$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: V8h1dy6a/WtU5Gf5tbRzfyHRa40HgSnr5Ln+f43EVAw= Subject key identifier: 7F:E1:B6:97:79:C7:C2:B1:4F:72:BC:59:56:FA:4D:33:13:83:3E:DF Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 24C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 24A1 Signing time: Sun 02 Nov 2025 15:47:55 +0000 Manifest this update: Sun 02 Nov 2025 15:47:54 +0000 Manifest next update: Sun 09 Nov 2025 15:47:54 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: /lmej0AhD7ztvUSXNUeJyXVc364DUBvq9HBtaUCyapA=) 2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw=) 3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: GhF9PvzI5x/9vujTT/xlTVo+qNPcjDRdk9u4YkdwFYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9409 (0x24c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Nov 2 15:47:54 2025 GMT Not After : Nov 9 15:47:54 2025 GMT Subject: CN=69077d2a-99f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:7f:52:fe:f3:36:da:b0:a7:00:d1:56:4a: a4:83:17:46:5f:a8:6a:11:66:30:70:5a:d6:21:b0: 3a:bb:5c:e1:2c:07:73:a2:61:cc:62:75:df:b1:e2: 6a:bd:86:22:fd:63:16:0e:8d:d8:09:27:b4:4d:bf: f6:2f:61:f7:73:a1:3c:47:d1:4a:e3:08:21:66:94: 8b:f1:5d:9a:b1:3d:5e:0e:16:bc:a8:4b:2d:1b:de: db:ef:10:ad:66:4b:84:51:55:fa:8a:d6:5d:d3:1b: 45:de:f1:0a:00:8e:f9:d7:da:d6:01:d6:82:41:c7: 51:2c:ef:02:1a:17:5c:41:85:33:c8:f1:05:40:6a: 7d:78:46:ed:6a:e4:3a:b9:44:53:ba:b3:9c:40:13: 34:aa:b0:e7:04:47:80:77:dd:8f:ee:7c:1d:bb:a9: 36:52:91:94:2e:85:6a:57:08:d6:bd:91:5d:dd:c7: 03:15:0a:7a:da:64:47:54:9f:92:f6:7c:82:1c:1d: bd:3f:66:ec:59:cf:de:8d:8b:43:0f:d8:12:34:63: 62:d8:40:e2:55:7f:1c:99:6c:af:af:5c:23:97:a1: 70:c0:8a:4e:9f:f6:63:f4:51:77:57:0e:c3:77:fa: e0:9c:ca:6a:2f:27:aa:cc:c6:c4:00:1f:03:72:a7: d7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E1:B6:97:79:C7:C2:B1:4F:72:BC:59:56:FA:4D:33:13:83:3E:DF X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:7c:80:7c:1a:f8:be:f8:e4:43:a1:d3:3e:9b:ff:3d:04:5f: 6e:91:72:63:08:ac:28:76:a2:4e:f2:0a:3b:dd:d4:47:72:02: 67:f2:b3:48:3e:09:e1:8d:ec:c5:06:ef:15:da:0a:ed:ef:04: 0c:d0:c3:87:b8:3f:59:bf:ed:ad:9d:77:f3:0f:43:a9:d5:f7: 0a:61:d8:12:f9:35:97:e7:6a:1a:d6:54:62:5d:ef:8a:0d:dd: c3:45:b2:47:5c:a8:e8:95:44:da:16:08:bf:35:92:f3:a8:84: 2b:83:61:6c:a2:28:5c:1b:fa:35:75:a1:f1:62:1b:da:96:91: 5f:ea:4a:d4:12:03:8c:fb:e5:01:7b:06:df:8d:c1:a0:ff:00: 36:57:22:1a:e8:0c:82:b3:9d:2b:08:ba:c8:1f:1d:17:c8:f3: fd:28:17:48:d1:3e:14:7b:7a:0a:93:fa:5f:d6:af:8b:d9:81: 62:ce:4b:e1:f1:e8:58:f0:42:fc:85:3c:13:69:e5:41:bf:00: f7:e2:00:a2:a5:d5:81:8c:38:73:ba:4f:73:df:7f:d2:95:98: 2a:a1:9a:5a:0a:7d:24:f3:65:71:6c:d5:53:d2:ea:a2:ae:0c: 16:ec:a7:21:3c:bd:fb:38:1d:08:46:a8:1d:af:4f:70:65:72: 53:ae:ff:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjUxMTAyMTU0NzU0WhcNMjUxMTA5MTU0NzU0WjAYMRYwFAYD VQQDEw02OTA3N2QyYS05OWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLJ/Uv7zNtqwpwDRVkqkgxdGX6hqEWYwcFrWIbA6u1zhLAdzomHMYnXfseJq vYYi/WMWDo3YCSe0Tb/2L2H3c6E8R9FK4wghZpSL8V2asT1eDha8qEstG97b7xCt ZkuEUVX6itZd0xtF3vEKAI7519rWAdaCQcdRLO8CGhdcQYUzyPEFQGp9eEbtauQ6 uURTurOcQBM0qrDnBEeAd92P7nwdu6k2UpGULoVqVwjWvZFd3ccDFQp62mRHVJ+S 9nyCHB29P2bsWc/ejYtDD9gSNGNi2EDiVX8cmWyvr1wjl6FwwIpOn/Zj9FF3Vw7D d/rgnMpqLyeqzMbEAB8DcqfXvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/htpd5 x8KxT3K8WVb6TTMTgz7fMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqfIB8Gvi++ORDodM+m/89BF9ukXJjCKwodqJO8go73dRHcgJn8rNI PgnhjezFBu8V2grt7wQM0MOHuD9Zv+2tnXfzD0Op1fcKYdgS+TWX52oa1lRiXe+K Dd3DRbJHXKjolUTaFgi/NZLzqIQrg2FsoihcG/o1daHxYhvalpFf6krUEgOM++UB ewbfjcGg/wA2VyIa6AyCs50rCLrIHx0XyPP9KBdI0T4Ue3oKk/pf1q+L2YFizkvh 8ehY8EL8hTwTaeVBvwD34gCipdWBjDhzuk9z33/SlZgqoZpaCn0k82VxbNVT0uqi rgwW7KchPL37OB0IRqgdr09wZXJTrv91 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:43 2025 by rpki-client