$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: VRlbaHFL8QSthS2+3KvHz8Cj4RuwaWBGvPQK/JPu7H4= Subject key identifier: F4:79:8F:2C:3B:F0:80:03:06:25:ED:7B:A1:F7:A2:AE:2D:50:95:19 Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 03BA Signing time: Mon 27 Oct 2025 01:59:41 +0000 Manifest this update: Mon 27 Oct 2025 01:59:41 +0000 Manifest next update: Mon 03 Nov 2025 01:59:40 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: Rb+JreTbnbqllp1IHOXXxORVHkkSm28iuxOTp3eYF0c=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 01:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Oct 27 01:59:41 2025 GMT Not After : Nov 3 01:59:40 2025 GMT Subject: CN=68fed20d-efe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:c9:31:cf:56:02:df:8d:91:2a:30:c1:be: 6c:73:16:62:30:6e:e6:43:ec:57:29:93:07:00:70: e5:20:87:81:07:f1:d5:51:72:cd:f3:c6:6c:9c:d0: f7:94:6f:9e:ea:72:b3:d7:ef:bb:2a:18:14:0a:6e: db:70:0d:62:61:29:38:3e:66:4e:ac:34:23:4c:cb: 80:9d:ae:6a:2f:e7:a4:d2:af:34:b4:77:7f:bd:a3: 0b:97:4b:6f:b4:a7:8b:d5:63:9a:30:8e:6d:25:dd: 02:fe:4b:c9:26:37:21:02:33:50:e8:5e:aa:1f:fe: 2d:97:f1:f5:7c:27:64:94:01:fe:31:c5:e7:1f:ca: 4e:4d:84:5b:ec:e0:47:97:c1:ed:c9:f2:5c:92:c1: 00:9d:e9:9c:47:3d:1b:0f:24:6b:9d:e4:70:ae:4e: de:65:bb:bd:f1:a8:14:02:b1:49:0d:03:16:b8:ad: 72:3d:d7:f8:e3:bb:60:5c:96:c2:17:6f:39:48:db: 38:c3:78:10:38:25:ab:a4:c9:95:a4:97:2c:87:9b: 39:c8:1f:85:05:76:e1:e4:4e:42:3b:00:dd:08:f4: 97:24:4f:84:a1:e5:a4:5b:92:3b:c7:44:6a:37:c0: ec:d3:ea:aa:04:72:39:68:50:8b:67:55:f9:ce:5c: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:79:8F:2C:3B:F0:80:03:06:25:ED:7B:A1:F7:A2:AE:2D:50:95:19 X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f6:82:e1:26:a9:fd:19:da:92:00:81:7f:54:ea:7b:a2:e9: 67:0d:63:31:7d:ee:82:a9:62:21:ff:0b:a3:bb:37:ec:39:c1: d6:d8:f6:9e:fe:c7:a0:d8:0f:39:5b:3d:1e:0d:fc:c1:33:c6: ec:ef:65:ff:b3:34:e3:12:26:03:56:02:52:de:0b:d3:25:25: ff:d7:8d:1c:8a:04:07:88:84:d8:4e:fd:ce:4f:d5:c7:9c:43: 40:82:1c:87:b7:4a:14:24:e3:e1:d9:d3:f3:aa:65:a8:bf:fb: 0d:0b:2b:c8:73:2c:d5:3b:d5:2d:12:77:d4:53:69:4d:d9:ee: ee:6a:6a:df:f4:24:df:c8:88:1c:cf:15:d7:91:20:c4:3b:a0: 13:5a:25:bb:44:8e:4d:92:b9:db:6c:52:30:50:71:9a:0e:d3: 72:d8:4a:9a:7a:29:c4:df:99:2c:45:78:d7:f2:01:64:6e:fd: 0f:33:3d:72:ec:80:b7:88:ab:9d:33:33:ef:97:07:15:c1:5c: 77:6e:ba:08:79:bb:ef:42:a3:27:b7:58:41:37:c5:a6:ca:24: 6f:5f:3a:81:de:64:9f:bd:2e:a8:f3:13:ad:a6:a9:00:9e:d7: 1e:2d:ab:d0:86:87:65:0a:0a:b7:f0:f2:6e:e2:2a:07:55:3d: 77:b2:f1:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjUxMDI3MDE1OTQxWhcNMjUxMTAzMDE1OTQwWjAYMRYwFAYD VQQDEw02OGZlZDIwZC1lZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlDJMc9WAt+NkSowwb5scxZiMG7mQ+xXKZMHAHDlIIeBB/HVUXLN88ZsnND3 lG+e6nKz1++7KhgUCm7bcA1iYSk4PmZOrDQjTMuAna5qL+ek0q80tHd/vaMLl0tv tKeL1WOaMI5tJd0C/kvJJjchAjNQ6F6qH/4tl/H1fCdklAH+McXnH8pOTYRb7OBH l8HtyfJcksEAnemcRz0bDyRrneRwrk7eZbu98agUArFJDQMWuK1yPdf447tgXJbC F285SNs4w3gQOCWrpMmVpJcsh5s5yB+FBXbh5E5COwDdCPSXJE+EoeWkW5I7x0Rq N8Ds0+qqBHI5aFCLZ1X5zlwhtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR5jyw7 8IADBiXte6H3oq4tUJUZMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh9oLhJqn9GdqSAIF/VOp7oulnDWMxfe6CqWIh/wujuzfsOcHW2Pae /seg2A85Wz0eDfzBM8bs72X/szTjEiYDVgJS3gvTJSX/140cigQHiITYTv3OT9XH nENAghyHt0oUJOPh2dPzqmWov/sNCyvIcyzVO9UtEnfUU2lN2e7uamrf9CTfyIgc zxXXkSDEO6ATWiW7RI5NkrnbbFIwUHGaDtNy2EqaeinE35ksRXjX8gFkbv0PMz1y 7IC3iKudMzPvlwcVwVx3broIebvvQqMnt1hBN8WmyiRvXzqB3mSfvS6o8xOtpqkA ntceLavQhodlCgq38PJu4ioHVT13svEK -----END CERTIFICATE-----Generated at Mon Oct 27 15:06:04 2025 by rpki-client