$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft File: 8ZLUrYbOEPyWgn_JNIDz-9716mE.mft (raw, json) Hash identifier: /ouAIdfKKRnwGu+xpPtTovla52ZNBrI3BtfLH5S1M88= Subject key identifier: F4:1C:F6:51:14:7F:B4:59:35:69:43:5D:34:96:FD:8E:8B:73:81:06 Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft Manifest number: 04E3 Signing time: Tue 04 Nov 2025 23:52:53 +0000 Manifest this update: Tue 04 Nov 2025 23:52:52 +0000 Manifest next update: Tue 11 Nov 2025 23:52:52 +0000 Files and hashes: 1: 8ZLUrYbOEPyWgn_JNIDz-9716mE.crl (hash: MnSz92Vcmdnxg87aJipGGaDIFn47Qm34bGKqDeRo5Xw=) 2: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (hash: N7zAF6qotCb0ywjS2VK9+Nbg9CvfxH2mHM6x46+8gNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: Nov 4 23:52:52 2025 GMT Not After : Nov 11 23:52:52 2025 GMT Subject: CN=690a91d4-9b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:ec:97:30:fc:1a:1a:93:ca:90:dd:de:7f: 8f:7c:90:b4:63:0e:19:7c:fb:24:3c:d8:89:fe:d8: 8e:22:b7:21:71:a8:70:af:b9:d7:49:4c:98:f3:e9: 15:45:11:99:f0:30:4a:2c:58:4b:c6:ad:78:e9:e6: 63:30:9f:cc:98:e7:4c:eb:5f:3a:27:88:e6:89:08: c7:95:cf:03:72:3d:ff:f2:92:76:56:75:d7:0d:ca: 4a:a9:99:8f:d2:98:45:c6:a4:99:a4:98:d7:f1:c7: 8c:57:cb:2e:d2:f1:82:79:f0:78:b5:04:18:a6:32: 82:38:84:5e:93:76:68:15:c0:f4:ed:a7:35:71:5f: 41:b0:ec:c9:4b:4a:ff:20:77:99:2e:ea:f2:9c:5d: 41:e1:38:05:ac:c3:71:d6:38:6b:04:82:73:1e:4f: 64:d4:be:50:06:8e:0d:e3:3e:ad:fc:10:35:bf:f5: 80:f5:a2:fc:6a:ca:5c:db:cb:58:99:47:c6:53:1c: ea:cd:8f:dc:51:0f:ce:63:21:9e:8e:59:e0:67:a0: 4a:e8:5a:c8:98:9e:74:d9:8e:c8:fb:23:62:aa:57: da:58:aa:c9:9a:af:4b:60:af:59:25:0e:ac:9d:7b: 8f:3f:bc:c6:61:51:58:d2:bb:12:30:3e:18:65:cb: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1C:F6:51:14:7F:B4:59:35:69:43:5D:34:96:FD:8E:8B:73:81:06 X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a3:6a:5f:29:a4:21:95:8a:49:ee:8a:d5:4e:ea:8b:9a:36: 8f:88:c0:96:9d:06:5d:07:b5:97:90:3c:74:0c:81:cd:77:18: 80:92:33:2f:fc:65:be:f7:fa:33:74:db:57:31:ff:00:ae:d9: c6:4f:c2:4a:da:ed:1d:72:b4:48:99:70:0a:18:a0:9c:64:d7: 7b:dd:98:77:d5:b9:4d:41:2c:47:3e:4a:56:1e:81:0d:de:57: 9d:c9:3f:f3:e6:79:8c:eb:a8:6a:b6:49:b8:83:fa:c9:77:8d: bc:01:8d:93:6d:6e:0e:2f:a9:9f:ad:25:02:ea:94:fa:4b:55: 78:7b:3d:8f:c0:a6:8e:3f:e6:a8:a5:55:13:91:bf:18:23:28: 6e:49:6c:85:47:ad:ab:a1:3c:9d:ee:5e:5d:07:53:7f:4d:a6: 54:1b:98:35:a0:7c:f0:ab:c9:f4:d8:86:a2:58:54:38:16:b0: 2f:7f:75:61:2f:68:16:b7:d3:75:73:b5:cf:f7:ad:d2:b0:7c: d2:0e:11:89:38:30:85:ae:93:c9:05:fc:40:73:8e:c1:d5:0a: e6:f9:60:ea:4c:75:28:4d:23:d8:a3:48:e6:ba:e6:71:33:99: ef:09:f2:6e:e8:ed:59:c6:b9:97:f3:ce:2f:c7:46:c5:f0:ac: 9e:47:9c:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjUxMTA0MjM1MjUyWhcNMjUxMTExMjM1MjUyWjAYMRYwFAYD VQQDEw02OTBhOTFkNC05YjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwvslzD8GhqTypDd3n+PfJC0Yw4ZfPskPNiJ/tiOIrchcahwr7nXSUyY8+kV RRGZ8DBKLFhLxq146eZjMJ/MmOdM6186J4jmiQjHlc8Dcj3/8pJ2VnXXDcpKqZmP 0phFxqSZpJjX8ceMV8su0vGCefB4tQQYpjKCOIRek3ZoFcD07ac1cV9BsOzJS0r/ IHeZLurynF1B4TgFrMNx1jhrBIJzHk9k1L5QBo4N4z6t/BA1v/WA9aL8aspc28tY mUfGUxzqzY/cUQ/OYyGejlngZ6BK6FrImJ502Y7I+yNiqlfaWKrJmq9LYK9ZJQ6s nXuPP7zGYVFY0rsSMD4YZcsbiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQc9lEU f7RZNWlDXTSW/Y6Lc4EGMB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzhFOC9CODlFQjY5MDNFMUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQ eVdnbl9KTklEei05NzE2bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuo2pfKaQhlYpJ7orVTuqLmjaPiMCWnQZdB7WXkDx0DIHNdxiAkjMv /GW+9/ozdNtXMf8ArtnGT8JK2u0dcrRImXAKGKCcZNd73Zh31blNQSxHPkpWHoEN 3ledyT/z5nmM66hqtkm4g/rJd428AY2TbW4OL6mfrSUC6pT6S1V4ez2PwKaOP+ao pVUTkb8YIyhuSWyFR62roTyd7l5dB1N/TaZUG5g1oHzwq8n02IaiWFQ4FrAvf3Vh L2gWt9N1c7XP963SsHzSDhGJODCFrpPJBfxAc47B1Qrm+WDqTHUoTSPYo0jmuuZx M5nvCfJu6O1ZxrmX884vx0bF8KyeR5ws -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:13 2025 by rpki-client