$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json) Hash identifier: WjGkhE91ckMlcC429XUzTh7fQjeJ9HpxMVlY9sR/oQ4= Subject key identifier: E7:5C:6A:7C:67:AC:40:9C:65:DA:A1:75:B0:5E:18:2E:E2:C0:8C:4F Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33 Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft Manifest number: 05 Signing time: Sun 19 Oct 2025 01:18:29 +0000 Manifest this update: Sun 19 Oct 2025 01:18:28 +0000 Manifest next update: Sun 26 Oct 2025 01:18:28 +0000 Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: f6ooylmBhdJrxzWX3YsvLZc/Op3wT2+cfYUuFqY+Wqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333 Validity Not Before: Oct 19 01:18:28 2025 GMT Not After : Oct 26 01:18:28 2025 GMT Subject: CN=68f43c64-99e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4c:39:fa:53:b7:e7:99:83:79:03:7e:7d:92: 39:10:3b:ce:13:09:fa:58:6c:1e:41:d6:3c:2b:90: 5e:5b:c5:2c:49:6d:38:7c:a4:52:ff:ce:81:b0:e8: 33:9e:d2:ff:be:76:00:11:4e:70:99:b5:01:da:64: 87:1d:71:e4:e7:af:08:4c:c9:7c:0e:4d:b6:d9:9c: 83:fe:32:9d:62:bb:3c:d8:1b:4b:99:36:58:f8:58: b9:4d:e2:53:d1:ae:ca:8a:0c:04:6c:07:00:52:90: 9c:fd:e3:e8:da:91:c5:9f:d6:34:d5:b8:c4:44:04: 5c:85:ea:fe:9f:9c:34:6a:f9:35:88:32:a1:a7:49: 53:30:c3:32:e9:59:99:18:13:17:ff:58:5f:7d:58: af:22:17:0a:b7:ea:89:56:29:bd:bc:cf:ef:35:f3: d6:c7:63:11:71:b2:f2:fb:7a:e7:97:d9:a5:d3:9e: 4c:ec:49:32:4e:37:60:eb:25:88:b7:6c:29:6a:96: 77:31:0c:a2:f3:13:54:e7:cb:a1:6a:ba:2b:40:64: a9:46:19:1c:c5:5c:1a:2a:30:b7:0e:b3:40:92:f6: 25:03:26:5a:f3:a1:22:f0:fd:de:ca:05:8f:de:19: ff:5d:c6:34:08:94:41:2e:b6:b0:f8:a7:5f:b4:24: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5C:6A:7C:67:AC:40:9C:65:DA:A1:75:B0:5E:18:2E:E2:C0:8C:4F X509v3 Authority Key Identifier: keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:98:7a:f1:49:61:8f:b0:e6:73:2d:da:f8:90:a1:94:54:a8: a8:ae:7d:de:00:e5:de:0c:f6:5c:bd:04:33:7d:9e:f7:d1:5e: 49:8e:c1:78:e9:8b:4c:38:23:18:8f:57:c9:ed:12:7c:45:78: 33:e6:80:f3:d9:9e:54:28:63:3d:38:92:ef:14:a1:81:14:26: 26:fe:5d:9f:2d:70:cc:30:43:e3:d6:e6:a7:3b:f2:40:38:e7: 0b:e7:a8:18:79:0c:09:c9:96:7e:bc:b7:d2:dc:cf:36:13:b1: 39:75:da:22:84:16:b0:b4:03:02:e0:31:10:68:96:f0:9d:51: 0a:7f:8d:ce:e4:fe:77:c9:b8:73:30:00:62:40:20:95:4d:75: 8d:77:42:83:b5:72:9f:38:7e:20:0f:29:f7:41:c5:f9:ac:ff: 46:ac:20:9c:48:bf:1e:18:8c:4f:95:bc:18:da:dc:bc:a0:7a: 5f:da:3f:ff:d1:c1:96:fb:64:bc:9d:d5:2e:75:f6:3f:3f:86: 93:1d:c8:7d:3c:b7:f5:fd:0e:14:a2:9b:58:c2:e3:c5:dd:0a: cc:4d:78:94:55:2c:cf:18:de:6a:44:fa:f4:b9:e4:60:df:c9: 3a:78:fa:d5:ce:bc:1a:e5:11:b6:0d:2b:e3:08:9f:04:9d:39: df:5d:22:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTRCNzExMC8GA1UEBRMoOTdDODU3QTc1QzlBNkUyOThCMDlBMDYxRDhGN0NFMTA3 QkY5RDMzMzAeFw0yNTEwMTkwMTE4MjhaFw0yNTEwMjYwMTE4MjhaMBgxFjAUBgNV BAMTDTY4ZjQzYzY0LTk5ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgTDn6U7fnmYN5A359kjkQO84TCfpYbB5B1jwrkF5bxSxJbTh8pFL/zoGw6DOe 0v++dgARTnCZtQHaZIcdceTnrwhMyXwOTbbZnIP+Mp1iuzzYG0uZNlj4WLlN4lPR rsqKDARsBwBSkJz94+jakcWf1jTVuMREBFyF6v6fnDRq+TWIMqGnSVMwwzLpWZkY Exf/WF99WK8iFwq36olWKb28z+8189bHYxFxsvL7eueX2aXTnkzsSTJON2DrJYi3 bClqlncxDKLzE1Tny6FquitAZKlGGRzFXBoqMLcOs0CS9iUDJlrzoSLw/d7KBY/e Gf9dxjQIlEEutrD4p1+0JJGbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU51xqfGes QJxl2qF1sF4YLuLAjE8wHwYDVR0jBBgwFoAUl8hXp1yabimLCaBh2PfOEHv50zMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFNEI3L0JEOEFFRDA4QTY0 MjExRjBBQzk5NTgzM0M0RjlBRTAyL2w4aFhwMXlhYmltTENhQmgyUGZPRUh2NTB6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbDhoWHAxeWFiaW1MQ2FCaDJQZk9FSHY1MHpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF NEI3L0JEOEFFRDA4QTY0MjExRjBBQzk5NTgzM0M0RjlBRTAyL2w4aFhwMXlhYmlt TENhQmgyUGZPRUh2NTB6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWYevFJYY+w5nMt2viQoZRUqKiufd4A5d4M9ly9BDN9nvfRXkmOwXjp i0w4IxiPV8ntEnxFeDPmgPPZnlQoYz04ku8UoYEUJib+XZ8tcMwwQ+PW5qc78kA4 5wvnqBh5DAnJln68t9LczzYTsTl12iKEFrC0AwLgMRBolvCdUQp/jc7k/nfJuHMw AGJAIJVNdY13QoO1cp84fiAPKfdBxfms/0asIJxIvx4YjE+VvBja3Lygel/aP//R wZb7ZLyd1S519j8/hpMdyH08t/X9DhSim1jC48XdCsxNeJRVLM8Y3mpE+vS55GDf yTp4+tXOvBrlEbYNK+MInwSdOd9dIlw= -----END CERTIFICATE-----Generated at Tue Oct 21 04:15:46 2025 by rpki-client