$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json) Hash identifier: mYKm5GxR7YthseNYuxlPAOqCLVRP63e8T+Z79wnv4BM= Subject key identifier: 3F:29:4A:57:C7:FB:51:BD:EE:19:90:CF:24:82:D5:09:76:68:C9:F1 Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Certificate serial: 11E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft Manifest number: 11DC Signing time: Sat 18 Oct 2025 17:41:43 +0000 Manifest this update: Sat 18 Oct 2025 17:41:43 +0000 Manifest next update: Sat 25 Oct 2025 17:41:43 +0000 Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: ZMZAjfYki0zd/Q+22B037Khd5585dk5b0n0LAhnp4Ak=) 2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: S4PonvpkLuqmrbtgnv8T9QMFORQi4oK8GF7Qf1Ow3ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4582 (0x11e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Validity Not Before: Oct 18 17:41:43 2025 GMT Not After : Oct 25 17:41:43 2025 GMT Subject: CN=68f3d157-56b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:3a:bc:a5:74:89:da:43:e4:84:a4:05:46: 4e:26:e2:cf:13:cb:a1:a5:0d:43:de:3d:2f:ce:42: a9:5b:bb:93:df:3d:4a:0a:a1:a0:4a:29:5a:36:01: 4e:8f:d4:89:a0:f1:23:2d:f8:e7:7c:4d:5c:c8:20: 5d:14:99:75:71:af:46:67:8b:0c:2b:64:00:6b:30: 14:b6:fc:c2:96:37:cc:fc:04:a4:20:85:c4:d4:b0: 15:8c:27:3c:5c:9d:28:a2:ca:bf:f7:36:c9:e2:ff: 20:a2:30:59:86:e3:2e:cb:a2:df:2a:ee:c9:04:f3: 82:d9:ad:34:a3:76:01:5d:e9:62:40:9d:45:c4:85: 66:d4:80:e2:b8:93:73:4f:39:44:d0:59:bd:ef:d6: 91:5d:7d:ad:25:24:f0:fa:8e:fb:0f:56:7d:85:ec: 09:79:ec:a5:14:a3:ee:76:2f:c8:da:a8:bc:7c:64: 01:6c:a1:95:d5:b5:00:13:b7:cd:56:b9:fc:67:17: 26:65:a5:56:12:a0:7a:74:c7:67:6a:be:1b:fa:b9: 88:f3:19:91:26:86:4b:33:ce:f6:1f:93:b9:d1:6f: 0d:6c:fc:1c:19:2f:ed:1e:df:51:cb:ed:61:32:8d: 25:ed:dd:81:c7:f3:f8:41:9b:e3:75:10:b0:f3:f4: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:29:4A:57:C7:FB:51:BD:EE:19:90:CF:24:82:D5:09:76:68:C9:F1 X509v3 Authority Key Identifier: keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3c:fc:1a:4d:24:6c:37:e9:9e:65:9d:95:43:d7:51:c3:05: b3:1a:c9:b1:41:9a:88:0e:84:9f:ff:d4:85:9b:4f:64:7a:f2: ab:27:4d:17:63:fd:ea:79:09:1d:f7:dc:1a:74:87:22:52:3c: 61:ce:e4:e1:76:0f:95:fd:66:6f:dc:e9:27:c8:65:c7:77:ae: 02:bc:e6:98:86:92:54:03:ed:19:5a:ce:f7:96:74:95:b2:a5: e2:d8:88:ab:98:6d:d1:ed:ac:72:56:45:64:ff:6e:1a:17:d5: 73:bd:5b:c8:0f:df:7a:4a:64:01:74:1e:cd:2f:ea:26:9f:35: 20:87:de:9f:f0:5c:01:77:44:2f:08:d2:75:6e:5e:4b:03:7a: 42:d1:a5:bf:45:66:42:19:72:15:7a:ce:e4:70:24:d3:09:51: 75:4e:bb:b0:4a:b5:d5:3b:1f:d0:9b:43:8b:1c:08:1a:b9:ff: 09:a6:3c:d7:a1:6c:26:08:68:27:63:fe:53:50:49:a6:f9:7b: 91:62:cb:4d:e1:6f:a6:32:13:60:43:6a:d0:38:87:0c:21:b2: 61:5c:09:88:de:0a:03:33:4c:00:86:ac:7b:e8:e8:ec:bf:7d: ca:c5:51:89:84:ac:17:2c:71:03:52:b6:9f:9f:06:3f:bd:51: 9c:a0:a6:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0MzVBMkI4NTQz QkNFNDc2MDkwHhcNMjUxMDE4MTc0MTQzWhcNMjUxMDI1MTc0MTQzWjAYMRYwFAYD VQQDEw02OGYzZDE1Ny01NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTA6vKV0idpD5ISkBUZOJuLPE8uhpQ1D3j0vzkKpW7uT3z1KCqGgSilaNgFO j9SJoPEjLfjnfE1cyCBdFJl1ca9GZ4sMK2QAazAUtvzCljfM/ASkIIXE1LAVjCc8 XJ0oosq/9zbJ4v8gojBZhuMuy6LfKu7JBPOC2a00o3YBXeliQJ1FxIVm1IDiuJNz TzlE0Fm979aRXX2tJSTw+o77D1Z9hewJeeylFKPudi/I2qi8fGQBbKGV1bUAE7fN Vrn8ZxcmZaVWEqB6dMdnar4b+rmI8xmRJoZLM872H5O50W8NbPwcGS/tHt9Ry+1h Mo0l7d2Bx/P4QZvjdRCw8/QlNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8pSlfH +1G97hmQzySC1Ql2aMnxMB8GA1UdIwQYMBaAFMfPlD46dk83wAPNQ1orhUO85HYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODVFOS8wODI1MzhFQ0Y5 NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6ZkFBODFEV2l1RlE3emtk Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4LVVQanAyVHpmQUE4MURXaXVGUTd6a2Rnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6 ZkFBODFEV2l1RlE3emtkZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAePPwaTSRsN+meZZ2VQ9dRwwWzGsmxQZqIDoSf/9SFm09kevKrJ00X Y/3qeQkd99wadIciUjxhzuThdg+V/WZv3OknyGXHd64CvOaYhpJUA+0ZWs73lnSV sqXi2IirmG3R7axyVkVk/24aF9VzvVvID996SmQBdB7NL+omnzUgh96f8FwBd0Qv CNJ1bl5LA3pC0aW/RWZCGXIVes7kcCTTCVF1TruwSrXVOx/Qm0OLHAgauf8JpjzX oWwmCGgnY/5TUEmm+XuRYstN4W+mMhNgQ2rQOIcMIbJhXAmI3goDM0wAhqx76Ojs v33KxVGJhKwXLHEDUrafnwY/vVGcoKad -----END CERTIFICATE-----Generated at Mon Oct 20 14:02:11 2025 by rpki-client