$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft File: q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json) Hash identifier: ZjnOjsfBZr7akLc+5ZgVnZoLJVVwrnSyb3vNfeRG8XI= Subject key identifier: A6:1C:0C:6E:40:04:A6:98:70:47:95:7B:F9:C8:D5:DF:25:8A:79:93 Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft Manifest number: 07F3 Signing time: Sun 02 Nov 2025 20:59:59 +0000 Manifest this update: Sun 02 Nov 2025 20:59:58 +0000 Manifest next update: Sun 09 Nov 2025 20:59:58 +0000 Files and hashes: 1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: m0PBGpsq35tBJ9RR43bLqKd5iwaE01OYhOCGpZzKOlE=) 2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: cujX/yOvlRxdf5P8eSmQLnHVmBWJtY4Bh7R/a7D9SZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Validity Not Before: Nov 2 20:59:58 2025 GMT Not After : Nov 9 20:59:58 2025 GMT Subject: CN=6907c64e-fb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cd:25:5a:7a:bc:e5:98:61:ea:e7:98:6e:47: b2:4f:72:c7:98:25:0d:ff:ca:d9:22:8a:34:2c:63: 6a:47:a4:61:da:5d:b7:62:79:b5:a7:a7:1a:6b:0f: 1f:e5:cb:28:b4:d9:b3:e2:a1:fe:7d:86:c4:c9:45: 0b:06:5d:84:57:95:b5:e8:11:d7:22:3b:ba:fe:17: 23:1a:9b:03:f9:10:fd:e4:d5:05:de:c1:88:67:e6: 17:9b:71:7f:b0:f4:2b:2a:69:ac:f0:19:d9:d1:35: d1:5a:1b:17:f7:69:79:0c:38:d2:b5:aa:82:9a:53: 5b:77:2e:49:00:ed:4b:5e:f1:37:6a:14:f2:64:e6: 26:7b:2b:81:89:56:65:9e:5a:2d:54:9b:a3:02:e7: 0b:0f:01:b7:8e:02:5f:e6:6f:95:b7:fe:08:42:bd: 97:26:13:61:16:70:b7:8c:55:cb:2c:c6:33:92:90: c6:32:cd:a5:38:d9:d4:13:27:bc:15:7f:3e:b9:45: 28:64:be:61:11:c2:2b:9d:fe:78:67:60:a5:05:2a: d3:0d:15:20:1a:fa:5c:07:9f:f4:37:b4:58:e4:9e: 4a:20:d7:8b:20:db:e1:dd:c4:ab:5d:ce:c5:a1:c6: 64:3b:c5:62:e9:2b:97:55:40:e9:5d:a0:6b:07:51: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1C:0C:6E:40:04:A6:98:70:47:95:7B:F9:C8:D5:DF:25:8A:79:93 X509v3 Authority Key Identifier: keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:fe:c1:b1:a5:5d:1f:3c:85:62:e9:6e:6a:90:a8:73:44:78: 3f:a5:15:a6:08:c0:9e:2a:92:85:41:94:44:20:05:c9:df:05: 23:95:62:93:40:d4:df:64:7b:92:87:73:d8:46:03:59:25:7b: 47:0d:aa:9a:46:91:62:16:71:fd:d7:a7:8c:93:9e:89:7a:f9: 56:54:22:fc:49:af:2b:a2:21:64:e8:8c:93:01:44:3c:f6:69: c7:95:23:9f:c0:87:7c:26:ae:d3:b2:23:dc:b8:9f:c4:29:27: 14:15:20:aa:d4:b3:e2:51:03:01:c9:b5:03:19:45:9f:53:7f: c8:d1:0c:50:d3:3b:d4:57:38:e6:4c:67:e2:fc:3b:39:bc:a2: 80:43:cf:a6:f0:f0:f6:da:da:0d:ca:3f:6a:5a:67:69:f1:ab: 49:77:33:0f:eb:a3:9b:e8:da:20:67:03:9e:df:95:f1:a5:b5: f8:b4:c9:45:d4:56:ee:a6:5a:b4:5d:fa:0e:b4:b5:9d:01:af: 61:75:ae:fd:c7:2a:93:4f:62:06:10:91:51:2e:95:72:23:7b: 8e:b8:7a:20:b8:91:0c:15:ed:cc:ae:54:00:f4:67:0e:df:a2: fa:7b:68:c6:be:c4:6b:3c:85:9c:2e:93:7b:2a:95:33:60:62: 11:b8:ee:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB RDU2NzhBNUEwHhcNMjUxMTAyMjA1OTU4WhcNMjUxMTA5MjA1OTU4WjAYMRYwFAYD VQQDEw02OTA3YzY0ZS1mYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2s0lWnq85Zhh6ueYbkeyT3LHmCUN/8rZIoo0LGNqR6Rh2l23Ynm1p6caaw8f 5csotNmz4qH+fYbEyUULBl2EV5W16BHXIju6/hcjGpsD+RD95NUF3sGIZ+YXm3F/ sPQrKmms8BnZ0TXRWhsX92l5DDjStaqCmlNbdy5JAO1LXvE3ahTyZOYmeyuBiVZl nlotVJujAucLDwG3jgJf5m+Vt/4IQr2XJhNhFnC3jFXLLMYzkpDGMs2lONnUEye8 FX8+uUUoZL5hEcIrnf54Z2ClBSrTDRUgGvpcB5/0N7RY5J5KINeLINvh3cSrXc7F ocZkO8Vi6SuXVUDpXaBrB1G+8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYcDG5A BKaYcEeVe/nI1d8linmTMB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzY3RC85OURBN0FCRTAzOTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVV WDBZUGRTZElKQjJ0Vm5pbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS/sGxpV0fPIVi6W5qkKhzRHg/pRWmCMCeKpKFQZREIAXJ3wUjlWKT QNTfZHuSh3PYRgNZJXtHDaqaRpFiFnH916eMk56JevlWVCL8Sa8roiFk6IyTAUQ8 9mnHlSOfwId8Jq7TsiPcuJ/EKScUFSCq1LPiUQMBybUDGUWfU3/I0QxQ0zvUVzjm TGfi/Ds5vKKAQ8+m8PD22toNyj9qWmdp8atJdzMP66Ob6NogZwOe35XxpbX4tMlF 1Fbuplq0XfoOtLWdAa9hda79xyqTT2IGEJFRLpVyI3uOuHoguJEMFe3MrlQA9GcO 36L6e2jGvsRrPIWcLpN7KpUzYGIRuO6V -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:32 2025 by rpki-client