$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json) Hash identifier: +mlvT245FVB54QXknfwZWGd88ILF21f2aGal7KuCsbw= Subject key identifier: A5:CB:6B:A4:42:B9:11:D0:D9:61:19:07:96:EB:91:7C:66:2B:BA:15 Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Certificate serial: 0E32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft Manifest number: 0E2C Signing time: Tue 04 Nov 2025 17:53:46 +0000 Manifest this update: Tue 04 Nov 2025 17:53:46 +0000 Manifest next update: Tue 11 Nov 2025 17:53:46 +0000 Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: LDMHEMCMrp8eQvFsTWz2cmPNd9oWn0tD5BzsH+hiznA=) 2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: 0IBVwDZ7i+J4nVvUTeF7Wzqm6YjeaulpyuMa4quZjWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3634 (0xe32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Validity Not Before: Nov 4 17:53:46 2025 GMT Not After : Nov 11 17:53:46 2025 GMT Subject: CN=690a3daa-b1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:28:45:9f:cf:c5:4d:12:55:0e:b5:84:74: 7f:eb:3a:1f:21:04:84:3c:b6:d2:30:d9:ec:c9:a6: 6d:d3:da:b2:99:28:89:be:74:28:43:1d:17:51:7c: d5:2b:8c:94:5c:87:6c:bd:24:fb:20:53:3d:9a:f1: c3:b2:79:68:c1:b1:12:ee:57:4b:d1:f1:d3:ff:a9: 45:37:82:84:b6:93:37:6d:3f:c0:03:80:13:58:a0: dd:26:a0:ca:02:37:e3:8c:26:86:49:87:ad:9b:a4: 97:b7:76:02:02:b1:41:d0:b9:78:e4:01:fa:e4:3d: 94:04:4f:d2:1e:8e:5c:34:1a:3d:2c:e9:0d:1d:2d: 0a:7f:76:1d:7e:fb:eb:aa:90:30:24:16:59:78:2e: 8c:fc:8a:01:e9:f6:e5:a9:05:09:51:d5:19:3b:de: 31:1c:2e:83:fb:43:3a:93:38:be:ef:c4:0c:7e:a3: fd:f3:0c:4f:a9:8c:73:5e:2a:b1:1a:fb:da:ac:78: 2c:b1:76:63:30:cf:41:d9:8a:a7:c2:5b:fb:78:18: 53:00:19:1a:57:31:4e:bf:de:ae:6a:bf:35:63:4d: 23:eb:2f:c3:7e:82:cd:f2:3c:ee:1a:70:e0:74:88: de:b5:c3:62:cf:41:eb:f5:5f:30:bf:c0:9c:e6:a0: a7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CB:6B:A4:42:B9:11:D0:D9:61:19:07:96:EB:91:7C:66:2B:BA:15 X509v3 Authority Key Identifier: keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b2:0d:53:a4:27:8f:33:89:5c:2e:90:4c:1e:91:bd:d4:ff: eb:09:98:aa:c5:bf:2b:73:d1:f7:14:a0:7d:5b:fa:9f:9c:36: fc:d2:24:ef:c2:23:ed:d9:fb:ee:e8:21:4f:83:66:07:e9:ce: e8:47:10:92:3f:da:9e:78:aa:c2:4c:eb:a8:b3:a7:e0:5e:96: ab:7c:fa:d6:ef:2d:18:bf:ac:70:fd:c5:73:9a:1b:5e:b3:e4: 1d:4e:51:37:ab:50:36:f5:18:70:0a:da:71:66:5c:c9:a7:55: df:22:95:37:12:43:ca:6b:c8:b5:a1:ae:78:ea:0d:e8:c9:cd: d2:44:69:b0:ad:8e:bc:23:4c:0c:46:27:06:0f:58:57:a7:fd: af:81:5e:e1:c3:e8:1d:1e:17:48:77:3b:4b:ef:4e:e7:b0:e1: b9:5a:9d:4d:bb:2f:57:a0:9a:b6:bf:e9:cf:7d:90:a1:b5:0e: 27:16:8e:0c:1c:18:a2:00:3a:5f:4f:9c:f7:4e:c5:b6:49:2f: 55:1c:78:8b:f1:4f:40:e2:07:99:3f:de:ce:78:ef:a4:70:15: d6:7d:6e:5c:ca:d1:aa:de:67:39:2d:87:e4:39:e2:5d:0e:05: 47:12:2f:6a:41:04:d9:ec:7b:bd:31:27:a8:16:2c:2c:a6:17: a0:17:48:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0RkMxMTAvBgNVBAUTKEYxRTAyQjM5NDZGRUZCRTZGNDY0RjQzNDhFRjIxNTVG NjFEMDdBMUIwHhcNMjUxMTA0MTc1MzQ2WhcNMjUxMTExMTc1MzQ2WjAYMRYwFAYD VQQDEw02OTBhM2RhYS1iMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK0oRZ/PxU0SVQ61hHR/6zofIQSEPLbSMNnsyaZt09qymSiJvnQoQx0XUXzV K4yUXIdsvST7IFM9mvHDsnlowbES7ldL0fHT/6lFN4KEtpM3bT/AA4ATWKDdJqDK AjfjjCaGSYetm6SXt3YCArFB0Ll45AH65D2UBE/SHo5cNBo9LOkNHS0Kf3Ydfvvr qpAwJBZZeC6M/IoB6fblqQUJUdUZO94xHC6D+0M6kzi+78QMfqP98wxPqYxzXiqx GvvarHgssXZjMM9B2Yqnwlv7eBhTABkaVzFOv96uar81Y00j6y/DfoLN8jzuGnDg dIjetcNiz0Hr9V8wv8Cc5qCnRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXLa6RC uRHQ2WEZB5brkXxmK7oVMB8GA1UdIwQYMBaAFPHgKzlG/vvm9GT0NI7yFV9h0Hob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjRGQy8zQjYzNEJCRUI0 NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0tYjBaUFEwanZJVlgySFFl aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhlQXJPVWItLS1iMFpQUTBqdklWWDJIUWVocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjRGQy8zQjYzNEJCRUI0NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0t YjBaUFEwanZJVlgySFFlaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVsg1TpCePM4lcLpBMHpG91P/rCZiqxb8rc9H3FKB9W/qfnDb80iTv wiPt2fvu6CFPg2YH6c7oRxCSP9qeeKrCTOuos6fgXparfPrW7y0Yv6xw/cVzmhte s+QdTlE3q1A29RhwCtpxZlzJp1XfIpU3EkPKa8i1oa546g3oyc3SRGmwrY68I0wM RicGD1hXp/2vgV7hw+gdHhdIdztL707nsOG5Wp1Nuy9XoJq2v+nPfZChtQ4nFo4M HBiiADpfT5z3TsW2SS9VHHiL8U9A4geZP97OeO+kcBXWfW5cytGq3mc5LYfkOeJd DgVHEi9qQQTZ7Hu9MSeoFiwsphegF0gG -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:49 2025 by rpki-client