$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: p8Ucy8qzlE67KN+9NniEc3uYnV81faE6p28Ae499kfg= Subject key identifier: E8:6F:49:09:F8:FD:46:A5:9B:8A:E0:1E:70:2F:AC:9C:3D:5E:63:FA Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 05F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 05F1 Signing time: Sun 19 Oct 2025 00:35:44 +0000 Manifest this update: Sun 19 Oct 2025 00:35:43 +0000 Manifest next update: Sun 26 Oct 2025 00:35:43 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: BChnnqgtWH+ayaQrqp6mr7h+HZTC3q2NpsgZFgNlhxA=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: Yz0s0SgslhEB/Ux9X8zgj1HP5jX8LMQjR8aSmtueyxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1529 (0x5f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Oct 19 00:35:43 2025 GMT Not After : Oct 26 00:35:43 2025 GMT Subject: CN=68f4325f-6f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cb:f8:9a:bb:9f:b6:74:93:3b:06:49:f9:32: 4b:ce:08:49:ae:03:3f:b1:81:36:6b:b7:c6:ad:7c: 46:fd:55:cf:ca:af:c8:7d:a5:ac:e7:a9:09:01:87: 1f:32:5d:22:b2:01:c6:7b:48:0b:b4:54:82:ca:bd: 8e:de:34:ee:90:ca:6b:7a:ae:9a:7d:d4:7b:aa:c6: c1:e7:87:d1:27:01:c2:fe:97:a3:d8:df:ef:71:b1: 0e:f6:85:b7:95:12:a1:8f:fc:97:49:5d:b6:e6:f0: 70:22:d7:cf:54:38:81:9b:bf:5d:51:a8:c6:ed:d1: 69:92:af:03:01:e4:4e:3e:af:07:bc:fb:55:3a:9e: 30:51:d2:1c:a3:e7:29:e9:b6:df:2c:61:17:b2:6b: c3:17:1e:f8:af:96:d5:15:ba:32:cb:69:c8:e2:c4: 05:81:5a:79:22:98:cd:c8:b0:07:4f:24:83:25:5e: 50:7f:24:9d:9d:4c:52:4b:48:da:74:87:62:d7:63: 93:ed:fe:80:8f:0f:53:84:81:e4:4e:05:6c:cd:d3: 4f:95:4f:4a:04:58:58:9a:2d:7b:d4:2c:3a:11:d8: 75:f2:09:16:b6:0b:90:f7:89:34:81:38:38:47:3a: 16:7b:1a:0d:4a:62:9a:34:05:93:74:57:65:02:c1: 6f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6F:49:09:F8:FD:46:A5:9B:8A:E0:1E:70:2F:AC:9C:3D:5E:63:FA X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:66:af:0d:f5:f3:f6:2d:14:c2:1c:e4:9f:30:ad:05:58:65: ff:52:40:6a:be:f0:9a:ef:9e:de:69:48:b4:a1:9e:cd:df:07: 88:e5:c9:7f:12:2c:f1:1f:fa:f7:57:94:01:54:de:0d:47:f9: e5:96:fe:15:04:da:b8:87:94:5b:50:68:64:9f:25:a3:e5:17: 4a:94:2d:5f:5e:4c:56:5d:9e:cb:0c:53:c6:52:b4:62:df:fb: 4f:e5:52:5f:db:6b:09:4b:70:d7:1e:81:92:f9:93:bb:3a:a9: d3:99:ed:1d:02:b9:32:72:99:50:f2:71:ae:0c:d3:56:c1:aa: c6:a3:8b:33:4f:31:b7:e6:84:25:fb:9b:aa:76:a4:9e:6f:7a: 03:fd:ed:3b:b8:8c:90:89:6f:df:c6:f0:c7:a5:b9:39:c7:b8: b9:08:f7:35:72:ad:85:27:43:9c:04:d2:28:47:fd:19:79:fa: ec:35:aa:d0:e2:25:35:dc:56:64:3a:68:25:a4:67:a5:a7:a2: a9:95:b0:b8:9b:cf:32:56:f4:cd:22:5b:75:a1:c9:e0:03:9f: 1c:4c:d8:ab:7a:79:4d:ad:b8:0a:58:cf:8d:e6:f6:de:79:68: 9f:c5:75:dc:f2:c3:84:bf:fd:dc:84:29:e1:3f:25:df:8e:8f: f9:36:4f:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjUxMDE5MDAzNTQzWhcNMjUxMDI2MDAzNTQzWjAYMRYwFAYD VQQDEw02OGY0MzI1Zi02ZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cv4mruftnSTOwZJ+TJLzghJrgM/sYE2a7fGrXxG/VXPyq/IfaWs56kJAYcf Ml0isgHGe0gLtFSCyr2O3jTukMpreq6afdR7qsbB54fRJwHC/pej2N/vcbEO9oW3 lRKhj/yXSV225vBwItfPVDiBm79dUajG7dFpkq8DAeROPq8HvPtVOp4wUdIco+cp 6bbfLGEXsmvDFx74r5bVFboyy2nI4sQFgVp5IpjNyLAHTySDJV5QfySdnUxSS0ja dIdi12OT7f6Ajw9ThIHkTgVszdNPlU9KBFhYmi171Cw6Edh18gkWtguQ94k0gTg4 RzoWexoNSmKaNAWTdFdlAsFvoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhvSQn4 /Ualm4rgHnAvrJw9XmP6MB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKZq8N9fP2LRTCHOSfMK0FWGX/UkBqvvCa757eaUi0oZ7N3weI5cl/ EizxH/r3V5QBVN4NR/nllv4VBNq4h5RbUGhknyWj5RdKlC1fXkxWXZ7LDFPGUrRi 3/tP5VJf22sJS3DXHoGS+ZO7OqnTme0dArkycplQ8nGuDNNWwarGo4szTzG35oQl +5uqdqSeb3oD/e07uIyQiW/fxvDHpbk5x7i5CPc1cq2FJ0OcBNIoR/0ZefrsNarQ 4iU13FZkOmglpGelp6KplbC4m88yVvTNIlt1ocngA58cTNirenlNrbgKWM+N5vbe eWifxXXc8sOEv/3chCnhPyXfjo/5Nk8s -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:47 2025 by rpki-client