$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: zy7yJpYXiCJecbHNaEZ0d2IZ0TsAPbs3dLgAy7z/Gns= Subject key identifier: 35:53:5D:E5:82:1E:C4:10:BB:4E:0C:67:E1:34:0C:95:14:3C:52:63 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 017E Signing time: Sun 19 Oct 2025 06:20:21 +0000 Manifest this update: Sun 19 Oct 2025 06:20:20 +0000 Manifest next update: Sun 26 Oct 2025 06:20:20 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: HMW4/5CjvhPBWCqZFbv/VzmDDAGb+A6766u6VXZ4xao=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: Er3/MAuCzoGUHkL9sYAa/oK9eluVmQp9z5pkVAw9cAM=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: smI8KFtozrldpJMIbPknM0ia5ZaENjQghxfBZjdwPy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Oct 19 06:20:20 2025 GMT Not After : Oct 26 06:20:20 2025 GMT Subject: CN=68f48324-a18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fc:59:eb:bc:6f:e9:ab:95:db:e5:af:6a:ab: 6b:55:d8:37:95:8d:37:4b:26:d4:a2:c9:37:52:0d: 2f:d5:d2:b1:cb:55:27:36:18:98:fa:30:1f:c6:7c: 71:9b:e7:c7:63:4b:b4:7f:ea:02:5a:23:b9:5c:4c: 08:0e:37:d8:95:53:d2:93:33:e5:75:8b:b0:1b:df: 62:de:7c:a5:95:ee:64:55:2a:e8:48:4c:a1:e9:35: 72:b4:ac:56:e8:ff:a3:62:5b:9c:25:ba:91:4d:a2: dc:5a:48:45:d7:af:04:ef:1d:f9:14:3c:62:cc:5e: 91:b4:bc:0d:44:b7:5b:25:e3:ac:8a:27:f5:87:46: c8:5c:f9:42:90:f2:da:20:22:3b:93:f3:45:d7:08: cb:b4:e5:cd:87:a8:6f:c2:8e:1b:7d:05:e0:08:fa: 04:be:29:ad:45:2c:04:c8:ef:88:1a:11:47:f0:06: 1f:3c:35:a3:79:10:58:87:52:2c:4e:b3:3a:b5:86: ce:17:59:cd:c7:cf:71:a2:fe:8b:80:16:fe:55:25: cd:cf:d2:1f:11:5a:03:12:c9:6d:d1:09:65:30:0f: d0:40:85:15:10:38:75:f2:45:5c:ac:e2:c6:da:2b: 42:9b:39:3d:11:c9:75:f0:2e:82:d4:bb:1a:58:d3: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:53:5D:E5:82:1E:C4:10:BB:4E:0C:67:E1:34:0C:95:14:3C:52:63 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:96:99:cb:4e:9d:e3:5d:98:e5:cb:1f:f8:d8:b3:4e:63:61: cd:1b:86:32:69:86:72:23:75:66:b9:fd:da:04:2e:09:8c:63: f0:ee:99:4e:60:e1:e4:76:99:df:6f:4a:1c:43:61:67:cd:0a: 09:4b:e5:69:f6:22:15:80:9e:7d:ea:48:74:b4:37:f1:24:45: 88:6e:c4:2e:34:cb:90:bc:13:2b:b5:c9:8a:cf:9f:b3:6b:60: 09:0d:ae:95:22:a4:85:a4:6a:25:72:b4:34:a0:84:1e:c9:b2: b0:3d:9b:9c:c8:87:2a:7a:53:fb:97:c1:0b:a2:bb:65:46:3b: 8b:d7:75:0d:f4:20:70:22:75:52:bc:ca:43:6d:a1:f7:6e:d7: 58:b0:49:a4:85:99:a3:e9:82:5d:7a:f3:b3:d6:8a:59:2e:e0: e1:d7:b7:64:0d:ac:f6:01:01:17:9a:f3:40:c9:ba:17:0e:79: 0f:63:fe:b0:86:26:0c:3c:de:e2:45:e2:60:21:9b:a0:7b:dc: 6a:af:c1:13:df:d1:aa:f9:7c:64:ae:88:7d:e7:24:4a:18:35: 56:d7:1c:d9:ea:38:da:66:76:eb:59:bd:7a:1b:78:ed:c5:a0: b0:bc:9c:24:4d:de:8e:aa:1f:27:4b:a2:b1:22:96:19:15:15: ce:5a:1d:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjUxMDE5MDYyMDIwWhcNMjUxMDI2MDYyMDIwWjAYMRYwFAYD VQQDEw02OGY0ODMyNC1hMThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fxZ67xv6auV2+WvaqtrVdg3lY03SybUosk3Ug0v1dKxy1UnNhiY+jAfxnxx m+fHY0u0f+oCWiO5XEwIDjfYlVPSkzPldYuwG99i3nylle5kVSroSEyh6TVytKxW 6P+jYlucJbqRTaLcWkhF168E7x35FDxizF6RtLwNRLdbJeOsiif1h0bIXPlCkPLa ICI7k/NF1wjLtOXNh6hvwo4bfQXgCPoEvimtRSwEyO+IGhFH8AYfPDWjeRBYh1Is TrM6tYbOF1nNx89xov6LgBb+VSXNz9IfEVoDEslt0QllMA/QQIUVEDh18kVcrOLG 2itCmzk9Ecl18C6C1LsaWNPDJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVTXeWC HsQQu04MZ+E0DJUUPFJjMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMlpnLTp3jXZjlyx/42LNOY2HNG4YyaYZyI3Vmuf3aBC4JjGPw7plO YOHkdpnfb0ocQ2FnzQoJS+Vp9iIVgJ596kh0tDfxJEWIbsQuNMuQvBMrtcmKz5+z a2AJDa6VIqSFpGolcrQ0oIQeybKwPZucyIcqelP7l8ELortlRjuL13UN9CBwInVS vMpDbaH3btdYsEmkhZmj6YJdevOz1opZLuDh17dkDaz2AQEXmvNAyboXDnkPY/6w hiYMPN7iReJgIZuge9xqr8ET39Gq+Xxkroh95yRKGDVW1xzZ6jjaZnbrWb16G3jt xaCwvJwkTd6Oqh8nS6KxIpYZFRXOWh1v -----END CERTIFICATE-----Generated at Mon Oct 20 10:43:13 2025 by rpki-client