$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft File: 8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json) Hash identifier: PnDW9hBRXo90YF1Y6NSZv72i1LAxIFOXe6W+gJp/WBc= Subject key identifier: 38:42:9B:3D:35:A8:D1:DE:76:18:4C:CF:C8:53:7E:20:45:5E:36:EB Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 Certificate issuer: /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft Manifest number: 4E Signing time: Sun 19 Oct 2025 10:44:16 +0000 Manifest this update: Sun 19 Oct 2025 10:44:16 +0000 Manifest next update: Sun 26 Oct 2025 10:44:16 +0000 Files and hashes: 1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: KZbtn+0UoI4U0ItlSJNbk3ia1n7teazgWVo4nRHiyYc=) 2: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: ltjHOrlAjkCkglGzdBBO2Uhk0ROczxbCjOMO75HWhtA=) 3: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: P3ICOOzdYod03YP+DW4znK40K0YlnGffnVKfr18TLD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Validity Not Before: Oct 19 10:44:16 2025 GMT Not After : Oct 26 10:44:16 2025 GMT Subject: CN=68f4c100-4750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:46:21:0b:5d:97:9b:1c:89:db:93:ac:58: 69:ed:58:83:4d:81:02:49:06:e2:9b:c4:fa:d2:99: 6f:2f:2b:b2:f9:26:d9:e8:86:95:6a:3f:54:2a:5d: 48:54:22:ec:89:7f:48:e2:70:12:f2:a8:29:c7:d7: 22:f9:c0:4d:4b:c9:16:9c:1a:be:d2:e2:9d:20:dc: c5:dc:ef:b5:0d:f3:12:15:58:6b:09:d4:2a:59:72: 54:68:d8:07:74:35:66:28:6c:b5:1a:13:a9:06:31: 53:5a:a4:0d:06:f1:b2:37:32:9d:92:dc:fe:ed:fb: f9:bb:b3:75:f6:4c:f4:6c:6b:9d:8c:ba:91:21:00: 60:ba:6a:7a:7d:0e:72:21:37:a7:2a:89:37:7c:20: c8:b3:d7:08:54:1f:d7:ee:60:ea:81:87:03:18:49: 2d:78:ee:c3:79:60:08:d9:5c:59:9a:b5:0c:a0:65: dd:13:b9:4a:d6:44:d0:98:ca:ef:e4:ab:fc:0b:6a: 15:28:70:1e:73:60:82:0a:d6:0e:8f:86:f0:6a:7f: 46:4d:aa:aa:5f:58:9f:f6:9e:d3:dd:cd:5a:3b:97: c4:68:30:9f:95:01:3b:c0:33:bc:5b:53:80:da:ea: 6d:02:a8:d4:1c:3b:56:4c:f8:3b:50:8a:d0:82:c2: b1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:42:9B:3D:35:A8:D1:DE:76:18:4C:CF:C8:53:7E:20:45:5E:36:EB X509v3 Authority Key Identifier: keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:12:8c:f3:cf:eb:de:52:92:ed:7f:38:6d:25:da:aa:c3:ff: 87:40:74:38:eb:75:14:65:1e:82:ea:bd:4a:ff:b2:d5:f6:8b: 50:65:19:5d:e2:5a:93:0d:f2:bd:bc:14:be:bc:72:2a:9a:c0: 16:0a:4a:84:08:db:c1:de:25:f1:5f:6d:4a:64:b5:a3:e3:aa: b8:60:ba:42:33:3f:b3:7e:9d:5b:1b:5e:b5:30:82:0e:8a:dd: 39:04:81:8b:2e:6d:4d:ad:7a:de:8a:59:36:92:18:22:16:3d: 6f:11:87:34:88:52:15:4e:9a:ee:6a:18:fd:66:a5:22:ef:7b: 34:a1:7a:9a:c1:d4:83:69:8a:7c:89:7a:b7:05:13:0d:cf:55: 90:ab:e5:e3:3d:2f:8d:f8:b1:50:80:23:8d:2f:a4:d6:84:39: c9:c1:5f:cd:5e:ec:10:f0:3d:23:dd:82:f1:8f:c2:cc:da:b3: e9:fb:71:2e:08:c2:5c:f8:3d:6a:8f:b3:73:e7:6a:c3:dc:a1: 32:ab:21:d8:a3:fb:9c:a7:66:17:c8:71:29:10:b7:aa:ce:58: d7:4c:1f:31:9e:ac:ba:97:b9:8f:89:5c:7c:b4:b2:27:95:73: 28:4e:89:5f:f9:19:c0:70:97:fc:21:c3:b7:4d:fd:da:ed:a3: 2a:77:f2:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoRjFFNTAxNjNBQzUwNkE2MkNDRkI1QThBRjU2NTExQzM4 RjE1MDQxNDAeFw0yNTEwMTkxMDQ0MTZaFw0yNTEwMjYxMDQ0MTZaMBgxFjAUBgNV BAMTDTY4ZjRjMTAwLTQ3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIXEYhC12XmxyJ25OsWGntWINNgQJJBuKbxPrSmW8vK7L5JtnohpVqP1QqXUhU IuyJf0jicBLyqCnH1yL5wE1LyRacGr7S4p0g3MXc77UN8xIVWGsJ1CpZclRo2Ad0 NWYobLUaE6kGMVNapA0G8bI3Mp2S3P7t+/m7s3X2TPRsa52MupEhAGC6anp9DnIh N6cqiTd8IMiz1whUH9fuYOqBhwMYSS147sN5YAjZXFmatQygZd0TuUrWRNCYyu/k q/wLahUocB5zYIIK1g6PhvBqf0ZNqqpfWJ/2ntPdzVo7l8RoMJ+VATvAM7xbU4Da 6m0CqNQcO1ZM+DtQitCCwrGpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOEKbPTWo 0d52GEzPyFN+IEVeNuswHwYDVR0jBBgwFoAU8eUBY6xQamLM+1qK9WURw48VBBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0I2QkEwMTJDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1MTS0xcUs5V1VSdzQ4VkJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGVVQlk2eFFhbUxNLTFxSzlXVVJ3NDhWQkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0I2QkEwMTJDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1M TS0xcUs5V1VSdzQ4VkJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKYSjPPP695Sku1/OG0l2qrD/4dAdDjrdRRlHoLqvUr/stX2i1BlGV3i WpMN8r28FL68ciqawBYKSoQI28HeJfFfbUpktaPjqrhgukIzP7N+nVsbXrUwgg6K 3TkEgYsubU2tet6KWTaSGCIWPW8RhzSIUhVOmu5qGP1mpSLvezSheprB1INpinyJ ercFEw3PVZCr5eM9L434sVCAI40vpNaEOcnBX81e7BDwPSPdgvGPwszas+n7cS4I wlz4PWqPs3PnasPcoTKrIdij+5ynZhfIcSkQt6rOWNdMHzGerLqXuY+JXHy0sieV cyhOiV/5GcBwl/whw7dN/drtoyp38g0= -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:39 2025 by rpki-client