$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: 63O1fL4U5cjIgUg37ote9bkqyMlHNcxA2NSsuBPT9jE= Subject key identifier: C9:D8:56:6D:60:0E:0D:62:BD:CD:AF:AC:6B:97:BB:F2:4C:60:47:83 Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: AC Signing time: Sun 19 Oct 2025 09:19:18 +0000 Manifest this update: Sun 19 Oct 2025 09:19:17 +0000 Manifest next update: Sun 26 Oct 2025 09:19:17 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: v4QsW770oQAccdk1DKXPXMJ7MRHjKA/bNw2hJnr3PQk=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Oct 19 09:19:17 2025 GMT Not After : Oct 26 09:19:17 2025 GMT Subject: CN=68f4ad16-8e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:24:a8:8e:6c:d6:b8:90:37:b5:fa:89:30: 2a:e2:dd:a8:08:cd:a0:ce:8e:cd:b3:65:28:86:b9: c0:4b:b4:df:43:88:27:22:d3:20:96:85:8c:21:9e: 53:77:ca:e2:d0:57:89:54:87:86:da:d1:0b:4b:27: 59:1d:01:5d:78:4d:40:af:65:bd:e8:a8:25:7e:37: 9d:ed:29:54:5a:73:56:a3:96:b2:03:5b:f3:d9:3b: c7:94:f4:02:65:b6:51:27:09:02:44:d1:ae:58:04: 73:b8:ad:9c:46:5e:0d:d9:27:8e:03:7a:ed:5a:a6: 1f:bb:3c:ce:55:b6:4c:a6:52:66:89:75:da:5e:fb: e3:e5:d8:18:b3:24:62:ea:8a:33:59:f3:15:b6:02: 0a:28:06:7b:c0:98:a5:48:be:39:99:ea:27:6b:e1: 77:2c:f7:7e:1c:3d:53:2d:3f:8d:91:36:b2:c8:7b: 81:dc:00:bc:2b:fd:bf:f6:95:36:ea:0e:ba:4c:78: 5a:43:3c:7e:51:8f:5c:a3:d5:30:d5:65:6b:b2:23: 80:d5:bc:02:c1:34:6e:ec:8b:09:fe:f1:27:9f:08: c1:da:27:54:18:ad:b7:6e:5f:29:df:ca:08:71:91: 35:f7:ad:38:5f:e4:c8:00:b6:11:79:af:70:f9:96: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D8:56:6D:60:0E:0D:62:BD:CD:AF:AC:6B:97:BB:F2:4C:60:47:83 X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:31:24:13:9d:1e:98:8e:9c:54:86:b4:09:b1:6b:dc:43:69: 46:3e:26:fd:e0:8f:61:9a:9b:65:6f:3f:65:ca:09:f2:29:c6: 07:7c:f7:a8:9e:bb:1d:d5:15:2b:7e:b7:26:b8:72:8a:54:0a: 65:e3:9a:99:9e:ea:27:34:bf:f6:f0:78:db:ea:42:0f:bf:6a: a9:34:e7:09:0f:4e:d9:80:b3:5e:11:12:0d:35:dc:19:2f:5d: e2:0e:f4:fb:15:60:8b:c7:ec:da:a0:c4:88:b4:a7:d2:9a:6b: 89:34:d0:d7:a4:71:d4:bc:4b:57:16:26:a0:50:04:09:0f:15: 36:70:e7:fc:72:ac:bd:3e:31:44:7a:23:0d:1d:20:49:76:af: a0:a2:84:bc:ea:45:ba:dc:20:cb:98:c4:3b:9c:69:42:57:f8: 6a:71:4c:0a:1b:40:36:76:5a:13:e4:dd:81:b9:43:a7:19:ae: 5d:d8:07:2c:00:f6:dd:23:38:b5:54:c9:fe:e6:6b:94:4e:5d: 64:62:eb:d1:a5:3e:63:6c:c0:fd:63:e3:e2:7c:cc:a4:6c:d2: 1b:6b:b1:47:36:8b:fe:03:58:b5:f2:40:8b:0c:55:7c:e5:ef: 92:00:db:bb:62:1c:3f:e3:cc:ec:c8:8d:89:f7:4e:42:bc:a9: 5a:68:42:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKEYwNDkyOUVGNzQzQzU0QzA4QjQ1RTE5Q0ZDNTFCRjJB QTU1OURBQTEwHhcNMjUxMDE5MDkxOTE3WhcNMjUxMDI2MDkxOTE3WjAYMRYwFAYD VQQDEw02OGY0YWQxNi04ZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWckqI5s1riQN7X6iTAq4t2oCM2gzo7Ns2UohrnAS7TfQ4gnItMgloWMIZ5T d8ri0FeJVIeG2tELSydZHQFdeE1Ar2W96Kglfjed7SlUWnNWo5ayA1vz2TvHlPQC ZbZRJwkCRNGuWARzuK2cRl4N2SeOA3rtWqYfuzzOVbZMplJmiXXaXvvj5dgYsyRi 6oozWfMVtgIKKAZ7wJilSL45meona+F3LPd+HD1TLT+NkTayyHuB3AC8K/2/9pU2 6g66THhaQzx+UY9co9Uw1WVrsiOA1bwCwTRu7IsJ/vEnnwjB2idUGK23bl8p38oI cZE19604X+TIALYRea9w+ZZTHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnYVm1g Dg1ivc2vrGuXu/JMYEeDMB8GA1UdIwQYMBaAFPBJKe90PFTAi0XhnPxRvyqlWdqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84QzIxNDk3NEE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZNQ0xSZUdjX0ZHX0txVloy cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84QzIxNDk3NEE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZN Q0xSZUdjX0ZHX0txVloycUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6MSQTnR6YjpxUhrQJsWvcQ2lGPib94I9hmptlbz9lygnyKcYHfPeo nrsd1RUrfrcmuHKKVApl45qZnuonNL/28Hjb6kIPv2qpNOcJD07ZgLNeERINNdwZ L13iDvT7FWCLx+zaoMSItKfSmmuJNNDXpHHUvEtXFiagUAQJDxU2cOf8cqy9PjFE eiMNHSBJdq+gooS86kW63CDLmMQ7nGlCV/hqcUwKG0A2dloT5N2BuUOnGa5d2Acs APbdIzi1VMn+5muUTl1kYuvRpT5jbMD9Y+PifMykbNIba7FHNov+A1i18kCLDFV8 5e+SANu7Yhw/48zsyI2J905CvKlaaEJn -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:13 2025 by rpki-client