$ rpki-client -vvf rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft File: 8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft (raw, json) Hash identifier: C9TFcsAqS6xtps2/xxfnH3KfAp2QDgVbXXzaaVhLA+s= Subject key identifier: 77:6B:2A:AC:40:23:46:C5:75:FC:ED:A6:F2:F9:1B:0F:DC:CB:4A:23 Authority key identifier: F2:8D:6D:11:C3:C5:54:6E:42:41:81:8A:73:B4:70:EE:CA:6D:72:83 Certificate issuer: /CN=A9114CE7/serialNumber=F28D6D11C3C5546E4241818A73B470EECA6D7283 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft Manifest number: 0228 Signing time: Mon 20 Oct 2025 04:50:21 +0000 Manifest this update: Mon 20 Oct 2025 04:50:20 +0000 Manifest next update: Mon 27 Oct 2025 04:50:20 +0000 Files and hashes: 1: 8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl (hash: 1qS5uKglLmSKly4m7jsx58DAF+wlvRoNXazlExQc2yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 04:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114CE7, serialNumber=F28D6D11C3C5546E4241818A73B470EECA6D7283 Validity Not Before: Oct 20 04:50:20 2025 GMT Not After : Oct 27 04:50:20 2025 GMT Subject: CN=68f5bf8d-cb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:9a:2a:f5:9c:d2:ec:1b:12:33:75:d2:6e: 8b:42:83:ab:1d:4e:3b:5c:c9:ab:94:e3:98:86:e3: d2:45:c0:52:fa:a8:c5:85:f2:f3:b4:ac:6e:a4:56: c3:dc:e2:21:1d:d7:04:b1:14:d8:17:b1:85:23:91: 89:a5:f5:0f:63:f3:ae:63:d2:d7:65:0b:a2:ac:2c: cc:4c:94:a6:e8:a9:6c:93:d0:98:c3:87:65:62:3d: df:da:81:71:ff:e6:3c:61:8f:ee:fb:6b:15:7c:45: a5:17:76:f5:e9:7c:30:3d:90:14:0f:da:45:ab:30: 82:d0:3b:52:7a:23:dd:18:5d:81:28:5c:de:d7:e5: 58:fb:08:87:41:a0:f5:b7:25:ee:31:58:c8:e0:ae: 85:b9:68:90:dc:e5:9e:e8:6b:d2:c6:ed:c0:39:90: dc:b8:6b:77:0e:55:07:42:d6:4a:5b:6e:a9:f0:92: fd:12:95:e1:9c:23:b9:b6:2f:23:9b:db:e5:24:d7: 75:db:1a:09:a6:95:bd:4b:74:db:5c:ea:03:da:63: 43:b3:ac:55:bc:72:cb:28:70:80:c4:9e:39:f3:a1: 7b:24:fa:e2:94:a1:9e:cd:ee:a8:83:b6:92:2b:3d: bc:c6:bc:b9:ec:4d:54:f5:83:43:e9:2e:43:b3:c5: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6B:2A:AC:40:23:46:C5:75:FC:ED:A6:F2:F9:1B:0F:DC:CB:4A:23 X509v3 Authority Key Identifier: keyid:F2:8D:6D:11:C3:C5:54:6E:42:41:81:8A:73:B4:70:EE:CA:6D:72:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:6e:00:00:4b:ac:8b:6d:d4:66:f1:c9:30:6b:47:7a:4a:f5: 64:b0:68:a5:91:d0:90:05:9d:d2:1b:58:b2:fc:d7:c7:99:f2: ff:d7:65:08:34:1d:aa:28:8e:b2:b7:61:a7:53:33:3b:7f:34: 11:33:7f:54:62:22:bf:85:b6:51:5b:eb:5c:10:a8:be:fc:92: 96:c2:4a:a3:53:36:a1:90:22:41:4a:28:23:7a:56:4d:fb:c7: 52:82:c8:93:22:0f:7b:52:d3:06:23:59:7f:49:ab:35:2e:c6: b5:f4:df:fc:f7:f1:ce:e9:0f:77:a9:7d:e5:f7:f2:93:7a:84: 2f:79:3f:07:17:a0:b1:93:b2:96:4c:9b:84:d6:55:00:8a:86: b4:33:f4:c9:a9:c3:c3:c1:ba:d7:d2:d9:4a:8d:2a:1e:c4:2b: 9b:8f:48:f6:90:35:8c:2c:17:af:15:da:48:03:2c:d9:79:fb: a0:2c:73:80:48:d2:f9:f7:b0:e5:e8:06:0c:4d:8d:70:23:04: c5:15:24:6e:0f:c2:7f:05:16:4e:8b:ce:c9:2d:e2:8f:84:5f: d8:ee:46:f1:6b:b2:04:6f:32:53:48:c4:b0:9c:27:ac:81:7d: a5:0d:58:d6:bc:86:a4:59:37:b4:70:3c:78:37:38:fa:5b:d5: e2:bd:0a:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRDRTcxMTAvBgNVBAUTKEYyOEQ2RDExQzNDNTU0NkU0MjQxODE4QTczQjQ3MEVF Q0E2RDcyODMwHhcNMjUxMDIwMDQ1MDIwWhcNMjUxMDI3MDQ1MDIwWjAYMRYwFAYD VQQDEw02OGY1YmY4ZC1jYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/SaKvWc0uwbEjN10m6LQoOrHU47XMmrlOOYhuPSRcBS+qjFhfLztKxupFbD 3OIhHdcEsRTYF7GFI5GJpfUPY/OuY9LXZQuirCzMTJSm6Klsk9CYw4dlYj3f2oFx /+Y8YY/u+2sVfEWlF3b16XwwPZAUD9pFqzCC0DtSeiPdGF2BKFze1+VY+wiHQaD1 tyXuMVjI4K6FuWiQ3OWe6GvSxu3AOZDcuGt3DlUHQtZKW26p8JL9EpXhnCO5ti8j m9vlJNd12xoJppW9S3TbXOoD2mNDs6xVvHLLKHCAxJ4586F7JPrilKGeze6og7aS Kz28xry57E1U9YND6S5Ds8UNjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdrKqxA I0bFdfztpvL5Gw/cy0ojMB8GA1UdIwQYMBaAFPKNbRHDxVRuQkGBinO0cO7KbXKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNENFNy81QjJCMTMxQzYw Q0QxMUVEODRGNzVGNENDNEY5QUUwMi84bzF0RWNQRlZHNUNRWUdLYzdSdzdzcHRj b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhvMXRFY1BGVkc1Q1FZR0tjN1J3N3NwdGNvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NENFNy81QjJCMTMxQzYwQ0QxMUVEODRGNzVGNENDNEY5QUUwMi84bzF0RWNQRlZH NUNRWUdLYzdSdzdzcHRjb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRbgAAS6yLbdRm8ckwa0d6SvVksGilkdCQBZ3SG1iy/NfHmfL/12UI NB2qKI6yt2GnUzM7fzQRM39UYiK/hbZRW+tcEKi+/JKWwkqjUzahkCJBSigjelZN +8dSgsiTIg97UtMGI1l/Sas1Lsa19N/89/HO6Q93qX3l9/KTeoQveT8HF6Cxk7KW TJuE1lUAioa0M/TJqcPDwbrX0tlKjSoexCubj0j2kDWMLBevFdpIAyzZefugLHOA SNL597Dl6AYMTY1wIwTFFSRuD8J/BRZOi87JLeKPhF/Y7kbxa7IEbzJTSMSwnCes gX2lDVjWvIakWTe0cDx4Nzj6W9XivQo2 -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:19 2025 by rpki-client