$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft File: 8p8VNXR1uHRvrXiTag_NhSbi1hM.mft (raw, json) Hash identifier: tNM9JKotm7s0Kwq2SWQcdZY38c9tN+fOs4HShLv7cf8= Subject key identifier: 64:EC:E7:7B:BD:88:92:BB:5D:BB:4E:6F:EE:D2:3E:70:77:BB:66:14 Authority key identifier: F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13 Certificate issuer: /CN=A911DB66/serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft Manifest number: 85 Signing time: Sun 19 Oct 2025 09:53:57 +0000 Manifest this update: Sun 19 Oct 2025 09:53:57 +0000 Manifest next update: Sun 26 Oct 2025 09:53:57 +0000 Files and hashes: 1: 8p8VNXR1uHRvrXiTag_NhSbi1hM.crl (hash: PHLGACqjcrmktGQYCE+qon7FjgJkRdbMB31CuGL7aWI=) 2: 879CFF8EE09E11EFAB364253C4F9AE02.roa (hash: kCo0wcr5hL64P6FXIbDjXCO02F9fPfzca6P+P/sgaPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613 Validity Not Before: Oct 19 09:53:57 2025 GMT Not After : Oct 26 09:53:57 2025 GMT Subject: CN=68f4b535-042f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:2b:94:04:ce:e1:cf:ea:98:ad:45:34:2b: 01:95:68:c2:42:76:b4:eb:6c:9a:8f:0c:ca:e9:b7: 37:63:72:48:e5:43:fb:63:3f:9b:d3:cb:7d:64:0e: 35:42:cb:4c:d1:79:5c:b4:72:8f:1a:85:c3:cd:e0: 46:19:30:96:da:2d:0c:b7:88:02:9e:a6:ec:15:88: 69:81:9f:0b:c6:50:86:69:16:aa:90:48:80:69:5b: 2d:44:12:ca:46:a8:64:d2:e7:c8:78:2c:5b:3f:9c: 54:54:b5:ed:09:5c:2e:9e:31:02:9c:f6:a5:4f:d6: c5:95:61:d9:30:b5:fc:02:e9:f4:21:12:e7:64:1c: 10:5a:10:68:0a:07:78:37:c1:0e:b4:68:44:8a:d8: f9:15:d1:2f:7f:23:cc:51:0c:e0:31:b4:ad:5b:3c: b6:43:fc:4f:55:d8:f6:a7:91:40:f4:4a:89:af:ae: 94:13:e3:fe:22:10:a3:80:4a:0c:1f:64:85:f4:35: a7:97:1e:10:85:a6:bd:db:cb:9a:ea:b3:b6:b8:7a: 08:8e:d0:2b:d4:86:b1:b7:e5:d8:a6:a0:af:9d:46: c0:e3:ba:9f:00:ca:45:10:34:07:4e:80:28:7c:fe: 9e:a1:f5:87:fc:b8:ff:ac:cb:65:ab:25:c9:0b:b0: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EC:E7:7B:BD:88:92:BB:5D:BB:4E:6F:EE:D2:3E:70:77:BB:66:14 X509v3 Authority Key Identifier: keyid:F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c3:19:db:81:5e:ac:05:a4:cb:44:64:3c:5b:76:54:f7:41: b8:53:e5:2e:58:25:43:11:12:61:d1:63:6c:4d:76:dc:05:4f: 27:5d:5c:07:58:8c:1b:2f:f2:23:b7:b4:1f:12:7e:09:06:88: df:64:b9:5b:bd:e2:65:6b:20:e8:99:ad:d1:00:46:0e:31:4d: 24:5a:cf:1f:7c:98:61:3e:8c:df:b1:17:a8:b1:eb:fa:a9:79: 79:f9:70:b0:d3:a4:cb:5e:fe:24:e1:cd:92:bb:9f:42:98:25: a9:80:5a:9b:12:de:7e:4e:e5:f8:1b:6c:56:66:ec:c8:43:2e: 05:7f:67:3a:ff:40:e1:44:82:06:53:fd:0c:70:5c:8a:fa:fb: ee:01:85:fb:11:77:ae:71:49:ee:6c:9b:2b:b7:20:39:0b:72: 65:e5:ca:de:d8:58:b8:a1:08:ff:02:37:22:3b:fb:43:f1:72: 26:59:1f:df:05:20:2f:4b:f5:5b:0c:cd:7b:4e:7d:07:25:04: 48:3a:60:41:25:b7:61:71:40:b2:05:64:17:3a:af:b2:71:1a: 48:4d:61:df:1f:50:5e:ae:a3:d5:e9:5f:68:09:17:b1:20:0e: 48:e7:c3:a8:7c:dd:cc:c4:94:37:dc:a2:ac:f3:c3:ca:c4:77: 16:7d:f3:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURCNjYxMTAvBgNVBAUTKEYyOUYxNTM1NzQ3NUI4NzQ2RkFENzg5MzZBMEZDRDg1 MjZFMkQ2MTMwHhcNMjUxMDE5MDk1MzU3WhcNMjUxMDI2MDk1MzU3WjAYMRYwFAYD VQQDEw02OGY0YjUzNS0wNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmakrlATO4c/qmK1FNCsBlWjCQna062yajwzK6bc3Y3JI5UP7Yz+b08t9ZA41 QstM0XlctHKPGoXDzeBGGTCW2i0Mt4gCnqbsFYhpgZ8LxlCGaRaqkEiAaVstRBLK Rqhk0ufIeCxbP5xUVLXtCVwunjECnPalT9bFlWHZMLX8Aun0IRLnZBwQWhBoCgd4 N8EOtGhEitj5FdEvfyPMUQzgMbStWzy2Q/xPVdj2p5FA9EqJr66UE+P+IhCjgEoM H2SF9DWnlx4Qhaa928ua6rO2uHoIjtAr1Iaxt+XYpqCvnUbA47qfAMpFEDQHToAo fP6eofWH/Lj/rMtlqyXJC7CL6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTs53u9 iJK7XbtOb+7SPnB3u2YUMB8GA1UdIwQYMBaAFPKfFTV0dbh0b614k2oPzYUm4tYT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREI2Ni84MDY1OTdBQ0Uw OUExMUVGQjYzQTgxMzBDNEY5QUUwMi84cDhWTlhSMXVIUnZyWGlUYWdfTmhTYmkx aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhwOFZOWFIxdUhSdnJYaVRhZ19OaFNiaTFoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REI2Ni84MDY1OTdBQ0UwOUExMUVGQjYzQTgxMzBDNEY5QUUwMi84cDhWTlhSMXVI UnZyWGlUYWdfTmhTYmkxaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMwxnbgV6sBaTLRGQ8W3ZU90G4U+UuWCVDERJh0WNsTXbcBU8nXVwH WIwbL/Ijt7QfEn4JBojfZLlbveJlayDoma3RAEYOMU0kWs8ffJhhPozfsReosev6 qXl5+XCw06TLXv4k4c2Su59CmCWpgFqbEt5+TuX4G2xWZuzIQy4Ff2c6/0DhRIIG U/0McFyK+vvuAYX7EXeucUnubJsrtyA5C3Jl5cre2Fi4oQj/AjciO/tD8XImWR/f BSAvS/VbDM17Tn0HJQRIOmBBJbdhcUCyBWQXOq+ycRpITWHfH1BerqPV6V9oCRex IA5I58OofN3MxJQ33KKs88PKxHcWffOQ -----END CERTIFICATE-----Generated at Mon Oct 20 04:26:23 2025 by rpki-client