$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: zzg+hKQr9BZHQOhuxkn7yQa8sn4sXJpanfIUfgNcHpU= Subject key identifier: F9:11:F4:03:5F:30:1C:03:9B:1D:87:93:16:70:83:84:EB:AD:3B:BD Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 266E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 2656 Signing time: Sat 18 Oct 2025 15:54:34 +0000 Manifest this update: Sat 18 Oct 2025 15:54:33 +0000 Manifest next update: Sat 25 Oct 2025 15:54:33 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: rPfunU3WaGjOk4cqsqLeY8a6/thh1l3fadpw8qr0qAg=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9838 (0x266e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: Oct 18 15:54:33 2025 GMT Not After : Oct 25 15:54:33 2025 GMT Subject: CN=68f3b83a-e6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3c:f8:65:f1:88:96:99:10:df:40:38:f8:6e: 84:a9:cb:27:bc:8e:ce:7b:14:09:46:a4:a4:6e:51: fb:e8:9a:70:af:d6:0a:48:ce:7d:4a:80:65:25:25: 71:78:72:f8:a2:1e:12:69:5f:74:d9:bd:54:f9:d9: 70:58:0a:df:80:3c:90:fe:20:42:c7:64:cd:a1:1d: e7:46:ea:fe:f1:61:fb:af:2b:b1:e9:33:20:c7:70: 0b:33:35:d7:ee:5c:3a:e0:3d:aa:35:0c:07:99:5f: b1:d9:49:96:ac:07:c9:7b:f2:7a:f1:f0:f4:84:05: a8:95:22:10:76:c2:29:09:e2:d4:25:d1:49:04:39: 15:ad:8d:86:cc:e4:54:bc:64:01:65:81:78:b5:1e: 15:aa:27:76:8e:50:e5:71:26:0a:07:e1:51:11:40: d1:dd:af:22:f5:38:36:dd:30:58:a3:0d:44:94:4f: 48:5b:57:44:98:a0:53:0b:a3:ba:83:fc:0c:c6:f5: f8:64:31:76:bb:90:4e:c0:45:94:fa:79:cc:5a:fc: e7:5f:99:a9:7b:91:dc:0b:a3:6f:d0:8b:41:a9:fe: 89:49:fb:c1:0b:e3:9e:c2:16:43:74:3f:f3:60:d9: f6:f1:c6:89:d5:da:66:04:36:02:65:ec:84:a6:05: e1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:F4:03:5F:30:1C:03:9B:1D:87:93:16:70:83:84:EB:AD:3B:BD X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:be:85:76:41:0d:b4:7c:f6:c3:29:1c:be:58:68:19:bc:14: 4f:63:d3:be:63:f4:18:af:14:dc:51:ca:d6:fa:e7:a0:4b:f9: 1d:ca:41:15:1d:f3:42:da:97:aa:35:58:26:16:56:c6:43:39: 8c:c9:ce:1e:c9:21:3e:b8:0b:f2:65:0d:29:bb:b1:b1:29:99: 65:15:11:96:ad:01:21:b8:2f:d0:d9:23:03:13:d8:72:1b:04: 97:fb:8f:d4:80:58:e5:72:33:0a:14:51:17:c8:91:a6:21:e9: 24:da:ae:f4:e1:7b:9e:38:21:ea:54:53:88:07:15:64:92:d9: 17:45:fd:bf:ee:ce:7b:3e:eb:04:65:46:92:76:4a:07:08:67: 51:3c:1b:ba:5b:02:08:a8:d2:97:e5:d1:2c:1b:48:14:69:99: 7f:84:46:8e:69:97:6f:b2:56:3c:89:8b:38:f8:d0:bc:4e:4c: cd:5e:fe:bb:19:f8:61:20:97:95:7d:40:4a:25:90:93:41:81: 39:88:81:ec:9a:71:d9:3c:d0:b5:58:d2:10:4d:08:f8:d1:9d: af:c2:50:fe:30:e5:fa:2b:2c:e7:72:fc:2c:72:11:a6:a2:9c: 56:45:37:ce:f7:eb:f4:37:82:27:55:ce:ff:c6:d4:05:13:f8: e2:44:25:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUxMDE4MTU1NDMzWhcNMjUxMDI1MTU1NDMzWjAYMRYwFAYD VQQDEw02OGYzYjgzYS1lNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Dz4ZfGIlpkQ30A4+G6EqcsnvI7OexQJRqSkblH76Jpwr9YKSM59SoBlJSVx eHL4oh4SaV902b1U+dlwWArfgDyQ/iBCx2TNoR3nRur+8WH7ryux6TMgx3ALMzXX 7lw64D2qNQwHmV+x2UmWrAfJe/J68fD0hAWolSIQdsIpCeLUJdFJBDkVrY2GzORU vGQBZYF4tR4Vqid2jlDlcSYKB+FREUDR3a8i9Tg23TBYow1ElE9IW1dEmKBTC6O6 g/wMxvX4ZDF2u5BOwEWU+nnMWvznX5mpe5HcC6Nv0ItBqf6JSfvBC+OewhZDdD/z YNn28caJ1dpmBDYCZeyEpgXhPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkR9ANf MBwDmx2HkxZwg4TrrTu9MB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARvoV2QQ20fPbDKRy+WGgZvBRPY9O+Y/QYrxTcUcrW+uegS/kdykEV HfNC2peqNVgmFlbGQzmMyc4eySE+uAvyZQ0pu7GxKZllFRGWrQEhuC/Q2SMDE9hy GwSX+4/UgFjlcjMKFFEXyJGmIekk2q704XueOCHqVFOIBxVkktkXRf2/7s57PusE ZUaSdkoHCGdRPBu6WwIIqNKX5dEsG0gUaZl/hEaOaZdvslY8iYs4+NC8TkzNXv67 GfhhIJeVfUBKJZCTQYE5iIHsmnHZPNC1WNIQTQj40Z2vwlD+MOX6KyzncvwschGm opxWRTfO9+v0N4InVc7/xtQFE/jiRCUd -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:34 2025 by rpki-client