WhcNMjUxMTEyMDE1NjU1WjAYMRYwFAYD VQQDEw02OTBhYWVlNy05M2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBg23sRVXGC33BmQqSRlu5L53OUJi46/wvwM4ruRO69VOi1Y+vFsOpKAOrpU Xn8dueWDNwAIuGhNCOnR6mYJ19NkLA+eLGGH11NdPamt+Ibx9+GvkVEC1dgOhsCX Mq1w2viHfVVgq/6CYOsqz+m1m5IugfNv3syrb56AvwgYpcZuaN9ZzbvF6tzADWS8 c5XhOAUD+SPh0rG02z8aKG3OZDQRa4m7QTDlPJcFmGsqReSEhHC1FkTpI8Iby7Dm tutBTjyGaIqPjFXSZ93ukr/YzNK6yWZkk2CR4t2TedpLGEv+AzG8Wd3yYd2GSIrq VvGA45q/zz/+35xCK1aJ6MbDGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAC5XIf DIvJgKjd0g8Ov4BW7oKYMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI+53b4PVgI8YmVZdQ1ZoWfv2RX8dNX/oEaLGl2vE+vuOfDA+qugVB pzWxj/YJrxMLhAEaMQlu+qyl1g19Ou8jmqLpx7W6OD/5jbgjCxZOj/tNVgzgeF1S bTOvky/sLPEvq+Tr7OPLl8LcCoG+xSnLqkSD5QJwM2RdQ/CSlOgNKxGIYkY1CxJ9 PyWWf/7KL6aVutybmuvi5CzIMje0EDZD8RjOosYoJF86a9JZ1HyPGAGG0Pee7gi+ AZkLN2upCiP5wph/aUnd1diJIjAKVxRqo61AmskW1oMGEmoniKkRiDwuUZmawXyk 67u6HRvJ3sLnVVrYWJpSM4P1cVYRzt4S -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:17 2025 by rpki-client