$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft File: zI7F8Y4keEmlxwbphTthhkju8qY.mft (raw, json) Hash identifier: nP03AhVpduy3K51Jo+2CpLauvR7IZEAHxIY/K5Gv3j4= Subject key identifier: C8:C4:B2:79:B4:C8:DD:CA:25:55:EA:4B:AC:49:EA:16:02:3A:68:76 Authority key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6 Certificate issuer: /CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft Manifest number: 0205 Signing time: Sun 19 Oct 2025 04:41:34 +0000 Manifest this update: Sun 19 Oct 2025 04:41:34 +0000 Manifest next update: Sun 26 Oct 2025 04:41:34 +0000 Files and hashes: 1: zI7F8Y4keEmlxwbphTthhkju8qY.crl (hash: EAuI9w9t47TNG9EvclcBvXxNGT6LAAkv3SPIwpuTm5M=) 2: F9141F4891AA11EDBEE1242EC4F9AE02.roa (hash: wW1wDfapN4aqyKsyA7zutue+89v5koktR+64VobzRks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C12, serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6 Validity Not Before: Oct 19 04:41:34 2025 GMT Not After : Oct 26 04:41:34 2025 GMT Subject: CN=68f46bfe-98db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:03:80:76:c8:a2:4c:3a:38:9f:34:61:69:52: 9f:d7:b9:51:88:d1:c9:fe:d0:86:b3:89:2f:fb:51: fe:89:7a:0f:10:5a:e9:43:3c:c4:8c:a5:ec:0a:c3: 3c:cb:0e:ee:f8:02:90:86:18:af:df:1f:e8:52:ac: eb:87:49:94:c3:f5:d7:7f:e8:c8:a3:13:ec:a0:54: ef:fc:b5:de:58:a8:47:1a:f0:01:c5:20:c8:26:a4: 75:18:51:df:cc:eb:f2:d4:93:c1:d7:be:e6:aa:2d: 4f:a1:ff:69:5d:a4:11:79:0d:f9:c0:99:eb:22:64: 7f:35:9c:35:30:74:e8:32:0e:c9:70:fa:54:74:66: 3f:95:8f:c1:17:d1:5a:71:a9:a7:da:dc:c3:76:c2: 94:26:64:18:f8:31:ff:c5:52:23:b3:31:c8:ce:12: f1:1c:97:17:5a:47:b7:a3:2b:93:1f:f2:49:64:60: a7:f7:98:b8:87:b3:c2:90:62:81:b3:bc:31:70:e3: 76:5f:5e:00:ab:09:94:93:85:b6:90:89:cc:b3:0f: b7:43:66:9e:b9:ed:0e:33:f3:88:27:fd:f0:41:ea: f1:d3:54:6d:1c:50:c2:65:fe:2f:16:ff:b5:87:8c: ac:ef:8a:02:fb:20:60:4a:f6:a4:61:3e:c1:9d:71: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C4:B2:79:B4:C8:DD:CA:25:55:EA:4B:AC:49:EA:16:02:3A:68:76 X509v3 Authority Key Identifier: keyid:CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:12:8a:9d:21:7e:0e:32:0d:6b:65:cd:49:ea:e3:72:5d:90: ed:de:96:8d:a5:d0:31:f2:5e:19:78:95:5d:4e:3f:f2:6a:91: f1:fd:69:1d:64:9f:c2:ea:4c:74:8e:d9:e0:b4:25:2c:c5:a7: 7b:56:b8:ae:8e:b2:9c:08:a7:ec:34:45:b5:2e:96:c6:ce:ce: 5d:f5:d2:be:a1:e9:63:80:77:56:73:9d:93:c1:f1:51:fa:37: bc:86:21:d2:21:d1:6a:37:84:f7:74:d3:30:27:73:5f:e7:0f: b3:c3:bf:ca:48:95:e8:47:24:66:67:7b:fe:f5:7e:fa:70:a7: 16:3f:b8:f2:e2:18:2b:e5:c2:63:61:ee:a7:32:5c:ec:77:e2: 62:c4:9e:9f:2f:9e:68:9a:1e:6f:45:d4:5a:7d:4a:ea:bd:1e: 38:85:f0:13:46:0b:22:e3:9b:94:9c:63:62:69:52:c1:cc:30: c3:79:62:2b:91:43:cc:8a:8d:3d:84:23:05:67:da:51:f7:6f: 68:fd:46:72:cd:b9:2a:86:5e:d5:39:61:36:1e:1c:dd:78:06: e8:a6:8e:39:73:43:f1:9a:07:fb:90:16:fb:0b:0b:37:b8:32: d4:10:96:9f:5c:24:0a:fb:0b:b0:48:42:92:2f:3d:3b:63:e9: 0a:ee:d0:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTIxMTAvBgNVBAUTKENDOEVDNUYxOEUyNDc4NDlBNUM3MDZFOTg1M0I2MTg2 NDhFRUYyQTYwHhcNMjUxMDE5MDQ0MTM0WhcNMjUxMDI2MDQ0MTM0WjAYMRYwFAYD VQQDEw02OGY0NmJmZS05OGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gOAdsiiTDo4nzRhaVKf17lRiNHJ/tCGs4kv+1H+iXoPEFrpQzzEjKXsCsM8 yw7u+AKQhhiv3x/oUqzrh0mUw/XXf+jIoxPsoFTv/LXeWKhHGvABxSDIJqR1GFHf zOvy1JPB177mqi1Pof9pXaQReQ35wJnrImR/NZw1MHToMg7JcPpUdGY/lY/BF9Fa camn2tzDdsKUJmQY+DH/xVIjszHIzhLxHJcXWke3oyuTH/JJZGCn95i4h7PCkGKB s7wxcON2X14AqwmUk4W2kInMsw+3Q2aeue0OM/OIJ/3wQerx01RtHFDCZf4vFv+1 h4ys74oC+yBgSvakYT7BnXGLsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjEsnm0 yN3KJVXqS6xJ6hYCOmh2MB8GA1UdIwQYMBaAFMyOxfGOJHhJpccG6YU7YYZI7vKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMi8zRUQwODUyNjkx QTYxMUVEQjcyQzU5NTZDNEY5QUUwMi96STdGOFk0a2VFbWx4d2JwaFR0aGhranU4 cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJN0Y4WTRrZUVtbHh3YnBoVHRoaGtqdThxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMi8zRUQwODUyNjkxQTYxMUVEQjcyQzU5NTZDNEY5QUUwMi96STdGOFk0a2VF bWx4d2JwaFR0aGhranU4cVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0EoqdIX4OMg1rZc1J6uNyXZDt3paNpdAx8l4ZeJVdTj/yapHx/Wkd ZJ/C6kx0jtngtCUsxad7VriujrKcCKfsNEW1LpbGzs5d9dK+oeljgHdWc52TwfFR +je8hiHSIdFqN4T3dNMwJ3Nf5w+zw7/KSJXoRyRmZ3v+9X76cKcWP7jy4hgr5cJj Ye6nMlzsd+JixJ6fL55omh5vRdRafUrqvR44hfATRgsi45uUnGNiaVLBzDDDeWIr kUPMio09hCMFZ9pR929o/UZyzbkqhl7VOWE2HhzdeAbopo45c0Pxmgf7kBb7Cws3 uDLUEJafXCQK+wuwSEKSLz07Y+kK7tD4 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:36 2025 by rpki-client