$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: kkwrS/tWWrsMXa3xfZYPVkbOHaL3VryJyGAmieT8+rY= Subject key identifier: 08:5E:97:8B:02:BA:5E:23:EA:E6:38:AB:16:28:CE:03:1B:2C:9B:73 Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 03EA Signing time: Sun 19 Oct 2025 02:30:27 +0000 Manifest this update: Sun 19 Oct 2025 02:30:26 +0000 Manifest next update: Sun 26 Oct 2025 02:30:26 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: BCG0mpqlBX/rUOIoiCMrtrSVzpmEz0E5nJS+S4KBj6c=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: +qgf84XC7fwqmND33skSgzHGmdhqJ+EK/64iZ97m69g=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: M3aykX0j4vteJ7Aeu69jjSSSHCYOZs36DtkdcU8NJ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: Oct 19 02:30:26 2025 GMT Not After : Oct 26 02:30:26 2025 GMT Subject: CN=68f44d43-b7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ee:8e:eb:ec:a9:ac:67:90:54:b5:3d:ca:84: 99:98:c8:16:08:ff:2e:5a:df:72:9f:8f:86:a4:14: 14:50:58:86:67:df:97:e1:ed:5e:d6:a1:2d:da:02: 4a:ba:30:55:39:c4:28:85:bb:8b:6c:81:a6:88:bd: f2:c9:72:c4:dc:16:5f:58:77:3c:fc:95:2f:0b:6e: 64:98:90:ce:a9:df:8e:4c:5a:ae:f6:bb:81:ec:d4: 06:59:db:4f:aa:d9:22:ec:9f:32:c4:88:d2:c4:1b: ab:da:4d:b2:2e:cf:af:bf:94:f6:c5:d0:35:7f:2c: 6a:57:1a:29:71:d8:9b:87:38:47:78:38:3e:91:8f: 3b:d4:0b:46:e3:bf:8b:9f:ac:ad:ec:79:2f:45:a1: 92:94:a6:e2:07:b6:97:9e:12:67:a5:4f:23:e6:91: 0c:05:75:dc:07:34:71:b5:4c:86:c6:78:1b:19:d8: d8:1e:62:30:b6:86:1e:a5:2b:57:7d:78:e3:4f:ff: 3a:e6:f9:a7:1e:78:e4:25:8d:81:7e:0b:d9:b5:7f: da:da:a6:27:95:f7:3b:01:8f:cd:4a:7b:b6:78:b5: a2:3b:b5:d6:13:92:0d:17:bb:48:95:aa:c9:b8:14: 52:ea:9c:05:03:86:a6:50:33:90:de:ce:05:50:90: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5E:97:8B:02:BA:5E:23:EA:E6:38:AB:16:28:CE:03:1B:2C:9B:73 X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:10:d8:a3:9c:55:50:f5:07:ed:20:6c:68:f0:ff:f9:e5:13: ad:ee:0a:c7:af:70:70:ca:8f:02:cc:6a:28:1a:5e:d9:9b:b7: a2:a3:56:90:df:7c:32:fa:dc:5b:99:8e:0a:78:f1:bb:8f:3a: 6c:28:c1:7b:17:4d:6c:91:19:8e:a4:40:f8:3f:14:ca:f7:e4: 0b:c8:38:06:d0:40:ba:62:7e:0b:e9:c0:70:72:a7:71:a9:71: 1d:b7:34:24:1d:b2:0e:7f:1f:bf:bc:cc:c2:5b:a6:33:c5:f4: 36:8c:46:ce:6d:2f:d3:a1:f1:e9:0e:3e:6e:8d:63:bd:48:8a: 63:1c:16:cb:47:62:09:a8:6e:cf:9c:cd:de:3d:d9:0c:3e:0e: 64:79:42:1c:fc:a0:0e:95:51:c6:19:16:ee:5e:58:88:e3:56: 84:15:ae:38:ea:4d:50:16:21:48:ce:2c:b3:89:f9:c5:59:15: 9e:ec:7b:48:68:82:37:fd:0c:82:c0:b7:5e:6b:5f:02:2d:3d: 37:7c:bc:0c:04:a1:01:0d:67:dd:f3:d6:71:d2:13:48:2b:e1: 91:48:ec:b4:c5:6f:4b:d5:b1:2f:00:38:d8:bb:3f:5f:c5:8a: a7:bd:af:68:e1:ab:19:95:fe:af:d8:c2:07:09:bd:0c:43:91: bc:e8:6c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjUxMDE5MDIzMDI2WhcNMjUxMDI2MDIzMDI2WjAYMRYwFAYD VQQDEw02OGY0NGQ0My1iN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2O6O6+yprGeQVLU9yoSZmMgWCP8uWt9yn4+GpBQUUFiGZ9+X4e1e1qEt2gJK ujBVOcQohbuLbIGmiL3yyXLE3BZfWHc8/JUvC25kmJDOqd+OTFqu9ruB7NQGWdtP qtki7J8yxIjSxBur2k2yLs+vv5T2xdA1fyxqVxopcdibhzhHeDg+kY871AtG47+L n6yt7HkvRaGSlKbiB7aXnhJnpU8j5pEMBXXcBzRxtUyGxngbGdjYHmIwtoYepStX fXjjT/865vmnHnjkJY2BfgvZtX/a2qYnlfc7AY/NSnu2eLWiO7XWE5INF7tIlarJ uBRS6pwFA4amUDOQ3s4FUJC3rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhel4sC ul4j6uY4qxYozgMbLJtzMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsENijnFVQ9QftIGxo8P/55ROt7grHr3Bwyo8CzGooGl7Zm7eio1aQ 33wy+txbmY4KePG7jzpsKMF7F01skRmOpED4PxTK9+QLyDgG0EC6Yn4L6cBwcqdx qXEdtzQkHbIOfx+/vMzCW6YzxfQ2jEbObS/TofHpDj5ujWO9SIpjHBbLR2IJqG7P nM3ePdkMPg5keUIc/KAOlVHGGRbuXliI41aEFa446k1QFiFIziyzifnFWRWe7HtI aII3/QyCwLdea18CLT03fLwMBKEBDWfd89Zx0hNIK+GRSOy0xW9L1bEvADjYuz9f xYqnva9o4asZlf6v2MIHCb0MQ5G86Gwm -----END CERTIFICATE-----Generated at Mon Oct 20 21:41:04 2025 by rpki-client