$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: fHNmmCPGB2tMG2YSxy02/6P1RB4UJIwoYnjbT+tRJGw= Subject key identifier: E2:71:7D:83:50:E1:19:C4:75:C6:D4:40:87:FE:7A:63:85:CC:0E:C7 Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0570 Signing time: Sun 19 Oct 2025 01:04:17 +0000 Manifest this update: Sun 19 Oct 2025 01:04:16 +0000 Manifest next update: Sun 26 Oct 2025 01:04:16 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: iJMKWKss9QofGCal3YOcmhXjaZjCZlIO2dCObWEyWUU=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: qee+KTCUp6bDNFwH36fAFYsE8VZ1yRt+iGxeFmVp9gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Oct 19 01:04:16 2025 GMT Not After : Oct 26 01:04:16 2025 GMT Subject: CN=68f43911-7e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:97:b1:25:ad:a7:d2:33:f6:4d:67:60:36: d2:c1:8c:4a:95:dd:2e:c8:7c:91:1c:c7:83:35:bd: 47:4d:5a:df:bf:e1:75:ee:00:b2:9c:82:b5:db:1b: 25:34:a0:26:de:17:dc:1b:df:c6:0c:f1:db:95:ff: fc:a8:36:2a:bf:41:c7:cf:12:f8:56:06:e3:51:0e: 7d:3d:43:06:cf:fd:0d:48:8e:00:ba:1d:4f:f3:43: cd:cc:27:c5:54:bf:18:ec:69:f7:91:d7:9e:a7:5d: 8a:89:75:d3:14:51:fe:ae:09:08:91:47:ec:bd:0e: 0d:03:67:a4:15:9a:54:ef:61:aa:6f:c1:57:ed:ae: 8d:25:66:ef:82:be:a5:31:f5:aa:12:25:eb:1c:1e: c8:b1:b6:f1:41:d3:92:50:d6:bc:65:e4:74:71:e9: 02:8f:86:4e:98:5a:b3:ad:06:eb:3b:a5:d2:75:3f: eb:32:23:4d:36:ca:6b:fe:79:32:97:cb:50:61:e2: 75:ef:50:3c:59:c3:9f:fd:3e:81:2d:d4:b4:2e:98: 59:6c:4a:f4:32:9e:19:4a:5e:bc:fb:a0:05:b1:c3: 32:f6:8e:ac:5d:b5:70:0a:07:25:36:77:21:a6:a8: f1:df:62:84:c3:c9:11:2a:58:0e:fb:12:42:b5:8d: 26:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:71:7D:83:50:E1:19:C4:75:C6:D4:40:87:FE:7A:63:85:CC:0E:C7 X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:16:3c:96:d0:f3:be:f6:03:d0:09:55:2b:9b:36:bc:18:60: e3:25:c7:1c:23:3d:2e:c0:4d:e9:10:d8:87:a6:53:66:77:0d: 5c:25:47:ea:1e:04:b6:06:61:f5:a2:6e:2c:e3:92:31:59:89: e2:a9:b0:3f:cc:07:ff:88:cd:63:8e:a1:84:91:66:32:70:f2: 85:ba:d2:78:b9:10:5f:c8:17:62:e6:16:b8:ad:d3:53:33:71: 35:62:97:1c:8c:81:f5:48:53:5c:99:76:75:7c:dc:d6:0b:42: 9e:0c:90:6c:93:d9:d6:5c:1f:b7:06:05:de:03:75:18:77:3c: 2e:3a:dc:05:21:b5:d1:74:af:a7:44:27:f8:b1:35:6a:a7:12: 35:e9:a7:78:be:3d:61:36:14:54:32:53:35:24:88:b9:51:47: 7b:7b:5b:48:57:d4:10:70:6c:66:ba:bf:8d:a1:fd:90:08:77: b0:02:b2:60:6a:cc:c6:a5:71:26:b4:9c:ca:e7:5a:8e:83:9d: c5:42:57:4f:ae:4b:4b:a5:4c:fd:b2:c8:f2:03:85:9f:91:73: e0:5f:2a:1a:7c:7c:58:19:6e:24:d8:e2:1f:33:94:36:9f:0f: 21:b9:86:ef:00:1b:d2:36:40:25:00:77:f9:72:eb:d5:d9:2f: 79:76:c9:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUxMDE5MDEwNDE2WhcNMjUxMDI2MDEwNDE2WjAYMRYwFAYD VQQDEw02OGY0MzkxMS03ZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MGXsSWtp9Iz9k1nYDbSwYxKld0uyHyRHMeDNb1HTVrfv+F17gCynIK12xsl NKAm3hfcG9/GDPHblf/8qDYqv0HHzxL4VgbjUQ59PUMGz/0NSI4Auh1P80PNzCfF VL8Y7Gn3kdeep12KiXXTFFH+rgkIkUfsvQ4NA2ekFZpU72Gqb8FX7a6NJWbvgr6l MfWqEiXrHB7IsbbxQdOSUNa8ZeR0cekCj4ZOmFqzrQbrO6XSdT/rMiNNNspr/nky l8tQYeJ171A8WcOf/T6BLdS0LphZbEr0Mp4ZSl68+6AFscMy9o6sXbVwCgclNnch pqjx32KEw8kRKlgO+xJCtY0mZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJxfYNQ 4RnEdcbUQIf+emOFzA7HMB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5FjyW0PO+9gPQCVUrmza8GGDjJcccIz0uwE3pENiHplNmdw1cJUfq HgS2BmH1om4s45IxWYniqbA/zAf/iM1jjqGEkWYycPKFutJ4uRBfyBdi5ha4rdNT M3E1YpccjIH1SFNcmXZ1fNzWC0KeDJBsk9nWXB+3BgXeA3UYdzwuOtwFIbXRdK+n RCf4sTVqpxI16ad4vj1hNhRUMlM1JIi5UUd7e1tIV9QQcGxmur+Nof2QCHewArJg aszGpXEmtJzK51qOg53FQldPrktLpUz9ssjyA4WfkXPgXyoafHxYGW4k2OIfM5Q2 nw8huYbvABvSNkAlAHf5cuvV2S95dsnA -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:44 2025 by rpki-client