$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json) Hash identifier: MHAZSwi+MTrcVJl5j8LHis6aPBcGctfqQCFDAOicPIk= Subject key identifier: EA:72:F4:C2:08:8A:2E:80:2D:67:9E:0A:70:ED:EC:63:21:4D:76:AC Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 058A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft Manifest number: 0584 Signing time: Tue 04 Nov 2025 23:19:52 +0000 Manifest this update: Tue 04 Nov 2025 23:19:52 +0000 Manifest next update: Tue 11 Nov 2025 23:19:52 +0000 Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: KFN0gAKXsO2b9MwdYWN91UXbjnoo9fCEC/eQn7H+yQo=) 2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: 9gxRC5js1FiufwEU1KdLZ+ZBBpP4QjbLjPfn8nzB2wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1418 (0x58a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: Nov 4 23:19:52 2025 GMT Not After : Nov 11 23:19:52 2025 GMT Subject: CN=690a8a18-80cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c1:a6:fb:8b:0f:7e:b6:6a:2e:65:1f:f9:a7: 8f:48:81:9c:ee:ea:c1:10:c2:cf:b0:24:de:ca:4e: da:67:e6:e3:d5:cb:e8:d5:ab:a3:85:af:6d:03:56: d5:f7:1f:ac:67:3a:a6:e3:6f:0e:84:e8:e6:c7:64: 68:20:f9:bf:fd:f4:fe:00:cc:73:b9:e9:bf:57:60: 03:25:4f:28:03:3b:25:d3:c6:78:69:b1:d1:5d:ce: 7a:8d:88:82:93:54:52:21:63:8e:09:c4:d8:0c:26: f3:00:dd:1e:07:33:46:8c:11:c9:bc:ec:ed:53:95: e0:c0:c7:87:4a:70:17:7c:4d:68:83:f6:d4:d5:be: 32:34:0f:6b:d7:7f:86:5f:c8:44:e2:48:bc:38:b8: 6d:38:ed:71:6f:8e:ff:bd:79:41:9a:09:11:3e:77: 54:5d:a7:84:84:21:81:7f:48:82:64:55:6b:41:1c: 21:09:2c:44:dd:fc:42:79:25:3e:c1:0c:6f:01:7c: d4:c7:37:fc:14:57:25:c7:89:5d:5c:73:2f:a3:93: 97:8a:79:11:2f:be:10:f8:5b:e2:fc:ba:c3:df:af: 42:d2:6c:93:7c:a6:3d:32:6b:fa:50:1f:cd:eb:bb: 72:48:33:7a:81:0c:1a:22:c0:4b:27:84:04:57:a1: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:72:F4:C2:08:8A:2E:80:2D:67:9E:0A:70:ED:EC:63:21:4D:76:AC X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bc:fc:55:4f:3b:fb:22:25:5a:03:e9:73:b2:3e:70:24:55: fa:c2:1c:ed:88:65:be:a2:d1:0c:ce:ea:59:e3:67:9f:8e:ec: 6f:8d:4e:9e:03:21:8b:d4:ce:12:3a:da:8d:e3:e7:e1:de:13: b2:2d:cb:e3:a0:66:ed:5b:3f:d9:4b:1e:53:27:7b:9b:86:c0: 3f:cc:19:f2:0c:ff:94:e0:14:1d:9b:d7:25:96:f0:53:21:5a: 75:2b:3a:10:0f:23:a0:d9:6e:0a:6d:d9:ae:a1:31:3f:59:06: 42:de:b8:e0:a3:63:d3:7d:12:26:0b:e7:b2:f0:97:cd:bd:50: b7:e6:b9:cf:d3:3a:4c:15:b4:db:50:98:8a:d0:7a:b2:2b:1d: 6f:06:c4:a4:35:9d:e8:2b:15:c4:0a:7e:66:89:1f:0b:dc:06: 26:4e:b1:8c:b6:20:b4:3d:ba:49:98:57:92:e5:c5:c5:79:37: 6e:70:15:98:91:8e:48:22:70:35:06:d3:b3:b6:e6:d4:8c:99: 1e:b8:11:ac:96:dd:b9:d1:99:b6:af:eb:cf:cd:df:74:9f:8a: b6:95:c4:44:86:a2:8b:62:27:87:60:58:86:f8:6e:aa:e5:4b: c3:e6:aa:8c:cd:f8:7f:bd:69:24:f5:3c:76:c6:75:9d:9b:5b: ed:d3:e8:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjUxMTA0MjMxOTUyWhcNMjUxMTExMjMxOTUyWjAYMRYwFAYD VQQDEw02OTBhOGExOC04MGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cGm+4sPfrZqLmUf+aePSIGc7urBEMLPsCTeyk7aZ+bj1cvo1aujha9tA1bV 9x+sZzqm428OhOjmx2RoIPm//fT+AMxzuem/V2ADJU8oAzsl08Z4abHRXc56jYiC k1RSIWOOCcTYDCbzAN0eBzNGjBHJvOztU5XgwMeHSnAXfE1og/bU1b4yNA9r13+G X8hE4ki8OLhtOO1xb47/vXlBmgkRPndUXaeEhCGBf0iCZFVrQRwhCSxE3fxCeSU+ wQxvAXzUxzf8FFclx4ldXHMvo5OXinkRL74Q+Fvi/LrD369C0myTfKY9Mmv6UB/N 67tySDN6gQwaIsBLJ4QEV6Gi+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpy9MII ii6ALWeeCnDt7GMhTXasMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX R3pPMlRlRkxBUjhwb2VKQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvvPxVTzv7IiVaA+lzsj5wJFX6whztiGW+otEMzupZ42efjuxvjU6e AyGL1M4SOtqN4+fh3hOyLcvjoGbtWz/ZSx5TJ3ubhsA/zBnyDP+U4BQdm9cllvBT IVp1KzoQDyOg2W4KbdmuoTE/WQZC3rjgo2PTfRImC+ey8JfNvVC35rnP0zpMFbTb UJiK0HqyKx1vBsSkNZ3oKxXECn5miR8L3AYmTrGMtiC0PbpJmFeS5cXFeTducBWY kY5IInA1BtOztubUjJkeuBGslt250Zm2r+vPzd90n4q2lcREhqKLYieHYFiG+G6q 5UvD5qqMzfh/vWkk9Tx2xnWdm1vt0+jm -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:43 2025 by rpki-client