$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: mvw5RHg1p4edLEAmwT4ZXBbHl5nIMvmOli3KHdZtN5M= Subject key identifier: 13:10:37:A8:E7:91:FA:9B:B6:CF:D1:27:14:13:36:70:18:5F:F4:09 Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 14A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 1488 Signing time: Sat 18 Oct 2025 17:22:03 +0000 Manifest this update: Sat 18 Oct 2025 17:22:02 +0000 Manifest next update: Sat 25 Oct 2025 17:22:02 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: IoWMtdIq8ozmLO8pmaCXf91OMfxNZx2kxQdQmUaoag4=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: bw2KVyHN6CitUBxUyBMWnfwdT8P8OVOkY8BYkur67D8=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: u7oqRMExCmv2yUvpdQUhy93ikSgUZkKJq35cWOYkBRM=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: F7sXs8wz7vi0K+MviVDC99PWP7OiPZ+mlBu4ZQRrCgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5289 (0x14a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Oct 18 17:22:02 2025 GMT Not After : Oct 25 17:22:02 2025 GMT Subject: CN=68f3ccba-cfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:ee:aa:67:a8:1a:44:41:32:98:68:c5:7b: 1e:37:fc:ee:46:16:2b:e5:7e:c4:79:8f:d6:40:9c: 37:a3:5a:f0:a2:45:cd:44:da:3e:53:83:5f:b6:cb: bb:b1:7d:57:2d:06:05:bc:44:e3:14:2f:e2:f3:0b: ea:08:78:01:71:a6:d6:f5:f7:93:64:37:91:57:77: 9f:e3:5c:fd:71:d1:0a:d4:68:9b:c3:18:4f:b5:89: 49:7a:b2:33:dc:f9:39:c1:11:b5:23:aa:d8:1d:6a: 1a:63:a2:09:90:3a:9c:1e:6c:a4:dc:78:58:db:79: 7b:8c:fc:b8:09:43:9b:67:01:eb:05:f9:97:13:33: 58:d8:3e:b5:c9:85:b6:11:f4:84:e8:be:ac:1d:50: a1:66:ff:13:45:5e:a0:05:d0:28:f5:ab:e1:b8:47: cb:18:a2:c4:28:43:c0:32:f0:80:87:bd:11:7c:f5: 6e:03:68:59:a5:51:b9:45:37:ae:7e:cd:24:71:54: d8:42:68:45:41:37:32:20:7a:a7:de:3a:ae:77:b5: b7:aa:25:3a:b6:91:2c:83:51:50:e3:61:2d:0c:9d: ff:5b:ea:11:f2:11:d5:27:ea:5d:7b:01:8d:2a:76: 4c:27:f8:80:0f:dd:b7:ac:d5:3d:29:ad:ce:6f:d7: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:10:37:A8:E7:91:FA:9B:B6:CF:D1:27:14:13:36:70:18:5F:F4:09 X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:6d:8b:9e:d2:aa:90:ca:b8:b9:12:c3:18:25:59:ae:de:52: 5f:86:24:05:59:13:c8:9f:c2:ee:29:72:99:db:c2:df:21:4f: c2:6c:98:6f:54:07:96:21:7d:a6:3c:c7:dc:8c:cc:bf:80:3b: 98:f5:fd:82:d5:9e:cd:40:ae:a9:4d:54:e5:d1:09:47:4f:bf: 06:d7:23:1b:4b:a9:a6:1f:ef:63:2d:9e:c9:ff:29:b2:a0:72: a2:43:20:6f:31:d2:bb:38:fc:39:34:9f:32:90:3a:f0:2d:a5: 9e:75:6b:06:74:66:7f:6d:03:18:86:0d:42:d0:dc:37:3b:86: 3c:4d:66:59:2e:c2:ef:b1:9e:96:dc:94:34:15:de:d9:a3:06: 60:6a:43:20:95:7b:de:3e:96:37:c4:c4:cf:1f:38:62:eb:e5: ed:9d:6b:5b:a5:ca:74:be:00:01:f1:ce:9d:2d:96:55:94:4e: e7:37:0a:e7:6a:c0:c9:be:ce:6b:ad:cf:23:bb:5c:b4:eb:71: e5:94:96:26:23:76:e3:24:44:38:0a:0c:f2:b5:a5:8c:bd:5b: 90:75:6c:bb:52:94:12:3e:65:31:1f:b2:eb:5c:73:a4:96:4f: 66:0b:56:cd:e7:a0:21:18:a1:29:04:a1:b0:0c:94:38:83:92: b5:8c:6f:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUxMDE4MTcyMjAyWhcNMjUxMDI1MTcyMjAyWjAYMRYwFAYD VQQDEw02OGYzY2NiYS1jZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIzuqmeoGkRBMphoxXseN/zuRhYr5X7EeY/WQJw3o1rwokXNRNo+U4Nftsu7 sX1XLQYFvETjFC/i8wvqCHgBcabW9feTZDeRV3ef41z9cdEK1GibwxhPtYlJerIz 3Pk5wRG1I6rYHWoaY6IJkDqcHmyk3HhY23l7jPy4CUObZwHrBfmXEzNY2D61yYW2 EfSE6L6sHVChZv8TRV6gBdAo9avhuEfLGKLEKEPAMvCAh70RfPVuA2hZpVG5RTeu fs0kcVTYQmhFQTcyIHqn3jqud7W3qiU6tpEsg1FQ42EtDJ3/W+oR8hHVJ+pdewGN KnZMJ/iAD923rNU9Ka3Ob9fcBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMQN6jn kfqbts/RJxQTNnAYX/QJMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkbYue0qqQyri5EsMYJVmu3lJfhiQFWRPIn8LuKXKZ28LfIU/CbJhv VAeWIX2mPMfcjMy/gDuY9f2C1Z7NQK6pTVTl0QlHT78G1yMbS6mmH+9jLZ7J/ymy oHKiQyBvMdK7OPw5NJ8ykDrwLaWedWsGdGZ/bQMYhg1C0Nw3O4Y8TWZZLsLvsZ6W 3JQ0Fd7ZowZgakMglXvePpY3xMTPHzhi6+XtnWtbpcp0vgAB8c6dLZZVlE7nNwrn asDJvs5rrc8ju1y063HllJYmI3bjJEQ4CgzytaWMvVuQdWy7UpQSPmUxH7LrXHOk lk9mC1bN56AhGKEpBKGwDJQ4g5K1jG8O -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:14 2025 by rpki-client