$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft File: 8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json) Hash identifier: 8OCF3Un+z7PUkgcNGjajpCAQ6PphwqW0oLFJEeNc6n4= Subject key identifier: 44:38:65:61:3C:3F:F2:B8:F5:24:33:45:A8:C0:40:28:E3:A0:06:A9 Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Certificate serial: 06F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft Manifest number: 06EA Signing time: Tue 04 Nov 2025 22:03:40 +0000 Manifest this update: Tue 04 Nov 2025 22:03:39 +0000 Manifest next update: Tue 11 Nov 2025 22:03:39 +0000 Files and hashes: 1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: y6ZRLhV7KbOHvCNnyV0C9YzTQnYzgeB6H9Fbf0LlfSk=) 2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: 52JrCnBm7L06RLcpZu8B4A+YSslnAZRmYTLK9Jex7Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1776 (0x6f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Validity Not Before: Nov 4 22:03:39 2025 GMT Not After : Nov 11 22:03:39 2025 GMT Subject: CN=690a783b-c4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:a5:ca:93:a8:b2:1e:46:2d:7c:2c:cb:b2: 13:16:f6:b0:13:64:ef:fc:7e:aa:78:c7:45:2d:b9: 9a:e7:2c:19:93:0a:c7:3a:e8:a2:7f:e0:4f:db:fe: e4:62:56:59:0f:2c:a5:b8:33:e4:16:7e:86:d8:f5: cb:de:54:a9:a4:14:ba:23:68:8c:df:63:c6:c7:46: ed:bf:66:dc:e0:68:b9:46:34:37:a7:ee:49:32:e7: 25:de:db:68:9d:77:cd:6a:9a:ef:4f:e8:8f:55:06: 8e:bf:c3:3e:b2:84:6e:1c:ac:2c:47:a2:12:c7:d6: 62:b9:92:32:75:c9:b7:99:46:4e:06:23:eb:e7:1c: 04:5d:ab:ff:9b:4b:14:44:4c:f1:1f:ee:88:f9:b3: 5a:6d:19:d2:29:e7:b6:17:10:d2:c6:5a:ad:a1:79: 0b:8b:3b:e3:c9:82:79:43:22:59:d4:f5:6f:3d:5c: c1:28:7e:64:8f:52:93:4d:97:60:bc:7d:c0:ef:14: a3:a4:1d:7e:0c:35:e2:e8:ed:8d:4d:bb:6d:8f:76: 77:99:53:58:6c:ba:7d:c8:8b:55:1b:ba:25:74:1e: 56:cc:6a:6f:9f:d3:90:8e:1b:04:e1:b7:0f:50:90: 3b:13:1e:75:9e:ba:95:a0:c5:08:20:0a:ff:2f:9a: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:38:65:61:3C:3F:F2:B8:F5:24:33:45:A8:C0:40:28:E3:A0:06:A9 X509v3 Authority Key Identifier: keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:73:41:00:d8:01:ef:ae:d2:bf:20:0c:18:6f:74:70:35:cd: f0:bc:cc:7f:8f:7c:d3:d9:26:c8:d6:dd:2a:14:2e:bd:0b:a0: 20:ac:8d:29:d7:29:e4:79:32:16:49:9e:5d:9c:ab:05:2f:c8: b2:30:ac:f2:57:ff:dd:3c:26:de:91:92:fd:ef:f4:b9:0f:7b: 41:96:6b:14:69:93:a2:a9:c2:b4:f6:14:5d:1a:1a:a9:63:da: db:93:b6:46:c6:9e:33:72:ee:e8:ee:51:cb:46:be:63:54:c8: 30:81:ea:31:5d:d6:f8:32:82:94:58:70:9e:0e:54:e6:29:65: d1:84:f2:79:d3:27:e5:52:39:93:e8:c5:31:ec:61:4c:f0:7e: 6e:48:b1:39:ed:fb:9c:de:9f:7a:41:cd:64:01:57:b0:83:8c: e4:87:68:3a:ec:08:ca:2d:d9:22:fa:28:28:82:cd:ce:9c:de: 1e:c6:13:cc:43:34:68:7c:0c:f7:14:21:31:b1:01:8b:dd:eb: 42:ae:03:2f:61:75:3d:0f:25:ba:32:9d:d1:61:85:c1:ac:6b: 1b:c4:60:85:3a:bf:c6:5d:8c:91:27:32:17:1e:c4:73:61:63: f7:8e:ca:fb:87:01:23:69:9b:c3:4a:00:26:5a:ae:7d:dd:56: bf:8d:74:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MDUxMTAvBgNVBAUTKEYwNDY5MEJCMDNFMEQzOTYyQjQ4MDhFNEQwNkNCMjZB MzQ5MEU1MTYwHhcNMjUxMTA0MjIwMzM5WhcNMjUxMTExMjIwMzM5WjAYMRYwFAYD VQQDEw02OTBhNzgzYi1jNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnSlypOosh5GLXwsy7ITFvawE2Tv/H6qeMdFLbma5ywZkwrHOuiif+BP2/7k YlZZDyyluDPkFn6G2PXL3lSppBS6I2iM32PGx0btv2bc4Gi5RjQ3p+5JMucl3tto nXfNaprvT+iPVQaOv8M+soRuHKwsR6ISx9ZiuZIydcm3mUZOBiPr5xwEXav/m0sU REzxH+6I+bNabRnSKee2FxDSxlqtoXkLizvjyYJ5QyJZ1PVvPVzBKH5kj1KTTZdg vH3A7xSjpB1+DDXi6O2NTbttj3Z3mVNYbLp9yItVG7oldB5WzGpvn9OQjhsE4bcP UJA7Ex51nrqVoMUIIAr/L5qgBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQ4ZWE8 P/K49SQzRajAQCjjoAapMB8GA1UdIwQYMBaAFPBGkLsD4NOWK0gI5NBssmo0kOUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYwNS83MjUwQ0E0NDZD MzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1WXJTQWprMEd5eWFqU1E1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFYVF1d1BnMDVZclNBamswR3l5YWpTUTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYwNS83MjUwQ0E0NDZDMzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1 WXJTQWprMEd5eWFqU1E1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnc0EA2AHvrtK/IAwYb3RwNc3wvMx/j3zT2SbI1t0qFC69C6AgrI0p 1ynkeTIWSZ5dnKsFL8iyMKzyV//dPCbekZL97/S5D3tBlmsUaZOiqcK09hRdGhqp Y9rbk7ZGxp4zcu7o7lHLRr5jVMgwgeoxXdb4MoKUWHCeDlTmKWXRhPJ50yflUjmT 6MUx7GFM8H5uSLE57fuc3p96Qc1kAVewg4zkh2g67AjKLdki+igogs3OnN4exhPM QzRofAz3FCExsQGL3etCrgMvYXU9DyW6Mp3RYYXBrGsbxGCFOr/GXYyRJzIXHsRz YWP3jsr7hwEjaZvDSgAmWq593Va/jXS7 -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:12 2025 by rpki-client