$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: zH0PWez3+lY2FISyCZj0lKcaM7U2Tcb1+rlZJN24kng= Subject key identifier: D5:5C:F8:70:01:4F:5F:3C:F0:6F:55:CD:8D:6A:6E:82:7C:C8:74:A9 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 022E Signing time: Mon 03 Nov 2025 01:59:55 +0000 Manifest this update: Mon 03 Nov 2025 01:59:55 +0000 Manifest next update: Mon 10 Nov 2025 01:59:55 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: +T633S0f/tSZYPrTPWOQhczT/rwLUdVLn0pO4Iknna0=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Nov 3 01:59:55 2025 GMT Not After : Nov 10 01:59:55 2025 GMT Subject: CN=69080c9b-2c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e7:d1:bf:bc:50:4e:f7:1e:2c:5f:7c:0f:70: 17:8d:c4:b4:56:8e:4b:32:8c:be:cf:50:c8:80:e5: bf:16:18:b8:30:ff:20:3a:cb:b5:33:0b:b3:b7:f9: ba:d8:ff:d6:68:e7:2a:c9:c9:a0:c1:3d:0e:5e:12: 18:c9:2d:b6:f0:80:e2:ec:6c:c3:41:60:8e:6a:0e: 8c:4e:40:8c:39:43:67:2b:24:6b:9f:5d:ec:ab:ac: a2:f2:c3:4b:fe:c6:dd:97:e9:6b:5d:e4:c7:39:e7: 0d:54:35:bb:e0:29:96:ab:e0:0e:d1:77:bf:23:f2: 9b:00:ac:ab:5d:ce:9a:ec:9b:17:e7:c4:54:e1:01: 05:b5:1d:e4:8b:99:34:ed:65:2a:34:f4:cc:dd:38: 8b:c5:3a:e4:1f:ed:3c:44:bf:c2:19:c3:f8:05:3e: 31:40:fb:fb:f6:bd:c6:19:d4:f6:63:56:9e:eb:5d: 24:13:b6:67:c7:9c:41:db:27:fd:95:ef:4d:3a:43: f3:43:98:c5:5a:89:7c:dc:73:01:cd:13:65:1b:de: 3d:c6:37:67:6b:23:82:d9:cb:78:37:da:fe:4d:08: dd:3d:b4:67:18:cf:d5:e5:dd:8b:41:f4:e1:0c:f7: 69:e2:bd:7d:4e:a9:6d:6e:b7:fb:0a:f9:a0:a1:1b: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5C:F8:70:01:4F:5F:3C:F0:6F:55:CD:8D:6A:6E:82:7C:C8:74:A9 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:f2:3a:34:3e:70:9b:cb:69:10:d9:c9:75:a5:93:90:d4:63: 30:b3:3b:55:d9:b0:49:28:0a:0c:a5:94:2f:15:ab:8b:c3:07: 2d:e6:29:0c:e0:7d:42:f5:95:b9:9b:a1:24:0b:ea:1d:ee:15: 05:43:01:2c:f4:8d:f4:5e:23:c6:ee:d7:62:89:83:45:1a:48: bf:19:d8:ea:6f:64:2d:da:0a:49:c6:a7:d9:ca:6e:a1:1f:7d: 6a:d7:a5:f1:3b:c3:d9:0a:cb:a0:16:01:9d:88:76:fa:17:1c: ec:a8:88:65:cd:cd:f8:64:79:00:86:ec:4b:e8:23:5f:d2:42: 34:e2:75:11:07:0a:61:3d:3f:af:fc:52:c7:a9:fb:b2:20:31: 2e:ad:5d:b0:03:d8:c3:dd:7f:b1:67:ea:a3:1e:97:88:a5:c8: e9:1c:2a:b4:2e:55:da:47:0b:8e:4a:ae:2c:4f:20:a0:44:f4: b6:96:d5:a9:e6:10:aa:a2:40:ac:61:9a:db:ee:4a:57:ef:48: 44:19:e8:a3:3f:02:8d:f6:1e:3f:2d:69:d1:90:ba:8b:8a:63: 12:b5:67:cd:cd:c1:91:9a:e8:1d:fc:5b:3c:56:45:cc:42:ae: 00:d9:64:2b:87:f4:d5:c2:dc:65:7c:86:3d:3b:74:07:40:02: 97:76:c3:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUxMTAzMDE1OTU1WhcNMjUxMTEwMDE1OTU1WjAYMRYwFAYD VQQDEw02OTA4MGM5Yi0yYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+fRv7xQTvceLF98D3AXjcS0Vo5LMoy+z1DIgOW/Fhi4MP8gOsu1Mwuzt/m6 2P/WaOcqycmgwT0OXhIYyS228IDi7GzDQWCOag6MTkCMOUNnKyRrn13sq6yi8sNL /sbdl+lrXeTHOecNVDW74CmWq+AO0Xe/I/KbAKyrXc6a7JsX58RU4QEFtR3ki5k0 7WUqNPTM3TiLxTrkH+08RL/CGcP4BT4xQPv79r3GGdT2Y1ae610kE7Znx5xB2yf9 le9NOkPzQ5jFWol83HMBzRNlG949xjdnayOC2ct4N9r+TQjdPbRnGM/V5d2LQfTh DPdp4r19Tqltbrf7CvmgoRur0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVc+HAB T1888G9VzY1qboJ8yHSpMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC8jo0PnCby2kQ2cl1pZOQ1GMwsztV2bBJKAoMpZQvFauLwwct5ikM 4H1C9ZW5m6EkC+od7hUFQwEs9I30XiPG7tdiiYNFGki/Gdjqb2Qt2gpJxqfZym6h H31q16XxO8PZCsugFgGdiHb6FxzsqIhlzc34ZHkAhuxL6CNf0kI04nURBwphPT+v /FLHqfuyIDEurV2wA9jD3X+xZ+qjHpeIpcjpHCq0LlXaRwuOSq4sTyCgRPS2ltWp 5hCqokCsYZrb7kpX70hEGeijPwKN9h4/LWnRkLqLimMStWfNzcGRmugd/Fs8VkXM Qq4A2WQrh/TVwtxlfIY9O3QHQAKXdsMH -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:22 2025 by rpki-client