$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: EwoCBwu4MJ7irlqgLMMjxU8Y7DdailzzDOaxI7A2R5o= Subject key identifier: 63:C9:EB:C5:5C:24:54:93:4C:C9:8A:95:5C:44:20:79:8D:2B:C1:CD Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 14AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 148D Signing time: Tue 28 Oct 2025 16:50:27 +0000 Manifest this update: Tue 28 Oct 2025 16:50:26 +0000 Manifest next update: Tue 04 Nov 2025 16:50:26 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: XAkzosgTzjvzxRj3Ipsiq0Zx9LJy0aw5zhHTtnm0suk=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: bw2KVyHN6CitUBxUyBMWnfwdT8P8OVOkY8BYkur67D8=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: u7oqRMExCmv2yUvpdQUhy93ikSgUZkKJq35cWOYkBRM=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: F7sXs8wz7vi0K+MviVDC99PWP7OiPZ+mlBu4ZQRrCgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 16:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5294 (0x14ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Oct 28 16:50:26 2025 GMT Not After : Nov 4 16:50:26 2025 GMT Subject: CN=6900f452-77bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:c6:23:72:79:f8:63:d4:52:c0:ad:b5:b1: 69:d1:65:d8:95:ed:a2:6f:d7:f2:ac:ac:b6:57:23: f5:40:5c:74:ad:3e:bd:b7:da:a0:a4:d2:5d:86:07: ba:2b:61:c7:0d:97:e8:df:a5:4c:88:44:42:62:c7: 56:91:87:c1:a1:a2:da:d9:88:42:cb:25:5e:18:0c: 9b:08:57:e8:7d:f9:1f:f0:7c:31:bc:90:b5:2a:71: 7c:cd:ff:9b:1b:0b:9d:c2:ee:ce:70:12:e6:e7:4f: b5:0d:f4:15:10:74:52:a0:4c:ce:82:c0:86:2a:49: 8d:37:f5:d5:09:2e:88:d3:a2:21:a9:b1:63:07:f2: a8:b3:aa:c4:cf:5d:33:9c:a9:30:15:62:96:a0:b8: 02:c0:25:d3:34:0a:c3:4c:1b:a8:3e:d4:f1:ac:bb: e3:31:5d:a9:ed:89:5d:a2:b6:17:89:25:89:5d:32: d8:06:4a:94:8a:c0:39:a6:0d:38:4d:0f:4d:f5:09: cd:cd:3c:90:5b:2f:2a:60:b9:d5:55:f9:b1:42:8b: ff:6d:30:39:5c:9d:a9:37:28:64:0b:c8:ad:ba:94: 3d:20:5e:70:e5:b8:a4:92:f7:75:1e:67:bf:60:e7: ed:21:f1:19:95:a3:64:71:05:c2:9c:c9:f1:4c:04: ba:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C9:EB:C5:5C:24:54:93:4C:C9:8A:95:5C:44:20:79:8D:2B:C1:CD X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:df:1d:5b:c9:af:3b:10:08:11:f1:50:f0:4d:6d:90:6d:c1: 5a:d4:6b:6c:4a:63:88:cc:b0:97:9c:b5:e4:00:52:05:4e:c8: 8b:f2:a3:40:f3:87:89:11:e6:ff:7a:f7:56:24:51:60:ae:0f: c4:11:ff:af:f5:40:3d:9a:95:49:5d:62:d2:40:15:22:c1:7b: 53:5c:a6:de:70:33:ae:12:8c:16:74:73:7f:ff:f3:f6:b1:74: 81:bd:30:87:d7:63:21:b7:58:a8:28:1e:3d:11:34:4c:da:90: f9:57:ed:26:73:1b:4c:1c:5e:0a:b0:47:14:ca:c3:61:e6:3e: 37:ab:9b:a4:b0:d4:a1:4e:f1:14:e5:de:a1:67:b2:0b:a5:13: d2:74:14:4d:6f:5d:0e:79:23:3e:be:a1:81:5c:48:29:53:4a: b8:3a:29:de:35:f1:9b:4d:e2:4c:cb:d0:bf:47:d9:77:47:0c: 8b:a7:cc:9f:92:6f:d4:40:00:0f:42:4a:ac:d1:5c:70:ca:17: d3:d3:d0:5c:26:3c:78:85:21:4b:b3:f1:ff:3e:9b:56:96:77: 0c:67:c1:43:f9:29:df:e9:b2:5d:58:d3:85:34:2c:b8:ce:cc: 68:bf:5d:85:e8:20:89:37:f4:8d:7f:54:15:76:e1:6c:9f:62: 78:01:10:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUxMDI4MTY1MDI2WhcNMjUxMTA0MTY1MDI2WjAYMRYwFAYD VQQDEw02OTAwZjQ1Mi03N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZbGI3J5+GPUUsCttbFp0WXYle2ib9fyrKy2VyP1QFx0rT69t9qgpNJdhge6 K2HHDZfo36VMiERCYsdWkYfBoaLa2YhCyyVeGAybCFfoffkf8HwxvJC1KnF8zf+b Gwudwu7OcBLm50+1DfQVEHRSoEzOgsCGKkmNN/XVCS6I06IhqbFjB/Kos6rEz10z nKkwFWKWoLgCwCXTNArDTBuoPtTxrLvjMV2p7YldorYXiSWJXTLYBkqUisA5pg04 TQ9N9QnNzTyQWy8qYLnVVfmxQov/bTA5XJ2pNyhkC8itupQ9IF5w5bikkvd1Hme/ YOftIfEZlaNkcQXCnMnxTAS62wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPJ68Vc JFSTTMmKlVxEIHmNK8HNMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX3x1bya87EAgR8VDwTW2QbcFa1GtsSmOIzLCXnLXkAFIFTsiL8qNA 84eJEeb/evdWJFFgrg/EEf+v9UA9mpVJXWLSQBUiwXtTXKbecDOuEowWdHN///P2 sXSBvTCH12Mht1ioKB49ETRM2pD5V+0mcxtMHF4KsEcUysNh5j43q5uksNShTvEU 5d6hZ7ILpRPSdBRNb10OeSM+vqGBXEgpU0q4OineNfGbTeJMy9C/R9l3RwyLp8yf km/UQAAPQkqs0VxwyhfT09BcJjx4hSFLs/H/PptWlncMZ8FD+Snf6bJdWNOFNCy4 zsxov12F6CCJN/SNf1QVduFsn2J4ARDm -----END CERTIFICATE-----Generated at Wed Oct 29 07:56:22 2025 by rpki-client