$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json) Hash identifier: MuU7PUFt15V18Rl91Xzm33N0OlVt/1w+eUdD70wIKrA= Subject key identifier: EB:98:9E:45:43:73:CC:20:6E:B2:A9:2E:59:56:92:E9:5B:EF:98:47 Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft Manifest number: 0240 Signing time: Sun 19 Oct 2025 04:04:59 +0000 Manifest this update: Sun 19 Oct 2025 04:04:59 +0000 Manifest next update: Sun 26 Oct 2025 04:04:59 +0000 Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: lEkC5ktgq3ecrwAHqFd0R6hBI+3SnCifbztMC5wefaE=) 2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: rc/VDMjkPbB4X1/rw349yGgl9pIXGG2Nvyj57rr+IWw=) 3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: 1pnwFpSmR4EBTHjCO/gvMKBX3b/KZHcHGgKDB9usLIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Validity Not Before: Oct 19 04:04:59 2025 GMT Not After : Oct 26 04:04:59 2025 GMT Subject: CN=68f4636b-34eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:e6:20:33:41:bd:92:55:c5:0a:d0:c9:db: c8:e1:13:d9:a6:4f:a1:ae:3b:86:9c:71:33:98:40: 7b:79:96:96:76:92:12:1a:03:1a:fd:41:e1:38:df: d6:c3:90:dd:29:1e:74:94:1c:4e:6d:3c:4e:f8:82: b7:2d:fd:d6:6e:9c:5d:ab:fd:7b:15:d0:0a:cb:1f: 61:e0:bd:28:fc:5a:53:cf:9b:b5:4e:d0:09:07:f2: b2:8d:6c:40:20:fb:f2:12:d1:ca:58:98:05:a1:09: d7:6c:77:37:5f:92:69:f0:08:b6:e7:df:03:98:99: 2b:35:08:a5:c9:56:79:00:23:ef:ca:c2:69:98:68: 24:a9:a9:0b:ff:19:61:67:d7:a2:34:78:de:92:6c: 15:35:60:d0:8c:34:09:54:9c:63:19:88:a9:91:97: c4:fd:d9:f9:bb:d5:45:0b:bf:d6:0e:7e:10:5d:30: e7:6b:7c:4c:2f:06:92:15:b0:44:5d:ae:73:5d:54: 8b:98:31:4a:51:05:45:78:f3:81:58:b7:15:0d:90: af:d6:93:38:2a:6b:bc:9f:db:ad:cb:50:84:a8:55: 70:fb:76:3e:a0:f9:f7:10:b2:07:55:7e:e1:c5:d6: 3f:da:ea:77:98:62:f3:91:b6:3f:ff:c8:e7:5a:07: ed:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:98:9E:45:43:73:CC:20:6E:B2:A9:2E:59:56:92:E9:5B:EF:98:47 X509v3 Authority Key Identifier: keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7f:09:2e:ce:c4:c6:fd:e7:d5:91:d5:75:1d:03:6b:95:a0: e8:0d:4d:e0:cc:af:12:31:34:5b:bc:4b:da:de:6d:ce:d4:6d: f2:35:4a:33:91:e8:3b:25:73:6e:a4:b8:df:1c:04:41:2a:39: b3:2a:9f:d1:8f:0f:1f:7c:2a:1e:4e:ba:f9:ca:f5:5a:09:cb: 5d:29:83:dc:61:a5:92:5f:9a:5e:05:4c:94:db:07:ac:0d:65: 4e:dc:c8:d2:53:1c:35:53:25:05:b8:3e:25:c6:5f:26:0d:fb: 12:4e:14:ff:25:ac:4f:8a:d1:71:30:2c:1e:b8:bf:fc:3c:da: 16:bd:91:2d:ac:1b:91:a0:75:e8:a0:6f:9b:6d:82:ea:24:cc: 1f:d6:4f:a2:27:f9:62:81:3e:db:50:a2:20:20:82:6c:70:54: 45:5f:7c:13:2e:29:a4:ab:87:2b:15:6c:2a:44:da:fc:32:c8: 92:55:48:05:d0:94:30:15:ca:2b:40:28:02:6e:87:30:6e:41: 7f:3b:75:60:8d:57:69:92:f3:bf:aa:d0:92:10:22:cb:eb:e0: b2:7c:6f:52:7a:b5:1b:dc:bb:06:7e:8f:f6:01:b5:38:a8:4a: 93:d4:36:cd:8f:54:f2:d4:ae:3a:a3:d4:18:74:98:59:21:07: 12:c2:a4:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5 QjEzNzU4MUYwHhcNMjUxMDE5MDQwNDU5WhcNMjUxMDI2MDQwNDU5WjAYMRYwFAYD VQQDEw02OGY0NjM2Yi0zNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsLmIDNBvZJVxQrQydvI4RPZpk+hrjuGnHEzmEB7eZaWdpISGgMa/UHhON/W w5DdKR50lBxObTxO+IK3Lf3Wbpxdq/17FdAKyx9h4L0o/FpTz5u1TtAJB/KyjWxA IPvyEtHKWJgFoQnXbHc3X5Jp8Ai2598DmJkrNQilyVZ5ACPvysJpmGgkqakL/xlh Z9eiNHjekmwVNWDQjDQJVJxjGYipkZfE/dn5u9VFC7/WDn4QXTDna3xMLwaSFbBE Xa5zXVSLmDFKUQVFePOBWLcVDZCv1pM4Kmu8n9uty1CEqFVw+3Y+oPn3ELIHVX7h xdY/2up3mGLzkbY//8jnWgftXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuYnkVD c8wgbrKpLllWkulb75hHMB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCQi85NDUxRDM3MjRBMDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hL Wl9paG0tV2hzb0tiRTNXQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4fwkuzsTG/efVkdV1HQNrlaDoDU3gzK8SMTRbvEva3m3O1G3yNUoz keg7JXNupLjfHARBKjmzKp/Rjw8ffCoeTrr5yvVaCctdKYPcYaWSX5peBUyU2wes DWVO3MjSUxw1UyUFuD4lxl8mDfsSThT/JaxPitFxMCweuL/8PNoWvZEtrBuRoHXo oG+bbYLqJMwf1k+iJ/ligT7bUKIgIIJscFRFX3wTLimkq4crFWwqRNr8MsiSVUgF 0JQwFcorQCgCbocwbkF/O3VgjVdpkvO/qtCSECLL6+CyfG9SerUb3LsGfo/2AbU4 qEqT1DbNj1Ty1K46o9QYdJhZIQcSwqSF -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:37 2025 by rpki-client