$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: twPek+CFVHobJyYZGwD3oWzuqQiBBKHSDog0e4IxFD4= Subject key identifier: 14:E6:49:F3:80:B2:DB:B8:51:DC:01:17:23:EB:9B:10:74:A3:9F:62 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 08B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 08B0 Signing time: Sat 18 Oct 2025 21:37:56 +0000 Manifest this update: Sat 18 Oct 2025 21:37:56 +0000 Manifest next update: Sat 25 Oct 2025 21:37:56 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: gfzpP3s7ydLN8mQePM1f6JZVHFdyHHjtEU7O/tWhbJo=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: aGXCfIMMPiIdkB1VXV5Wr23hUeKQclg0bIflcTFqVx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2230 (0x8b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Oct 18 21:37:56 2025 GMT Not After : Oct 25 21:37:56 2025 GMT Subject: CN=68f408b4-499b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:2f:ad:31:41:df:d5:2c:8d:6b:e5:9c:d8: 93:d3:48:3d:64:17:f3:70:80:a9:88:b3:86:d5:0b: 0a:86:cd:97:29:48:0a:12:3a:78:59:0e:f6:bb:c9: c3:e0:03:bc:6b:40:b6:a5:eb:bd:49:48:d2:bf:26: 56:e7:9f:56:af:20:83:be:68:32:4f:1d:98:6b:9e: 05:05:b4:5b:b2:b0:a9:1e:86:2c:56:56:92:c2:4b: 05:ee:71:39:ca:82:f7:33:28:86:78:2a:bd:18:42: a4:34:1e:2e:1e:bb:32:ea:9c:3d:71:d1:b4:1d:a6: 38:ed:a9:01:37:a7:e4:1f:02:87:95:bd:d3:09:c0: 45:c4:1d:ad:d7:67:60:52:21:f8:b0:0f:7d:4d:a8: d7:ac:71:7a:f3:ed:37:ea:ed:8e:66:e1:d4:ad:cd: 09:8d:19:2d:7e:58:a0:78:22:c4:1e:98:1e:65:9f: 0a:02:58:1a:2c:b5:da:75:a3:d1:ac:76:23:af:69: 25:b7:59:97:f0:41:3b:93:90:1f:ec:aa:8b:30:4b: e1:b1:ea:0b:a1:61:53:fd:62:82:4d:23:a4:a9:fb: 4a:30:f3:df:35:8d:44:58:57:0d:51:60:a3:7d:7f: 35:92:1f:9b:bc:b6:58:54:85:ad:78:2a:03:fd:8c: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E6:49:F3:80:B2:DB:B8:51:DC:01:17:23:EB:9B:10:74:A3:9F:62 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e0:1a:53:d8:f7:e5:c6:a7:ab:38:ba:97:90:56:17:f1:29: ed:02:dd:c0:f7:28:2d:d8:60:fa:d4:62:1b:97:0e:99:a5:f0: 13:34:13:87:af:aa:6d:f0:99:55:4b:7e:8f:96:f7:40:33:04: c2:eb:ca:d2:99:94:f9:fc:b3:81:d1:fa:12:8f:78:a3:31:33: 0f:06:b2:d5:0b:fb:26:48:ae:ea:0d:9b:1b:30:87:ae:a7:05: bd:24:21:e7:3d:13:2d:d1:07:81:43:42:3f:94:78:50:c7:f9: 33:06:17:17:b8:50:03:ed:ae:25:0f:8b:79:16:13:ea:95:22: d9:5c:02:f5:e4:34:ce:40:22:a0:7e:23:b6:11:cd:c6:c8:bc: d6:ef:83:16:1b:85:53:fa:e5:75:4d:89:dd:e5:d4:a3:a7:61: 07:02:96:c1:46:91:cf:30:44:92:bc:b4:c2:68:57:10:46:84: e3:04:ab:28:ef:2d:3f:89:bb:15:3a:06:04:54:41:8b:40:00: 89:9d:cd:b8:2d:70:4d:d5:fd:93:a5:67:ed:02:3b:4b:76:b9: 51:ea:e0:3a:c8:67:cf:4a:4e:a2:14:f4:6a:27:c1:cc:46:7c: e7:33:f6:b4:80:e7:8c:7a:d4:c1:a8:4e:76:f5:90:09:4f:03: bc:9d:8d:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUxMDE4MjEzNzU2WhcNMjUxMDI1MjEzNzU2WjAYMRYwFAYD VQQDEw02OGY0MDhiNC00OTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LkvrTFB39UsjWvlnNiT00g9ZBfzcICpiLOG1QsKhs2XKUgKEjp4WQ72u8nD 4AO8a0C2peu9SUjSvyZW559WryCDvmgyTx2Ya54FBbRbsrCpHoYsVlaSwksF7nE5 yoL3MyiGeCq9GEKkNB4uHrsy6pw9cdG0HaY47akBN6fkHwKHlb3TCcBFxB2t12dg UiH4sA99TajXrHF68+036u2OZuHUrc0JjRktfligeCLEHpgeZZ8KAlgaLLXadaPR rHYjr2klt1mX8EE7k5Af7KqLMEvhseoLoWFT/WKCTSOkqftKMPPfNY1EWFcNUWCj fX81kh+bvLZYVIWteCoD/YyD6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTmSfOA stu4UdwBFyPrmxB0o59iMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN4BpT2PflxqerOLqXkFYX8SntAt3A9ygt2GD61GIblw6ZpfATNBOH r6pt8JlVS36PlvdAMwTC68rSmZT5/LOB0foSj3ijMTMPBrLVC/smSK7qDZsbMIeu pwW9JCHnPRMt0QeBQ0I/lHhQx/kzBhcXuFAD7a4lD4t5FhPqlSLZXAL15DTOQCKg fiO2Ec3GyLzW74MWG4VT+uV1TYnd5dSjp2EHApbBRpHPMESSvLTCaFcQRoTjBKso 7y0/ibsVOgYEVEGLQACJnc24LXBN1f2TpWftAjtLdrlR6uA6yGfPSk6iFPRqJ8HM RnznM/a0gOeMetTBqE529ZAJTwO8nY02 -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:21 2025 by rpki-client