$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json) Hash identifier: i7FEZHA7NzlLqtgj0biUPctthjvAGSMhirt9JihFiD0= Subject key identifier: 5F:F0:8B:BA:12:A6:28:79:93:8E:F2:EC:E5:2D:CB:08:96:3B:93:D4 Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft Manifest number: 0244 Signing time: Sun 19 Oct 2025 04:00:43 +0000 Manifest this update: Sun 19 Oct 2025 04:00:43 +0000 Manifest next update: Sun 26 Oct 2025 04:00:43 +0000 Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: TjyYgpjgez4JprKE8oH37uh8HE161Vg3njRDfCXqWl4=) 2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: Bpmtc+dst8i9fWSSTK2qFRlGSZiBtVfIZ/yU5akTF90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: Oct 19 04:00:43 2025 GMT Not After : Oct 26 04:00:43 2025 GMT Subject: CN=68f4626b-d9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c7:b7:ce:5a:c7:c4:83:d4:49:66:74:9c:49: 63:84:c7:68:f8:b5:95:a1:15:52:3b:f8:c6:95:62: e7:ff:d5:96:8b:80:98:0e:8c:9c:25:90:5e:94:5e: 72:7f:e1:23:1f:a9:c2:a5:b3:07:a0:9e:c1:01:10: d7:40:29:05:5d:fb:f0:b7:29:4c:d4:74:e8:a5:11: 2d:c0:c2:61:25:cc:1a:0c:d8:bb:e5:a4:f0:e2:5d: 9a:98:cb:c3:45:30:41:e4:27:ce:93:b6:ff:54:50: ec:38:13:b3:75:e3:fa:02:da:37:8c:2a:a8:ed:c6: 2b:02:43:f7:ea:33:ba:43:da:a6:95:11:bf:70:52: d5:2b:a9:0e:00:34:1f:27:26:8c:50:1b:ec:6f:d5: c6:0b:c0:d0:c1:2a:ca:42:cc:3f:a7:3f:35:06:ca: 30:a7:e9:1c:d2:e9:7d:8c:fd:0c:76:18:8d:ed:64: 79:cf:39:93:39:9a:9a:60:57:b9:48:d8:97:22:55: 55:a7:48:d7:04:a4:ad:fc:81:ba:5a:16:51:cc:7e: 6f:a7:16:b2:a1:bf:23:e1:6f:9a:a8:8a:dd:e7:6b: 7b:2a:85:39:89:3a:c5:80:4d:5c:bb:b7:57:89:ec: 35:e2:f7:6e:ea:70:ef:3f:45:ed:a8:2a:5a:a2:a3: fd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F0:8B:BA:12:A6:28:79:93:8E:F2:EC:E5:2D:CB:08:96:3B:93:D4 X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:88:fe:fe:53:02:cd:20:c4:14:4d:ba:45:be:19:71:df:ae: 98:6d:3e:5d:b8:29:89:8d:a8:a5:03:ca:c4:60:66:bf:7d:ea: 82:32:fe:0f:55:14:4b:52:b8:18:6f:08:0c:5f:37:c9:bc:cc: e1:1f:93:36:11:44:26:1b:72:79:ff:ae:d6:ce:08:40:50:5e: ea:71:9d:8e:0b:8b:a9:25:5c:27:c9:57:3e:db:a0:32:e7:26: 8e:ac:51:a1:7e:ef:1b:50:7d:eb:c8:39:a5:0b:1a:ad:6a:ab: 20:20:1c:2c:7f:3d:25:ed:ea:5c:25:8e:f4:c2:26:89:40:16: 30:aa:03:af:61:a6:25:17:3b:84:19:21:4c:49:c7:07:82:02: a2:f9:48:4a:53:ef:06:0e:b1:f0:83:df:95:a0:85:b4:db:3a: 66:1b:3f:03:ea:92:8b:92:67:82:36:5b:12:bb:85:24:c6:a5: 30:66:87:cd:9a:a6:92:61:27:55:20:16:e7:49:68:93:85:b7: 98:e1:44:9f:49:52:83:72:9c:9a:10:da:86:81:88:af:0e:db: 1e:e6:8e:f2:9f:4f:e2:0b:f1:2b:5b:75:c3:51:c2:4b:55:6d: 96:c3:27:cb:ee:8e:b7:80:39:c7:36:8a:7a:03:e9:91:b7:9f: d0:69:e9:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjUxMDE5MDQwMDQzWhcNMjUxMDI2MDQwMDQzWjAYMRYwFAYD VQQDEw02OGY0NjI2Yi1kOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ce3zlrHxIPUSWZ0nEljhMdo+LWVoRVSO/jGlWLn/9WWi4CYDoycJZBelF5y f+EjH6nCpbMHoJ7BARDXQCkFXfvwtylM1HTopREtwMJhJcwaDNi75aTw4l2amMvD RTBB5CfOk7b/VFDsOBOzdeP6Ato3jCqo7cYrAkP36jO6Q9qmlRG/cFLVK6kOADQf JyaMUBvsb9XGC8DQwSrKQsw/pz81Bsowp+kc0ul9jP0MdhiN7WR5zzmTOZqaYFe5 SNiXIlVVp0jXBKSt/IG6WhZRzH5vpxayob8j4W+aqIrd52t7KoU5iTrFgE1cu7dX iew14vdu6nDvP0XtqCpaoqP9+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/wi7oS pih5k47y7OUtywiWO5PUMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t OWozbWdfUWtKSUpBLTNJcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpiP7+UwLNIMQUTbpFvhlx366YbT5duCmJjailA8rEYGa/feqCMv4P VRRLUrgYbwgMXzfJvMzhH5M2EUQmG3J5/67WzghAUF7qcZ2OC4upJVwnyVc+26Ay 5yaOrFGhfu8bUH3ryDmlCxqtaqsgIBwsfz0l7epcJY70wiaJQBYwqgOvYaYlFzuE GSFMSccHggKi+UhKU+8GDrHwg9+VoIW02zpmGz8D6pKLkmeCNlsSu4UkxqUwZofN mqaSYSdVIBbnSWiThbeY4USfSVKDcpyaENqGgYivDtse5o7yn0/iC/ErW3XDUcJL VW2WwyfL7o63gDnHNop6A+mRt5/QaenV -----END CERTIFICATE-----Generated at Mon Oct 20 02:51:11 2025 by rpki-client