$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: 6DS+8B5+DL8eF7z/Zpd54s2sKoLVhdy5x32Cg3fjh9k= Subject key identifier: 85:12:36:CD:1A:B9:AE:6C:12:B3:FB:EC:0C:0A:95:A1:C0:89:F4:21 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 0226 Signing time: Sun 19 Oct 2025 04:20:47 +0000 Manifest this update: Sun 19 Oct 2025 04:20:47 +0000 Manifest next update: Sun 26 Oct 2025 04:20:47 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: Iovpu30pX+yBgTKEciFKDUO+ofasnpJntFOK3tR59eA=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Oct 19 04:20:47 2025 GMT Not After : Oct 26 04:20:47 2025 GMT Subject: CN=68f4671f-4389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:da:91:23:38:7c:40:d2:bf:b2:ef:94:28:fa: 7b:69:3c:3c:47:a5:68:fa:96:d2:e5:9e:48:4b:5d: a4:81:83:62:df:b7:c3:27:8f:6c:8d:09:e9:af:20: 4e:88:23:7b:6a:b6:39:f8:5a:d6:91:ab:ad:7a:dc: 12:d5:02:88:44:2b:10:28:d9:56:ac:00:02:39:df: de:45:df:38:d1:dd:f7:85:41:07:93:a6:92:11:4f: d3:26:77:9a:95:07:f0:fd:71:ce:16:fa:19:e6:bf: 49:bb:43:80:30:e5:4d:3e:ed:ff:19:b3:09:c3:7e: c7:28:65:f5:75:0f:20:34:2f:b4:cc:66:dd:1a:eb: f9:90:9b:d0:dc:6a:39:b9:0f:49:c1:f9:4a:6a:32: 5c:eb:5b:b2:f2:48:93:9f:27:03:e3:21:5f:22:1c: d2:1d:87:c0:1f:09:d9:f6:04:c7:6d:10:b7:79:17: 7b:28:07:79:43:9c:4c:51:d5:26:9f:14:58:43:b8: 72:2a:15:cf:c5:f5:c2:83:41:21:8d:36:89:a7:e2: e4:ea:d9:01:3e:6d:88:1d:a9:d8:1e:3d:fe:b0:7e: b1:a0:2f:03:4a:20:7f:64:ac:a9:d4:3b:c4:f8:05: 3f:e1:e3:5f:bc:60:e5:bc:75:62:dd:16:72:59:b5: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:12:36:CD:1A:B9:AE:6C:12:B3:FB:EC:0C:0A:95:A1:C0:89:F4:21 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d4:57:21:b0:72:4e:6d:69:51:22:b5:c4:97:dc:41:a4:a3: cf:72:1c:5d:5f:76:a9:19:75:ac:73:3d:23:58:ff:91:25:6e: 8d:8a:b7:b5:96:c7:78:22:da:d6:f0:63:05:27:8e:a8:5b:f3: 83:aa:ed:96:73:f8:38:ae:48:fa:7e:7e:1e:f4:96:a9:0f:ab: 2b:d0:32:d1:1f:11:49:d7:a8:63:5e:dc:be:1b:b7:04:40:9f: b1:2c:5c:ae:c3:71:6e:5e:f1:f0:5a:e8:60:c6:2c:1f:be:c4: 9c:8a:ec:52:50:4f:d9:59:47:c1:f8:64:97:47:09:6f:cb:84: c4:23:4a:b0:9c:6e:21:a9:f9:24:f6:15:1b:93:d4:68:ea:51: 51:96:c3:ce:e5:9e:f2:9a:7b:44:66:73:48:17:97:b6:e3:5c: a4:93:35:a6:49:79:9e:7e:f2:5a:05:14:a8:15:74:af:04:01: 97:98:13:a4:a7:57:c9:fe:49:40:53:33:e8:7c:d2:93:77:1b: 71:dd:0c:46:0d:e2:9d:6c:4f:05:7e:3b:13:e1:7c:40:4a:ce: c7:40:a5:bf:fb:9f:f9:cb:7d:8d:08:de:64:84:7f:17:03:98: b8:a9:1b:b1:8d:c1:8b:a7:d1:fa:99:86:91:ef:af:93:07:dc: b1:db:14:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUxMDE5MDQyMDQ3WhcNMjUxMDI2MDQyMDQ3WjAYMRYwFAYD VQQDEw02OGY0NjcxZi00Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8NqRIzh8QNK/su+UKPp7aTw8R6Vo+pbS5Z5IS12kgYNi37fDJ49sjQnpryBO iCN7arY5+FrWkautetwS1QKIRCsQKNlWrAACOd/eRd840d33hUEHk6aSEU/TJnea lQfw/XHOFvoZ5r9Ju0OAMOVNPu3/GbMJw37HKGX1dQ8gNC+0zGbdGuv5kJvQ3Go5 uQ9JwflKajJc61uy8kiTnycD4yFfIhzSHYfAHwnZ9gTHbRC3eRd7KAd5Q5xMUdUm nxRYQ7hyKhXPxfXCg0EhjTaJp+Lk6tkBPm2IHanYHj3+sH6xoC8DSiB/ZKyp1DvE +AU/4eNfvGDlvHVi3RZyWbUUuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUSNs0a ua5sErP77AwKlaHAifQhMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA1FchsHJObWlRIrXEl9xBpKPPchxdX3apGXWscz0jWP+RJW6Nire1 lsd4ItrW8GMFJ46oW/ODqu2Wc/g4rkj6fn4e9JapD6sr0DLRHxFJ16hjXty+G7cE QJ+xLFyuw3FuXvHwWuhgxiwfvsSciuxSUE/ZWUfB+GSXRwlvy4TEI0qwnG4hqfkk 9hUbk9Ro6lFRlsPO5Z7ymntEZnNIF5e241ykkzWmSXmefvJaBRSoFXSvBAGXmBOk p1fJ/klAUzPofNKTdxtx3QxGDeKdbE8FfjsT4XxASs7HQKW/+5/5y32NCN5khH8X A5i4qRuxjcGLp9H6mYaR76+TB9yx2xTm -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:39 2025 by rpki-client