$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json) Hash identifier: pdhHf4PuW3oBNMWhb4UB0bszPSQ92hWkk40OAaS82yU= Subject key identifier: EE:87:82:18:D1:A2:36:D1:6A:FF:E1:A7:FC:42:77:3C:6E:1C:D5:A6 Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft Manifest number: E0 Signing time: Sun 19 Oct 2025 08:32:50 +0000 Manifest this update: Sun 19 Oct 2025 08:32:49 +0000 Manifest next update: Sun 26 Oct 2025 08:32:49 +0000 Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: sVEW7iSOjPFqRNLNIlAWnsxtYKhcF8D2oW6Uu7snOeI=) 2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: jHfK6IyCLOgzWRIKFIJt7aRe94FDSOoHp8+mPczDRNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: Oct 19 08:32:49 2025 GMT Not After : Oct 26 08:32:49 2025 GMT Subject: CN=68f4a231-f774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a1:fd:0c:f6:23:84:8b:c4:4c:c0:b5:4a:16: e2:99:82:7b:f3:d4:a1:87:cc:41:f5:f9:a7:b2:38: f6:c6:d0:a8:3b:b7:51:fe:36:d3:df:f2:89:ca:02: 26:29:10:c6:62:08:8b:17:38:6f:fb:67:22:09:92: d1:67:aa:9d:e1:d3:38:e8:80:8e:99:de:68:6a:af: 4d:78:e6:82:f3:50:ad:ae:65:f4:d8:f6:70:40:24: ec:8d:74:86:fd:54:26:f8:3a:38:32:71:1b:89:78: d4:df:9e:bd:74:60:4e:18:c6:9c:cb:5a:63:46:ae: 0c:9c:5c:af:a1:77:c3:8f:53:08:6b:1f:c1:86:e0: b2:f2:1e:0b:08:71:db:8e:30:81:1a:39:aa:6f:7b: ff:da:46:98:bd:a6:9a:f6:52:c4:5a:c8:9e:08:fc: 5f:04:41:09:d6:eb:f1:4d:46:2d:46:e7:88:e8:ee: 64:0f:03:bf:db:4a:f1:aa:1a:7b:88:ba:da:5c:0c: 37:d0:b2:4f:5b:16:a8:cc:53:18:7a:f5:63:be:26: ff:1d:de:7c:36:4f:d5:b4:16:b7:0c:4e:9a:72:70: 8d:26:17:e3:f0:32:a4:42:3d:0c:34:6a:2d:e2:75: 39:33:f5:13:28:a6:dc:a6:cb:b1:3b:b6:1f:15:07: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:87:82:18:D1:A2:36:D1:6A:FF:E1:A7:FC:42:77:3C:6E:1C:D5:A6 X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bb:1e:f0:6c:e3:83:ec:e2:d8:b2:6f:6b:d3:d9:62:98:d3: 2b:6a:ec:fc:be:85:e5:08:8c:7b:ac:e7:df:7d:a8:9d:36:c7: 29:6c:d7:bd:0f:cc:e2:1b:c6:32:77:6b:74:fc:af:ff:90:13: 5d:33:5b:f3:f6:28:cf:b2:b0:25:e9:89:ae:07:d8:e6:97:1c: 79:55:cf:51:a6:9f:13:23:45:38:dd:01:10:68:fb:b2:28:b4: 44:d5:88:45:da:19:de:42:06:0b:9b:b4:f9:a3:7c:83:f1:51: db:80:52:f4:21:9a:0e:12:c4:ad:01:5c:84:0b:48:f0:8d:b8: 80:58:31:1e:03:b5:c8:b0:95:84:d6:f3:36:de:4d:50:91:c0: 6b:8b:fd:4e:e0:2a:b2:45:48:a0:72:a9:8d:02:49:d6:c5:ba: b6:1d:8f:bc:6a:de:19:cb:6a:1a:3b:61:b8:6d:4a:df:3a:6a: cd:59:f4:85:60:4c:8e:b3:dc:17:1f:e2:45:9e:2d:7c:f0:f6: 02:0c:ff:64:31:10:32:b7:f7:f4:2e:0e:a4:36:cc:ca:57:37: 22:05:85:ac:21:63:63:0c:fe:eb:1e:62:15:60:96:4b:61:bd: 1f:0c:a8:2a:49:e2:df:e6:e2:15:f5:ac:8a:2a:94:75:fe:ae: 91:4a:21:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIyQjMxMTAvBgNVBAUTKDIzQzBCMkQ3QUNFMTA5RDNERkU4M0FFQkVGMkVBMzE0 OUM1Q0FDMTcwHhcNMjUxMDE5MDgzMjQ5WhcNMjUxMDI2MDgzMjQ5WjAYMRYwFAYD VQQDEw02OGY0YTIzMS1mNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8aH9DPYjhIvETMC1ShbimYJ789Shh8xB9fmnsjj2xtCoO7dR/jbT3/KJygIm KRDGYgiLFzhv+2ciCZLRZ6qd4dM46ICOmd5oaq9NeOaC81CtrmX02PZwQCTsjXSG /VQm+Do4MnEbiXjU3569dGBOGMacy1pjRq4MnFyvoXfDj1MIax/BhuCy8h4LCHHb jjCBGjmqb3v/2kaYvaaa9lLEWsieCPxfBEEJ1uvxTUYtRueI6O5kDwO/20rxqhp7 iLraXAw30LJPWxaozFMYevVjvib/Hd58Nk/VtBa3DE6acnCNJhfj8DKkQj0MNGot 4nU5M/UTKKbcpsuxO7YfFQe8/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6HghjR ojbRav/hp/xCdzxuHNWmMB8GA1UdIwQYMBaAFCPAstes4QnT3+g66+8uoxScXKwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjJCMy81RTRENDc2MjVC OUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENkUGY2RHJyN3k2akZKeGNy QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENk UGY2RHJyN3k2akZKeGNyQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdux7wbOOD7OLYsm9r09limNMrauz8voXlCIx7rOfffaidNscpbNe9 D8ziG8Yyd2t0/K//kBNdM1vz9ijPsrAl6YmuB9jmlxx5Vc9Rpp8TI0U43QEQaPuy KLRE1YhF2hneQgYLm7T5o3yD8VHbgFL0IZoOEsStAVyEC0jwjbiAWDEeA7XIsJWE 1vM23k1QkcBri/1O4CqyRUigcqmNAknWxbq2HY+8at4Zy2oaO2G4bUrfOmrNWfSF YEyOs9wXH+JFni188PYCDP9kMRAyt/f0Lg6kNszKVzciBYWsIWNjDP7rHmIVYJZL Yb0fDKgqSeLf5uIV9ayKKpR1/q6RSiHt -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:29 2025 by rpki-client