$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json) Hash identifier: u8mF+zHxgyqv6DPLg3S2EiPCGHg3YXMWnNItM91R/2E= Subject key identifier: BA:FB:47:C5:3C:84:25:99:01:B4:2B:65:33:24:6B:FD:1A:FE:10:8F Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft Manifest number: 0161 Signing time: Wed 05 Nov 2025 04:11:54 +0000 Manifest this update: Wed 05 Nov 2025 04:11:54 +0000 Manifest next update: Wed 12 Nov 2025 04:11:54 +0000 Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: 1UMBwjeKSpfPZ+39kn7k+lu1W4eqWiJOuRGaQ8B7EjE=) 2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: fBtaOlMCOFGQQtGdBagxQGnrYFNg/qX3d4dMpzhuZnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: Nov 5 04:11:54 2025 GMT Not After : Nov 12 04:11:54 2025 GMT Subject: CN=690ace8a-6962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bb:cd:5f:1b:61:3b:c7:c5:72:f9:44:a7:35: 2c:3e:25:5b:cc:82:e8:f6:1b:ca:67:b1:3c:00:ba: 23:94:89:9b:56:2f:c4:5b:5d:b7:94:2a:48:68:03: fe:35:9d:f5:06:02:3e:47:56:f6:0b:50:24:a4:7d: 1d:60:fe:b3:70:63:37:98:84:6a:5c:bc:e3:80:b3: b5:08:61:95:e1:7a:dc:9b:13:a4:c9:14:d3:ac:0f: c4:3f:7b:ca:9e:6b:51:89:31:f3:d5:38:18:b1:58: a2:ae:04:80:43:25:d2:81:4f:c7:71:df:38:e0:a0: 1a:21:f1:ba:b8:ff:29:b7:dc:ef:b0:50:55:4b:52: 28:3c:bb:af:e7:03:0e:1c:0b:23:85:85:9d:8f:cb: 1d:a8:56:e0:2d:d1:be:53:e4:e9:d8:3e:28:b1:78: ca:ee:dd:06:c1:ce:1c:f8:d7:a8:a2:46:62:bf:3d: a2:6a:ca:99:f1:0f:ca:45:52:69:84:4f:ed:4a:68: 46:81:5b:82:05:8e:7d:d0:5e:d4:10:4a:5d:46:cc: b8:2f:45:50:8d:d4:18:49:f1:e5:95:73:2c:81:29: 55:4e:02:7a:cb:40:8d:34:7d:6d:98:69:22:f0:5a: 15:80:18:a9:92:e3:32:ee:a0:36:22:88:49:4e:5e: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FB:47:C5:3C:84:25:99:01:B4:2B:65:33:24:6B:FD:1A:FE:10:8F X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:28:01:63:d8:c5:3d:7c:d6:d5:7d:9c:7c:17:20:7d:28:2f: ed:4c:07:18:06:84:dc:9b:c0:4b:e7:5b:96:c5:32:db:42:d8: 08:79:51:95:d4:87:99:85:62:29:82:c0:99:e8:69:80:c4:a9: 55:4d:2d:64:f4:10:48:51:45:a2:9b:15:ca:06:a0:1f:02:2d: c6:b6:a0:69:db:91:50:45:dd:77:69:a0:26:ee:04:56:0d:88: ca:81:95:0b:ea:ee:5d:9a:96:e1:2e:12:34:c3:15:92:fa:c0: 10:5b:d8:3d:c5:54:56:ad:b2:f3:6c:0d:d1:fb:dc:ea:56:0a: f2:4b:a7:75:b5:de:70:7b:23:be:22:64:d5:27:3a:3b:89:b3: 73:8a:d2:57:b8:aa:6c:50:8b:21:55:e7:11:16:77:60:97:52: e2:cf:41:cf:cb:e6:70:42:e6:9b:02:18:ca:67:35:c1:ea:f2: 72:ca:a4:59:d6:4d:c6:54:ee:38:f2:e5:d4:71:9f:06:68:ea: b6:de:fb:3d:e1:f4:85:25:b5:34:34:12:71:d8:a1:ed:98:32: 37:11:55:d0:b1:27:e4:35:11:af:aa:a3:50:8f:c8:d2:40:37: 3e:6f:73:76:f1:d7:ed:47:1b:f5:81:8e:e6:2b:80:90:d4:0e: 14:2f:cb:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAzNzIxMTAvBgNVBAUTKEYyOUIyM0VBNEUxMTRDREM5Q0E2RDM3RjVFRjc5RUY0 QzM1QzcyODIwHhcNMjUxMTA1MDQxMTU0WhcNMjUxMTEyMDQxMTU0WjAYMRYwFAYD VQQDEw02OTBhY2U4YS02OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47vNXxthO8fFcvlEpzUsPiVbzILo9hvKZ7E8ALojlImbVi/EW123lCpIaAP+ NZ31BgI+R1b2C1AkpH0dYP6zcGM3mIRqXLzjgLO1CGGV4XrcmxOkyRTTrA/EP3vK nmtRiTHz1TgYsViirgSAQyXSgU/Hcd844KAaIfG6uP8pt9zvsFBVS1IoPLuv5wMO HAsjhYWdj8sdqFbgLdG+U+Tp2D4osXjK7t0Gwc4c+NeookZivz2iasqZ8Q/KRVJp hE/tSmhGgVuCBY590F7UEEpdRsy4L0VQjdQYSfHllXMsgSlVTgJ6y0CNNH1tmGki 8FoVgBipkuMy7qA2IohJTl5S6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr7R8U8 hCWZAbQrZTMka/0a/hCPMB8GA1UdIwQYMBaAFPKbI+pOEUzcnKbTf173nvTDXHKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDM3Mi8yMEE1NEZDODlE ODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlROeWNwdE5fWHZlZTlNTmNj b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2NvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDM3Mi8yMEE1NEZDODlEODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlRO eWNwdE5fWHZlZTlNTmNjb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnKAFj2MU9fNbVfZx8FyB9KC/tTAcYBoTcm8BL51uWxTLbQtgIeVGV 1IeZhWIpgsCZ6GmAxKlVTS1k9BBIUUWimxXKBqAfAi3GtqBp25FQRd13aaAm7gRW DYjKgZUL6u5dmpbhLhI0wxWS+sAQW9g9xVRWrbLzbA3R+9zqVgryS6d1td5weyO+ ImTVJzo7ibNzitJXuKpsUIshVecRFndgl1Liz0HPy+ZwQuabAhjKZzXB6vJyyqRZ 1k3GVO448uXUcZ8GaOq23vs94fSFJbU0NBJx2KHtmDI3EVXQsSfkNRGvqqNQj8jS QDc+b3N28dftRxv1gY7mK4CQ1A4UL8ui -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:34 2025 by rpki-client