$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft File: 8uBzCSl2BY65hlYUFDf4-2i3IV0.mft (raw, json) Hash identifier: EGfif+bm0ctRVsxkvX1UrSvchM4MXJ1JDtComYzxa8Q= Subject key identifier: 8F:61:D4:0C:72:8F:3E:6E:58:D4:C3:2B:B6:FB:D0:25:87:C0:57:DF Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft Manifest number: 5B Signing time: Sun 19 Oct 2025 10:32:18 +0000 Manifest this update: Sun 19 Oct 2025 10:32:18 +0000 Manifest next update: Sun 26 Oct 2025 10:32:18 +0000 Files and hashes: 1: 8uBzCSl2BY65hlYUFDf4-2i3IV0.crl (hash: Wud0FhC4gwQ1KYqzcKnNz1X8S9oTf7Tf11TOiW3VG0I=) 2: CFED56A4240411F0B73CB374C4F9AE02.roa (hash: Zn3nz0esus3n+Qr7MjHUDFZOowDDsYzs6GVur4c4Gdw=) 3: CF53E5E6240411F0B73CB374C4F9AE02.roa (hash: aGXXY3h8pMjRmE6vJ9+0EmvsUGymYki2tMrN0LjTaWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: Oct 19 10:32:18 2025 GMT Not After : Oct 26 10:32:18 2025 GMT Subject: CN=68f4be32-811b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:2c:45:68:6a:1c:f8:1e:7d:d4:25:3e:ec: 34:8a:99:21:3f:43:85:d7:b9:5b:62:26:91:0c:a0: f0:df:6d:f4:ac:92:eb:91:8c:32:88:5e:2a:13:37: c4:0b:14:ab:03:db:76:98:16:66:3e:e8:92:3f:fc: 11:61:76:f3:f5:8e:47:9c:91:08:b9:67:5a:c3:9d: 02:3f:50:79:3d:d6:56:dc:60:1d:44:9a:33:42:71: e7:5d:8d:1c:d6:af:a0:b3:8c:d8:b0:7e:6b:ef:dd: f0:ff:19:ff:7c:b1:1c:a5:07:94:ad:b7:e6:af:d8: e7:b9:17:0f:ab:8c:7b:cb:25:fd:1a:7a:11:4e:62: 62:c3:bf:77:ea:64:62:7a:63:a8:81:63:5e:6e:aa: 53:95:cc:87:0d:f0:f7:51:69:1b:52:d9:51:0b:74: e0:8b:96:f9:12:d7:51:ad:9a:ee:16:2c:64:17:2b: f6:24:2a:74:29:67:cb:ec:f5:78:a8:49:b9:c6:bf: 17:c3:af:a4:84:09:40:b6:d1:ff:a4:9f:2b:d7:9a: e3:9d:d5:41:73:3c:0d:cd:dc:c6:03:06:23:9d:3b: 52:27:48:a6:04:4d:5c:bd:6b:cd:ae:37:34:f3:3e: 7e:b6:59:53:dd:6a:2a:3e:0c:8c:4d:44:3c:7d:1b: 1a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:61:D4:0C:72:8F:3E:6E:58:D4:C3:2B:B6:FB:D0:25:87:C0:57:DF X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:eb:12:af:a1:e1:d8:b5:c2:33:69:58:6e:e8:03:e1:e5:b6: 63:21:f9:98:05:d9:1c:d6:d8:85:16:a5:ea:8a:78:b5:f1:c6: 07:7b:1a:26:ad:50:f8:30:94:b5:96:46:71:15:bb:49:6f:09: 42:bc:0a:c6:7f:91:fa:9b:fd:11:59:da:22:2d:3f:36:d2:84: bf:7c:ee:51:46:42:3d:85:0f:8a:c1:73:52:dc:04:2b:ee:33: 56:b0:d2:d8:dc:f1:0b:94:b4:e8:ba:76:c3:cc:88:10:16:c2: 00:e8:ba:3d:bb:50:c4:03:25:28:35:45:8b:92:c0:e5:61:2e: 6a:86:30:e7:43:b6:d8:cc:10:3d:20:e5:48:df:9b:98:a5:c3: e7:25:e7:bb:84:2b:d9:17:33:c8:35:a2:19:03:95:ba:4e:24: 64:e9:fd:e2:db:8c:cf:9a:01:dc:f9:69:64:d8:02:25:9a:bb: c4:ee:bb:56:9b:32:a2:5b:dd:95:cb:05:d0:d3:32:78:28:e4: ae:9c:93:6f:c6:fd:a6:ec:9f:03:69:0a:3f:8a:ac:0e:d8:19: 43:df:03:8e:14:37:36:9b:dd:f9:e4:94:4c:31:dc:84:46:f0: 13:da:3f:ac:5a:94:23:c5:8d:d0:fc:83:96:e1:4c:f7:c8:1f: bf:9d:db:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYyQjExMC8GA1UEBRMoRjJFMDczMDkyOTc2MDU4RUI5ODY1NjE0MTQzN0Y4RkI2 OEI3MjE1RDAeFw0yNTEwMTkxMDMyMThaFw0yNTEwMjYxMDMyMThaMBgxFjAUBgNV BAMTDTY4ZjRiZTMyLTgxMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK1SxFaGoc+B591CU+7DSKmSE/Q4XXuVtiJpEMoPDfbfSskuuRjDKIXioTN8QL FKsD23aYFmY+6JI//BFhdvP1jkeckQi5Z1rDnQI/UHk91lbcYB1EmjNCceddjRzW r6CzjNiwfmvv3fD/Gf98sRylB5Stt+av2Oe5Fw+rjHvLJf0aehFOYmLDv3fqZGJ6 Y6iBY15uqlOVzIcN8PdRaRtS2VELdOCLlvkS11Gtmu4WLGQXK/YkKnQpZ8vs9Xio SbnGvxfDr6SECUC20f+knyvXmuOd1UFzPA3N3MYDBiOdO1InSKYETVy9a82uNzTz Pn62WVPdaio+DIxNRDx9GxrrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj2HUDHKP Pm5Y1MMrtvvQJYfAV98wHwYDVR0jBBgwFoAU8uBzCSl2BY65hlYUFDf4+2i3IV0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjJCLzYxQjM1NjE2MjQw NDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHVCekNTbDJCWTY1aGxZVUZEZjQtMmkzSVYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjJCLzYxQjM1NjE2MjQwNDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2 NWhsWVVGRGY0LTJpM0lWMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ3rEq+h4di1wjNpWG7oA+HltmMh+ZgF2RzW2IUWpeqKeLXxxgd7Giat UPgwlLWWRnEVu0lvCUK8CsZ/kfqb/RFZ2iItPzbShL987lFGQj2FD4rBc1LcBCvu M1aw0tjc8QuUtOi6dsPMiBAWwgDouj27UMQDJSg1RYuSwOVhLmqGMOdDttjMED0g 5Ujfm5ilw+cl57uEK9kXM8g1ohkDlbpOJGTp/eLbjM+aAdz5aWTYAiWau8Tuu1ab MqJb3ZXLBdDTMngo5K6ck2/G/absnwNpCj+KrA7YGUPfA44UNzab3fnklEwx3IRG 8BPaP6xalCPFjdD8g5bhTPfIH7+d2/o= -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:17 2025 by rpki-client