$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: 2CiRg/tNhmydDm4TKGHrw7FeH1Mcxt5HCOV5ChbOVVE= Subject key identifier: 50:AA:89:15:7B:DF:FF:89:AA:72:7E:77:48:01:C5:BC:0D:16:1C:BD Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 08ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 08DF Signing time: Sat 18 Oct 2025 21:30:27 +0000 Manifest this update: Sat 18 Oct 2025 21:30:27 +0000 Manifest next update: Sat 25 Oct 2025 21:30:27 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: aA/yrsjPM8XoP3jRdccrZjxn1gZJJ3ylOe8iLm/1mQA=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2285 (0x8ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Oct 18 21:30:27 2025 GMT Not After : Oct 25 21:30:27 2025 GMT Subject: CN=68f406f3-be77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:d5:e3:b8:10:89:e9:0f:8c:e6:f2:11:5a: 7b:a1:73:85:ce:ee:f6:af:d1:82:eb:77:25:02:36: e4:43:f8:3e:e3:d1:98:da:10:07:1d:86:e7:19:de: a9:a0:76:3e:1a:8d:1e:b9:09:24:bd:b2:9a:61:e0: 73:a0:c8:f2:89:75:6b:dc:be:f8:20:76:ba:30:79: 94:6b:22:cf:2d:05:9b:d6:75:c6:bd:a7:07:de:ba: 43:04:d9:39:d3:69:3d:ec:ec:3c:9c:c8:91:71:c2: 2d:05:5a:2a:30:40:79:9f:51:4c:f9:9f:4e:9d:5b: 1f:57:af:3f:5f:22:f2:e2:b0:e7:19:a7:68:e3:e4: dc:61:12:69:12:6a:2f:c3:cb:af:fb:6d:21:99:3d: 51:8c:d4:e3:2e:a7:45:2a:d5:72:9e:72:9f:b2:5d: d2:26:b1:d7:06:7d:ca:95:12:1b:f2:93:13:cd:7f: a8:79:ba:c5:63:30:54:19:ed:9c:1c:85:b9:a4:0d: ab:67:5c:bd:26:5a:4e:5d:59:3b:74:90:17:a4:9e: 00:d1:46:5b:d1:62:47:3d:30:4e:98:e6:e9:81:79: 90:d2:e1:4f:fb:3f:7b:e3:65:2e:4e:a2:42:c0:cd: e6:0c:aa:7c:31:f6:1c:e7:0d:84:3e:d8:b5:76:f3: 47:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AA:89:15:7B:DF:FF:89:AA:72:7E:77:48:01:C5:BC:0D:16:1C:BD X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:9c:14:71:de:d6:5c:35:bb:f1:04:5f:c0:34:66:ed:20:46: 70:d3:94:03:81:2d:cb:c5:20:90:be:62:2e:87:d7:a0:c6:fb: 98:60:ec:91:db:5f:4a:56:69:f8:86:5c:9b:db:ed:2a:54:28: ae:e1:77:0d:d1:2e:0e:a8:95:fe:3e:2a:4a:ae:48:07:bc:3a: 92:68:fd:fb:8b:c4:5f:e3:63:36:4d:f4:b5:23:65:09:b0:cc: cd:3a:4b:53:19:1a:b1:da:0b:a9:d6:7d:13:24:5c:d7:cf:98: a8:a6:28:11:70:2d:00:d7:16:b3:a3:50:9e:c1:b1:8f:4a:57: 95:89:68:74:9d:6b:5b:51:c2:2a:54:4b:7f:0b:28:2a:14:c9: 77:50:40:de:b0:7f:8b:53:09:33:cf:74:67:69:0f:dc:98:07: 02:21:f1:1b:1a:31:17:6f:c2:d1:28:b6:65:4d:33:65:12:2c: cc:cc:03:45:20:77:5a:4b:d5:49:ab:c3:6a:ba:a2:c7:20:28: 0a:d2:0b:c1:78:60:48:78:04:41:47:97:fa:40:52:e3:95:a9: 75:01:44:a4:6d:99:df:79:6e:0b:25:7f:10:96:8e:14:39:a7: 0e:25:d7:b8:2b:cb:f7:83:36:e5:0f:14:87:67:0e:8e:a3:de: cd:46:1a:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUxMDE4MjEzMDI3WhcNMjUxMDI1MjEzMDI3WjAYMRYwFAYD VQQDEw02OGY0MDZmMy1iZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4TV47gQiekPjObyEVp7oXOFzu72r9GC63clAjbkQ/g+49GY2hAHHYbnGd6p oHY+Go0euQkkvbKaYeBzoMjyiXVr3L74IHa6MHmUayLPLQWb1nXGvacH3rpDBNk5 02k97Ow8nMiRccItBVoqMEB5n1FM+Z9OnVsfV68/XyLy4rDnGado4+TcYRJpEmov w8uv+20hmT1RjNTjLqdFKtVynnKfsl3SJrHXBn3KlRIb8pMTzX+oebrFYzBUGe2c HIW5pA2rZ1y9JlpOXVk7dJAXpJ4A0UZb0WJHPTBOmObpgXmQ0uFP+z9742UuTqJC wM3mDKp8MfYc5w2EPti1dvNHWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCqiRV7 3/+JqnJ+d0gBxbwNFhy9MB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4nBRx3tZcNbvxBF/ANGbtIEZw05QDgS3LxSCQvmIuh9egxvuYYOyR 219KVmn4hlyb2+0qVCiu4XcN0S4OqJX+PipKrkgHvDqSaP37i8Rf42M2TfS1I2UJ sMzNOktTGRqx2gup1n0TJFzXz5iopigRcC0A1xazo1CewbGPSleViWh0nWtbUcIq VEt/CygqFMl3UEDesH+LUwkzz3RnaQ/cmAcCIfEbGjEXb8LRKLZlTTNlEizMzANF IHdaS9VJq8NquqLHICgK0gvBeGBIeARBR5f6QFLjlal1AUSkbZnfeW4LJX8Qlo4U OacOJde4K8v3gzblDxSHZw6Oo97NRhpz -----END CERTIFICATE-----Generated at Mon Oct 20 16:43:36 2025 by rpki-client