$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: ga0WMsWBUEHyKPW+0nvH/8seLRc/oC7CLozM+4Z+NBo= Subject key identifier: D8:EB:90:66:C1:13:A0:3C:EC:CA:1B:9F:BC:EA:80:B2:13:0A:28:B1 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 01AA Signing time: Mon 27 Oct 2025 04:59:10 +0000 Manifest this update: Mon 27 Oct 2025 04:59:09 +0000 Manifest next update: Mon 03 Nov 2025 04:59:09 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: MmD6wD+KsyZKd+BvDSNoQT7Q4jlWsAfNK4ufkEJN9zg=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: JUSU1VmCrt2YGTrN+Q0jV8oiBs7Aumf+6ve9iuHLrvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 04:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Oct 27 04:59:09 2025 GMT Not After : Nov 3 04:59:09 2025 GMT Subject: CN=68fefc1d-0c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:ff:0b:a3:30:1f:36:af:43:f6:73:d4:48: d7:9e:ab:07:a2:cd:9b:eb:d8:6a:01:9d:c3:f9:90: 9c:24:65:aa:76:dc:16:37:0f:48:b9:a4:aa:e8:2f: 68:88:b9:03:31:0a:c8:ac:b6:2c:b3:a7:45:81:d2: 5b:eb:38:dc:58:97:a6:23:df:19:b9:93:51:c8:3b: a3:23:98:55:74:93:77:19:39:88:d2:d2:73:32:c1: 37:f1:6b:6c:4d:53:38:81:21:72:5d:c1:4b:08:16: 1a:d9:30:d5:77:1c:71:50:65:c3:4e:30:93:f1:fb: 0b:39:cb:13:4c:06:4e:98:1c:dd:b4:ce:65:d7:ca: a5:2e:19:ba:b9:5a:ef:c8:7c:a6:30:b5:68:c3:15: ea:29:f8:16:ab:5c:9f:d9:a3:ea:7f:48:6c:ed:c9: 72:d1:05:32:9d:c4:5c:e1:07:43:54:f6:fc:60:0c: 45:a8:b3:60:4a:3d:4a:9c:ab:43:7e:6f:44:cd:fd: b2:f4:2e:0a:f8:17:9b:e0:30:09:b0:a6:89:04:e2: c5:0b:36:66:14:68:7e:97:b6:9c:8f:51:19:28:fc: fc:5f:9a:e9:f8:dc:0e:77:80:13:36:09:7b:25:9a: 47:ab:7d:ca:21:03:ff:cf:06:91:a2:6d:8a:3f:b1: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EB:90:66:C1:13:A0:3C:EC:CA:1B:9F:BC:EA:80:B2:13:0A:28:B1 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:42:cd:93:31:d6:1e:8a:9f:87:6d:44:69:be:d0:31:2b:58: a6:91:f8:f5:3e:fe:83:23:18:56:da:74:ca:52:2b:f1:ad:64: 84:d1:33:15:20:fc:b1:3d:86:af:40:85:66:bc:0a:b0:b1:00: f3:38:65:d7:71:6e:34:74:fb:b0:23:e6:aa:5d:be:8e:d1:18: ef:e3:f8:8c:dc:83:f7:f1:aa:0c:1a:6b:7f:6d:47:b8:1d:bd: f3:c5:a3:67:2e:7a:76:d4:8f:55:21:1e:7c:bd:ad:24:fd:29: 08:5b:26:36:06:01:98:22:eb:18:1c:ca:ad:c1:e7:8b:34:51: 0a:5e:ff:77:56:49:bf:1d:09:20:01:6d:5a:27:f9:a0:fc:a3: 57:e5:db:cd:51:41:d8:27:88:cd:8e:6e:dd:75:13:2c:18:25: b8:ac:84:06:2c:5a:3f:1a:f5:1e:dd:b5:3c:8f:db:9b:9c:4d: 9f:e3:7d:81:1c:b4:59:c3:0d:37:fc:a3:62:3d:cb:48:70:c1: bb:0a:30:7d:4a:a2:06:9f:79:44:1c:5d:b5:94:c2:38:a1:27: 24:b4:66:29:4e:76:65:d9:c7:52:ce:62:27:1c:86:de:c0:67: a4:89:a7:7c:ba:fa:bf:8a:72:cb:21:06:f0:73:c6:89:a8:48: 14:ad:ec:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUxMDI3MDQ1OTA5WhcNMjUxMTAzMDQ1OTA5WjAYMRYwFAYD VQQDEw02OGZlZmMxZC0wYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2T/C6MwHzavQ/Zz1EjXnqsHos2b69hqAZ3D+ZCcJGWqdtwWNw9IuaSq6C9o iLkDMQrIrLYss6dFgdJb6zjcWJemI98ZuZNRyDujI5hVdJN3GTmI0tJzMsE38Wts TVM4gSFyXcFLCBYa2TDVdxxxUGXDTjCT8fsLOcsTTAZOmBzdtM5l18qlLhm6uVrv yHymMLVowxXqKfgWq1yf2aPqf0hs7cly0QUyncRc4QdDVPb8YAxFqLNgSj1KnKtD fm9Ezf2y9C4K+Beb4DAJsKaJBOLFCzZmFGh+l7acj1EZKPz8X5rp+NwOd4ATNgl7 JZpHq33KIQP/zwaRom2KP7HUlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjrkGbB E6A87Mobn7zqgLITCiixMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXQs2TMdYeip+HbURpvtAxK1imkfj1Pv6DIxhW2nTKUivxrWSE0TMV IPyxPYavQIVmvAqwsQDzOGXXcW40dPuwI+aqXb6O0Rjv4/iM3IP38aoMGmt/bUe4 Hb3zxaNnLnp21I9VIR58va0k/SkIWyY2BgGYIusYHMqtweeLNFEKXv93Vkm/HQkg AW1aJ/mg/KNX5dvNUUHYJ4jNjm7ddRMsGCW4rIQGLFo/GvUe3bU8j9ubnE2f432B HLRZww03/KNiPctIcMG7CjB9SqIGn3lEHF21lMI4oScktGYpTnZl2cdSzmInHIbe wGekiad8uvq/inLLIQbwc8aJqEgUreyM -----END CERTIFICATE-----Generated at Mon Oct 27 12:02:39 2025 by rpki-client