$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: EwWFIFz6UB3wI4vdnKKlftDEQJH736tYKOgUFlJKSAw= Subject key identifier: A3:A9:C3:F1:80:B8:C9:D8:2E:06:76:B2:5B:D8:F0:7C:B2:AE:A9:CD Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 04EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 04E6 Signing time: Sun 02 Nov 2025 23:43:31 +0000 Manifest this update: Sun 02 Nov 2025 23:43:30 +0000 Manifest next update: Sun 09 Nov 2025 23:43:30 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: FBmMWaCSB+hLLcE+lOglhEitcQkpZPA9uB0kqKKV7eQ=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: ytiI82E6VCnTYlGo/bVg7G4jwjvMMnWPkOJQayi3ook=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Nov 2 23:43:30 2025 GMT Not After : Nov 9 23:43:30 2025 GMT Subject: CN=6907eca2-9ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:66:43:e6:8f:af:0b:5f:9b:33:6e:df:b2: be:da:1d:49:80:77:46:9a:87:d5:a2:ca:e9:c9:a3: 0d:97:5a:2c:5f:08:78:e8:aa:54:23:a5:7e:84:80: 80:53:34:de:be:c0:74:d6:9e:9b:21:e8:c9:9b:46: 27:49:07:93:25:11:9d:a9:4f:75:1d:5c:bc:65:de: da:c2:d6:57:23:50:e8:37:94:97:30:3e:92:4e:2d: e4:a1:68:3a:73:e3:87:e9:a7:82:0c:98:6e:c0:eb: cc:18:a9:d1:17:02:a8:d9:42:ce:57:5d:9c:2a:52: b2:63:76:8a:a5:e9:44:dc:cf:78:7c:31:ec:70:23: cb:84:bc:0c:03:98:fc:83:d9:06:56:7d:07:5a:74: 1d:c9:75:f7:88:39:a0:48:75:d6:db:f9:0a:08:b0: d7:dd:7c:1e:a4:67:4a:fe:55:d9:f4:7e:52:40:00: 6b:ef:5a:58:cc:b4:30:d7:ae:be:87:19:66:10:10: dc:4f:6d:b1:68:0a:27:f0:dc:9e:42:a6:0d:2f:63: 90:c0:68:89:04:d7:25:e5:7a:3a:b0:32:fc:23:83: 26:9e:f6:6b:ab:e7:2d:68:08:53:5b:3c:47:70:34: d9:14:11:63:c5:01:70:fe:26:c5:e2:c1:16:b3:ac: 8b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A9:C3:F1:80:B8:C9:D8:2E:06:76:B2:5B:D8:F0:7C:B2:AE:A9:CD X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a9:aa:e9:af:25:50:23:5b:1b:97:40:2c:20:90:27:5f:df: 45:33:e5:75:fe:2b:42:c0:53:e0:88:e2:54:3c:7f:11:da:cc: 03:a3:7a:11:c6:55:e4:f3:8c:4e:f7:d1:f3:93:b8:4f:03:98: 51:f9:e1:b9:87:c7:e7:09:d3:9a:60:f4:29:51:90:89:c5:e6: 05:ee:54:fa:ea:97:d5:01:56:d8:2c:4e:f7:24:b1:e9:85:66: 55:6b:9a:7a:9c:a1:08:99:60:4e:b1:a9:90:60:3f:20:63:ca: 0f:03:16:ec:b5:fb:c0:ca:9a:2a:23:a4:4a:0a:bd:d5:18:bf: 39:1a:61:71:6a:d3:24:2e:51:e4:20:db:74:24:a8:82:fd:0e: 80:72:36:c2:58:10:f4:b3:06:45:92:f6:8b:62:5f:e9:b6:c9: 58:92:f4:0e:b4:9e:10:4a:54:e6:2b:e6:ae:43:66:a9:2c:7e: 90:32:10:40:3f:5d:ad:db:5e:95:64:c3:5a:57:57:92:7b:1d: d4:6a:66:ea:7f:f9:9d:70:a7:88:74:e5:79:d8:f7:22:63:61: fd:ac:71:a5:c0:5a:28:30:85:85:1d:fd:da:89:6a:81:69:09: ab:78:7b:f2:e4:94:0d:21:f4:0c:c2:ea:3d:b6:ec:42:9d:e8: 3b:02:3b:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjUxMTAyMjM0MzMwWhcNMjUxMTA5MjM0MzMwWjAYMRYwFAYD VQQDEw02OTA3ZWNhMi05YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNRmQ+aPrwtfmzNu37K+2h1JgHdGmofVosrpyaMNl1osXwh46KpUI6V+hICA UzTevsB01p6bIejJm0YnSQeTJRGdqU91HVy8Zd7awtZXI1DoN5SXMD6STi3koWg6 c+OH6aeCDJhuwOvMGKnRFwKo2ULOV12cKlKyY3aKpelE3M94fDHscCPLhLwMA5j8 g9kGVn0HWnQdyXX3iDmgSHXW2/kKCLDX3XwepGdK/lXZ9H5SQABr71pYzLQw166+ hxlmEBDcT22xaAon8NyeQqYNL2OQwGiJBNcl5Xo6sDL8I4MmnvZrq+ctaAhTWzxH cDTZFBFjxQFw/ibF4sEWs6yLUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOpw/GA uMnYLgZ2slvY8HyyrqnNMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKqarpryVQI1sbl0AsIJAnX99FM+V1/itCwFPgiOJUPH8R2swDo3oR xlXk84xO99Hzk7hPA5hR+eG5h8fnCdOaYPQpUZCJxeYF7lT66pfVAVbYLE73JLHp hWZVa5p6nKEImWBOsamQYD8gY8oPAxbstfvAypoqI6RKCr3VGL85GmFxatMkLlHk INt0JKiC/Q6AcjbCWBD0swZFkvaLYl/ptslYkvQOtJ4QSlTmK+auQ2apLH6QMhBA P12t216VZMNaV1eSex3Uambqf/mdcKeIdOV52PciY2H9rHGlwFooMIWFHf3aiWqB aQmreHvy5JQNIfQMwuo9tuxCneg7Ajvw -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:10 2025 by rpki-client