$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft File: 8reSQiqNuXlUdjz-iRZuki5jGYQ.mft (raw, json) Hash identifier: 8S5OjHkGOGP1ZoOUes2D5sQJGfmwK73LfeLcMfjHlWM= Subject key identifier: 9B:DD:7E:88:E9:2E:6E:07:4C:90:69:33:3D:38:C7:DD:49:56:E8:CF Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 Certificate issuer: /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft Manifest number: 015A Signing time: Sun 19 Oct 2025 06:50:30 +0000 Manifest this update: Sun 19 Oct 2025 06:50:29 +0000 Manifest next update: Sun 26 Oct 2025 06:50:29 +0000 Files and hashes: 1: 8reSQiqNuXlUdjz-iRZuki5jGYQ.crl (hash: pay7VyCocX6UZ0qwW5J6kS8swFguFV2wIlcFu6+8bmM=) 2: F609B0309D5F11EE94076E6FC4F9AE02.roa (hash: uMIbIaAd2q/fAdMbL/3IffciHlHLKK1YHyqz9FvJ9Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Validity Not Before: Oct 19 06:50:29 2025 GMT Not After : Oct 26 06:50:29 2025 GMT Subject: CN=68f48a35-446d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:91:e3:92:64:d0:a4:7a:48:81:c4:73:8a:f8: dd:d2:ad:3e:39:34:aa:50:63:49:80:92:d3:1b:7d: c4:3f:3b:e2:a7:a8:d9:32:ea:56:f3:5f:19:47:7a: 12:73:ed:5d:43:61:ce:c4:88:5a:97:bd:ba:f2:1e: d5:90:9b:af:fe:58:81:e5:99:bd:4c:cf:b0:14:ad: 84:f5:ca:f6:d8:07:b7:c4:4f:c1:b3:d1:5c:f2:71: 03:04:89:59:e2:cd:be:07:bc:1e:0c:07:40:6c:0a: 72:d0:ff:f8:42:bc:e1:d6:d9:ba:dc:6c:e4:f5:69: a1:6b:3e:74:93:a0:38:fd:45:88:d9:32:ea:ce:f3: af:07:fb:ac:1a:15:5a:2d:01:1a:0a:71:e9:72:69: 63:c1:67:f4:d4:95:5a:95:fd:64:e9:c3:58:f0:f2: a8:05:37:17:4e:a8:9b:44:af:c7:61:9e:3a:3b:1c: b9:bb:cf:4c:98:34:ab:0e:c4:54:0e:57:e7:ba:9d: a2:49:e7:1a:c5:15:68:8f:9f:ea:09:7c:55:92:fb: 40:60:61:3a:ea:84:30:83:51:68:d5:be:b8:cf:13: a6:55:1b:18:f9:f9:f9:4f:2b:10:8a:41:e3:c8:f3: e4:b7:8a:40:67:ab:75:1f:c4:ba:7e:1f:85:0c:c8: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DD:7E:88:E9:2E:6E:07:4C:90:69:33:3D:38:C7:DD:49:56:E8:CF X509v3 Authority Key Identifier: keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:3b:64:7d:21:51:d8:38:c1:a7:4c:43:cb:4c:8a:c3:e3:ed: fa:e0:70:3a:e0:f4:ef:4f:e5:20:ec:62:6d:ea:55:49:e9:50: b0:05:7b:cd:8b:ff:d5:7e:9a:e8:17:cf:a7:5a:82:ce:ad:d6: 49:5f:a4:c5:76:82:bf:dd:ad:62:25:75:aa:50:af:52:95:f1: cc:75:ce:f9:0d:19:2b:66:0c:6d:ed:01:a5:ad:3f:4a:1a:4e: 7a:8a:a7:61:75:0e:71:dc:75:ee:03:04:0c:8c:e1:4b:cd:9b: 87:01:9d:15:30:01:87:0a:fa:d1:ce:f9:f9:a4:15:42:ef:da: f7:19:3b:d1:0d:18:e6:60:cd:6d:02:59:5d:60:f3:b3:eb:4e: 27:cc:f9:5b:53:a0:cf:48:b5:7e:df:d7:9b:fb:71:df:3c:ca: d4:cf:89:f7:75:e1:6e:8f:6a:6f:f5:c8:74:b6:ed:b6:e0:73: 18:6b:e2:f2:36:1e:26:49:89:71:2e:a4:79:96:85:b3:36:b6: 84:e6:6e:3f:fd:93:4b:52:79:e0:05:a8:7c:1d:b7:78:96:49: 9f:e1:83:75:0a:31:35:1a:60:24:00:6c:7b:21:c7:31:ba:9e: 8f:e2:b5:2a:fc:c1:d7:7f:57:42:55:12:5c:f9:46:72:49:e3: 39:6c:6c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQjkxMTAvBgNVBAUTKEYyQjc5MjQyMkE4REI5Nzk1NDc2M0NGRTg5MTY2RTky MkU2MzE5ODQwHhcNMjUxMDE5MDY1MDI5WhcNMjUxMDI2MDY1MDI5WjAYMRYwFAYD VQQDEw02OGY0OGEzNS00NDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJHjkmTQpHpIgcRzivjd0q0+OTSqUGNJgJLTG33EPzvip6jZMupW818ZR3oS c+1dQ2HOxIhal7268h7VkJuv/liB5Zm9TM+wFK2E9cr22Ae3xE/Bs9Fc8nEDBIlZ 4s2+B7weDAdAbApy0P/4Qrzh1tm63Gzk9Wmhaz50k6A4/UWI2TLqzvOvB/usGhVa LQEaCnHpcmljwWf01JValf1k6cNY8PKoBTcXTqibRK/HYZ46Oxy5u89MmDSrDsRU Dlfnup2iSecaxRVoj5/qCXxVkvtAYGE66oQwg1Fo1b64zxOmVRsY+fn5TysQikHj yPPkt4pAZ6t1H8S6fh+FDMg/2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvdfojp Lm4HTJBpMz04x91JVujPMB8GA1UdIwQYMBaAFPK3kkIqjbl5VHY8/okWbpIuYxmE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCOS9GQjA3NEY0NjlD QzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVYbFVkanotaVJadWtpNWpH WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyZVNRaXFOdVhsVWRqei1pUlp1a2k1akdZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCOS9GQjA3NEY0NjlDQzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVY bFVkanotaVJadWtpNWpHWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1O2R9IVHYOMGnTEPLTIrD4+364HA64PTvT+Ug7GJt6lVJ6VCwBXvN i//VfproF8+nWoLOrdZJX6TFdoK/3a1iJXWqUK9SlfHMdc75DRkrZgxt7QGlrT9K Gk56iqdhdQ5x3HXuAwQMjOFLzZuHAZ0VMAGHCvrRzvn5pBVC79r3GTvRDRjmYM1t AlldYPOz604nzPlbU6DPSLV+39eb+3HfPMrUz4n3deFuj2pv9ch0tu224HMYa+Ly Nh4mSYlxLqR5loWzNraE5m4//ZNLUnngBah8Hbd4lkmf4YN1CjE1GmAkAGx7Iccx up6P4rUq/MHXf1dCVRJc+UZySeM5bGxh -----END CERTIFICATE-----Generated at Tue Oct 21 05:26:05 2025 by rpki-client