$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: BshBcapLmvHYfMYdM99xJHZ+M1/dJV4ad+ljlH3u+3k= Subject key identifier: 25:44:53:66:29:46:98:58:04:B4:8D:30:00:E7:6C:65:8E:8C:DD:F0 Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 04E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 04DD Signing time: Sun 19 Oct 2025 01:34:33 +0000 Manifest this update: Sun 19 Oct 2025 01:34:32 +0000 Manifest next update: Sun 26 Oct 2025 01:34:32 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: wRwkuz7eG30RX7cBE64s9V6ZxHKZ55n23YYQ061xn8c=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: zdwLUFrK62NtcQ/mdbUvAzqM7ityQdkX7IQIHBe+tG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Oct 19 01:34:32 2025 GMT Not After : Oct 26 01:34:32 2025 GMT Subject: CN=68f44028-390f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:a6:c7:43:a9:07:8b:6b:7e:42:98:98:96: 22:ca:4d:95:94:9a:4a:2f:24:16:a3:ed:03:49:3a: e2:db:83:42:6c:0c:a6:a9:63:57:44:d4:07:0d:1f: db:70:8c:1b:40:c9:1a:6b:2e:5c:98:23:e4:cb:49: e8:2a:ab:36:17:d4:28:71:d7:cc:77:45:dd:51:a9: 50:d3:10:73:26:1a:f2:4b:67:e5:cf:08:28:b4:04: 3d:ef:a7:e2:c7:6d:e4:33:4e:8b:8e:15:99:ec:2c: 47:f7:39:ed:95:fd:9c:55:dd:f0:7b:40:b0:d9:9f: 60:60:be:5f:f2:45:5c:f0:b7:98:34:6d:fc:9f:5a: 00:c0:7d:7b:01:d9:b5:25:f1:f9:e6:df:72:0c:86: 90:9c:60:bd:9f:56:09:7e:23:00:3f:e9:42:50:83: cc:f4:95:74:cb:bd:07:fc:3d:fe:62:40:a1:15:2f: bc:79:63:a0:c2:89:6a:e8:a6:63:8e:39:be:64:37: 68:88:a0:96:5a:98:da:f2:c2:14:27:66:d9:d7:37: 72:a4:c8:f8:13:92:76:6e:c5:9c:df:a3:93:1e:5a: 1e:8b:76:0d:ee:ca:6c:0e:b6:34:ac:78:ab:6a:9c: 1a:6e:fa:da:00:cd:91:e4:ab:db:62:4d:f2:5d:b8: 1c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:44:53:66:29:46:98:58:04:B4:8D:30:00:E7:6C:65:8E:8C:DD:F0 X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:c3:70:31:35:ee:1d:29:24:29:d7:6e:f1:48:63:9e:83:65: 6e:50:95:e5:d9:96:ce:81:99:12:61:50:50:8f:04:73:e4:7b: 75:59:cf:3d:cc:c6:e8:89:0c:2b:37:a2:a2:f0:48:e6:4f:d3: c5:25:97:2e:34:43:ca:27:5c:cf:8c:06:16:09:ef:a1:33:5b: 15:d7:63:c7:ec:d6:13:39:3e:5e:0e:48:4c:c6:30:14:c4:fc: a4:3e:ca:35:7a:55:29:97:d4:f7:de:58:fb:e3:a1:f8:ea:a7: cd:1f:9d:ec:3b:51:d5:e6:59:03:2b:94:0c:22:31:65:1b:01: f6:14:67:68:d0:38:fb:76:93:4e:bf:da:61:3e:65:ea:7a:4a: bf:d1:bd:a3:53:f8:da:8c:73:d7:42:88:10:ee:23:e5:45:c1: 09:c1:bd:4d:1a:16:cb:46:5f:a1:72:f2:2e:af:dd:67:e2:ed: 08:ed:c1:e6:03:26:9b:b7:a3:73:b2:4e:e6:c6:0b:8e:da:d8: d4:f7:9f:54:1a:b0:88:5c:04:0f:dc:87:01:70:2d:40:ac:38: 73:c5:07:bb:25:44:d8:6d:ba:f4:7d:57:7f:6f:51:82:32:99: 62:f2:66:cb:01:18:f2:66:0e:8c:00:2b:45:e1:da:23:b1:28: 90:04:d9:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjUxMDE5MDEzNDMyWhcNMjUxMDI2MDEzNDMyWjAYMRYwFAYD VQQDEw02OGY0NDAyOC0zOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcymx0OpB4trfkKYmJYiyk2VlJpKLyQWo+0DSTri24NCbAymqWNXRNQHDR/b cIwbQMkaay5cmCPky0noKqs2F9QocdfMd0XdUalQ0xBzJhryS2flzwgotAQ976fi x23kM06LjhWZ7CxH9zntlf2cVd3we0Cw2Z9gYL5f8kVc8LeYNG38n1oAwH17Adm1 JfH55t9yDIaQnGC9n1YJfiMAP+lCUIPM9JV0y70H/D3+YkChFS+8eWOgwolq6KZj jjm+ZDdoiKCWWpja8sIUJ2bZ1zdypMj4E5J2bsWc36OTHloei3YN7spsDrY0rHir apwabvraAM2R5KvbYk3yXbgcHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVEU2Yp RphYBLSNMADnbGWOjN3wMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1w3AxNe4dKSQp127xSGOeg2VuUJXl2ZbOgZkSYVBQjwRz5Ht1Wc89 zMboiQwrN6Ki8EjmT9PFJZcuNEPKJ1zPjAYWCe+hM1sV12PH7NYTOT5eDkhMxjAU xPykPso1elUpl9T33lj746H46qfNH53sO1HV5lkDK5QMIjFlGwH2FGdo0Dj7dpNO v9phPmXqekq/0b2jU/jajHPXQogQ7iPlRcEJwb1NGhbLRl+hcvIur91n4u0I7cHm Ayabt6Nzsk7mxguO2tjU959UGrCIXAQP3IcBcC1ArDhzxQe7JUTYbbr0fVd/b1GC Mpli8mbLARjyZg6MACtF4dojsSiQBNkL -----END CERTIFICATE-----Generated at Mon Oct 20 22:09:47 2025 by rpki-client