$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: Ihqs+OvfLdiDZ+4J3exCJi31UzSG//IA2A2FLK/SCE8= Subject key identifier: E2:4E:DD:07:D2:35:C0:5E:28:FF:AA:3B:FF:71:BD:8C:B5:98:37:46 Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 085A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 0853 Signing time: Sat 18 Oct 2025 21:52:26 +0000 Manifest this update: Sat 18 Oct 2025 21:52:25 +0000 Manifest next update: Sat 25 Oct 2025 21:52:25 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: pb3SPVs3cA4yilLzrtrOh+jHgRqADhheYHqso0T2tEE=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: pAtkMYoP9pyBPl/xXuNkKMm/3mhUwbxuTSTQt0etagU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2138 (0x85a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: Oct 18 21:52:25 2025 GMT Not After : Oct 25 21:52:25 2025 GMT Subject: CN=68f40c1a-1ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:f8:63:00:95:d7:29:ae:ce:0f:3f:f2:72: 79:fc:4d:9e:11:4a:42:ac:a8:c5:fe:ea:73:d4:db: 9b:47:8c:dd:31:95:b4:29:4d:24:96:0e:c4:8c:95: ab:8a:b0:f8:dd:1c:d2:cc:fd:8b:05:f3:d9:cc:69: 1a:72:7d:cf:76:dd:f4:15:42:c5:76:ca:b9:67:bb: bb:01:f0:04:ec:fd:a1:98:89:a5:9c:28:9a:22:bf: 64:71:08:7a:a9:78:e6:f5:a3:27:cd:89:52:94:5a: a9:dd:ba:da:7d:c2:88:ee:0c:5e:51:b2:10:0a:bf: be:78:ee:f7:e7:77:cb:b7:ad:e5:61:c3:f5:46:7b: 99:14:6e:35:70:a2:45:a3:06:be:ca:9b:72:79:19: eb:69:1d:66:4f:b6:52:98:f1:7e:29:c4:84:20:33: e7:5c:3e:1c:d9:6b:64:01:40:71:13:45:92:db:75: 2f:06:93:bd:01:a8:eb:ae:f8:90:db:24:00:45:e8: 1b:7f:82:80:8a:3d:b4:d1:10:4e:2f:9d:fb:9f:f4: 45:2a:a0:23:cc:53:16:44:13:53:a4:26:19:18:87: 3b:8a:94:33:d4:1f:2b:1d:e6:5d:8d:13:95:17:3c: ca:21:91:0e:26:02:33:83:3a:3c:ba:06:e8:bb:58: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4E:DD:07:D2:35:C0:5E:28:FF:AA:3B:FF:71:BD:8C:B5:98:37:46 X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1a:d9:53:f1:8a:1f:df:17:4b:08:c4:18:87:13:de:5a:b2: 45:a7:14:65:33:60:5e:bb:27:1c:12:46:ab:1c:9b:4f:d1:9b: 7e:bb:26:6c:77:dc:aa:cd:74:c9:0d:90:d3:c5:29:7e:0b:c5: 8c:29:76:08:c3:0b:83:3a:22:0c:08:2e:82:15:70:4b:53:13: 7c:cd:90:03:3a:8d:94:84:95:50:17:0d:15:a3:49:b2:f1:69: 53:8c:bc:e2:05:f6:79:c2:ab:fc:c7:a2:5a:2c:c4:63:1b:a0: 5e:d7:ad:3f:d9:a0:97:d1:66:5a:18:5a:f2:aa:ca:fd:bb:e3: 0a:ad:7e:e9:25:b1:d0:5c:f7:c5:81:2f:3e:65:03:62:3b:05: 2a:92:9b:14:9b:7f:11:bc:96:0b:8c:ed:f2:7f:0b:f3:ce:b3: 94:4d:33:aa:2a:2f:1d:0a:9a:bb:1f:2c:06:6e:38:f1:55:d9: ec:03:ae:fa:4d:cc:63:23:ed:96:f9:9f:36:2c:8d:bc:b8:90: a9:76:02:b4:8e:0a:f1:93:93:89:27:8b:7c:7e:31:e3:70:5d: 3c:72:79:e4:a0:5b:f5:4b:40:dc:b4:db:8e:eb:bf:58:8d:6e: 22:ae:22:6f:89:c3:00:7e:0b:f2:29:84:07:32:5a:26:01:04: 17:83:a1:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjUxMDE4MjE1MjI1WhcNMjUxMDI1MjE1MjI1WjAYMRYwFAYD VQQDEw02OGY0MGMxYS0xZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk74YwCV1ymuzg8/8nJ5/E2eEUpCrKjF/upz1NubR4zdMZW0KU0klg7EjJWr irD43RzSzP2LBfPZzGkacn3Pdt30FULFdsq5Z7u7AfAE7P2hmImlnCiaIr9kcQh6 qXjm9aMnzYlSlFqp3brafcKI7gxeUbIQCr++eO7353fLt63lYcP1RnuZFG41cKJF owa+yptyeRnraR1mT7ZSmPF+KcSEIDPnXD4c2WtkAUBxE0WS23UvBpO9AajrrviQ 2yQARegbf4KAij200RBOL537n/RFKqAjzFMWRBNTpCYZGIc7ipQz1B8rHeZdjROV FzzKIZEOJgIzgzo8ugbou1jYiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJO3QfS NcBeKP+qO/9xvYy1mDdGMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaGtlT8Yof3xdLCMQYhxPeWrJFpxRlM2BeuyccEkarHJtP0Zt+uyZs d9yqzXTJDZDTxSl+C8WMKXYIwwuDOiIMCC6CFXBLUxN8zZADOo2UhJVQFw0Vo0my 8WlTjLziBfZ5wqv8x6JaLMRjG6Be160/2aCX0WZaGFryqsr9u+MKrX7pJbHQXPfF gS8+ZQNiOwUqkpsUm38RvJYLjO3yfwvzzrOUTTOqKi8dCpq7HywGbjjxVdnsA676 TcxjI+2W+Z82LI28uJCpdgK0jgrxk5OJJ4t8fjHjcF08cnnkoFv1S0DctNuO679Y jW4iriJvicMAfgvyKYQHMlomAQQXg6EO -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:04 2025 by rpki-client