$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: WdS23KDIbUsLuZEutznQ8VUUeIttI/lz9d76qrGvuAI= Subject key identifier: 1C:69:19:49:DC:11:E8:6C:25:66:ED:77:2D:82:7E:1B:4E:6A:C7:17 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 03ED Signing time: Sun 19 Oct 2025 02:38:50 +0000 Manifest this update: Sun 19 Oct 2025 02:38:49 +0000 Manifest next update: Sun 26 Oct 2025 02:38:49 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: 93yx7yWwCcxg3pDUzpNrNQsduYG/WvA9LCit5zJteoU=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: +fAen0eLm96Uw52DW70NMmBaXk/iGot7yVNxCoQPaiI=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 4: DEB112EC6BC211F09D0F2629C4F9AE02.roa (hash: yn6h5w5tWqc/+G/2zrDsQx2qIuIxGIy+QXkxWWkUIxY=) 5: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: 2KodBvrJvVzLG2LbWPZiEGrY7NIy7vzTjdiUIRnC0oY=) 6: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: u/4sPCCdiVaqNorzA1R6dcHNMvrwG/4bezXKIHvH0Qw=) 7: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) 8: 8EFCF04C41B811F090AB3A2EC4F9AE02.roa (hash: NJb7fbLMu5qVuetYwV/WSEDtWyBY5QSeAuqQ8b9b+dY=) 9: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: rQrRKRNqLrNVEr8ai1wfn1FM9+uxSqSSHb0bzKO5WNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Oct 19 02:38:49 2025 GMT Not After : Oct 26 02:38:49 2025 GMT Subject: CN=68f44f3a-82d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:23:eb:7d:dc:4f:8f:07:86:33:7e:87:74: 02:5a:80:82:68:bb:6a:e1:9e:36:4f:8a:63:6e:60: 5f:60:32:ac:7f:10:97:04:4c:bc:72:a9:fc:4a:df: 42:42:ea:57:17:97:95:90:32:71:7a:39:c1:0b:5a: 14:5d:a9:85:1c:33:75:80:75:db:f2:0e:e3:5f:18: 65:d0:78:cf:eb:42:dd:39:a8:17:7b:66:80:bc:0f: 4a:f7:f8:00:23:07:a8:cb:61:0e:56:e3:56:42:bd: d2:07:37:57:61:41:6f:d6:ba:dd:85:85:3f:8a:08: 38:c6:fc:d0:d2:c6:0d:86:f6:9f:96:ff:fc:e9:fc: 26:89:49:ef:26:d1:fa:6d:f1:a8:48:a3:22:e3:74: 4a:4f:a5:74:56:cf:bf:3b:ae:ae:a2:69:1c:83:02: 4d:ec:31:51:c7:25:44:75:24:e6:d3:cd:35:ea:be: 33:94:41:69:82:13:1b:cd:1d:18:76:c4:bb:a7:76: a2:be:34:3d:b9:96:ce:69:81:d6:4d:f3:0d:34:e4: 5d:5c:96:ae:bb:98:97:92:7e:a0:06:33:0e:3c:e6: 95:0e:07:61:9d:a8:2d:87:01:53:07:65:b2:cc:ba: 6e:2f:aa:7c:4d:89:f8:8b:ea:5d:b3:67:90:46:5a: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:69:19:49:DC:11:E8:6C:25:66:ED:77:2D:82:7E:1B:4E:6A:C7:17 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:32:0c:67:d6:62:9e:57:0e:26:a7:ac:da:34:24:4a:1f:fd: fc:d1:c2:3a:b0:62:c1:f8:36:b7:e7:47:90:bf:73:72:e0:2d: ed:f9:e0:11:7a:06:14:be:ab:89:dd:f3:64:62:52:a0:17:15: 78:a3:87:2b:7b:7e:16:d6:f6:92:69:54:11:d9:5a:03:45:bc: bc:72:1f:8e:7d:de:2f:fc:89:90:a8:bf:99:43:b5:5e:ad:28: 34:bf:ec:c9:f7:51:b4:17:1c:bf:aa:f1:df:6c:cb:09:49:99: e0:83:81:00:f1:b6:cf:12:52:b1:dc:79:2d:5f:08:a2:c1:4b: e5:ff:6a:09:18:c2:04:4f:14:5f:2f:3a:f3:43:19:a1:41:97: 97:dc:19:ad:a3:17:34:39:27:de:6e:d3:8d:3e:b9:ae:4a:0e: c6:67:e6:bd:5a:00:dc:98:71:b3:d6:a0:00:20:96:fc:44:12: a0:6c:f1:66:ce:ab:4f:22:ec:b7:a0:e5:24:f3:97:36:fd:71: 04:a5:70:9c:17:08:21:80:1c:80:0d:0d:bf:a5:9f:ea:4d:4a: 54:63:56:c3:4d:fe:8e:76:b2:b1:d5:a1:9b:74:66:74:78:81: 8a:e6:0c:f1:49:c8:99:1e:dc:06:5c:25:b6:a1:ee:c0:bd:ad: ed:37:73:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUxMDE5MDIzODQ5WhcNMjUxMDI2MDIzODQ5WjAYMRYwFAYD VQQDEw02OGY0NGYzYS04MmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11gj633cT48HhjN+h3QCWoCCaLtq4Z42T4pjbmBfYDKsfxCXBEy8cqn8St9C QupXF5eVkDJxejnBC1oUXamFHDN1gHXb8g7jXxhl0HjP60LdOagXe2aAvA9K9/gA Iweoy2EOVuNWQr3SBzdXYUFv1rrdhYU/igg4xvzQ0sYNhvaflv/86fwmiUnvJtH6 bfGoSKMi43RKT6V0Vs+/O66uomkcgwJN7DFRxyVEdSTm08016r4zlEFpghMbzR0Y dsS7p3aivjQ9uZbOaYHWTfMNNORdXJauu5iXkn6gBjMOPOaVDgdhnagthwFTB2Wy zLpuL6p8TYn4i+pds2eQRlrNRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxpGUnc EehsJWbtdy2CfhtOascXMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApMgxn1mKeVw4mp6zaNCRKH/380cI6sGLB+Da350eQv3Ny4C3t+eAR egYUvquJ3fNkYlKgFxV4o4cre34W1vaSaVQR2VoDRby8ch+Ofd4v/ImQqL+ZQ7Ve rSg0v+zJ91G0Fxy/qvHfbMsJSZngg4EA8bbPElKx3HktXwiiwUvl/2oJGMIETxRf LzrzQxmhQZeX3Bmtoxc0OSfebtONPrmuSg7GZ+a9WgDcmHGz1qAAIJb8RBKgbPFm zqtPIuy3oOUk85c2/XEEpXCcFwghgByADQ2/pZ/qTUpUY1bDTf6OdrKx1aGbdGZ0 eIGK5gzxSciZHtwGXCW2oe7Ava3tN3OI -----END CERTIFICATE-----Generated at Mon Oct 20 08:58:50 2025 by rpki-client