$ rpki-client -vvf rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft File: x8MjS9JtrWKeLX70REhP5UHYFI4.mft (raw, json) Hash identifier: QcpiYEq8fvTkwDBqaznYRBbdxJdDCugIA/RH+Ht17+w= Subject key identifier: DB:7F:BF:CD:5F:39:E8:0B:DB:40:25:BA:20:C0:37:9F:DF:B7:79:03 Authority key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E Certificate issuer: /CN=A91E36C4/serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft Manifest number: 7B Signing time: Mon 03 Nov 2025 06:48:03 +0000 Manifest this update: Mon 03 Nov 2025 06:48:03 +0000 Manifest next update: Mon 10 Nov 2025 06:48:03 +0000 Files and hashes: 1: x8MjS9JtrWKeLX70REhP5UHYFI4.crl (hash: 4y3f5l8yQFOQGNQydLgjPJHURl8o8tkTEFemL4kgl4M=) 2: FA429FD6FEED11EF826A3F81C4F9AE02.roa (hash: 39w+18fUPSiKVB8OhUL0ki9Bi8qUl1J3wP6kCBvBYqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Validity Not Before: Nov 3 06:48:03 2025 GMT Not After : Nov 10 06:48:03 2025 GMT Subject: CN=69085023-2f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:61:e7:44:e8:3a:73:64:cd:d5:2b:30:79: a6:2c:e3:ce:ac:65:38:f3:cc:b5:ce:58:5e:9d:57: e5:9d:17:97:33:14:8a:50:a4:06:6d:a1:74:1f:a4: f3:ba:f5:b0:94:f0:b0:92:0e:b9:cc:43:58:f3:5a: c1:ab:b2:2e:37:33:4b:aa:00:fa:08:80:cb:27:03: 92:d4:5e:40:a3:9f:d4:4d:63:a5:0f:ae:a8:db:1a: 78:e5:04:0d:f6:03:17:10:71:9d:08:57:82:a6:9a: b7:ad:27:65:3e:0a:3f:f4:7e:91:dd:b6:48:08:07: 43:f4:81:4f:61:14:6f:de:31:e2:2e:ee:a1:49:46: c7:ae:a6:21:56:f1:f0:15:37:3f:89:ee:ec:13:4b: a9:7a:aa:a6:eb:0b:57:e1:8d:c9:6a:72:80:1d:df: 0d:51:f1:f7:ed:f1:0c:e0:d6:da:b1:d8:2c:37:0a: 33:5e:28:0b:f2:bd:f1:da:9f:63:f5:e7:ea:96:ed: c2:e4:79:e0:d4:89:b9:59:a9:d1:b4:b5:27:90:71: 74:db:eb:5c:e5:99:22:67:96:97:e8:a5:d2:d2:42: 36:4b:f4:17:6b:5a:56:68:c4:49:1f:a9:11:43:42: 5e:ea:34:3a:db:a6:c3:32:57:21:0b:a7:d7:a8:24: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7F:BF:CD:5F:39:E8:0B:DB:40:25:BA:20:C0:37:9F:DF:B7:79:03 X509v3 Authority Key Identifier: keyid:C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:01:00:81:68:28:46:08:da:19:d1:76:61:64:2a:83:df:37: e8:cf:b4:98:d8:68:a7:e4:00:49:17:5d:ac:3c:0c:10:7a:27: 6c:5d:ad:74:3c:ee:54:0d:17:00:a0:3e:2c:63:29:02:78:f4: 36:92:7c:69:a6:fd:f5:fc:4c:ad:43:6b:30:c2:ed:76:d9:65: a5:0c:2f:8a:53:9c:22:29:35:a4:8d:a9:77:16:5f:8e:0e:b1: 56:03:36:4f:8f:aa:11:ce:e4:dc:8d:89:54:f1:a6:af:7d:da: 5f:0b:2f:c8:0c:98:d3:a7:e6:50:93:ae:7e:95:52:91:8a:bf: ef:38:f7:e2:a0:c4:7b:34:db:bd:2e:73:28:ff:e0:f2:2d:17: 8d:3e:35:fd:72:84:a9:ac:9c:76:a3:eb:f8:60:55:40:2f:34: 97:43:13:fd:e3:a8:7b:28:a5:42:f5:3a:cf:27:8d:45:ac:19: 41:0d:80:3c:8b:0e:60:b1:29:b4:22:15:49:4f:25:f4:a4:cc: a7:c5:2b:1e:7e:22:f1:41:0d:60:47:55:a6:8c:51:6f:87:40: 4d:84:18:63:7b:7f:49:d5:d6:74:f1:bc:d8:89:c8:a3:c8:95: 18:c4:71:16:05:69:bb:01:90:2a:79:b3:b8:de:23:fb:98:35: d3:3d:45:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzZDNDExMC8GA1UEBRMoQzdDMzIzNEJEMjZEQUQ2MjlFMkQ3RUY0NDQ0ODRGRTU0 MUQ4MTQ4RTAeFw0yNTExMDMwNjQ4MDNaFw0yNTExMTAwNjQ4MDNaMBgxFjAUBgNV BAMTDTY5MDg1MDIzLTJmMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG0mHnROg6c2TN1SsweaYs486sZTjzzLXOWF6dV+WdF5czFIpQpAZtoXQfpPO6 9bCU8LCSDrnMQ1jzWsGrsi43M0uqAPoIgMsnA5LUXkCjn9RNY6UPrqjbGnjlBA32 AxcQcZ0IV4KmmretJ2U+Cj/0fpHdtkgIB0P0gU9hFG/eMeIu7qFJRseupiFW8fAV Nz+J7uwTS6l6qqbrC1fhjclqcoAd3w1R8fft8Qzg1tqx2Cw3CjNeKAvyvfHan2P1 5+qW7cLkeeDUiblZqdG0tSeQcXTb61zlmSJnlpfopdLSQjZL9BdrWlZoxEkfqRFD Ql7qNDrbpsMyVyELp9eoJLVRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU23+/zV85 6AvbQCW6IMA3n9+3eQMwHwYDVR0jBBgwFoAUx8MjS9JtrWKeLX70REhP5UHYFI4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNkM0L0MxNjA1ODUyRkVF RDExRUY5RkY2Q0U4MEM0RjlBRTAyL3g4TWpTOUp0cldLZUxYNzBSRWhQNVVIWUZJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDhNalM5SnRyV0tlTFg3MFJFaFA1VUhZRkk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NkM0L0MxNjA1ODUyRkVFRDExRUY5RkY2Q0U4MEM0RjlBRTAyL3g4TWpTOUp0cldL ZUxYNzBSRWhQNVVIWUZJNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKoBAIFoKEYI2hnRdmFkKoPfN+jPtJjYaKfkAEkXXaw8DBB6J2xdrXQ8 7lQNFwCgPixjKQJ49DaSfGmm/fX8TK1DazDC7XbZZaUML4pTnCIpNaSNqXcWX44O sVYDNk+PqhHO5NyNiVTxpq992l8LL8gMmNOn5lCTrn6VUpGKv+849+KgxHs0270u cyj/4PItF40+Nf1yhKmsnHaj6/hgVUAvNJdDE/3jqHsopUL1Os8njUWsGUENgDyL DmCxKbQiFUlPJfSkzKfFKx5+IvFBDWBHVaaMUW+HQE2EGGN7f0nV1nTxvNiJyKPI lRjEcRYFabsBkCp5s7jeI/uYNdM9RZY= -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:58 2025 by rpki-client