$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: A3zejBh8oKhGl9w6xIS3l2M9LIvO9SEbA0Ahb8yhABk= Subject key identifier: CD:08:59:CD:9E:90:52:B6:A0:8F:A3:3E:EA:B8:5B:4B:CB:1A:2B:61 Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: 0126 Signing time: Sun 19 Oct 2025 07:36:31 +0000 Manifest this update: Sun 19 Oct 2025 07:36:31 +0000 Manifest next update: Sun 26 Oct 2025 07:36:31 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: jjyaMcdUSQCY7Uk5Rsrl5DYeJ0poNVO99Z6Pm411q0o=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: IW95bSZsBV41wSCyDVp5L0J87U9yD7MOcR2qX+Jqshk=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 2lCm+k56qwvoxDHPy2MJ2gVzKL/gSEiow6ar2mDrask=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Oct 19 07:36:31 2025 GMT Not After : Oct 26 07:36:31 2025 GMT Subject: CN=68f494ff-9a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:d2:4a:3e:58:9e:1c:4a:e0:9e:51:4d:4e: 97:0b:46:36:d7:fe:b0:75:00:70:a3:6d:17:00:d8: 41:8b:7d:4d:22:5d:40:7f:17:f3:25:e4:85:c0:f6: dd:96:47:16:5c:10:fd:1d:ac:51:64:e8:28:c6:ce: 02:61:2c:d3:fa:5f:3a:a7:b6:ea:d9:f3:5d:3c:e8: da:42:8c:61:d9:9f:fa:8e:07:ac:81:b9:d9:07:5a: a1:51:5d:ad:7c:7d:3b:4c:f4:da:6d:b5:98:4f:ee: 09:56:a4:32:32:a8:4c:f8:e7:9c:7d:b1:1e:70:cd: 17:05:3e:0a:bb:36:ab:a5:cf:db:c4:a1:46:59:c4: 4a:ee:8d:75:5d:04:e3:1c:cf:ba:da:cf:92:44:cf: d3:88:cc:b5:5b:b1:51:80:b4:e3:36:87:40:17:dc: d4:74:05:f7:66:cf:8a:b9:15:da:2d:56:53:9d:ac: e7:f4:93:17:d0:5a:88:dd:87:a6:62:06:a7:53:b7: 0b:69:12:13:f8:94:1f:5d:81:7e:af:86:e3:86:f1: da:59:22:b7:2c:52:39:90:88:be:eb:41:7f:83:fb: e2:e9:b0:8e:33:e7:6a:0d:c7:04:e6:8f:30:1e:db: cf:bb:b3:cb:4b:1d:90:7c:51:12:18:e4:cc:6a:a1: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:08:59:CD:9E:90:52:B6:A0:8F:A3:3E:EA:B8:5B:4B:CB:1A:2B:61 X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:47:c2:55:13:55:b7:16:e6:40:89:0c:d3:34:28:9a:a9:ab: 5c:fa:07:7e:e4:c1:2c:66:a2:1c:5b:b5:f3:9a:f5:bf:f5:88: ec:19:09:7e:2b:06:ca:18:2c:e1:60:2e:94:59:f7:dd:ce:f5: 7b:0b:cc:23:c0:65:7e:b5:7d:fb:d7:99:5c:cc:98:11:b9:4d: a5:be:42:bb:71:96:9d:2a:8e:a4:b6:9b:62:03:c2:db:8a:43: 76:a4:0c:9f:bd:3d:76:33:ea:3c:cf:6a:2f:6b:3a:4f:b4:b5: d6:99:e9:63:36:fa:2c:18:d2:c9:d7:a3:05:77:78:df:88:2d: 56:8b:96:57:65:1b:36:98:c4:22:48:9c:e2:ba:1a:4c:dd:26: 78:6b:e5:2d:78:c1:b0:40:a9:1c:ed:9e:03:e1:d1:d3:55:bf: d1:a5:2b:4d:e0:5e:47:24:93:99:f6:04:0d:cb:7e:8f:47:6b: dc:54:cf:0e:e2:30:61:de:14:a7:aa:8a:81:98:e0:cd:b8:12: 2d:bb:90:82:9c:31:60:1f:f7:3b:1c:ee:7c:1c:a2:bc:a9:c6: ab:9a:a4:23:7c:54:bc:c5:95:2a:1f:1b:bb:84:7c:ab:7d:0a: 82:d5:29:25:41:79:09:69:6e:fa:2b:18:57:b1:d8:67:fb:93: 84:f7:0e:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUxMDE5MDczNjMxWhcNMjUxMDI2MDczNjMxWjAYMRYwFAYD VQQDEw02OGY0OTRmZi05YTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwx3SSj5YnhxK4J5RTU6XC0Y21/6wdQBwo20XANhBi31NIl1AfxfzJeSFwPbd lkcWXBD9HaxRZOgoxs4CYSzT+l86p7bq2fNdPOjaQoxh2Z/6jgesgbnZB1qhUV2t fH07TPTabbWYT+4JVqQyMqhM+OecfbEecM0XBT4Kuzarpc/bxKFGWcRK7o11XQTj HM+62s+SRM/TiMy1W7FRgLTjNodAF9zUdAX3Zs+KuRXaLVZTnazn9JMX0FqI3Yem YganU7cLaRIT+JQfXYF+r4bjhvHaWSK3LFI5kIi+60F/g/vi6bCOM+dqDccE5o8w HtvPu7PLSx2QfFESGOTMaqFd4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0IWc2e kFK2oI+jPuq4W0vLGithMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/R8JVE1W3FuZAiQzTNCiaqatc+gd+5MEsZqIcW7XzmvW/9YjsGQl+ KwbKGCzhYC6UWffdzvV7C8wjwGV+tX3715lczJgRuU2lvkK7cZadKo6ktptiA8Lb ikN2pAyfvT12M+o8z2ovazpPtLXWmeljNvosGNLJ16MFd3jfiC1Wi5ZXZRs2mMQi SJziuhpM3SZ4a+UteMGwQKkc7Z4D4dHTVb/RpStN4F5HJJOZ9gQNy36PR2vcVM8O 4jBh3hSnqoqBmODNuBItu5CCnDFgH/c7HO58HKK8qcarmqQjfFS8xZUqHxu7hHyr fQqC1SklQXkJaW76KxhXsdhn+5OE9w7J -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:42 2025 by rpki-client