$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: Wb3ilz54mQX1fzTeaTSOuxoEcrFfd/8Y6kGtezi607E= Subject key identifier: D7:1E:67:C6:53:21:AC:A2:C6:72:E5:3F:BE:4A:35:6F:EC:76:96:2C Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 099E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 0982 Signing time: Sat 18 Oct 2025 21:11:37 +0000 Manifest this update: Sat 18 Oct 2025 21:11:36 +0000 Manifest next update: Sat 25 Oct 2025 21:11:36 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: vl8y1iDpvNwyEnGfiVCNQeA9q/iwmXf5Se2GvIbCl+s=) 2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: xcMGwOENkpgW2mMW9g8QUOtjynFGqmXhiODYH8mlbPs=) 3: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: qICrQwIHICjNb5ciKPL/CPmev59XQIMgZMKlYhMpE7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2462 (0x99e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Oct 18 21:11:36 2025 GMT Not After : Oct 25 21:11:36 2025 GMT Subject: CN=68f40289-d11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:6e:8e:e1:52:d0:c2:c4:17:f5:d4:d9:df: c9:f8:f3:8c:96:78:96:f5:6e:e2:58:4c:56:77:16: 49:bc:93:d8:3b:14:3f:42:8c:48:b9:16:c0:e4:b2: ce:24:e3:af:4f:f5:04:6f:21:76:3d:47:79:53:84: 93:7e:40:3a:e4:08:36:2c:b3:e1:39:78:df:be:75: be:e4:fb:7b:b0:87:d4:33:73:c9:b5:23:af:a5:91: be:29:f8:ad:20:9c:c3:dc:95:db:0c:78:f9:cf:82: d8:c8:b0:1b:37:ad:70:46:4f:c5:fb:0b:11:3a:48: 2a:4e:1d:0c:ed:15:cd:19:45:48:f7:58:17:8b:e4: d9:61:65:68:12:74:08:fa:9b:3f:3d:f7:cc:4d:25: b0:09:62:6e:88:0f:c8:51:d7:fd:6b:05:5a:86:99: 51:7d:91:dd:04:ba:36:62:c5:00:e5:ad:4a:d8:1a: fc:12:41:9c:43:ee:61:21:37:a3:d2:2a:44:dc:42: d8:e1:4f:96:ed:66:98:10:cf:d2:17:56:6d:bf:85: ed:54:15:67:58:05:5a:21:f8:0a:7d:cc:22:1a:bb: 51:8c:c4:2a:47:b3:b7:c0:3f:69:e5:73:50:08:6e: 15:f5:22:68:9c:d8:5c:3d:2f:78:37:22:57:68:49: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1E:67:C6:53:21:AC:A2:C6:72:E5:3F:BE:4A:35:6F:EC:76:96:2C X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:be:d6:4f:1c:c5:17:0c:0e:41:4f:c2:0a:ab:15:7e:f6:36: 37:c6:46:3d:b9:13:28:a1:6c:b8:40:aa:9e:f7:14:de:6c:8e: d8:9a:a4:a0:f7:ed:90:c8:14:60:6e:24:ee:2f:b1:b7:d3:ab: 7c:6b:f7:83:c5:59:d0:20:25:8d:7c:de:05:d1:6a:75:ea:24: 00:2b:2a:dd:23:45:0e:b4:00:59:5c:a5:99:15:58:15:6c:48: 8c:de:54:69:41:c8:8e:77:6d:4a:ad:4e:b3:bc:f3:83:f5:43: 02:bd:68:b4:97:87:e9:00:6f:5a:57:ae:c0:47:f1:2f:5b:b9: ca:03:5c:f1:44:f2:76:37:e1:28:f9:dd:ee:61:7c:f5:03:67: b5:b0:fd:2a:f4:14:50:c0:b8:ec:d1:02:a6:2a:aa:aa:4b:bb: 8b:df:80:b3:72:cf:ef:5f:1a:d8:f2:2e:b0:83:08:b4:9d:a4: f2:b2:93:50:0a:6d:ae:76:df:8f:75:cd:9b:68:98:cf:b1:a0: 1c:7b:2b:53:8d:7d:25:ea:e2:46:f7:d7:67:c2:8c:a7:fa:1c: c0:92:fc:1f:90:21:fc:94:79:a5:2c:55:08:ab:ba:80:31:db: ed:58:4f:e9:47:9d:20:c8:7d:58:cb:98:f2:c8:9f:fc:83:ad: 27:95:db:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUxMDE4MjExMTM2WhcNMjUxMDI1MjExMTM2WjAYMRYwFAYD VQQDEw02OGY0MDI4OS1kMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWpujuFS0MLEF/XU2d/J+POMlniW9W7iWExWdxZJvJPYOxQ/QoxIuRbA5LLO JOOvT/UEbyF2PUd5U4STfkA65Ag2LLPhOXjfvnW+5Pt7sIfUM3PJtSOvpZG+Kfit IJzD3JXbDHj5z4LYyLAbN61wRk/F+wsROkgqTh0M7RXNGUVI91gXi+TZYWVoEnQI +ps/PffMTSWwCWJuiA/IUdf9awVahplRfZHdBLo2YsUA5a1K2Br8EkGcQ+5hITej 0ipE3ELY4U+W7WaYEM/SF1Ztv4XtVBVnWAVaIfgKfcwiGrtRjMQqR7O3wD9p5XNQ CG4V9SJonNhcPS94NyJXaEmBnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNceZ8ZT IayixnLlP75KNW/sdpYsMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCvtZPHMUXDA5BT8IKqxV+9jY3xkY9uRMooWy4QKqe9xTebI7YmqSg 9+2QyBRgbiTuL7G306t8a/eDxVnQICWNfN4F0Wp16iQAKyrdI0UOtABZXKWZFVgV bEiM3lRpQciOd21KrU6zvPOD9UMCvWi0l4fpAG9aV67AR/EvW7nKA1zxRPJ2N+Eo +d3uYXz1A2e1sP0q9BRQwLjs0QKmKqqqS7uL34Czcs/vXxrY8i6wgwi0naTyspNQ Cm2udt+Pdc2baJjPsaAceytTjX0l6uJG99dnwoyn+hzAkvwfkCH8lHmlLFUIq7qA MdvtWE/pR50gyH1Yy5jyyJ/8g60nldvT -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:37 2025 by rpki-client