$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: q0dvZpcpuqn8LNZkQDRoKZbw2vJiMjVJbkIzQN5nJNk= Subject key identifier: 21:0A:A6:04:EE:F5:50:82:79:C3:D9:C6:7E:58:FF:3D:2E:11:79:95 Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 0A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 0A50 Signing time: Sun 02 Nov 2025 19:38:45 +0000 Manifest this update: Sun 02 Nov 2025 19:38:45 +0000 Manifest next update: Sun 09 Nov 2025 19:38:45 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: 4aFFFXZ4dTNYyztoaB6HRYbzAyBBBC3+bVFR238drNo=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2646 (0xa56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: Nov 2 19:38:45 2025 GMT Not After : Nov 9 19:38:45 2025 GMT Subject: CN=6907b345-148c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:aa:a0:8e:3b:1e:47:68:1e:c0:4c:4c:e4: 4e:db:cc:99:e7:6a:27:e9:d8:9d:2a:53:13:38:8e: 6c:6a:ec:08:5d:22:58:f0:01:77:5a:a8:fa:2f:76: 27:89:30:8c:59:6c:bc:a4:74:1b:e4:6a:45:57:2d: d2:01:16:56:d9:6a:22:8b:f5:25:48:0c:73:a4:c4: 10:44:2a:58:0d:76:38:18:0d:1e:a2:86:4a:54:6d: b3:18:8a:c1:23:b8:f1:f5:6d:a5:6c:a7:dc:e6:4e: 28:78:3c:a0:41:d1:36:4d:29:e9:3d:bf:d1:84:31: 7f:21:3a:ed:f9:9f:29:7d:64:d9:de:03:dc:88:bb: 82:2c:ab:9e:ab:02:c9:0c:c3:7f:98:64:05:c2:94: 83:0b:8a:d9:c5:11:47:e3:e9:40:be:dd:04:37:94: ae:b5:90:39:a0:c5:b2:e1:ac:be:ea:8b:d0:e3:59: dd:93:20:01:9e:b5:0b:5a:19:08:df:e7:e6:7a:b8: 67:d3:f3:e2:14:b1:da:78:3c:12:a2:12:58:49:1a: 29:44:56:e1:68:45:11:24:b4:5d:4e:f6:3a:a9:e3: 98:1f:a9:c6:26:91:ea:e9:0d:ca:6d:0a:9a:3e:ab: 01:eb:9f:9f:5f:9b:0c:a4:ae:4d:a0:44:40:fc:d6: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0A:A6:04:EE:F5:50:82:79:C3:D9:C6:7E:58:FF:3D:2E:11:79:95 X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5a:25:f0:2b:76:a2:a0:3c:74:f1:79:34:0c:cb:8e:28:dd: d8:5e:40:d5:43:72:01:94:a9:5f:67:62:f2:b1:13:90:05:17: 64:76:f3:90:5b:6d:fc:61:ea:1b:00:45:fe:62:4e:7f:83:8e: 0b:5a:77:4e:2e:cf:90:e1:91:d6:41:af:b3:8d:68:d0:2f:1a: 0e:2e:9a:3f:56:d3:f0:a2:1f:4e:0f:39:22:39:d2:7f:24:42: 2e:88:a1:ee:d3:88:8f:0b:d0:c1:16:7e:ce:6f:24:f8:b5:a7: b7:0b:ae:e1:25:55:bf:fc:d9:ad:95:15:cd:b0:5a:70:79:9a: 9a:3d:4e:b5:18:75:2a:c4:3f:8b:3f:95:52:2e:b2:97:60:dc: fb:c5:4c:65:2a:5a:10:8c:75:d4:ed:f5:17:5b:d1:b1:8c:4e: 75:9a:0a:8b:e7:d3:29:ad:ea:66:a3:63:8e:12:29:64:ab:eb: 3a:cf:7b:5d:01:45:40:bb:fd:22:ea:57:2a:69:22:49:e2:27: f3:21:2d:1a:02:f2:a2:d3:01:72:b7:f8:59:38:c8:91:a4:d2: dd:66:12:72:50:03:00:c1:b4:d3:5f:41:b0:4b:41:87:4a:5f: 3f:cb:bd:0e:92:5c:e8:1a:3b:ed:85:50:4d:29:e4:10:83:f0: c1:69:f1:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjUxMTAyMTkzODQ1WhcNMjUxMTA5MTkzODQ1WjAYMRYwFAYD VQQDEw02OTA3YjM0NS0xNDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUOqoI47HkdoHsBMTORO28yZ52on6didKlMTOI5sauwIXSJY8AF3Wqj6L3Yn iTCMWWy8pHQb5GpFVy3SARZW2Woii/UlSAxzpMQQRCpYDXY4GA0eooZKVG2zGIrB I7jx9W2lbKfc5k4oeDygQdE2TSnpPb/RhDF/ITrt+Z8pfWTZ3gPciLuCLKueqwLJ DMN/mGQFwpSDC4rZxRFH4+lAvt0EN5SutZA5oMWy4ay+6ovQ41ndkyABnrULWhkI 3+fmerhn0/PiFLHaeDwSohJYSRopRFbhaEURJLRdTvY6qeOYH6nGJpHq6Q3KbQqa PqsB65+fX5sMpK5NoERA/NZ0BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEKpgTu 9VCCecPZxn5Y/z0uEXmVMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyWiXwK3aioDx08Xk0DMuOKN3YXkDVQ3IBlKlfZ2LysROQBRdkdvOQ W238YeobAEX+Yk5/g44LWndOLs+Q4ZHWQa+zjWjQLxoOLpo/VtPwoh9ODzkiOdJ/ JEIuiKHu04iPC9DBFn7ObyT4tae3C67hJVW//NmtlRXNsFpweZqaPU61GHUqxD+L P5VSLrKXYNz7xUxlKloQjHXU7fUXW9GxjE51mgqL59Mprepmo2OOEilkq+s6z3td AUVAu/0i6lcqaSJJ4ifzIS0aAvKi0wFyt/hZOMiRpNLdZhJyUAMAwbTTX0GwS0GH Sl8/y70OklzoGjvthVBNKeQQg/DBafHA -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:15 2025 by rpki-client