$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: mcOcEL8JCAY0BTq4Il+Mp26csVqAxNgJIeT6qc7WA+w= Subject key identifier: 85:90:F9:69:0D:CF:38:34:B3:2F:FD:8D:61:4F:20:BB:E6:2E:03:6F Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0AA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0A9D Signing time: Thu 30 Oct 2025 19:34:35 +0000 Manifest this update: Thu 30 Oct 2025 19:34:34 +0000 Manifest next update: Thu 06 Nov 2025 19:34:34 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: f9+tQWxBdJhGE0gYTxSrl/PEGruM1aXmrBHTj/w9SDE=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: bm4J9Gs8kg53MtutKeTvvvRSq0MtCTJcSE5YLit7Dts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2725 (0xaa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Oct 30 19:34:34 2025 GMT Not After : Nov 6 19:34:34 2025 GMT Subject: CN=6903bdca-9608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1f:36:6b:4a:27:8c:1e:69:60:bb:40:2f:e0: bb:aa:cc:83:11:74:94:0c:29:17:18:bb:89:d5:d3: b8:7b:f7:fa:4a:c6:ae:45:8d:c4:84:77:13:a3:cb: 65:d6:b1:01:38:4d:62:db:8a:40:3d:d8:ce:8d:42: a1:d4:e6:13:7c:34:bd:89:23:1b:7f:d5:88:13:53: e2:f5:d6:4a:d8:bb:eb:5d:b0:2c:65:cb:0b:45:88: cb:f5:e7:97:5c:9a:1f:7e:2a:78:ce:d6:d1:ef:27: 54:c9:ef:c9:c8:58:92:fc:4f:c5:06:b8:92:66:e1: 75:08:a5:69:e8:cd:0e:75:08:ad:a4:40:6b:79:ba: 88:1b:4f:9c:08:f1:ed:a9:6a:e3:73:4b:95:3d:97: 22:e3:03:d2:90:40:8d:6f:4a:72:8f:42:70:ae:d2: 65:ee:17:1e:40:aa:9e:ae:14:1e:7b:ce:e9:ad:e1: 75:94:f8:f3:4e:48:c8:30:63:23:97:5a:ae:96:2e: a1:13:d3:ca:67:4e:e9:67:41:49:21:6f:b4:ab:86: fc:4f:0d:97:54:b4:87:e7:c3:7c:08:fe:ea:ac:7e: 5a:88:e7:75:92:c9:64:81:71:f4:7a:7d:c6:28:34: de:c3:f9:a9:95:c2:08:fd:c9:a7:a3:19:68:a5:ff: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:90:F9:69:0D:CF:38:34:B3:2F:FD:8D:61:4F:20:BB:E6:2E:03:6F X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:57:87:12:c5:0c:58:e1:f4:12:64:9d:a1:07:de:f5:ef:98: 0d:21:bd:2d:92:7a:62:a5:bc:f3:5f:76:18:4f:a5:36:fe:a8: 35:f8:11:57:5d:28:57:44:4c:10:b6:21:ce:eb:50:64:a6:b3: c5:1e:98:bd:e5:7d:1b:84:a5:4d:35:d1:25:6c:1d:59:e3:b3: 4c:da:56:23:a0:7c:de:0c:22:84:23:36:d9:07:de:50:a0:d8: bf:25:c7:29:4c:82:9d:92:24:97:48:23:5d:80:02:d3:0d:d3: 82:c9:37:d7:4d:40:58:58:95:38:87:d5:79:5e:20:42:b1:c4: 79:8f:9e:f2:d3:ed:d8:14:f6:b8:7d:a3:86:0b:f6:9a:5f:30: c5:65:81:82:d1:c4:02:05:97:32:b3:37:ea:7b:dc:ed:28:1a: 76:3e:1d:34:ce:eb:ef:f5:31:15:c2:6e:49:dc:de:af:c6:69: c0:b4:83:42:a8:61:61:b3:e6:cf:51:d1:aa:f7:5f:e1:e7:69: 67:51:50:e9:32:ef:b7:42:16:7e:97:65:cb:f2:73:d5:e1:b6: a6:c8:0e:71:99:37:80:e7:c5:84:8d:67:7f:f9:53:eb:56:66: 7c:09:b2:b6:11:5b:e5:e2:13:82:e3:a8:ab:39:c3:f2:6d:fa: d8:7f:b5:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjUxMDMwMTkzNDM0WhcNMjUxMTA2MTkzNDM0WjAYMRYwFAYD VQQDEw02OTAzYmRjYS05NjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7R82a0onjB5pYLtAL+C7qsyDEXSUDCkXGLuJ1dO4e/f6SsauRY3EhHcTo8tl 1rEBOE1i24pAPdjOjUKh1OYTfDS9iSMbf9WIE1Pi9dZK2LvrXbAsZcsLRYjL9eeX XJoffip4ztbR7ydUye/JyFiS/E/FBriSZuF1CKVp6M0OdQitpEBrebqIG0+cCPHt qWrjc0uVPZci4wPSkECNb0pyj0JwrtJl7hceQKqerhQee87preF1lPjzTkjIMGMj l1quli6hE9PKZ07pZ0FJIW+0q4b8Tw2XVLSH58N8CP7qrH5aiOd1kslkgXH0en3G KDTew/mplcII/cmnoxlopf8oNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWQ+WkN zzg0sy/9jWFPILvmLgNvMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4V4cSxQxY4fQSZJ2hB97175gNIb0tknpipbzzX3YYT6U2/qg1+BFX XShXREwQtiHO61BkprPFHpi95X0bhKVNNdElbB1Z47NM2lYjoHzeDCKEIzbZB95Q oNi/JccpTIKdkiSXSCNdgALTDdOCyTfXTUBYWJU4h9V5XiBCscR5j57y0+3YFPa4 faOGC/aaXzDFZYGC0cQCBZcyszfqe9ztKBp2Ph00zuvv9TEVwm5J3N6vxmnAtINC qGFhs+bPUdGq91/h52lnUVDpMu+3QhZ+l2XL8nPV4bamyA5xmTeA58WEjWd/+VPr VmZ8CbK2EVvl4hOC46irOcPybfrYf7Vp -----END CERTIFICATE-----Generated at Fri Oct 31 05:41:22 2025 by rpki-client