$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: zg5J2HLCHb3E7kTLssMT6MaQnNbp6Xw5UL/PO3XKHUk= Subject key identifier: 3F:56:B8:5C:5E:33:8D:27:22:71:9D:04:1E:08:11:C4:70:21:D5:21 Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 07FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 0826 Signing time: Sat 18 Oct 2025 22:15:58 +0000 Manifest this update: Sat 18 Oct 2025 22:15:58 +0000 Manifest next update: Sat 25 Oct 2025 22:15:58 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: yfLMgmUZv/XUeTLJuywPswZURQvFwnZxRh5jQktR5MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2044 (0x7fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: Oct 18 22:15:58 2025 GMT Not After : Oct 25 22:15:58 2025 GMT Subject: CN=68f4119e-3fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:dd:71:9c:4d:36:64:f2:58:64:aa:b8:99: b9:08:f5:67:35:18:25:a2:58:c8:ff:98:59:08:db: 95:17:b8:15:68:ef:57:af:9e:ae:d3:2b:a5:ff:89: 59:51:1c:67:38:ea:d5:a5:90:f1:c2:c7:56:a7:86: 3e:6b:76:45:6e:db:05:e8:38:5e:13:8e:47:f4:8c: c8:79:b8:81:e8:40:76:f1:ff:7b:68:3d:6c:64:a0: 40:5e:2e:ca:e1:51:0c:76:5f:d9:9a:d0:0d:e0:9e: 60:20:64:4f:5f:e4:7c:5a:b2:00:8a:5e:47:2a:f6: a5:b8:c5:e0:54:76:ca:27:69:ce:9f:b9:81:91:86: 5a:88:35:34:79:31:74:9c:e9:6d:bd:37:dd:cd:67: 28:36:09:78:c0:59:b4:3c:98:a0:77:ac:78:c7:b9: 5c:b7:36:82:8d:bb:9e:26:0e:45:8c:fb:c1:fd:8b: e9:c7:1d:53:29:6c:0f:58:38:bd:08:61:3f:5f:37: 42:9b:3d:13:f4:f1:b6:e3:17:05:ea:43:99:66:e9: fb:df:9a:66:40:79:a3:24:8c:46:4a:8d:33:bd:5b: ff:26:fd:5f:4f:6e:5b:d1:4d:81:43:5d:70:7c:5a: 8c:a5:eb:f4:a5:ce:26:29:b9:65:fe:d6:f8:30:71: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:56:B8:5C:5E:33:8D:27:22:71:9D:04:1E:08:11:C4:70:21:D5:21 X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:2f:0b:eb:23:84:c6:c8:12:2b:f5:26:64:3a:55:80:d2:44: 9c:bb:57:ea:c5:2d:22:20:96:4c:32:9c:eb:f9:96:36:bb:75: 75:e9:c6:2e:8a:2b:b9:c1:18:c8:84:b9:2b:a4:f5:a4:2b:81: 3b:6f:b8:f2:21:d2:96:ff:9d:2b:f6:19:fc:6b:a1:ef:bb:b4: d4:fa:24:11:b9:77:b6:bb:5f:09:65:63:4d:01:2f:e8:4b:ba: 95:12:d5:e8:5b:26:4f:e8:6e:d0:c6:0d:0b:3a:4b:4c:b4:58: ba:fc:90:91:85:85:2d:0b:3b:fc:67:a8:92:0a:c8:08:d1:11: 9f:a8:7d:dd:60:cd:c2:75:fa:95:9a:7c:ec:4d:e6:a8:56:a1: 73:b9:02:89:2e:d5:3c:6f:ea:a6:d8:3e:13:58:c8:c7:e2:2f: 40:65:70:29:67:dd:98:93:76:e5:3a:04:a3:75:07:77:17:c5: e3:3c:da:18:ee:a3:60:cd:da:a6:35:d2:63:0c:09:3b:8e:a9: 2e:b5:78:99:29:a1:ba:a2:f2:4b:a4:8f:55:40:52:b4:45:3b: 60:5d:5f:5f:19:93:44:79:22:2b:a5:d4:0c:53:ff:63:c8:42: 12:5e:1a:9d:c9:52:0b:8b:23:ed:03:25:cd:35:3f:55:87:2a: d3:df:79:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjUxMDE4MjIxNTU4WhcNMjUxMDI1MjIxNTU4WjAYMRYwFAYD VQQDEw02OGY0MTE5ZS0zZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0DdcZxNNmTyWGSquJm5CPVnNRgloljI/5hZCNuVF7gVaO9Xr56u0yul/4lZ URxnOOrVpZDxwsdWp4Y+a3ZFbtsF6DheE45H9IzIebiB6EB28f97aD1sZKBAXi7K 4VEMdl/ZmtAN4J5gIGRPX+R8WrIAil5HKvaluMXgVHbKJ2nOn7mBkYZaiDU0eTF0 nOltvTfdzWcoNgl4wFm0PJigd6x4x7lctzaCjbueJg5FjPvB/Yvpxx1TKWwPWDi9 CGE/XzdCmz0T9PG24xcF6kOZZun735pmQHmjJIxGSo0zvVv/Jv1fT25b0U2BQ11w fFqMpev0pc4mKbll/tb4MHEpxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9WuFxe M40nInGdBB4IEcRwIdUhMB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3LwvrI4TGyBIr9SZkOlWA0kScu1fqxS0iIJZMMpzr+ZY2u3V16cYu iiu5wRjIhLkrpPWkK4E7b7jyIdKW/50r9hn8a6Hvu7TU+iQRuXe2u18JZWNNAS/o S7qVEtXoWyZP6G7Qxg0LOktMtFi6/JCRhYUtCzv8Z6iSCsgI0RGfqH3dYM3CdfqV mnzsTeaoVqFzuQKJLtU8b+qm2D4TWMjH4i9AZXApZ92Yk3blOgSjdQd3F8XjPNoY 7qNgzdqmNdJjDAk7jqkutXiZKaG6ovJLpI9VQFK0RTtgXV9fGZNEeSIrpdQMU/9j yEISXhqdyVILiyPtAyXNNT9VhyrT33lb -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:36 2025 by rpki-client