$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft File: r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json) Hash identifier: xzVGlLpgdi16v58Dp4Vdnof/DA6l1oXdiszh1zqr1sU= Subject key identifier: F3:B0:C8:01:9E:E1:46:A7:CA:DE:C0:CD:68:37:EA:E3:72:99:CF:94 Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 Certificate issuer: /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Certificate serial: 084C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft Manifest number: 083F Signing time: Tue 04 Nov 2025 20:51:53 +0000 Manifest this update: Tue 04 Nov 2025 20:51:53 +0000 Manifest next update: Tue 11 Nov 2025 20:51:53 +0000 Files and hashes: 1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: GjzgP87a13z/Tz635AiKE0hzLOLCJ7X4Cx7ZuzzU/Z0=) 2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: QE3nW2mNMr96ecxL+2Sa0cUHeFInEqjbi3IjJoVbX1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2124 (0x84c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BD9, serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Validity Not Before: Nov 4 20:51:53 2025 GMT Not After : Nov 11 20:51:53 2025 GMT Subject: CN=690a6769-4692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:67:73:a0:1f:e1:78:23:fe:71:38:44:bd: 9a:c4:4d:d8:6e:fd:51:56:a4:d7:2b:56:d8:80:5e: 52:9b:64:c0:d7:3e:d1:07:10:c3:f2:27:1f:d7:28: 90:50:65:0c:7b:ee:2a:31:8e:ce:31:6e:93:a4:7e: 8b:2c:d5:97:91:a1:fe:a3:d0:a2:c9:e9:db:f4:df: 85:bf:09:50:fe:68:38:49:5e:5b:e0:27:11:5f:3f: bc:99:83:b5:58:54:22:e7:e6:65:66:7d:fd:96:3f: 1e:68:c0:80:ba:ef:86:ee:0c:e1:5f:35:a9:05:62: 48:bb:a4:b5:f3:9f:0e:78:c7:73:e6:ea:4d:1e:05: 3f:a9:d3:92:ca:22:f4:11:2b:f7:12:20:37:aa:ad: 51:d0:31:61:cd:43:0c:74:e1:0d:7e:30:80:8c:1b: 5c:5a:16:b1:28:77:99:46:5f:21:92:d1:d5:fa:8d: da:cc:f5:3c:29:b7:60:9d:5c:b3:7c:49:ab:fe:b4: 34:25:6e:34:b4:c0:60:56:47:04:ca:b7:f2:ec:02: 3f:06:96:00:6f:a0:a0:a2:1f:c4:60:24:18:5b:bf: 93:d1:ee:31:b9:f3:dc:f0:96:9a:2d:0d:d0:d3:cb: a5:80:49:02:30:5c:12:f3:fa:92:37:33:27:e2:ed: dc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B0:C8:01:9E:E1:46:A7:CA:DE:C0:CD:68:37:EA:E3:72:99:CF:94 X509v3 Authority Key Identifier: keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a2:14:a7:80:36:0a:3a:53:fd:91:b9:c9:19:9f:ac:91:78: ee:6f:4b:11:e5:04:3c:78:c6:67:3c:8f:08:92:0e:42:e9:1f: 43:84:a1:f4:7c:b3:a3:1f:7a:7b:9b:d3:87:6f:5b:64:03:34: e6:76:e7:ca:5b:13:76:dc:5b:57:7e:13:61:6f:ed:32:bd:2a: fd:41:e0:13:42:58:46:7b:5e:71:2d:72:77:61:7c:27:e6:28: ac:3e:ce:6c:9b:d1:e6:80:1d:62:0d:8d:05:5f:cf:ff:05:8f: 6a:80:2d:aa:b8:ad:ae:8c:ad:26:cb:ef:2d:c1:8a:b4:b4:1e: 0f:76:8f:41:c7:67:0d:98:0f:85:c5:00:d1:37:c8:35:83:21: 97:ee:69:6f:f2:82:c8:68:66:2d:12:02:15:84:ca:09:42:d4: 21:4e:c3:32:15:7b:0b:0b:dc:4f:97:c6:fe:54:81:cf:d6:c9: 22:b2:dd:de:0f:af:be:91:cc:f0:82:9b:04:74:aa:d4:4d:bc: bd:5b:c0:b1:4d:90:5f:7a:ba:2e:3e:a6:04:64:d6:bd:c6:b2: 42:97:98:a3:ea:f9:b1:17:91:4a:fa:a8:8a:39:33:c5:7f:de: 6c:99:3e:c8:4f:a6:9f:bc:a8:b0:94:ac:52:4c:bb:33:06:8a: 09:ec:9b:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCRDkxMTAvBgNVBAUTKEFGQ0QxMkYzNDA5ODc4Q0Q0QUI0NDVDNDQ1NTQ0QUU4 REE4NTFBODQwHhcNMjUxMTA0MjA1MTUzWhcNMjUxMTExMjA1MTUzWjAYMRYwFAYD VQQDEw02OTBhNjc2OS00NjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrBnc6Af4Xgj/nE4RL2axE3Ybv1RVqTXK1bYgF5Sm2TA1z7RBxDD8icf1yiQ UGUMe+4qMY7OMW6TpH6LLNWXkaH+o9Ciyenb9N+FvwlQ/mg4SV5b4CcRXz+8mYO1 WFQi5+ZlZn39lj8eaMCAuu+G7gzhXzWpBWJIu6S1858OeMdz5upNHgU/qdOSyiL0 ESv3EiA3qq1R0DFhzUMMdOENfjCAjBtcWhaxKHeZRl8hktHV+o3azPU8KbdgnVyz fEmr/rQ0JW40tMBgVkcEyrfy7AI/BpYAb6Cgoh/EYCQYW7+T0e4xufPc8JaaLQ3Q 08ulgEkCMFwS8/qSNzMn4u3cHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOwyAGe 4Uanyt7AzWg36uNymc+UMB8GA1UdIwQYMBaAFK/NEvNAmHjNSrRFxEVUSujahRqE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJEOS8wNDgxRjc4NkVD MTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVNMUt0RVhFUlZSSzZOcUZH b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4MFM4MENZZU0xS3RFWEVSVlJLNk5xRkdvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJEOS8wNDgxRjc4NkVDMTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVN MUt0RVhFUlZSSzZOcUZHb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEohSngDYKOlP9kbnJGZ+skXjub0sR5QQ8eMZnPI8Ikg5C6R9DhKH0 fLOjH3p7m9OHb1tkAzTmdufKWxN23FtXfhNhb+0yvSr9QeATQlhGe15xLXJ3YXwn 5iisPs5sm9HmgB1iDY0FX8//BY9qgC2quK2ujK0my+8twYq0tB4Pdo9Bx2cNmA+F xQDRN8g1gyGX7mlv8oLIaGYtEgIVhMoJQtQhTsMyFXsLC9xPl8b+VIHP1skist3e D6++kczwgpsEdKrUTby9W8CxTZBferouPqYEZNa9xrJCl5ij6vmxF5FK+qiKOTPF f95smT7IT6afvKiwlKxSTLszBooJ7Jub -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:48 2025 by rpki-client