$ rpki-client -vvf rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft File: 8gl4uKIsE6CwK586X8LUiKuovtU.mft (raw, json) Hash identifier: YUcitlHNEm1myt7CT2lJha2yyRnGN+tZpgZQV1IUpWo= Subject key identifier: 5E:17:DB:48:EE:E8:B8:51:78:E0:56:62:38:53:A8:D2:C3:B4:B1:2B Authority key identifier: F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5 Certificate issuer: /CN=A914653C/serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5 Certificate serial: 0A38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft Manifest number: 0A32 Signing time: Sat 18 Oct 2025 20:43:43 +0000 Manifest this update: Sat 18 Oct 2025 20:43:43 +0000 Manifest next update: Sat 25 Oct 2025 20:43:43 +0000 Files and hashes: 1: 8gl4uKIsE6CwK586X8LUiKuovtU.crl (hash: IAJcGe16l05ruVZ+vt1lDeRkqt9IlYsnp0fbD6epxBA=) 2: BD7E578079E011EA8DD5907FC4F9AE02.roa (hash: iYxIY6VXdTf7gHnwepU+/VGZkh/V1c1cIjc+gsTh8TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2616 (0xa38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914653C, serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5 Validity Not Before: Oct 18 20:43:43 2025 GMT Not After : Oct 25 20:43:43 2025 GMT Subject: CN=68f3fbff-8e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:51:1f:f9:ab:da:0f:ba:91:01:35:d5:f8: 89:80:c9:44:43:70:72:a5:bb:aa:b8:3b:c6:f3:bf: c8:cc:d1:b8:08:62:02:85:86:2e:79:c0:b1:17:08: ec:54:1e:7f:07:2e:0b:d5:fd:38:fb:2c:cf:5c:9b: ff:af:85:e4:fc:90:80:2f:d1:d9:4d:6b:a3:c0:a7: c7:a6:42:5e:db:44:30:0d:36:b2:b7:c7:69:10:e9: 84:77:e8:d5:65:cb:47:5d:dd:86:26:8e:bf:eb:b8: 99:78:cb:f9:fa:09:c3:df:dd:b4:3c:23:48:64:9c: da:5f:b5:91:3e:0c:f0:97:ad:37:b1:76:63:1f:36: b4:a2:80:8e:d5:81:e4:de:84:f2:c8:7c:82:b4:d0: d0:28:10:e7:3f:b4:95:9b:66:f9:1b:aa:37:1c:44: a6:b5:13:ab:40:01:69:41:09:de:d8:51:51:99:bd: 0d:18:db:f0:d3:81:b8:ca:9f:ea:56:c1:5c:ba:8a: 67:fe:b4:b5:a0:85:4f:7c:43:14:3e:77:40:b8:23: 69:9a:97:6b:80:25:63:b7:bf:07:16:11:5c:2d:aa: 6f:80:d3:90:68:9d:2c:d8:e1:50:10:d0:b2:fa:15: 31:49:c7:1f:52:ab:ca:22:2e:5b:dc:4d:77:90:2e: 0d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:17:DB:48:EE:E8:B8:51:78:E0:56:62:38:53:A8:D2:C3:B4:B1:2B X509v3 Authority Key Identifier: keyid:F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e3:9f:14:34:2f:aa:42:e6:32:28:0b:89:03:da:d4:b7:cf: 9f:20:ec:73:ba:ed:7c:d0:6e:d0:78:92:ba:4d:dd:c2:51:ec: f1:e0:04:8c:dd:6c:80:15:a5:4f:cd:eb:73:3a:cd:84:a0:49: bf:a3:25:24:e3:07:e0:61:e2:6a:d0:f0:3f:b1:0b:e0:a3:55: 58:38:87:4a:43:f2:d1:0b:44:74:7d:e6:ed:09:46:7a:b2:7b: 62:79:4b:e8:6d:e8:12:48:7a:50:af:c8:3a:72:1d:b8:b3:db: e8:01:ef:3e:b3:c5:c2:67:40:db:57:ad:d0:1a:73:8d:13:82: e2:4e:d3:3b:45:16:7b:df:dd:de:33:f4:fc:4c:13:a0:43:1b: bd:1c:9d:bd:b9:33:74:56:9d:69:97:56:c0:fd:57:3a:e4:7a: 01:ea:b5:29:61:d0:81:e2:e0:88:f6:4d:23:18:96:12:df:56: f0:2c:f3:be:50:37:22:08:2e:27:49:95:bd:a8:90:0f:c5:66: de:03:3a:e3:62:95:bc:7f:3f:11:bd:59:25:b1:0f:21:b8:73: 91:fb:15:53:59:73:3a:ad:44:64:12:7e:c0:14:f9:c4:e6:d4: 3e:1b:7b:e7:1b:80:32:52:10:f5:03:19:b2:d8:05:eb:a1:ad: 9f:91:6b:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY1M0MxMTAvBgNVBAUTKEYyMDk3OEI4QTIyQzEzQTBCMDJCOUYzQTVGQzJENDg4 QUJBOEJFRDUwHhcNMjUxMDE4MjA0MzQzWhcNMjUxMDI1MjA0MzQzWjAYMRYwFAYD VQQDEw02OGYzZmJmZi04ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsopRH/mr2g+6kQE11fiJgMlEQ3BypbuquDvG87/IzNG4CGIChYYuecCxFwjs VB5/By4L1f04+yzPXJv/r4Xk/JCAL9HZTWujwKfHpkJe20QwDTayt8dpEOmEd+jV ZctHXd2GJo6/67iZeMv5+gnD3920PCNIZJzaX7WRPgzwl603sXZjHza0ooCO1YHk 3oTyyHyCtNDQKBDnP7SVm2b5G6o3HESmtROrQAFpQQne2FFRmb0NGNvw04G4yp/q VsFcuopn/rS1oIVPfEMUPndAuCNpmpdrgCVjt78HFhFcLapvgNOQaJ0s2OFQENCy +hUxSccfUqvKIi5b3E13kC4NcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4X20ju 6LhReOBWYjhTqNLDtLErMB8GA1UdIwQYMBaAFPIJeLiiLBOgsCufOl/C1IirqL7V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjUzQy81QkE4NzgyMDc5 REYxMUVBQkM5RDk3N0RDNEY5QUUwMi84Z2w0dUtJc0U2Q3dLNTg2WDhMVWlLdW92 dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnbDR1S0lzRTZDd0s1ODZYOExVaUt1b3Z0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjUzQy81QkE4NzgyMDc5REYxMUVBQkM5RDk3N0RDNEY5QUUwMi84Z2w0dUtJc0U2 Q3dLNTg2WDhMVWlLdW92dFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ458UNC+qQuYyKAuJA9rUt8+fIOxzuu180G7QeJK6Td3CUezx4ASM 3WyAFaVPzetzOs2EoEm/oyUk4wfgYeJq0PA/sQvgo1VYOIdKQ/LRC0R0febtCUZ6 sntieUvobegSSHpQr8g6ch24s9voAe8+s8XCZ0DbV63QGnONE4LiTtM7RRZ7393e M/T8TBOgQxu9HJ29uTN0Vp1pl1bA/Vc65HoB6rUpYdCB4uCI9k0jGJYS31bwLPO+ UDciCC4nSZW9qJAPxWbeAzrjYpW8fz8RvVklsQ8huHOR+xVTWXM6rURkEn7AFPnE 5tQ+G3vnG4AyUhD1Axmy2AXroa2fkWtf -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:47 2025 by rpki-client