$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: PCUuq8cSN9q+CaANjWopLSvwxDEr6w2FVT+onSEoytw= Subject key identifier: 7B:4D:21:BD:C9:40:95:32:7D:ED:CF:18:CE:E6:DF:3D:AC:25:EE:CB Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 04E1 Signing time: Tue 04 Nov 2025 23:49:58 +0000 Manifest this update: Tue 04 Nov 2025 23:49:57 +0000 Manifest next update: Tue 11 Nov 2025 23:49:57 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: eW0RhV+F2bY44tkA4nnoekotEsTpUClRIovHcWgm5ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Nov 4 23:49:57 2025 GMT Not After : Nov 11 23:49:57 2025 GMT Subject: CN=690a9125-c9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:9c:0d:14:f8:a7:70:8b:b9:4e:12:79:69: 47:30:b9:42:2f:09:1f:a7:e2:6f:d7:81:cd:c7:5d: 0f:69:a7:d3:51:4d:70:84:d7:26:13:32:55:57:cd: 6c:a8:1a:8d:a6:8d:56:dc:45:c6:fe:17:9d:f2:75: 3b:ca:c1:66:f6:81:04:b3:00:2f:4f:f0:66:33:fc: d0:5a:1d:95:85:56:01:f8:58:99:12:b1:c7:5f:65: 04:da:9d:0b:48:1e:f9:17:72:7a:c9:09:35:9a:65: dd:d9:44:43:ee:32:48:1a:62:da:63:9d:9c:e7:6d: b2:ae:42:8d:95:e6:cd:46:df:38:d1:6e:69:6b:c9: d3:b8:14:96:70:f3:ae:f4:70:9d:2c:06:c2:67:90: d1:09:fc:95:53:0a:49:7d:9e:03:d2:88:39:12:3c: c8:de:72:a9:ff:aa:80:6b:5c:6b:3e:fe:f0:0d:93: cc:df:1c:de:e7:95:f4:f3:e3:05:ac:5d:6b:4e:89: c3:cc:72:6a:c1:46:a6:85:1d:41:52:d6:6b:8f:0d: 71:75:55:d8:af:28:62:4a:7c:77:a4:33:71:57:00: 3e:dc:08:49:81:f8:8d:df:e3:9d:15:9d:53:32:00: 72:e9:89:36:47:62:4e:7a:06:fd:e5:80:c2:6e:b6: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4D:21:BD:C9:40:95:32:7D:ED:CF:18:CE:E6:DF:3D:AC:25:EE:CB X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:9c:2c:c9:7b:c9:66:2b:7c:70:60:f2:b2:ef:a3:ed:a2:e9: c3:47:59:72:59:96:c7:54:2f:18:db:00:2c:9f:20:85:b7:d2: 80:e9:c4:0d:ad:17:7a:57:62:f1:b3:a4:cd:54:8a:52:5d:26: 4e:c4:4f:63:45:7e:63:f5:a0:68:50:8c:b4:66:a2:4a:4f:c7: 1a:7e:fd:6a:6c:2e:8f:c4:ce:55:fd:37:b3:c3:cc:3b:53:27: 27:23:bf:70:0f:72:d5:a3:25:97:01:2f:bf:ac:4e:99:f9:85: a0:a7:6d:91:32:a4:ab:6d:bb:79:4d:5d:01:8d:01:26:95:00: 32:79:bb:2e:8c:06:eb:9e:34:00:1c:ad:2f:30:74:fb:eb:22: d7:b0:33:1f:a0:9b:18:63:72:6a:bb:7c:d5:f9:51:59:79:e3: ef:12:fc:6e:2f:2a:b6:f4:94:c6:6f:64:17:7e:1e:d5:f5:2e: 6e:fb:50:8b:35:54:c8:d2:1d:a2:9a:8b:ad:52:91:10:e8:65: f2:3d:b9:6f:85:a6:0a:eb:1a:6c:45:20:bc:72:18:e3:d5:70: ff:eb:95:49:2e:a2:26:83:87:5a:3e:8f:9f:c2:e5:af:2d:da: 91:c9:0e:22:64:f2:71:f0:a9:b2:9f:eb:b7:fa:b3:66:d7:92: 88:be:63:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUxMTA0MjM0OTU3WhcNMjUxMTExMjM0OTU3WjAYMRYwFAYD VQQDEw02OTBhOTEyNS1jOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxecDRT4p3CLuU4SeWlHMLlCLwkfp+Jv14HNx10PaafTUU1whNcmEzJVV81s qBqNpo1W3EXG/hed8nU7ysFm9oEEswAvT/BmM/zQWh2VhVYB+FiZErHHX2UE2p0L SB75F3J6yQk1mmXd2URD7jJIGmLaY52c522yrkKNlebNRt840W5pa8nTuBSWcPOu 9HCdLAbCZ5DRCfyVUwpJfZ4D0og5EjzI3nKp/6qAa1xrPv7wDZPM3xze55X08+MF rF1rTonDzHJqwUamhR1BUtZrjw1xdVXYryhiSnx3pDNxVwA+3AhJgfiN3+OdFZ1T MgBy6Yk2R2JOegb95YDCbra22QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtNIb3J QJUyfe3PGM7m3z2sJe7LMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUnCzJe8lmK3xwYPKy76PtounDR1lyWZbHVC8Y2wAsnyCFt9KA6cQN rRd6V2Lxs6TNVIpSXSZOxE9jRX5j9aBoUIy0ZqJKT8cafv1qbC6PxM5V/Tezw8w7 UycnI79wD3LVoyWXAS+/rE6Z+YWgp22RMqSrbbt5TV0BjQEmlQAyebsujAbrnjQA HK0vMHT76yLXsDMfoJsYY3Jqu3zV+VFZeePvEvxuLyq29JTGb2QXfh7V9S5u+1CL NVTI0h2imoutUpEQ6GXyPblvhaYK6xpsRSC8chjj1XD/65VJLqImg4daPo+fwuWv LdqRyQ4iZPJx8Kmyn+u3+rNm15KIvmPz -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:06 2025 by rpki-client