$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: +i4VUIpfMhDOyb0xXAYsdayeTkqLM4qCogxcFxmYHsE= Subject key identifier: 66:95:6C:54:28:E2:FC:79:6C:C1:1B:8C:BB:EE:EF:FC:F2:63:2D:0A Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 07BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0CF7 Signing time: Sun 02 Nov 2025 21:19:37 +0000 Manifest this update: Sun 02 Nov 2025 21:19:36 +0000 Manifest next update: Sun 09 Nov 2025 21:19:36 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: W+XHsVD3ldn+sF9fiD1oBn1XcsXHRSIo2xRZWu34RU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Nov 2 21:19:36 2025 GMT Not After : Nov 9 21:19:36 2025 GMT Subject: CN=6907cae9-d31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:3b:97:1d:e2:e3:85:aa:1f:54:dd:de:51: 19:82:5c:d1:12:a1:63:49:10:51:80:cf:05:c7:94: 68:42:ba:24:7f:6f:4e:0b:ea:46:c6:7f:bb:ff:14: 8e:5f:f5:45:ad:38:29:4e:98:38:af:59:8f:32:17: ee:df:1c:0b:f4:28:bb:0d:97:6d:e0:86:46:7e:78: 32:23:c5:6a:6f:44:79:89:04:0d:82:b2:9b:88:9b: 32:1d:89:77:9c:6b:50:3c:44:69:1a:53:ac:4a:f0: af:15:85:52:0b:39:85:08:b4:7e:dd:b1:0e:7e:f5: 15:b7:ef:10:99:8b:28:dc:3b:75:47:99:42:d6:72: 2f:ce:3e:8f:02:21:b8:38:d2:2b:54:56:c9:e0:c8: c7:9b:6b:6f:fa:ff:cb:c7:72:b2:25:7e:03:9f:7a: 97:18:25:4b:0f:f2:14:ce:10:23:4d:18:cd:24:bb: 9c:b2:78:5b:3d:6c:9d:6c:fd:40:9d:a1:8a:01:34: 86:f3:4e:54:d8:02:a4:c1:d6:34:d9:fa:7d:83:fc: fe:5c:3b:b6:42:9c:30:83:44:e8:c1:e0:2f:fa:d1: 81:b2:3f:60:fe:ed:52:64:0a:ea:dd:7d:ba:14:2c: f7:d7:2f:05:dc:ce:67:b9:d6:d0:48:8b:e3:cb:38: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:6C:54:28:E2:FC:79:6C:C1:1B:8C:BB:EE:EF:FC:F2:63:2D:0A X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2f:0d:15:94:85:c5:29:d8:fb:e1:bb:2b:e8:bb:f5:cf:f8: 88:0d:9e:9a:ba:63:6d:92:4c:5b:7a:1d:72:a5:45:dc:ae:61: 23:a9:e7:54:4c:02:90:7d:f3:f4:4d:9a:f1:40:57:85:82:ac: c6:30:cf:d2:ec:bb:08:7f:25:c6:ba:79:75:17:1a:1f:f7:8b: ca:d0:d8:fc:fe:f8:90:b6:a4:39:f4:c0:6f:5d:48:1c:31:c3: fe:22:d6:b6:c0:72:54:d3:b3:0b:84:7b:06:b6:0a:73:9f:ba: ed:45:e9:81:e0:39:46:97:8a:10:85:2d:09:c0:4a:1d:11:ea: 32:ee:78:7f:03:13:35:a2:b4:21:21:ab:92:3e:1c:c4:53:1a: 8b:c0:7b:b9:19:c8:3d:e4:02:71:10:a9:72:04:3b:59:36:72: d0:5e:05:d7:4e:96:d4:3b:53:72:03:75:6b:23:cb:18:49:37: 66:72:d3:c4:47:96:cf:7d:51:9a:76:cd:10:6e:c5:b0:62:2e: b0:d2:8b:f2:5a:38:a2:b1:30:4e:4c:79:8e:b2:ef:b4:9f:6f: 4b:21:fe:1d:8c:2c:12:c0:55:3d:a7:1a:80:1d:7f:74:d6:0b: aa:73:99:df:a6:0c:e5:55:c8:0f:f9:f0:2a:06:f0:8f:bd:44: ca:39:c7:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUxMTAyMjExOTM2WhcNMjUxMTA5MjExOTM2WjAYMRYwFAYD VQQDEw02OTA3Y2FlOS1kMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLA7lx3i44WqH1Td3lEZglzREqFjSRBRgM8Fx5RoQrokf29OC+pGxn+7/xSO X/VFrTgpTpg4r1mPMhfu3xwL9Ci7DZdt4IZGfngyI8Vqb0R5iQQNgrKbiJsyHYl3 nGtQPERpGlOsSvCvFYVSCzmFCLR+3bEOfvUVt+8QmYso3Dt1R5lC1nIvzj6PAiG4 ONIrVFbJ4MjHm2tv+v/Lx3KyJX4Dn3qXGCVLD/IUzhAjTRjNJLucsnhbPWydbP1A naGKATSG805U2AKkwdY02fp9g/z+XDu2Qpwwg0ToweAv+tGBsj9g/u1SZArq3X26 FCz31y8F3M5nudbQSIvjyziLuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaVbFQo 4vx5bMEbjLvu7/zyYy0KMB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANLw0VlIXFKdj74bsr6Lv1z/iIDZ6aumNtkkxbeh1ypUXcrmEjqedU TAKQffP0TZrxQFeFgqzGMM/S7LsIfyXGunl1Fxof94vK0Nj8/viQtqQ59MBvXUgc McP+Ita2wHJU07MLhHsGtgpzn7rtRemB4DlGl4oQhS0JwEodEeoy7nh/AxM1orQh IauSPhzEUxqLwHu5Gcg95AJxEKlyBDtZNnLQXgXXTpbUO1NyA3VrI8sYSTdmctPE R5bPfVGads0QbsWwYi6w0ovyWjiisTBOTHmOsu+0n29LIf4djCwSwFU9pxqAHX90 1guqc5nfpgzlVcgP+fAqBvCPvUTKOcfV -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:45 2025 by rpki-client