$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: JnK2gMbnuBv77G12T3+CYMAdW7OmSy7blvH4MYdmYnA= Subject key identifier: 15:63:0F:2F:0C:B2:3E:E4:1A:8E:42:F0:32:F8:09:3E:BC:78:21:B3 Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 08B0 Signing time: Sat 18 Oct 2025 21:38:24 +0000 Manifest this update: Sat 18 Oct 2025 21:38:23 +0000 Manifest next update: Sat 25 Oct 2025 21:38:23 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: IQUF8sWv6G9gbwXPO+eRXN3MuTr/lu3UAt9NkouerYk=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: Oct 18 21:38:23 2025 GMT Not After : Oct 25 21:38:23 2025 GMT Subject: CN=68f408d0-4379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:bf:56:10:8c:35:6c:ee:b1:f0:8e:97:65: fa:3f:44:ea:04:3a:04:35:e6:80:62:ae:31:91:93: ef:3c:dc:4a:f1:65:bc:c0:94:e6:79:69:f5:22:6a: 08:6f:95:dc:5f:c0:34:ad:80:51:bf:f1:a2:f7:ea: 0f:b3:e1:b6:07:c9:4f:29:92:5f:2b:25:51:c1:88: 1c:98:30:9b:86:09:fa:30:02:41:8d:a8:20:03:b5: dc:dc:5f:87:1a:ce:bc:d9:16:62:d7:d8:21:18:a0: 67:4f:2f:46:f7:35:df:e7:aa:fa:be:ce:6d:c1:d4: 7e:ef:9d:8c:3d:c1:8d:3d:c5:20:50:87:19:de:41: d4:1f:1a:cf:a5:56:ee:aa:70:bb:aa:d9:d4:b5:d8: 0e:d0:9f:41:fe:5f:2d:95:ff:64:5f:a6:69:27:b5: 86:f1:bc:8a:d1:ab:d6:06:9b:53:cc:38:c7:26:17: 05:ba:17:2e:82:98:fb:6b:e6:85:6c:31:df:96:91: 08:d9:95:04:17:92:04:dd:b3:1c:e6:eb:9c:ca:51: 1c:2c:29:88:64:ed:a8:c7:a8:f4:3f:ee:c3:1d:6e: d5:3e:93:80:5f:b1:eb:f8:50:ba:67:28:31:00:89: e4:92:82:1e:ff:ae:8e:59:bd:0f:87:a6:64:e2:39: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:63:0F:2F:0C:B2:3E:E4:1A:8E:42:F0:32:F8:09:3E:BC:78:21:B3 X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:bf:f5:7a:ea:96:a1:98:d2:53:1c:d3:6d:b4:c2:93:24:20: 05:41:ca:d6:5e:a2:f6:47:0d:d6:4c:41:50:a1:25:d5:71:a1: c2:83:62:80:79:27:61:2e:a2:b9:61:cb:0d:11:9f:bf:b4:89: bb:8a:38:61:e9:d0:6c:e4:79:b7:de:3f:2b:34:16:bc:f0:fc: 6a:ee:be:dc:e1:07:14:5c:5b:86:68:dd:33:e6:dc:70:1e:66: 3e:f5:62:b4:02:7c:85:3c:e6:2b:e8:eb:63:e2:ae:2e:e2:7e: 73:ca:3e:45:e0:d3:18:87:8b:5f:a5:0b:88:43:89:a1:e2:d7: d2:1e:5e:ff:1b:41:16:89:fa:89:ef:96:42:38:45:24:b7:e9: 74:6e:ad:de:e6:a9:5c:7b:9f:84:a0:06:66:14:06:48:24:e4: c6:7e:73:6d:e4:14:bd:9f:f9:0d:fb:72:a0:f9:f3:f8:c4:10: 37:3d:7f:00:72:f9:43:c8:16:ca:14:36:c4:54:a1:d2:21:89: 38:2d:4d:f5:dc:67:b1:d5:9f:9b:83:89:af:c6:32:f6:cd:f1: 17:52:ce:44:e9:70:7b:b8:08:37:df:fe:09:10:9d:d1:4b:1c: 79:dc:b2:b5:bb:89:97:32:8e:2e:be:ec:1f:50:d4:e8:87:70: 1b:c1:90:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjUxMDE4MjEzODIzWhcNMjUxMDI1MjEzODIzWjAYMRYwFAYD VQQDEw02OGY0MDhkMC00Mzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAub2/VhCMNWzusfCOl2X6P0TqBDoENeaAYq4xkZPvPNxK8WW8wJTmeWn1ImoI b5XcX8A0rYBRv/Gi9+oPs+G2B8lPKZJfKyVRwYgcmDCbhgn6MAJBjaggA7Xc3F+H Gs682RZi19ghGKBnTy9G9zXf56r6vs5twdR+752MPcGNPcUgUIcZ3kHUHxrPpVbu qnC7qtnUtdgO0J9B/l8tlf9kX6ZpJ7WG8byK0avWBptTzDjHJhcFuhcugpj7a+aF bDHflpEI2ZUEF5IE3bMc5uucylEcLCmIZO2ox6j0P+7DHW7VPpOAX7Hr+FC6Zygx AInkkoIe/66OWb0Ph6Zk4jkJ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVjDy8M sj7kGo5C8DL4CT68eCGzMB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEv/V66pahmNJTHNNttMKTJCAFQcrWXqL2Rw3WTEFQoSXVcaHCg2KA eSdhLqK5YcsNEZ+/tIm7ijhh6dBs5Hm33j8rNBa88Pxq7r7c4QcUXFuGaN0z5txw HmY+9WK0AnyFPOYr6Otj4q4u4n5zyj5F4NMYh4tfpQuIQ4mh4tfSHl7/G0EWifqJ 75ZCOEUkt+l0bq3e5qlce5+EoAZmFAZIJOTGfnNt5BS9n/kN+3Kg+fP4xBA3PX8A cvlDyBbKFDbEVKHSIYk4LU313Gex1Z+bg4mvxjL2zfEXUs5E6XB7uAg33/4JEJ3R Sxx53LK1u4mXMo4uvuwfUNToh3AbwZB9 -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:27 2025 by rpki-client