$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft File: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json) Hash identifier: BUbUWdB2JiUnZ9a3t8oc5e3tcAkV9GWjCsTP2aMXm9k= Subject key identifier: 2A:CD:0D:F8:14:63:4E:F6:EB:46:9C:DF:FC:A7:D2:E5:F0:EC:97:42 Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78 Certificate issuer: /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft Manifest number: AE Signing time: Sun 19 Oct 2025 09:18:38 +0000 Manifest this update: Sun 19 Oct 2025 09:18:37 +0000 Manifest next update: Sun 26 Oct 2025 09:18:37 +0000 Files and hashes: 1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: pdgHZKypGnh5YT/xCnim/6/v2r2sXaPRjjHIuplwLcI=) 2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78 Validity Not Before: Oct 19 09:18:37 2025 GMT Not After : Oct 26 09:18:37 2025 GMT Subject: CN=68f4acee-4c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:f4:c6:32:1b:2b:4b:9e:d4:e8:8a:b5:fd: 1f:60:a9:25:d7:fa:21:dd:3b:64:66:64:08:b8:d9: b6:7c:2a:30:05:24:8a:81:6b:b6:bc:81:51:ed:50: 83:e7:65:e0:f7:a5:6d:92:9d:ea:6b:f0:a5:24:30: 92:fa:d6:d0:3d:b9:98:fd:21:50:c5:a0:71:4c:47: 6f:ba:08:92:21:e1:cf:4c:67:fe:bf:ec:67:b0:6b: 55:24:b3:da:8e:17:99:8d:80:af:00:67:35:d6:fd: 29:fa:0e:82:42:89:01:13:27:f1:11:c4:9d:26:3e: e2:76:79:f1:9f:f4:c0:8e:fe:ba:d6:0e:a3:b3:ab: 1a:97:0a:e1:37:40:d8:87:48:1e:a7:f1:4e:10:cc: 75:69:3f:e3:e0:c2:7b:ec:b7:9c:c7:7e:4f:82:d0: e3:76:00:c5:21:d3:8c:1f:f7:fd:55:c0:c1:e5:69: e1:d8:f4:02:b5:04:b9:07:ab:00:8c:cc:df:a2:42: 39:ce:0c:14:ab:30:fb:1b:d3:b0:20:74:55:b1:0e: 7c:14:3f:9d:18:c0:6b:88:bd:7a:c4:26:2d:4c:0d: 21:dd:7d:d3:1c:15:64:9a:f0:02:6a:ca:75:dc:1a: 3a:96:98:f9:f4:d3:8c:79:3d:8f:0c:e9:22:71:c0: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:0D:F8:14:63:4E:F6:EB:46:9C:DF:FC:A7:D2:E5:F0:EC:97:42 X509v3 Authority Key Identifier: keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:81:62:2a:12:85:36:bf:6e:f1:f4:0b:a4:b1:36:eb:6e:0a: 9e:6c:ab:37:12:65:8d:73:b7:b1:59:67:b0:50:b8:04:ef:53: 19:56:9d:b8:91:6a:c0:bc:02:39:f1:f8:b2:80:05:c0:b2:12: 28:48:8f:85:8a:b8:77:9c:b2:57:56:28:16:a1:ca:cf:a2:d0: d7:04:2f:cc:4c:30:97:c3:b4:68:30:6c:22:2b:bf:05:03:c3: e6:6b:f0:56:62:9a:86:55:32:6b:3e:75:37:7e:84:55:12:d1: bc:f4:2d:30:f8:b3:75:da:a8:1e:f8:d3:fc:de:ce:0a:dd:8d: e3:7d:4e:e4:ce:14:15:fb:25:36:fe:5c:99:2f:c6:00:a6:ae: 19:9e:0c:3d:0a:22:0b:fc:51:d1:08:c4:d6:d5:28:83:69:b6: 7a:52:39:26:6e:67:a2:02:30:7c:d6:8e:e6:81:79:3a:1b:ad: 71:96:83:70:cb:03:f8:4e:7f:b3:1d:aa:4a:a9:73:bd:ce:e6: e2:34:41:62:f6:d2:31:62:d3:14:2f:99:7c:e0:cd:8b:8e:58: 4f:9a:c0:82:bc:79:1a:91:82:42:be:67:e4:69:e1:72:0c:5d: 66:a4:91:65:44:8d:4f:82:59:db:82:8a:08:6a:88:58:c9:37: 10:85:1d:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1RDkxMTAvBgNVBAUTKEYyNkE4MTAxOTE2OTUyRkIyMEJFMDFFOEZDN0M5MEVE QzlFRTlGNzgwHhcNMjUxMDE5MDkxODM3WhcNMjUxMDI2MDkxODM3WjAYMRYwFAYD VQQDEw02OGY0YWNlZS00YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvy30xjIbK0ue1OiKtf0fYKkl1/oh3TtkZmQIuNm2fCowBSSKgWu2vIFR7VCD 52Xg96Vtkp3qa/ClJDCS+tbQPbmY/SFQxaBxTEdvugiSIeHPTGf+v+xnsGtVJLPa jheZjYCvAGc11v0p+g6CQokBEyfxEcSdJj7idnnxn/TAjv661g6js6salwrhN0DY h0gep/FOEMx1aT/j4MJ77Lecx35PgtDjdgDFIdOMH/f9VcDB5Wnh2PQCtQS5B6sA jMzfokI5zgwUqzD7G9OwIHRVsQ58FD+dGMBriL16xCYtTA0h3X3THBVkmvACasp1 3Bo6lpj59NOMeT2PDOkiccDnyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrNDfgU Y07260ac3/yn0uXw7JdCMB8GA1UdIwQYMBaAFPJqgQGRaVL7IL4B6Px8kO3J7p94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVEOS9DRDU0RDczOEEy ODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2c2d2Z0hvX0h5UTdjbnVu M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhtcUJBWkZwVXZzZ3ZnSG9fSHlRN2NudW4zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVEOS9DRDU0RDczOEEyODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2 c2d2Z0hvX0h5UTdjbnVuM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSgWIqEoU2v27x9AuksTbrbgqebKs3EmWNc7exWWewULgE71MZVp24 kWrAvAI58fiygAXAshIoSI+Firh3nLJXVigWocrPotDXBC/MTDCXw7RoMGwiK78F A8Pma/BWYpqGVTJrPnU3foRVEtG89C0w+LN12qge+NP83s4K3Y3jfU7kzhQV+yU2 /lyZL8YApq4Zngw9CiIL/FHRCMTW1SiDabZ6UjkmbmeiAjB81o7mgXk6G61xloNw ywP4Tn+zHapKqXO9zubiNEFi9tIxYtMUL5l84M2LjlhPmsCCvHkakYJCvmfkaeFy DF1mpJFlRI1PglnbgooIaohYyTcQhR3s -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:49 2025 by rpki-client