$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json) Hash identifier: PlwTMcNXjSDVzW71gadugUwomInbUFByNT7KZVYnUp4= Subject key identifier: BD:F6:4A:56:1F:9F:AB:7A:1F:89:01:A2:B9:DB:33:8F:9D:45:0B:E3 Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft Manifest number: 01D0 Signing time: Mon 03 Nov 2025 02:45:49 +0000 Manifest this update: Mon 03 Nov 2025 02:45:49 +0000 Manifest next update: Mon 10 Nov 2025 02:45:49 +0000 Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: k3GYaZR64cnuZ1tBYANy2yrb1DP7rYH0Bp1W4rENqig=) 2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: tnhVbAfny5ry4j6HJiWID5oWjAmaD653liAgf81aO1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: Nov 3 02:45:49 2025 GMT Not After : Nov 10 02:45:49 2025 GMT Subject: CN=6908175d-50aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:3c:f2:b1:21:9c:13:65:2c:e9:06:8e:5c: 73:ab:5f:3a:54:f8:62:af:c8:81:a6:dc:e3:4d:6a: 02:fd:13:0d:ad:7d:88:e6:76:e3:e8:3d:0c:e2:bc: 1b:7c:d6:42:67:0a:70:f5:b5:7e:94:aa:72:9e:ab: 69:85:56:8b:7b:a1:47:52:02:75:11:9f:a8:46:29: 59:82:f8:b8:4f:fe:46:fc:66:d7:f7:57:5c:3b:13: 0a:bf:bc:fa:ba:e8:7b:31:08:56:2a:7b:52:8d:c5: b8:a5:b1:04:c2:a5:d8:5f:89:6d:19:9b:20:11:19: bc:4f:5b:5b:c8:5a:94:19:d0:ba:13:e9:98:a5:aa: 4a:01:2a:a8:00:c2:37:f9:a8:ae:87:ea:7c:a0:4e: f1:6c:8a:97:24:8a:81:e1:2c:3c:6b:c9:5d:13:d8: 50:04:5e:79:8d:a4:5d:e0:aa:64:4b:80:bf:1a:c8: 75:71:00:d4:4c:36:ca:41:f8:87:28:90:e6:11:9a: 48:01:d2:2d:95:f5:e8:38:e7:64:cd:d1:07:dc:d7: fe:c4:88:12:1b:fa:52:73:65:8d:01:2f:69:46:02: 84:8f:8d:f3:cf:4a:1a:8e:26:2b:e5:2b:86:85:c1: 19:6d:aa:fe:bd:1c:34:1d:0c:c7:db:48:57:0e:b6: c8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F6:4A:56:1F:9F:AB:7A:1F:89:01:A2:B9:DB:33:8F:9D:45:0B:E3 X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:8f:3c:9e:63:22:70:77:e5:85:b7:56:9d:e7:7f:fa:cb:f5: 51:57:e8:0c:f7:23:20:5e:5e:36:c6:70:06:e9:9d:bc:8f:1d: 00:74:ac:57:2b:3a:2a:84:19:e3:0f:33:6c:d4:4e:70:26:30: c1:65:31:f9:75:12:8d:3c:99:a0:2f:c0:05:c0:3a:40:a2:c8: 7e:97:d4:68:dc:ef:e5:5c:4e:48:0e:ea:93:84:55:1f:5d:96: 1c:28:b6:b5:43:c8:ba:51:44:35:d3:ca:b7:84:52:e2:58:f7: b9:86:ea:44:0f:4a:2f:6a:1c:48:fb:2c:d1:c2:2a:4c:db:52: 73:c4:44:42:1d:bd:41:65:e1:39:30:ef:1b:91:c3:aa:aa:b0: 55:28:5e:79:89:9f:46:70:11:e3:2e:f4:38:ce:e9:88:e7:79: 62:8f:48:5a:eb:50:40:29:96:a1:7e:dc:9b:ff:d2:9e:c0:de: 8a:0d:b3:a1:24:bd:7b:e0:c2:40:f9:02:0a:ad:77:6b:aa:d3: 48:72:15:cf:ba:a5:4f:a1:8d:f1:98:eb:4b:8f:8a:52:e9:f2: 04:ec:f6:25:a0:23:a0:20:78:83:66:73:65:be:59:35:5d:c8: 53:68:20:58:3e:d0:b3:8f:28:27:6b:12:f1:a0:49:9e:a0:54: 7b:c7:6c:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjUxMTAzMDI0NTQ5WhcNMjUxMTEwMDI0NTQ5WjAYMRYwFAYD VQQDEw02OTA4MTc1ZC01MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybg88rEhnBNlLOkGjlxzq186VPhir8iBptzjTWoC/RMNrX2I5nbj6D0M4rwb fNZCZwpw9bV+lKpynqtphVaLe6FHUgJ1EZ+oRilZgvi4T/5G/GbX91dcOxMKv7z6 uuh7MQhWKntSjcW4pbEEwqXYX4ltGZsgERm8T1tbyFqUGdC6E+mYpapKASqoAMI3 +aiuh+p8oE7xbIqXJIqB4Sw8a8ldE9hQBF55jaRd4KpkS4C/Gsh1cQDUTDbKQfiH KJDmEZpIAdItlfXoOOdkzdEH3Nf+xIgSG/pSc2WNAS9pRgKEj43zz0oajiYr5SuG hcEZbar+vRw0HQzH20hXDrbIpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL32SlYf n6t6H4kBornbM4+dRQvjMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz R19sMzR4RnZXQjlSRk5BMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTjzyeYyJwd+WFt1ad53/6y/VRV+gM9yMgXl42xnAG6Z28jx0AdKxX KzoqhBnjDzNs1E5wJjDBZTH5dRKNPJmgL8AFwDpAosh+l9Ro3O/lXE5IDuqThFUf XZYcKLa1Q8i6UUQ108q3hFLiWPe5hupED0ovahxI+yzRwipM21JzxERCHb1BZeE5 MO8bkcOqqrBVKF55iZ9GcBHjLvQ4zumI53lij0ha61BAKZahftyb/9KewN6KDbOh JL174MJA+QIKrXdrqtNIchXPuqVPoY3xmOtLj4pS6fIE7PYloCOgIHiDZnNlvlk1 XchTaCBYPtCzjygnaxLxoEmeoFR7x2xv -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:37 2025 by rpki-client