$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft File: 81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json) Hash identifier: 7hmmJOr4KU3rbevoTiiL9aN8Vb6BhnOKk/wiSBSSnuU= Subject key identifier: FC:93:86:8D:19:8D:EE:73:A0:8B:E7:FB:A8:EE:BF:3D:6C:A9:6F:90 Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft Manifest number: 0C9F Signing time: Sat 18 Oct 2025 19:06:18 +0000 Manifest this update: Sat 18 Oct 2025 19:06:17 +0000 Manifest next update: Sat 25 Oct 2025 19:06:17 +0000 Files and hashes: 1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: Bsv3FS4CR8ry4cgSeX804pJtn4R0332ZfmefI1XJXgs=) 2: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: olmc/o09ErYiChJbWXMyIgbGCNghcLiwj8HQmo8o9wc=) 3: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: 8+Ymqe/569V8FlYV76TmLK19yyKhwgBdmhVdUs4TFXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: Oct 18 19:06:17 2025 GMT Not After : Oct 25 19:06:17 2025 GMT Subject: CN=68f3e529-1ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:53:a5:d9:1c:73:3f:94:8b:c0:21:ec:a9: 14:44:34:4b:ee:ea:08:7f:d8:be:74:ba:0f:54:c5: 61:dc:82:0e:75:13:7a:0d:74:c9:71:09:89:e2:7e: 66:b8:9d:c4:3f:f9:d9:a0:8f:18:fa:b0:6a:13:de: 6c:e9:24:53:42:f5:f7:fd:67:04:6d:d8:52:41:62: 52:b4:8a:c0:a5:6c:5d:01:5f:e7:8e:45:b3:82:dc: 05:50:cf:ec:c3:67:bc:ba:17:b1:b5:d8:5c:09:77: 08:cc:83:51:96:c6:03:98:ea:a0:a1:9c:30:b0:7f: ca:d9:01:bf:88:56:a1:d9:dc:0c:57:e0:bc:33:0e: e6:6f:05:6b:37:19:bd:25:07:86:b1:62:47:57:09: 03:ea:b4:79:57:2e:af:45:74:3a:ad:fd:2b:45:75: 97:7d:e9:9f:47:a1:6a:d5:68:01:0b:cf:5d:2d:9c: a3:45:16:0a:2d:38:b7:c9:f1:74:e7:71:40:73:8a: 5b:48:66:4a:5c:1e:a1:84:96:c7:b5:d7:c8:ea:71: 87:34:d3:0e:d2:2b:a0:5d:5e:36:ec:1d:35:6b:4f: 20:27:24:33:f9:16:9a:c5:f7:5f:a1:fd:c1:2d:c7: 32:3c:a0:73:70:0a:ea:ed:13:48:4c:58:47:e8:d9: a0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:93:86:8D:19:8D:EE:73:A0:8B:E7:FB:A8:EE:BF:3D:6C:A9:6F:90 X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2f:07:05:3b:2a:55:36:4f:a4:ce:82:ce:6e:fc:7c:0d:52: 91:7a:69:9c:49:7e:d6:63:46:f4:4b:b7:55:3a:b0:5f:af:a0: db:e4:85:36:c1:4f:a3:03:05:6b:13:c7:ed:6b:75:37:d5:32: b9:67:a1:3b:12:79:b0:d9:6f:bd:98:d0:34:3a:78:54:05:fd: 8c:aa:a2:ac:bc:e7:48:02:79:ee:a9:3a:3d:d0:49:d1:5d:3f: 27:90:1f:ca:d0:e4:ca:8a:4d:e6:bf:61:be:60:2e:18:ff:2e: c6:3d:ad:13:b2:fb:1b:4e:96:93:2b:31:47:96:1d:3f:f3:33: 2c:d8:9f:e3:11:41:37:8b:c9:22:f5:cc:dd:90:43:9f:10:67: d8:d0:ce:86:e6:0f:9e:ca:32:ad:0f:71:ba:7f:93:ed:2f:4f: bd:11:ec:24:c9:e5:15:83:38:b0:cd:34:c3:c6:b8:e2:7b:83: 77:d4:aa:87:de:f6:aa:88:dd:3d:ab:a3:fe:7b:a0:15:9a:32: fb:00:3e:04:2d:1d:36:dd:22:05:70:3e:33:04:ee:b7:f7:9f: f1:74:97:5e:89:f9:46:78:bb:aa:04:90:1a:62:eb:78:1d:7f: ed:c1:c3:cf:ab:52:b3:fa:0d:ec:d1:53:22:8d:ad:92:88:05: 97:47:a1:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjUxMDE4MTkwNjE3WhcNMjUxMDI1MTkwNjE3WjAYMRYwFAYD VQQDEw02OGYzZTUyOS0xYWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xZTpdkccz+Ui8Ah7KkURDRL7uoIf9i+dLoPVMVh3IIOdRN6DXTJcQmJ4n5m uJ3EP/nZoI8Y+rBqE95s6SRTQvX3/WcEbdhSQWJStIrApWxdAV/njkWzgtwFUM/s w2e8uhextdhcCXcIzINRlsYDmOqgoZwwsH/K2QG/iFah2dwMV+C8Mw7mbwVrNxm9 JQeGsWJHVwkD6rR5Vy6vRXQ6rf0rRXWXfemfR6Fq1WgBC89dLZyjRRYKLTi3yfF0 53FAc4pbSGZKXB6hhJbHtdfI6nGHNNMO0iugXV427B01a08gJyQz+Raaxfdfof3B LccyPKBzcArq7RNITFhH6NmgswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyTho0Z je5zoIvn+6juvz1sqW+QMB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNFMS85RkQ1OERBNjA1QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3Ju SC0tbWJLUlJZMkhGaXVIWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMLwcFOypVNk+kzoLObvx8DVKRemmcSX7WY0b0S7dVOrBfr6Db5IU2 wU+jAwVrE8fta3U31TK5Z6E7Enmw2W+9mNA0OnhUBf2MqqKsvOdIAnnuqTo90EnR XT8nkB/K0OTKik3mv2G+YC4Y/y7GPa0TsvsbTpaTKzFHlh0/8zMs2J/jEUE3i8ki 9czdkEOfEGfY0M6G5g+eyjKtD3G6f5PtL0+9EewkyeUVgziwzTTDxrjie4N31KqH 3vaqiN09q6P+e6AVmjL7AD4ELR023SIFcD4zBO6395/xdJdeiflGeLuqBJAaYut4 HX/twcPPq1Kz+g3s0VMija2SiAWXR6HK -----END CERTIFICATE-----Generated at Mon Oct 20 17:04:01 2025 by rpki-client