$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: yyEf66iko1+spE403jZ7YVwpQ4uJG55I4D9tcl4UFTQ= Subject key identifier: D6:8A:76:6F:6E:82:51:CB:20:41:44:D5:7A:AD:CD:B4:BA:4F:DF:B0 Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 015F Signing time: Sun 19 Oct 2025 06:45:25 +0000 Manifest this update: Sun 19 Oct 2025 06:45:24 +0000 Manifest next update: Sun 26 Oct 2025 06:45:24 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: wfC+Dy039/2wsapxxyy648PwoFGXUu9PeSf0V0HtDzs=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: 51Cgnd7L929YsdYeHMQakHz8pXfhQg7XBbfSBPJ2XYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Oct 19 06:45:24 2025 GMT Not After : Oct 26 06:45:24 2025 GMT Subject: CN=68f48904-822f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:01:44:db:ec:db:7f:e2:65:b8:de:a7:d6: 6e:9b:a7:fa:8c:10:68:8e:8c:9b:39:bd:8d:17:9a: 0c:01:e7:13:ed:6c:b6:9c:e2:50:af:96:57:e5:56: 45:52:95:d8:fd:48:de:60:e9:c1:f6:2e:45:61:d1: ba:2d:2e:6b:ac:65:8c:4f:70:0f:21:a1:81:b4:17: b8:4c:de:93:3f:f8:68:55:e5:c1:f1:fa:ee:69:25: 88:69:0a:d2:ef:a7:7b:a3:65:ed:ca:e1:71:f1:8c: 20:bd:60:d2:8d:dc:92:8a:2a:99:f8:82:61:f5:d4: 15:f7:af:51:73:f1:87:a1:44:93:ac:5c:db:dc:45: 22:dd:e3:c2:94:f4:86:c6:b3:53:b9:44:ac:7a:4b: 37:53:b1:b9:60:28:bd:84:de:0c:17:ea:f9:aa:b8: a5:57:5f:d2:82:5e:0a:31:0b:7b:61:3d:6a:b6:c6: ee:4e:b1:9b:40:5b:58:4d:7c:e1:06:b2:72:88:9c: ad:62:28:b9:1c:5e:fc:06:0a:24:21:48:8d:1f:06: 77:f5:ef:20:a0:82:0c:f6:37:3a:79:d0:9f:ef:44: 98:f5:d0:f1:7b:ec:8e:df:84:b0:c7:c8:9e:6c:d0: 90:8b:c8:0c:6a:79:f8:01:dd:07:84:23:e9:96:a8: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8A:76:6F:6E:82:51:CB:20:41:44:D5:7A:AD:CD:B4:BA:4F:DF:B0 X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:61:6c:59:7c:92:44:00:86:40:4e:4b:5e:a9:3f:ef:41:c4: 5e:ed:76:7c:45:9f:90:b6:81:fa:de:c4:56:5f:92:c4:26:fd: 5e:16:6b:68:1f:b5:2b:0b:62:05:6b:8f:50:17:1d:5c:5b:9f: 71:1c:08:5d:48:df:51:ab:42:36:64:8f:79:5e:51:74:c5:9d: 23:7c:65:95:9e:52:31:5c:89:17:0f:93:02:fa:d7:26:4c:3c: 83:9d:17:0c:32:09:83:73:37:57:f7:de:4e:e1:6e:fb:d8:80: 16:07:e8:5f:af:5a:ee:90:2a:e2:83:ba:85:ef:d7:80:db:76: b8:ba:5f:c5:fb:b8:fa:c2:7e:59:cc:12:51:6a:18:a1:51:27: 6c:cb:4e:cb:9a:68:27:6c:95:c3:05:45:34:8f:be:16:b4:d1: 57:58:74:9d:ac:cb:0b:f5:e3:56:57:a9:bb:ee:b3:a5:94:ca: 56:7a:25:6d:f8:95:1b:7a:df:04:9b:07:c3:f0:43:5a:de:59: 87:b5:73:31:a7:e7:45:11:64:1d:08:6d:4a:1f:b0:4c:48:82: 6b:fe:f9:4d:18:8e:7a:79:40:dc:d8:cb:cd:5c:90:05:5f:ed: 48:59:98:9f:1b:8f:f1:4d:eb:60:76:1b:c9:37:86:64:87:f2: 1f:82:8b:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjUxMDE5MDY0NTI0WhcNMjUxMDI2MDY0NTI0WjAYMRYwFAYD VQQDEw02OGY0ODkwNC04MjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmcBRNvs23/iZbjep9Zum6f6jBBojoybOb2NF5oMAecT7Wy2nOJQr5ZX5VZF UpXY/UjeYOnB9i5FYdG6LS5rrGWMT3APIaGBtBe4TN6TP/hoVeXB8fruaSWIaQrS 76d7o2XtyuFx8YwgvWDSjdySiiqZ+IJh9dQV969Rc/GHoUSTrFzb3EUi3ePClPSG xrNTuUSseks3U7G5YCi9hN4MF+r5qrilV1/Sgl4KMQt7YT1qtsbuTrGbQFtYTXzh BrJyiJytYii5HF78BgokIUiNHwZ39e8goIIM9jc6edCf70SY9dDxe+yO34Swx8ie bNCQi8gMann4Ad0HhCPplqgj2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaKdm9u glHLIEFE1XqtzbS6T9+wMB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNYWxZfJJEAIZATkteqT/vQcRe7XZ8RZ+QtoH63sRWX5LEJv1eFmto H7UrC2IFa49QFx1cW59xHAhdSN9Rq0I2ZI95XlF0xZ0jfGWVnlIxXIkXD5MC+tcm TDyDnRcMMgmDczdX995O4W772IAWB+hfr1rukCrig7qF79eA23a4ul/F+7j6wn5Z zBJRahihUSdsy07LmmgnbJXDBUU0j74WtNFXWHSdrMsL9eNWV6m77rOllMpWeiVt +JUbet8EmwfD8ENa3lmHtXMxp+dFEWQdCG1KH7BMSIJr/vlNGI56eUDc2MvNXJAF X+1IWZifG4/xTetgdhvJN4Zkh/IfgovU -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:15 2025 by rpki-client