$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: LSOxZ2JPSnFYM5WDItJql0fIi6yZjmn1TWFG8NN1llQ= Subject key identifier: 1E:CA:29:FB:E6:B1:B2:80:77:26:61:3B:20:B9:3D:88:21:08:D6:84 Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 06F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 06F4 Signing time: Sat 18 Oct 2025 23:23:23 +0000 Manifest this update: Sat 18 Oct 2025 23:23:22 +0000 Manifest next update: Sat 25 Oct 2025 23:23:22 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: G3uZVUcft501EGziT+Yq/5VwQ1/zsBeFbNfG45RbD1k=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Oct 18 23:23:22 2025 GMT Not After : Oct 25 23:23:22 2025 GMT Subject: CN=68f4216b-9f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:7f:7b:9c:1a:89:3f:cf:b7:35:ce:50:45: c5:b8:f5:4d:4e:ad:89:11:68:0b:ba:29:ae:99:ee: 55:ca:a7:16:e5:de:3f:ff:5c:f7:29:2f:20:e1:d1: 6b:b3:cd:8d:9e:1d:04:9f:7a:61:c3:69:88:07:0b: 3a:87:4a:e8:24:5f:61:a8:d2:9e:eb:1e:f5:f9:0b: d4:35:60:67:ae:63:e1:91:54:5b:d2:3c:f9:5d:98: 68:94:04:24:cd:09:e6:e4:80:04:79:cb:0f:4d:94: f8:0b:d9:ac:53:21:8e:d8:62:38:9f:25:18:22:2d: f2:f4:bb:9f:19:ac:53:3d:3e:0e:69:f2:58:12:6f: b3:28:4a:5c:66:ea:92:8d:2e:e7:12:78:08:70:e6: ea:30:8e:e8:65:e3:b8:2e:cd:52:c4:5c:92:a6:6c: 2a:08:64:2b:4f:bb:8b:de:e7:56:a2:da:07:a5:64: 8c:72:f3:8c:54:33:dd:29:a9:21:e3:a0:08:82:0e: e6:4a:a3:64:e2:30:f9:3e:b7:9b:be:de:51:d6:22: de:79:64:d8:8c:38:0c:64:a0:36:65:60:ea:93:a9: 7a:57:f9:aa:3f:4d:12:5c:f3:77:76:9e:b5:1f:b9: ed:04:6e:65:7c:40:30:20:72:4d:15:51:fe:b4:bd: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CA:29:FB:E6:B1:B2:80:77:26:61:3B:20:B9:3D:88:21:08:D6:84 X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:18:c9:71:3c:98:12:af:17:67:6d:3c:b8:8a:3c:b4:7a:76: 73:b1:29:0a:22:e2:1a:3f:3d:ac:85:bf:65:2b:30:e0:cf:d9: af:bc:b8:39:2d:f8:9c:b1:6c:39:49:22:35:1f:09:6f:75:a0: 0a:a2:51:82:0d:ec:1e:67:d0:8f:b4:b4:7a:f4:47:0f:d5:b2: d0:f5:9f:0c:9a:c1:a7:d9:81:57:3f:24:15:b7:18:e5:07:49: ca:c2:98:ec:a7:3b:57:ab:14:05:63:a8:8b:c2:d6:b0:01:5e: 3a:c8:de:72:fb:19:db:0b:52:8f:ea:2c:ea:c2:e9:0b:f9:eb: e1:2b:58:b8:d7:c2:36:04:23:d1:14:64:ae:38:3f:c5:4e:95: f4:75:93:76:05:1c:53:2e:c0:eb:65:28:0c:29:1d:06:1c:eb: 15:4b:6b:1d:f5:3e:d4:e7:82:45:99:c8:14:c7:49:41:6f:49: 8a:c1:fb:0b:73:bf:7f:fe:b2:96:30:5f:90:8d:f4:66:f9:71: e8:b4:bb:cb:cd:18:57:56:a2:b7:ed:bb:a4:03:43:e3:c8:ee: 3f:06:3d:06:ea:e3:d9:95:96:50:57:99:38:20:c1:5c:76:a2: 5c:6d:eb:8b:72:9b:1b:31:51:be:03:76:91:df:a9:d3:69:0f: ec:cb:90:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjUxMDE4MjMyMzIyWhcNMjUxMDI1MjMyMzIyWjAYMRYwFAYD VQQDEw02OGY0MjE2Yi05ZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgx/e5waiT/PtzXOUEXFuPVNTq2JEWgLuimume5VyqcW5d4//1z3KS8g4dFr s82Nnh0En3phw2mIBws6h0roJF9hqNKe6x71+QvUNWBnrmPhkVRb0jz5XZholAQk zQnm5IAEecsPTZT4C9msUyGO2GI4nyUYIi3y9LufGaxTPT4OafJYEm+zKEpcZuqS jS7nEngIcObqMI7oZeO4Ls1SxFySpmwqCGQrT7uL3udWotoHpWSMcvOMVDPdKakh 46AIgg7mSqNk4jD5Prebvt5R1iLeeWTYjDgMZKA2ZWDqk6l6V/mqP00SXPN3dp61 H7ntBG5lfEAwIHJNFVH+tL2BpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7KKfvm sbKAdyZhOyC5PYghCNaEMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcGMlxPJgSrxdnbTy4ijy0enZzsSkKIuIaPz2shb9lKzDgz9mvvLg5 LficsWw5SSI1HwlvdaAKolGCDeweZ9CPtLR69EcP1bLQ9Z8MmsGn2YFXPyQVtxjl B0nKwpjspztXqxQFY6iLwtawAV46yN5y+xnbC1KP6izqwukL+evhK1i418I2BCPR FGSuOD/FTpX0dZN2BRxTLsDrZSgMKR0GHOsVS2sd9T7U54JFmcgUx0lBb0mKwfsL c79//rKWMF+QjfRm+XHotLvLzRhXVqK37bukA0PjyO4/Bj0G6uPZlZZQV5k4IMFc dqJcbeuLcpsbMVG+A3aR36nTaQ/sy5AH -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:52 2025 by rpki-client