$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: kTjrbHnVK/L2/UWB+wk/xoB+FfC9tc8ltdpNkabJeG8= Subject key identifier: 16:89:42:11:71:14:CF:56:9C:A5:2F:62:1B:ED:7B:9C:9E:D2:F2:67 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 2708 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 2682 Signing time: Sat 18 Oct 2025 15:56:33 +0000 Manifest this update: Sat 18 Oct 2025 15:56:33 +0000 Manifest next update: Sat 25 Oct 2025 15:56:33 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: 1oCrlnaIIh/KR1DWUTgcOeUYVbAhBpfDXALvA/R4+3U=) 2: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: inYPm2/qoWyhJvYPwsRqidJ8km0pHeal/3nb7zNYQCU=) 3: 694FA6C678B511F0B9F98C80C4F9AE02.roa (hash: 01wLk9RHRk483aM+7518CMU3cV26N05+ze+yCvqPXlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9992 (0x2708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Oct 18 15:56:33 2025 GMT Not After : Oct 25 15:56:33 2025 GMT Subject: CN=68f3b8b1-6cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:f4:a2:d3:63:45:24:a7:cb:4b:9d:e1:ea: d1:b8:18:af:2a:19:7f:64:98:41:b6:39:32:45:12: 27:0a:ec:ff:2b:17:6e:e5:ae:6e:e2:d2:91:2f:f2: 56:17:23:a8:f5:c0:e9:b7:e7:28:5c:32:61:a6:66: 61:5f:c6:3f:d9:93:ad:90:ab:6b:ee:8a:00:78:14: f6:94:c3:cd:33:f2:d3:93:a5:a4:cc:ea:20:63:dc: 55:de:8f:b3:86:4d:00:42:3d:3d:87:24:82:a9:72: 5d:59:d9:e7:64:0d:ab:94:60:65:d2:16:fb:ae:bc: 2e:53:0f:b4:f9:49:95:75:08:7b:94:22:8a:8e:1f: ae:2f:3c:f6:54:75:16:8c:7c:37:14:5f:18:1c:a5: c4:64:e9:10:cb:fa:e9:50:fb:7e:2d:69:68:14:6a: 2e:f4:ef:7f:1e:69:b1:59:55:28:09:e6:04:02:28: ef:1a:96:d2:75:e2:16:3e:a4:a4:4b:5d:06:8b:a8: e2:af:ca:dc:3e:b8:57:b6:13:84:fb:2e:8b:8f:e7: ef:57:d5:16:eb:f0:cb:8b:4a:7f:a9:1f:29:79:4a: 85:83:1a:04:e7:7c:2f:5c:d6:3c:22:5a:b9:6c:ca: 9b:c0:63:26:fc:c9:5c:14:9a:38:39:9b:04:07:05: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:89:42:11:71:14:CF:56:9C:A5:2F:62:1B:ED:7B:9C:9E:D2:F2:67 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:74:3b:d8:aa:57:7c:b9:ee:03:0a:c8:29:33:cb:08:e6:de: 30:64:ce:61:c6:28:83:4d:cb:43:4e:7b:ce:de:5b:f6:6a:28: de:f1:86:b6:2c:03:d2:d9:70:db:bd:7f:c3:bc:40:12:e4:14: 40:ea:06:f8:ea:59:0a:77:87:1b:97:72:95:a9:04:4a:01:f5: 59:12:4c:8e:1a:aa:dc:ed:a4:7e:a4:61:e1:a6:6c:fd:62:40: cc:5a:76:a6:ca:ee:0b:a6:ca:09:00:d9:4a:2d:bd:85:b2:70: 6b:73:a0:94:87:34:5d:6f:88:96:a4:bd:ff:bd:1c:df:8d:93: c2:21:c2:8c:32:fc:14:d5:c4:fe:e2:41:e7:f5:8a:01:b7:06: 86:6a:37:31:5e:ad:e4:2d:b5:a4:78:a1:1d:f5:50:6c:ca:f2: c6:33:90:0a:3f:d8:ce:00:ed:2a:85:6f:17:a4:ac:2d:b8:ef: 6f:7a:97:58:db:2a:41:1b:21:94:49:ff:fc:d7:a4:5a:77:57: fb:6d:93:e2:4c:f6:be:13:36:ff:da:ef:ae:a4:91:d6:76:fd: 4a:33:d8:4b:b1:5c:ef:b9:6c:eb:3d:5e:bc:36:76:97:f7:1e: c0:d1:2f:a7:62:d8:d5:83:c5:ee:77:91:d5:b2:7a:32:f4:16: 42:d2:76:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjUxMDE4MTU1NjMzWhcNMjUxMDI1MTU1NjMzWjAYMRYwFAYD VQQDEw02OGYzYjhiMS02Y2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkH0otNjRSSny0ud4erRuBivKhl/ZJhBtjkyRRInCuz/Kxdu5a5u4tKRL/JW FyOo9cDpt+coXDJhpmZhX8Y/2ZOtkKtr7ooAeBT2lMPNM/LTk6WkzOogY9xV3o+z hk0AQj09hySCqXJdWdnnZA2rlGBl0hb7rrwuUw+0+UmVdQh7lCKKjh+uLzz2VHUW jHw3FF8YHKXEZOkQy/rpUPt+LWloFGou9O9/HmmxWVUoCeYEAijvGpbSdeIWPqSk S10Gi6jir8rcPrhXthOE+y6Lj+fvV9UW6/DLi0p/qR8peUqFgxoE53wvXNY8Ilq5 bMqbwGMm/MlcFJo4OZsEBwUHvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaJQhFx FM9WnKUvYhvte5ye0vJnMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEdDvYqld8ue4DCsgpM8sI5t4wZM5hxiiDTctDTnvO3lv2aije8Ya2 LAPS2XDbvX/DvEAS5BRA6gb46lkKd4cbl3KVqQRKAfVZEkyOGqrc7aR+pGHhpmz9 YkDMWnamyu4LpsoJANlKLb2FsnBrc6CUhzRdb4iWpL3/vRzfjZPCIcKMMvwU1cT+ 4kHn9YoBtwaGajcxXq3kLbWkeKEd9VBsyvLGM5AKP9jOAO0qhW8XpKwtuO9vepdY 2ypBGyGUSf/816Rad1f7bZPiTPa+Ezb/2u+upJHWdv1KM9hLsVzvuWzrPV68NnaX 9x7A0S+nYtjVg8Xud5HVsnoy9BZC0nax -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:19 2025 by rpki-client