$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: LYhy8ApcSqgnLD0re1LQmqT1bAVsxP9vr9cCEM5O6tc= Subject key identifier: EC:73:EE:79:EE:A0:B2:68:E9:60:0C:AC:41:37:6B:4B:7D:50:76:AC Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 06E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 06E3 Signing time: Sat 18 Oct 2025 23:25:35 +0000 Manifest this update: Sat 18 Oct 2025 23:25:34 +0000 Manifest next update: Sat 25 Oct 2025 23:25:34 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: fXqzL9xHOykNOr9AMAdPClDm3/UHe68LP7SgAcIyvKQ=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: vqxIsO24S1XTFLTcdT7l0irFCtFiMiUdze/w33SKZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1769 (0x6e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: Oct 18 23:25:34 2025 GMT Not After : Oct 25 23:25:34 2025 GMT Subject: CN=68f421ee-d112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:a5:68:b5:47:01:f7:b7:4e:c3:f5:f9:20: ab:59:74:32:24:00:7a:c4:6f:46:41:97:cb:ee:f8: cd:c0:c0:41:00:ca:22:57:cf:c1:34:58:d3:6c:78: a6:b6:33:ec:f4:b9:11:37:6c:1c:96:f0:d4:21:80: 17:c2:58:bf:6a:25:88:dc:b7:43:44:74:6e:42:eb: 03:db:f2:3e:be:31:ce:95:31:3f:4c:bd:55:42:38: dd:7b:4e:84:9f:f4:36:9f:45:3a:18:f3:31:70:32: a9:69:b3:b3:58:02:c5:9d:1e:4d:f7:8d:27:09:d7: 31:9a:9d:84:9d:a2:3e:0a:fa:58:17:53:22:2c:83: d1:7b:bc:86:de:41:e6:dc:fd:1d:d0:87:58:3c:23: 60:2f:d5:2b:91:5b:12:2b:c1:fe:e6:5d:0e:43:d0: 84:9d:90:fa:fb:c1:ec:45:2b:7f:07:18:fa:f5:e6: e6:58:15:ba:e1:e6:fc:ba:73:1a:cf:7c:0c:70:c5: b9:cf:6e:6f:80:24:9b:fe:82:80:40:99:23:be:30: 6f:ff:06:0e:e5:52:4f:a1:3b:62:d3:ce:31:a3:2f: 82:f6:1b:30:e1:bd:3a:99:26:9a:f5:75:fe:88:cf: 4c:78:cb:e5:61:91:88:c7:cb:6c:a1:3a:a6:d6:99: 4b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:EE:79:EE:A0:B2:68:E9:60:0C:AC:41:37:6B:4B:7D:50:76:AC X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b4:80:57:a7:46:01:f6:50:85:c1:a9:95:df:9b:98:fd:21: d7:1b:a0:09:5e:2d:69:20:92:54:1d:71:c1:0a:9b:c6:ad:f6: 3a:46:eb:d1:d8:0e:00:2e:24:b3:12:36:9b:6e:66:ab:33:71: 8a:cf:6f:b1:ff:41:46:b2:3f:23:56:5e:a9:87:e0:90:7f:a5: c7:c9:4f:59:ab:b7:59:58:e0:42:ad:81:4a:d2:73:f9:76:35: 3f:a1:6e:91:b1:c9:80:f5:70:6f:94:f3:e1:34:8f:9d:37:3f: d1:30:da:d0:c8:4d:ca:c6:f5:2b:c9:89:83:87:28:d0:d3:47: 6d:a6:f0:a5:24:ca:5a:2e:db:19:d5:1b:b9:e3:82:aa:d0:d4: a0:b6:03:5a:20:50:b6:40:1a:4d:0c:c3:f5:50:3c:17:0a:2f: 69:15:82:78:f5:f4:26:6d:da:4b:63:e9:00:13:6c:54:54:8b: b1:dd:ba:0f:5a:49:5e:03:d9:cc:a3:23:1c:df:ed:63:42:4a: d8:f3:c8:33:d1:80:f9:dd:af:de:37:48:9e:77:d0:30:e6:1c: b2:61:7b:c2:ae:74:1b:53:5c:2e:55:63:78:59:0a:7e:d3:20: 95:9f:5b:59:34:71:3b:ed:93:54:11:4e:32:0b:a9:39:0b:60: e5:58:0b:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjUxMDE4MjMyNTM0WhcNMjUxMDI1MjMyNTM0WjAYMRYwFAYD VQQDEw02OGY0MjFlZS1kMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6+laLVHAfe3TsP1+SCrWXQyJAB6xG9GQZfL7vjNwMBBAMoiV8/BNFjTbHim tjPs9LkRN2wclvDUIYAXwli/aiWI3LdDRHRuQusD2/I+vjHOlTE/TL1VQjjde06E n/Q2n0U6GPMxcDKpabOzWALFnR5N940nCdcxmp2EnaI+CvpYF1MiLIPRe7yG3kHm 3P0d0IdYPCNgL9UrkVsSK8H+5l0OQ9CEnZD6+8HsRSt/Bxj69ebmWBW64eb8unMa z3wMcMW5z25vgCSb/oKAQJkjvjBv/wYO5VJPoTti084xoy+C9hsw4b06mSaa9XX+ iM9MeMvlYZGIx8tsoTqm1plLqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxz7nnu oLJo6WAMrEE3a0t9UHasMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBztIBXp0YB9lCFwamV35uY/SHXG6AJXi1pIJJUHXHBCpvGrfY6RuvR 2A4ALiSzEjabbmarM3GKz2+x/0FGsj8jVl6ph+CQf6XHyU9Zq7dZWOBCrYFK0nP5 djU/oW6RscmA9XBvlPPhNI+dNz/RMNrQyE3KxvUryYmDhyjQ00dtpvClJMpaLtsZ 1Ru544Kq0NSgtgNaIFC2QBpNDMP1UDwXCi9pFYJ49fQmbdpLY+kAE2xUVIux3boP WkleA9nMoyMc3+1jQkrY88gz0YD53a/eN0ied9Aw5hyyYXvCrnQbU1wuVWN4WQp+ 0yCVn1tZNHE77ZNUEU4yC6k5C2DlWAuC -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:46 2025 by rpki-client