$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: EQrAqJVDaiC23sMW72Fz3GmxlZKsjh7jUdm8DjVpycA= Subject key identifier: 91:A1:6E:C8:66:70:C9:C0:7D:40:2A:61:81:7C:C4:60:31:70:E1:99 Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 0AB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 141C Signing time: Sat 18 Oct 2025 20:27:13 +0000 Manifest this update: Sat 18 Oct 2025 20:27:13 +0000 Manifest next update: Sat 25 Oct 2025 20:27:13 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: +7nso1ktESpjHIK+F03JctCqyQp768pVepe4eNfbDac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: Oct 18 20:27:13 2025 GMT Not After : Oct 25 20:27:13 2025 GMT Subject: CN=68f3f821-5aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8b:f6:ba:10:3c:43:7f:9e:3c:c8:77:c7:c8: 34:ab:d4:e3:88:87:c5:e2:e6:bf:53:f5:9d:a3:2f: 42:05:11:e7:10:c2:2c:1e:45:46:15:ac:25:62:59: 94:bc:2d:4c:39:75:a4:0b:27:c5:a8:5d:c3:83:5b: 81:2a:8d:58:90:e9:7a:17:ef:3f:b9:ab:d1:95:cd: e7:7b:23:c9:57:62:cb:ee:04:99:72:c7:1c:37:2c: 0c:1b:5f:e3:eb:90:9f:8c:2e:57:18:7e:b8:73:92: c3:77:15:d5:59:b2:12:5b:36:fe:eb:ba:fc:39:e3: 80:90:80:09:09:a0:44:3f:a7:f1:aa:a9:bb:59:b5: a2:b5:1e:1e:ce:63:f3:f2:77:14:7b:97:a6:d6:02: 00:c5:29:f3:51:3b:cf:df:43:ed:d9:b1:bd:13:a7: be:92:91:2e:e8:83:0a:6a:e0:ae:c1:ea:ce:0e:fb: 21:fa:0e:86:bd:6c:19:1d:a9:52:5a:94:4e:ce:30: 42:c2:8f:73:59:78:15:fb:c7:fa:45:d9:6a:e8:04: 43:7b:ea:d1:3f:1e:5c:5e:78:fd:3f:6d:49:1b:7c: 17:0d:40:c7:cb:0a:79:ca:a9:b0:b5:cb:23:6d:9a: 18:b2:3f:41:51:1c:52:8e:cf:0e:b7:e6:7b:19:70: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A1:6E:C8:66:70:C9:C0:7D:40:2A:61:81:7C:C4:60:31:70:E1:99 X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:bc:1d:41:8f:a5:2c:4f:4e:4e:28:c9:49:c7:b1:7d:0a:1f: 87:40:ee:01:0f:53:8a:73:f9:5c:ed:cd:8f:7d:91:9a:be:af: f7:eb:eb:f9:0b:36:57:4c:f3:73:cc:83:85:de:bf:5f:4f:be: 1c:aa:1d:f9:81:01:a2:70:55:00:61:cb:37:86:d7:97:2f:f0: e6:08:a9:47:7b:45:e9:ae:12:2a:22:62:fd:b1:eb:b1:48:14: de:87:84:4a:be:5d:fc:30:97:99:2a:5c:a7:9a:a4:77:6b:ce: 51:9d:b5:45:21:9e:c7:f0:da:ba:86:8d:57:67:1b:b2:fc:e8: 43:04:46:43:57:27:ca:70:77:6d:ea:79:69:69:69:0d:9d:b0: fa:9a:1c:8a:6f:43:86:8e:30:f8:8d:a6:58:7a:5f:c7:31:c6: ce:1e:2a:b5:d8:47:5e:a7:b4:3f:9e:ec:d0:05:3b:a3:59:25: 4e:18:4b:ef:e9:02:45:8c:1c:91:fe:c8:a4:e6:83:4b:95:33: bf:b1:af:ba:e4:d0:3c:0a:9c:c7:b2:9b:c7:86:9c:75:54:f4: a0:c4:97:87:ac:86:9a:04:9e:36:13:0b:e5:92:b7:36:ac:d3: cb:40:9f:95:d7:84:b7:64:65:64:5d:bd:f5:0d:f6:09:9f:05: ed:8a:2d:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjUxMDE4MjAyNzEzWhcNMjUxMDI1MjAyNzEzWjAYMRYwFAYD VQQDEw02OGYzZjgyMS01YWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ov2uhA8Q3+ePMh3x8g0q9TjiIfF4ua/U/Wdoy9CBRHnEMIsHkVGFawlYlmU vC1MOXWkCyfFqF3Dg1uBKo1YkOl6F+8/uavRlc3neyPJV2LL7gSZcsccNywMG1/j 65CfjC5XGH64c5LDdxXVWbISWzb+67r8OeOAkIAJCaBEP6fxqqm7WbWitR4ezmPz 8ncUe5em1gIAxSnzUTvP30Pt2bG9E6e+kpEu6IMKauCuwerODvsh+g6GvWwZHalS WpROzjBCwo9zWXgV+8f6Rdlq6ARDe+rRPx5cXnj9P21JG3wXDUDHywp5yqmwtcsj bZoYsj9BURxSjs8Ot+Z7GXAyBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGhbshm cMnAfUAqYYF8xGAxcOGZMB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXvB1Bj6UsT05OKMlJx7F9Ch+HQO4BD1OKc/lc7c2PfZGavq/36+v5 CzZXTPNzzIOF3r9fT74cqh35gQGicFUAYcs3hteXL/DmCKlHe0XprhIqImL9seux SBTeh4RKvl38MJeZKlynmqR3a85RnbVFIZ7H8Nq6ho1XZxuy/OhDBEZDVyfKcHdt 6nlpaWkNnbD6mhyKb0OGjjD4jaZYel/HMcbOHiq12Edep7Q/nuzQBTujWSVOGEvv 6QJFjByR/sik5oNLlTO/sa+65NA8CpzHspvHhpx1VPSgxJeHrIaaBJ42Ewvlkrc2 rNPLQJ+V14S3ZGVkXb31DfYJnwXtii10 -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:49 2025 by rpki-client