$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: tgy4BjK/cs/EYk+PFDLNvw8+E3St+ZA15GvsYnvPzGw= Subject key identifier: 5D:8B:2C:2C:8F:0E:28:47:33:9E:D7:3C:9A:2E:8B:20:49:01:DC:A7 Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 04E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 04C5 Signing time: Sun 19 Oct 2025 01:48:35 +0000 Manifest this update: Sun 19 Oct 2025 01:48:35 +0000 Manifest next update: Sun 26 Oct 2025 01:48:35 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: U/v8WG4B2scEAfw2pKSaMkuxZKjGq6hPlm+4wySE0i0=) 2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: iwDIeTH9jAKRmJy5+E9fAG3VbE729VNzq/7AMrBopsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: Oct 19 01:48:35 2025 GMT Not After : Oct 26 01:48:35 2025 GMT Subject: CN=68f44373-1a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:d0:a1:77:15:e9:69:d0:ec:a8:45:0d:56: fa:0e:1c:07:49:cd:ce:0c:71:84:35:ac:80:45:3d: e6:e9:a2:61:28:1b:db:d9:fe:cd:ed:7e:f9:2d:de: 68:80:25:de:d5:4b:df:c1:7f:f6:df:73:dd:87:6b: 72:8e:2c:08:35:cc:f7:1c:18:66:f3:0c:16:14:50: 46:97:bf:f1:68:70:3e:9b:7b:a6:b0:ab:f4:eb:fb: 94:96:03:b9:05:c7:28:5f:3d:2b:80:58:bc:8e:93: 5c:3a:80:c8:12:3c:a8:6c:51:28:c5:5b:f0:45:fa: 63:98:9c:bc:05:f5:e0:6b:b0:22:7a:44:49:40:e0: 4d:b9:6c:af:ba:a0:bf:2d:3c:e0:dd:46:a5:98:e3: ad:6e:93:0a:05:03:e4:c0:94:d9:b8:ad:bf:c9:21: d9:76:3f:de:66:52:20:b8:8a:d4:b6:00:f4:cf:cd: 6b:52:03:9f:03:64:50:ac:ff:bf:4b:7d:9b:a0:53: 5c:1d:d7:9f:5c:08:bd:41:75:ea:40:71:5c:4b:75: e5:05:64:51:e8:11:d5:7a:f8:12:ff:ee:d2:a3:01: 9c:3a:c5:70:f8:6e:b8:f2:f1:f9:74:f6:ce:70:ab: 97:31:ba:2d:53:66:01:4a:22:37:87:d2:7f:9a:ab: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8B:2C:2C:8F:0E:28:47:33:9E:D7:3C:9A:2E:8B:20:49:01:DC:A7 X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:94:f3:a1:a7:66:89:7a:8e:4c:91:1f:f6:94:ad:6f:df:5b: be:0e:da:a7:bc:34:ec:fe:f5:7e:1d:36:48:f2:84:f6:ac:a1: be:cb:c8:fb:95:08:bd:5e:13:6b:04:13:52:b4:21:ff:ec:4c: fa:57:5b:c7:46:40:02:d0:71:70:f8:4f:8e:be:df:76:32:25: 97:ae:66:1e:20:6b:57:f8:46:51:ef:2a:55:74:d2:76:dc:e1: 34:6c:c4:16:60:5a:98:af:86:68:bb:61:83:c7:f2:83:66:ca: bb:64:5c:22:e9:c2:fc:29:17:63:bb:eb:86:51:dd:79:fd:7f: 60:e9:8a:05:86:97:e5:67:21:8d:ff:2e:86:42:5c:cd:14:2c: 04:63:c1:6f:7a:f9:ad:2e:18:a1:cb:3b:e0:aa:0e:be:e0:71: e8:c0:96:ca:e9:6f:67:2f:78:05:b6:5c:d6:76:25:23:4a:a2: f4:55:4f:43:3e:9b:8e:58:78:d8:51:1c:66:27:43:ea:37:d5: 79:b4:92:ff:81:cf:76:a9:da:c7:2f:ba:02:41:c9:60:74:38: 8b:9e:a6:06:1d:68:f5:1a:54:6e:46:f6:e2:38:c9:c0:87:08: cb:6d:4f:8b:f8:70:4e:5a:5e:52:38:5d:2c:36:20:3d:2a:dd: 3f:c5:68:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjUxMDE5MDE0ODM1WhcNMjUxMDI2MDE0ODM1WjAYMRYwFAYD VQQDEw02OGY0NDM3My0xYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2bQoXcV6WnQ7KhFDVb6DhwHSc3ODHGENayART3m6aJhKBvb2f7N7X75Ld5o gCXe1UvfwX/233Pdh2tyjiwINcz3HBhm8wwWFFBGl7/xaHA+m3umsKv06/uUlgO5 BccoXz0rgFi8jpNcOoDIEjyobFEoxVvwRfpjmJy8BfXga7AiekRJQOBNuWyvuqC/ LTzg3UalmOOtbpMKBQPkwJTZuK2/ySHZdj/eZlIguIrUtgD0z81rUgOfA2RQrP+/ S32boFNcHdefXAi9QXXqQHFcS3XlBWRR6BHVevgS/+7SowGcOsVw+G648vH5dPbO cKuXMbotU2YBSiI3h9J/mqv+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2LLCyP DihHM57XPJouiyBJAdynMB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXlPOhp2aJeo5MkR/2lK1v31u+DtqnvDTs/vV+HTZI8oT2rKG+y8j7 lQi9XhNrBBNStCH/7Ez6V1vHRkAC0HFw+E+Ovt92MiWXrmYeIGtX+EZR7ypVdNJ2 3OE0bMQWYFqYr4Zou2GDx/KDZsq7ZFwi6cL8KRdju+uGUd15/X9g6YoFhpflZyGN /y6GQlzNFCwEY8FvevmtLhihyzvgqg6+4HHowJbK6W9nL3gFtlzWdiUjSqL0VU9D PpuOWHjYURxmJ0PqN9V5tJL/gc92qdrHL7oCQclgdDiLnqYGHWj1GlRuRvbiOMnA hwjLbU+L+HBOWl5SOF0sNiA9Kt0/xWhX -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:42 2025 by rpki-client