$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: mlIsM7eix+RRGwCqG+lUL9neaVZq0UrIQKO9/lWUYHI= Subject key identifier: B9:2B:32:3A:BF:4E:D6:47:12:8A:E0:60:CF:F4:3D:E4:6B:EF:6E:56 Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0A9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0A97 Signing time: Sat 18 Oct 2025 20:31:25 +0000 Manifest this update: Sat 18 Oct 2025 20:31:24 +0000 Manifest next update: Sat 25 Oct 2025 20:31:24 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: fXuRrOKzL2Mxy61nOYIM+X3viR00iwGp5a6GzRUmyPc=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: bm4J9Gs8kg53MtutKeTvvvRSq0MtCTJcSE5YLit7Dts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2719 (0xa9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Oct 18 20:31:24 2025 GMT Not After : Oct 25 20:31:24 2025 GMT Subject: CN=68f3f91d-468a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:39:a9:a7:c2:35:a1:08:da:af:a9:ea:66: 6e:9e:fa:9c:3e:17:e0:68:cc:0f:9e:fb:13:0b:15: 20:ff:c0:bb:1b:a4:32:95:83:99:47:b9:cf:ac:c5: 90:33:9a:44:25:71:19:67:ba:0a:ca:ae:74:a2:42: 80:a7:46:fa:1e:0d:48:c9:68:1d:02:87:36:a8:33: 8e:a4:0c:46:b3:d6:dc:82:fb:9b:bf:a3:f6:a3:9e: a8:e2:02:65:9b:3e:65:c2:ac:7d:b3:1e:39:e7:a9: 82:93:36:30:ba:1a:70:73:b3:7c:35:52:e9:fa:88: e5:60:87:57:16:0e:53:5d:fd:2c:8f:dd:c0:19:e8: 5e:1e:63:61:d3:40:18:da:4a:78:bf:da:03:eb:d9: dd:71:83:4b:a8:0c:e9:fc:a3:62:53:ee:27:14:69: ee:fc:fc:c3:51:81:ef:e0:ef:de:97:5d:3d:41:81: 65:bf:d6:03:fa:35:0b:93:3e:35:9d:6d:1b:2a:58: f5:c2:d5:86:70:ab:36:6e:76:1f:2c:61:51:ef:9a: a5:c2:b0:af:f6:7a:07:06:6d:2c:f4:88:f2:5a:ad: ef:0a:00:a2:e9:8d:56:46:52:0b:71:39:bb:6e:2a: c3:e2:7b:f4:20:33:23:d9:e2:72:d7:a8:f3:7f:26: f9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2B:32:3A:BF:4E:D6:47:12:8A:E0:60:CF:F4:3D:E4:6B:EF:6E:56 X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:08:0e:dc:6a:91:dc:30:58:40:46:8e:86:a8:b1:27:9b:fa: 32:8b:07:d9:c5:a7:af:a8:ab:f0:99:d0:6d:e6:74:bd:cd:24: 1d:6c:00:10:b0:af:be:93:eb:a4:af:09:d3:88:5c:e9:ff:5c: 42:01:6d:49:e1:8c:1e:7c:ff:14:b9:dd:d1:8d:0f:29:9f:b8: 67:45:26:50:f7:77:03:17:2b:4a:ad:0f:51:cf:95:13:f9:57: f8:c8:ee:76:36:ca:ee:1d:c5:8b:36:73:67:66:c7:b3:a9:fc: 55:14:7c:89:e1:5e:8d:59:75:5f:f5:2b:7a:03:76:da:bf:61: 09:0b:0c:ae:82:3f:ed:20:6f:f1:bb:cf:c2:7b:cb:14:5a:43: 10:cc:cb:36:a7:f5:bd:ed:f0:9f:b4:0f:0e:bd:c7:ff:96:ab: 7f:ff:83:85:b0:de:45:87:66:1d:9c:62:93:b8:7b:2c:9e:7e: 58:3c:a1:a2:18:11:c0:af:37:76:4a:b3:70:66:db:3f:f0:9a: bc:51:da:98:2b:7d:50:fc:6c:54:96:6b:29:3f:77:29:3d:82: c1:3c:ac:0f:d4:9a:ea:a4:aa:b9:27:5b:66:16:9f:c9:ed:3b: b2:7b:11:04:56:17:af:95:01:72:4d:ef:dc:fb:ab:24:3d:5c: 4f:f7:fc:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjUxMDE4MjAzMTI0WhcNMjUxMDI1MjAzMTI0WjAYMRYwFAYD VQQDEw02OGYzZjkxZC00NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gk5qafCNaEI2q+p6mZunvqcPhfgaMwPnvsTCxUg/8C7G6QylYOZR7nPrMWQ M5pEJXEZZ7oKyq50okKAp0b6Hg1IyWgdAoc2qDOOpAxGs9bcgvubv6P2o56o4gJl mz5lwqx9sx4556mCkzYwuhpwc7N8NVLp+ojlYIdXFg5TXf0sj93AGeheHmNh00AY 2kp4v9oD69ndcYNLqAzp/KNiU+4nFGnu/PzDUYHv4O/el109QYFlv9YD+jULkz41 nW0bKlj1wtWGcKs2bnYfLGFR75qlwrCv9noHBm0s9IjyWq3vCgCi6Y1WRlILcTm7 birD4nv0IDMj2eJy16jzfyb5TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkrMjq/ TtZHEorgYM/0PeRr725WMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCCA7capHcMFhARo6GqLEnm/oyiwfZxaevqKvwmdBt5nS9zSQdbAAQ sK++k+ukrwnTiFzp/1xCAW1J4YwefP8Uud3RjQ8pn7hnRSZQ93cDFytKrQ9Rz5UT +Vf4yO52NsruHcWLNnNnZsezqfxVFHyJ4V6NWXVf9St6A3bav2EJCwyugj/tIG/x u8/Ce8sUWkMQzMs2p/W97fCftA8Ovcf/lqt//4OFsN5Fh2YdnGKTuHssnn5YPKGi GBHArzd2SrNwZts/8Jq8UdqYK31Q/GxUlmspP3cpPYLBPKwP1JrqpKq5J1tmFp/J 7TuyexEEVhevlQFyTe/c+6skPVxP9/yS -----END CERTIFICATE-----Generated at Mon Oct 20 14:16:44 2025 by rpki-client