$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: QGOpP79hcA9nPAnjISBnSsWXiue66TIwZ/oTaqVMbV0= Subject key identifier: 25:4A:1C:CC:C4:93:B7:18:C7:D1:0B:CC:10:09:BB:65:11:91:60:19 Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 0A51 Signing time: Sat 18 Oct 2025 20:41:40 +0000 Manifest this update: Sat 18 Oct 2025 20:41:39 +0000 Manifest next update: Sat 25 Oct 2025 20:41:39 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: tpBo7PM/BeMaEdA4GO7l9ZyvyDFG1/C45qhn8Ysp5K4=) 2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: 3SdLflE7QNKZukodJvPP0+VEXx4PpxcKaoT3DVdeoho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Oct 18 20:41:39 2025 GMT Not After : Oct 25 20:41:39 2025 GMT Subject: CN=68f3fb83-f60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:18:70:25:11:80:bb:13:dd:61:93:be:03: 21:4d:82:7d:56:19:4d:37:4d:f4:04:91:28:f6:05: a5:8e:ac:b3:3c:52:fd:c7:fa:e9:cb:cc:69:5a:0e: 8f:54:c3:71:78:50:2b:a1:21:07:e2:1f:ba:4f:93: 69:b7:67:f9:ed:5d:b1:f2:66:a2:80:d3:0d:df:4f: ac:e9:67:89:2e:b6:1c:56:e9:94:72:25:aa:9a:60: 2a:f2:32:60:48:a9:8a:18:5d:40:75:95:69:86:36: f6:6f:56:bb:52:ae:02:c2:54:85:96:bf:5c:c0:f2: 22:1a:e3:43:ac:77:2e:a7:4f:65:22:0a:a4:6b:7b: 75:82:7c:3e:07:52:e8:7a:ab:51:a4:12:e5:8e:7d: 33:66:9b:1f:1d:5b:a9:df:24:cf:58:a1:a3:ba:8f: 5d:d0:46:2f:88:4c:62:57:a7:b0:75:bd:c1:39:9c: e5:52:3a:54:dc:4c:cf:0d:73:a2:06:46:04:43:86: 37:98:6e:b6:46:e7:43:e2:cf:cc:cb:69:e4:3f:67: 3f:0b:90:3d:d6:b4:6a:cb:5d:d9:ed:3e:9d:29:e6: 81:4d:53:53:eb:25:29:c0:4c:a0:73:36:d8:39:d9: 39:19:b3:f9:5a:5c:e3:10:60:32:b9:62:25:c4:05: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4A:1C:CC:C4:93:B7:18:C7:D1:0B:CC:10:09:BB:65:11:91:60:19 X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:41:7a:cd:e3:7b:79:bf:ff:53:72:1e:30:e9:0f:60:d8:e3: b5:07:42:f2:7d:03:72:9b:1b:a4:b5:b9:86:5b:28:03:09:58: 92:36:5e:58:17:32:87:d9:92:9b:1a:24:92:2d:21:5a:3e:45: fa:ea:10:b3:61:c1:2a:05:e0:86:7a:f2:bd:c0:b1:da:95:1b: 3a:23:fc:2f:9b:3c:14:8b:82:9a:24:cf:78:8d:a0:f4:bc:87: be:8e:6d:cb:21:48:64:01:b5:8f:65:e9:e4:b5:eb:4d:49:02: 71:2d:b7:53:ea:7f:34:a6:df:3c:9c:78:de:4d:fb:92:ee:18: 1e:34:7b:92:46:a5:52:54:98:15:af:8b:c4:a3:ef:e9:15:fa: 11:8a:f9:44:9e:98:66:f1:82:a5:c9:8d:9b:79:05:60:96:c8: 35:87:5d:57:d7:f7:e5:f9:24:b2:ef:5f:da:ed:66:1b:b4:09: 3c:49:81:8d:6f:67:6c:15:b3:17:69:2a:a2:b7:2c:4e:e1:c5: a6:23:52:87:e7:6c:75:f8:73:22:b7:39:2c:23:96:05:91:14: 61:5c:30:b4:eb:3d:a2:0a:e2:23:df:b5:bf:94:f4:6b:c8:37: 98:a2:84:a9:5c:4d:14:d9:04:ab:dd:67:9a:41:ba:8c:ea:90: 6e:19:d3:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjUxMDE4MjA0MTM5WhcNMjUxMDI1MjA0MTM5WjAYMRYwFAYD VQQDEw02OGYzZmI4My1mNjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAYYcCURgLsT3WGTvgMhTYJ9VhlNN030BJEo9gWljqyzPFL9x/rpy8xpWg6P VMNxeFAroSEH4h+6T5Npt2f57V2x8maigNMN30+s6WeJLrYcVumUciWqmmAq8jJg SKmKGF1AdZVphjb2b1a7Uq4CwlSFlr9cwPIiGuNDrHcup09lIgqka3t1gnw+B1Lo eqtRpBLljn0zZpsfHVup3yTPWKGjuo9d0EYviExiV6ewdb3BOZzlUjpU3EzPDXOi BkYEQ4Y3mG62RudD4s/My2nkP2c/C5A91rRqy13Z7T6dKeaBTVNT6yUpwEygczbY Odk5GbP5WlzjEGAyuWIlxAXAOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVKHMzE k7cYx9ELzBAJu2URkWAZMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7QXrN43t5v/9Tch4w6Q9g2OO1B0LyfQNymxuktbmGWygDCViSNl5Y FzKH2ZKbGiSSLSFaPkX66hCzYcEqBeCGevK9wLHalRs6I/wvmzwUi4KaJM94jaD0 vIe+jm3LIUhkAbWPZenktetNSQJxLbdT6n80pt88nHjeTfuS7hgeNHuSRqVSVJgV r4vEo+/pFfoRivlEnphm8YKlyY2beQVglsg1h11X1/fl+SSy71/a7WYbtAk8SYGN b2dsFbMXaSqityxO4cWmI1KH52x1+HMitzksI5YFkRRhXDC06z2iCuIj37W/lPRr yDeYooSpXE0U2QSr3WeaQbqM6pBuGdM8 -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:10 2025 by rpki-client