$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: fTfFt6TjQ3PXs+e5wdmqzHHMYCHMfeKG0IRsb7Fl9oE= Subject key identifier: DA:DD:F7:79:2A:CF:99:F6:B2:E0:B0:9A:0C:05:D1:CB:67:01:EE:14 Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0BB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0BAF Signing time: Sat 18 Oct 2025 19:47:10 +0000 Manifest this update: Sat 18 Oct 2025 19:47:09 +0000 Manifest next update: Sat 25 Oct 2025 19:47:09 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: SZojiHwCXM+9iFXH0YnDETpRXxvDrBJhGI7NUsuIDHA=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: 5tQROkuKBdGr5CDnMUVPHlhLeJ1/YaIHTHWkyStRniQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2999 (0xbb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Oct 18 19:47:09 2025 GMT Not After : Oct 25 19:47:09 2025 GMT Subject: CN=68f3eebe-c27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:78:90:5c:19:19:8e:04:1a:15:ac:2c:f4: 3c:6d:3e:dc:90:3e:7c:7b:c0:cc:a5:9e:a0:cb:9f: 8e:a2:af:7f:4a:3a:18:25:1a:d5:76:7b:04:a4:c4: 4a:75:4b:c0:e2:61:20:94:49:b3:0e:8f:f7:ba:ed: 11:b0:d7:cb:01:33:a5:09:68:cf:dc:ef:09:2a:c5: ca:4b:77:fd:bb:00:01:82:59:c1:0c:18:8c:85:8a: 2c:6c:95:64:32:10:30:60:ac:3b:44:74:59:da:2e: 27:28:ba:d9:37:da:a1:0f:5f:93:f0:39:cc:34:d0: ac:74:12:09:8b:5d:75:2e:f5:b3:22:ac:29:5f:65: 8b:61:d0:ee:f0:59:9a:45:9a:db:43:06:14:86:30: 83:3a:a9:6d:8c:e2:6b:47:59:05:0d:2d:f6:f1:0f: 0f:ae:ff:d5:dc:e5:4b:e8:c3:b0:7b:5e:96:8b:bf: dc:b5:47:da:e3:e0:b7:42:8f:41:c1:30:a9:e4:d1: 66:db:e6:d3:7a:8d:20:a3:7b:8b:c1:7f:d0:7f:b0: 39:d4:23:b4:11:a2:e6:79:25:52:ff:78:76:0b:ba: de:6b:67:1d:01:cb:fa:74:e6:06:21:c7:c7:fe:2e: 82:ec:03:41:a0:69:2c:e6:9e:34:12:4e:2e:02:3f: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DD:F7:79:2A:CF:99:F6:B2:E0:B0:9A:0C:05:D1:CB:67:01:EE:14 X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:75:b0:b5:03:a8:7d:9d:75:08:60:ca:8a:76:d1:e5:ae:f3: 17:ef:bf:13:2f:f2:3e:ae:df:bd:24:19:54:70:c7:f2:ba:93: ed:35:7a:af:22:1d:d2:ca:22:1b:b9:51:4d:46:64:57:75:ba: cd:a4:d4:79:ec:d4:13:ea:15:7b:66:1f:2b:ce:8e:d7:96:cc: 2a:aa:9e:1a:20:f0:b0:5d:b1:b2:83:03:2c:53:fd:72:b0:7c: d8:6d:bd:98:99:c9:34:9a:d3:35:f0:7d:d2:36:f8:0a:a9:b1: 9d:3c:82:10:ee:02:8a:30:dd:54:50:da:b3:dc:ae:62:ac:ad: f7:65:98:7c:74:39:b2:d4:89:d1:55:b5:71:ee:8e:9c:21:20: 57:0a:c3:b7:17:fc:35:32:26:3e:df:7c:ad:70:e4:b5:9d:09: 38:bb:0d:66:ca:a1:41:29:d2:79:3d:86:a4:9b:55:a9:1d:1d: 76:b2:22:fd:f5:e9:ce:7f:66:ba:e6:50:0f:b5:34:3c:8d:d1: 80:da:d4:4c:ce:68:8c:c2:32:b2:b9:35:ef:0c:84:9a:4b:f8: f5:00:04:4c:93:79:d3:cb:ce:31:63:eb:df:08:2d:be:0f:55: a5:64:2c:d0:71:bf:d0:76:75:ff:bb:61:cb:af:11:61:12:56: 24:9b:ae:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjUxMDE4MTk0NzA5WhcNMjUxMDI1MTk0NzA5WjAYMRYwFAYD VQQDEw02OGYzZWViZS1jMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJN4kFwZGY4EGhWsLPQ8bT7ckD58e8DMpZ6gy5+Ooq9/SjoYJRrVdnsEpMRK dUvA4mEglEmzDo/3uu0RsNfLATOlCWjP3O8JKsXKS3f9uwABglnBDBiMhYosbJVk MhAwYKw7RHRZ2i4nKLrZN9qhD1+T8DnMNNCsdBIJi111LvWzIqwpX2WLYdDu8Fma RZrbQwYUhjCDOqltjOJrR1kFDS328Q8Prv/V3OVL6MOwe16Wi7/ctUfa4+C3Qo9B wTCp5NFm2+bTeo0go3uLwX/Qf7A51CO0EaLmeSVS/3h2C7rea2cdAcv6dOYGIcfH /i6C7ANBoGks5p40Ek4uAj+SSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrd93kq z5n2suCwmgwF0ctnAe4UMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWdbC1A6h9nXUIYMqKdtHlrvMX778TL/I+rt+9JBlUcMfyupPtNXqv Ih3SyiIbuVFNRmRXdbrNpNR57NQT6hV7Zh8rzo7Xlswqqp4aIPCwXbGygwMsU/1y sHzYbb2Ymck0mtM18H3SNvgKqbGdPIIQ7gKKMN1UUNqz3K5irK33ZZh8dDmy1InR VbVx7o6cISBXCsO3F/w1MiY+33ytcOS1nQk4uw1myqFBKdJ5PYakm1WpHR12siL9 9enOf2a65lAPtTQ8jdGA2tRMzmiMwjKyuTXvDISaS/j1AARMk3nTy84xY+vfCC2+ D1WlZCzQcb/QdnX/u2HLrxFhElYkm64g -----END CERTIFICATE-----Generated at Mon Oct 20 17:24:37 2025 by rpki-client