$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft File: e8dWLzeFS9JjniQQ1nPld8v7MR8.mft (raw, json) Hash identifier: 0+UAzvfJRnUi8uhbQSLhnc+0YytV6OyQjhvyWeOCEGg= Subject key identifier: 0B:59:05:6B:52:21:C7:1B:AA:97:1C:E7:CC:7E:73:15:D4:A0:6E:5F Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F Certificate issuer: /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft Manifest number: 8D Signing time: Wed 05 Nov 2025 06:49:46 +0000 Manifest this update: Wed 05 Nov 2025 06:49:46 +0000 Manifest next update: Wed 12 Nov 2025 06:49:46 +0000 Files and hashes: 1: e8dWLzeFS9JjniQQ1nPld8v7MR8.crl (hash: +fSRA/TMiKoH5uxMWIxO6kfULjAOZthyjMCiTbunS5E=) 2: C6D4BDF8ECFC11EF9447031DC4F9AE02.roa (hash: vKvGvc7f1ooIQwok9o5vzvjlKuAVRyu9TkNTlmBt1ZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Validity Not Before: Nov 5 06:49:46 2025 GMT Not After : Nov 12 06:49:46 2025 GMT Subject: CN=690af38a-5412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:0a:35:43:f3:f0:93:41:e4:ca:45:84:de: 56:78:e3:8a:f3:e3:44:f3:af:49:3a:f1:62:35:28: 01:c2:c7:36:bd:bc:6e:aa:3e:f1:95:a2:e9:51:c7: ac:04:a1:81:cc:91:8e:66:11:cb:8c:b4:e1:8c:04: 7e:ed:56:bd:80:aa:15:38:47:61:6c:e4:c3:78:bd: 26:46:12:bf:4d:df:0c:7a:9a:10:33:94:a8:43:c6: 8b:44:21:4f:8a:66:fd:20:5c:30:56:c1:f9:81:dc: 41:74:ea:7b:db:be:96:c8:0b:a0:59:4f:41:a0:82: e6:18:24:ff:24:f1:c0:8c:8c:46:1e:33:1a:a4:9a: f7:cf:07:bb:ba:8d:4d:19:7c:81:7b:d5:e4:51:ee: 4e:55:43:b5:d3:45:0f:b8:91:0e:c9:c6:3f:1f:85: 4c:39:ce:e3:4b:ec:91:bd:ee:cd:28:0f:7f:aa:29: d9:92:3a:88:11:06:1d:43:7c:77:2b:06:ca:81:bb: 37:f3:ed:96:04:2b:58:98:da:d9:73:28:95:41:b1: 1c:71:a5:8d:7a:21:20:e4:08:8b:7a:d6:42:67:b3: 64:ae:74:96:ac:c2:91:16:57:11:b6:02:7d:26:6d: 94:f1:5e:20:ab:7f:72:55:9b:2e:0e:67:e1:71:e6: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:59:05:6B:52:21:C7:1B:AA:97:1C:E7:CC:7E:73:15:D4:A0:6E:5F X509v3 Authority Key Identifier: keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:55:00:f7:d5:57:19:c6:d8:b7:d7:66:10:69:0a:e3:d0:b4: 27:8c:f4:8d:4b:69:cb:26:4b:01:a7:dd:d1:44:4a:d4:36:14: 1d:a5:bc:37:7f:70:92:c8:4b:1c:02:fe:bb:b5:87:ae:62:68: 06:68:8b:d2:c9:49:42:d9:39:4e:14:09:13:b9:cc:ab:88:0d: 9c:74:3f:7e:c2:02:cf:26:f6:2c:56:94:a6:a5:33:2d:fc:4d: ed:aa:6d:8c:c3:50:9a:e1:49:9b:a2:dc:d1:7d:0c:30:9e:97: b4:22:13:6a:81:c9:14:aa:4a:a8:07:73:8a:34:2d:dd:92:3b: 1b:49:40:57:50:24:64:13:0f:d5:8d:5a:05:ef:fe:39:f0:2a: 65:c2:79:fe:4f:3d:29:5e:e2:10:b2:ca:b2:03:82:32:fd:30: a4:98:81:3f:9e:08:a0:2f:3c:5b:0e:bb:2e:95:75:d9:b2:9a: bf:52:70:9d:2e:ae:45:4c:76:00:ca:a4:3b:51:9c:3e:3a:1c: 9d:58:ab:3a:fd:2d:b5:ca:98:50:04:d3:5b:0e:c7:9b:73:7d: 0e:d1:02:f3:14:9f:a5:0d:0f:8a:37:51:4e:17:bc:f3:63:53: 43:00:6a:e1:c4:2b:13:c3:5b:89:dd:83:64:8e:1d:69:e7:5a: 07:d2:c4:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM2QzIxMTAvBgNVBAUTKDdCQzc1NjJGMzc4NTRCRDI2MzlFMjQxMEQ2NzNFNTc3 Q0JGQjMxMUYwHhcNMjUxMTA1MDY0OTQ2WhcNMjUxMTEyMDY0OTQ2WjAYMRYwFAYD VQQDEw02OTBhZjM4YS01NDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI0KNUPz8JNB5MpFhN5WeOOK8+NE869JOvFiNSgBwsc2vbxuqj7xlaLpUces BKGBzJGOZhHLjLThjAR+7Va9gKoVOEdhbOTDeL0mRhK/Td8MepoQM5SoQ8aLRCFP imb9IFwwVsH5gdxBdOp7276WyAugWU9BoILmGCT/JPHAjIxGHjMapJr3zwe7uo1N GXyBe9XkUe5OVUO100UPuJEOycY/H4VMOc7jS+yRve7NKA9/qinZkjqIEQYdQ3x3 KwbKgbs38+2WBCtYmNrZcyiVQbEccaWNeiEg5AiLetZCZ7NkrnSWrMKRFlcRtgJ9 Jm2U8V4gq39yVZsuDmfhceb49wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtZBWtS Iccbqpcc58x+cxXUoG5fMB8GA1UdIwQYMBaAFHvHVi83hUvSY54kENZz5XfL+zEf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZDMi81MEZCOTA3MEVD MzkxMUVGODFFMDA5ODZDNEY5QUUwMi9lOGRXTHplRlM5SmpuaVFRMW5QbGQ4djdN UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U4ZFdMemVGUzlKam5pUVExblBsZDh2N01SOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzZDMi81MEZCOTA3MEVDMzkxMUVGODFFMDA5ODZDNEY5QUUwMi9lOGRXTHplRlM5 SmpuaVFRMW5QbGQ4djdNUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVVQD31VcZxti312YQaQrj0LQnjPSNS2nLJksBp93RRErUNhQdpbw3 f3CSyEscAv67tYeuYmgGaIvSyUlC2TlOFAkTucyriA2cdD9+wgLPJvYsVpSmpTMt /E3tqm2Mw1Ca4UmbotzRfQwwnpe0IhNqgckUqkqoB3OKNC3dkjsbSUBXUCRkEw/V jVoF7/458Cplwnn+Tz0pXuIQssqyA4Iy/TCkmIE/ngigLzxbDrsulXXZspq/UnCd Lq5FTHYAyqQ7UZw+OhydWKs6/S21yphQBNNbDsebc30O0QLzFJ+lDQ+KN1FOF7zz Y1NDAGrhxCsTw1uJ3YNkjh1p51oH0sS1 -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:16 2025 by rpki-client