$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: 9tnenb8nxauVXlhFZF5xIP6hAlnfqDn9oACJ1mXLfgY= Subject key identifier: E2:D4:31:F6:95:0B:AD:B9:3E:97:22:DE:A3:DC:85:25:22:54:D1:6D Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0BC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0BB9 Signing time: Sun 02 Nov 2025 18:54:26 +0000 Manifest this update: Sun 02 Nov 2025 18:54:25 +0000 Manifest next update: Sun 09 Nov 2025 18:54:25 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: W5+dmjNNytMwFZyNLSf8FwtS4x3oeKXrIdfQW7gRyks=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: bGuYSNzp5mZo+7E7IQsquXftEwJF3nV1lzs2MqWhd58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Nov 2 18:54:25 2025 GMT Not After : Nov 9 18:54:25 2025 GMT Subject: CN=6907a8e1-d025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:47:f4:20:41:24:de:05:72:d3:8b:8d:33: 8b:11:c7:43:c3:42:1d:70:95:61:ac:23:4b:db:f4: ab:d2:5a:3a:31:48:bb:61:5a:a7:b3:d0:b6:c8:c7: e6:b0:d2:af:07:de:02:97:29:e2:c1:9f:3a:25:9d: 7c:2d:08:80:0c:84:81:0f:3f:8d:da:2a:8f:8d:b4: 77:6b:43:ad:8b:55:37:18:e7:d2:6e:3b:87:6f:a0: cf:a0:85:e8:0c:e6:41:2e:65:b6:a7:06:9a:7f:5b: 7c:fe:10:1d:1a:2a:3c:3e:35:a2:ec:24:aa:72:97: 6c:b9:6c:4a:6a:43:b2:d5:2c:c7:48:ba:d8:3a:b5: 93:c1:7d:69:17:4d:3a:26:50:49:3c:9a:4f:04:5f: 23:43:1e:32:9b:d5:f1:2b:65:20:7b:59:a4:9b:ee: 4b:5e:74:68:38:64:44:fa:fb:c1:8c:f7:93:af:d2: 22:f1:11:69:44:9e:a8:85:dd:14:06:f8:95:ee:6f: 50:2f:60:32:fe:ad:eb:89:d7:b6:05:82:f4:5c:66: 8a:83:40:53:1a:3e:7f:3b:a1:ff:7d:1f:ba:14:4e: d5:bf:6f:9a:18:8b:da:47:bb:c6:25:ab:eb:21:5e: 3c:31:79:4d:a7:88:68:df:b2:15:09:9a:cb:eb:e1: a1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D4:31:F6:95:0B:AD:B9:3E:97:22:DE:A3:DC:85:25:22:54:D1:6D X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:24:54:ba:9c:b7:81:07:d5:57:e2:1c:75:8f:fd:0b:3f:2c: 7b:93:a9:c1:ac:d1:95:fb:a0:22:3f:dc:46:c5:ea:f1:a9:ba: 89:00:65:15:5e:ab:3b:04:e7:eb:86:3a:db:71:6c:c6:10:44: a1:7c:25:7b:4f:10:75:cb:ab:5f:b6:5f:79:97:35:2a:e9:5f: 15:8e:be:f5:71:72:80:23:e1:af:85:81:20:50:07:47:56:84: 54:d8:a5:f6:7e:f3:3a:b3:7f:d6:06:76:44:13:e0:60:a2:59: 99:23:9a:e9:bb:25:5a:57:cf:15:35:25:bc:15:18:6d:6a:98: 74:75:03:5a:1d:4a:47:a6:ca:b3:d0:e2:08:6a:ab:5d:db:ba: 26:14:84:c1:88:e3:a8:8c:63:d0:59:1f:c6:4b:97:aa:a2:bb: 41:b8:16:8f:78:37:f2:6d:d2:61:f3:3c:57:50:59:f2:53:65: 2d:64:36:15:a8:33:1f:69:d5:a9:0c:e1:a8:2d:47:ab:ec:31: a3:09:45:b4:3f:45:91:9b:e8:31:ea:c6:3a:d9:fb:46:78:a7: eb:0d:31:1f:6c:36:40:32:60:d1:5a:d2:40:0a:4b:17:a6:e2: 2b:a8:35:f4:ed:50:28:66:df:ff:de:e0:04:bb:1a:dd:1e:8d: 7f:44:95:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjUxMTAyMTg1NDI1WhcNMjUxMTA5MTg1NDI1WjAYMRYwFAYD VQQDEw02OTA3YThlMS1kMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOBH9CBBJN4FctOLjTOLEcdDw0IdcJVhrCNL2/Sr0lo6MUi7YVqns9C2yMfm sNKvB94ClyniwZ86JZ18LQiADISBDz+N2iqPjbR3a0Oti1U3GOfSbjuHb6DPoIXo DOZBLmW2pwaaf1t8/hAdGio8PjWi7CSqcpdsuWxKakOy1SzHSLrYOrWTwX1pF006 JlBJPJpPBF8jQx4ym9XxK2Uge1mkm+5LXnRoOGRE+vvBjPeTr9Ii8RFpRJ6ohd0U BviV7m9QL2Ay/q3ride2BYL0XGaKg0BTGj5/O6H/fR+6FE7Vv2+aGIvaR7vGJavr IV48MXlNp4ho37IVCZrL6+GhvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLUMfaV C625Ppci3qPchSUiVNFtMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiJFS6nLeBB9VX4hx1j/0LPyx7k6nBrNGV+6AiP9xGxerxqbqJAGUV Xqs7BOfrhjrbcWzGEEShfCV7TxB1y6tftl95lzUq6V8Vjr71cXKAI+GvhYEgUAdH VoRU2KX2fvM6s3/WBnZEE+BgolmZI5rpuyVaV88VNSW8FRhtaph0dQNaHUpHpsqz 0OIIaqtd27omFITBiOOojGPQWR/GS5eqortBuBaPeDfybdJh8zxXUFnyU2UtZDYV qDMfadWpDOGoLUer7DGjCUW0P0WRm+gx6sY62ftGeKfrDTEfbDZAMmDRWtJACksX puIrqDX07VAoZt//3uAEuxrdHo1/RJWg -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:45 2025 by rpki-client