$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: J2hmPwcIC3KUgNfRsYEQ47HbxYJozUeUsmbgGb8KfuU= Subject key identifier: BA:E5:92:0D:0D:AE:8E:27:3F:5E:33:9D:DF:E3:5C:B8:FB:B6:3B:09 Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 0784 Signing time: Sat 18 Oct 2025 22:53:39 +0000 Manifest this update: Sat 18 Oct 2025 22:53:38 +0000 Manifest next update: Sat 25 Oct 2025 22:53:38 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: rn3fsbvVQwTAMrk3+UbHL+Q0XA3JaSo9r32KO/mAHrk=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: LAD7dRCik0KzxFNr8quzKbBZIsig686rpItw8aFMMeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Oct 18 22:53:38 2025 GMT Not After : Oct 25 22:53:38 2025 GMT Subject: CN=68f41a73-847b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:91:28:f9:63:7d:76:ad:bb:21:96:3b:a5: 2f:f7:0f:8d:60:5d:b1:e8:3e:fa:29:5b:78:2e:9f: 3f:66:31:e0:9f:85:0c:f3:c2:1a:2f:17:7f:26:3e: e3:f6:c2:b8:e6:39:8d:66:f2:c9:06:a9:f0:14:47: 88:e3:1e:a0:40:c7:0d:36:01:49:60:bc:34:ae:e7: 6f:2f:0e:4c:40:74:41:80:b5:ec:ab:1d:4f:a1:5b: dd:2d:0c:5f:da:b6:3b:b9:eb:5c:56:09:cc:f5:c3: 53:31:2f:2a:79:8a:ff:7a:7a:bf:dc:2b:64:1f:29: aa:50:96:90:db:f8:18:9e:6a:32:e6:78:66:73:b9: cc:4f:38:d2:0b:8e:95:2f:db:41:21:23:f0:52:e8: 15:5b:29:c8:5a:fb:90:42:3f:28:4c:e7:c8:29:22: 33:13:91:40:00:1a:79:f9:96:60:13:2b:33:f7:68: 0c:18:3d:47:05:cd:06:df:8c:e6:12:02:7c:7e:77: 4a:4e:7e:91:07:87:a5:51:eb:a8:8f:46:19:3f:8c: d3:6b:b9:92:c4:66:b8:7e:93:d0:02:73:11:f1:73: 70:13:24:28:19:80:88:23:a2:3a:27:2d:7e:d4:94: 39:71:12:24:ab:4a:17:70:59:c2:5f:20:e4:b7:e2: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E5:92:0D:0D:AE:8E:27:3F:5E:33:9D:DF:E3:5C:B8:FB:B6:3B:09 X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:50:79:a9:9f:83:f8:4c:93:9b:68:c2:68:86:ea:1f:04:fa: 4e:ee:f8:c9:9f:5a:11:aa:6b:b2:73:1e:28:44:b0:66:09:d6: bc:fc:05:de:7c:80:4f:1f:74:e9:51:b5:67:0e:66:47:a1:45: 3f:52:a4:cc:d6:24:4b:4a:b2:37:d5:e6:94:e4:9b:68:95:b5: 76:f9:ff:a2:8a:21:4d:eb:ad:37:6e:a0:4f:12:8e:da:ae:b0: 79:fb:a0:58:0d:60:78:9a:23:e2:52:b1:74:ea:c3:bf:a1:a9: 4d:9a:89:8f:db:bf:e1:93:7a:95:e0:ed:59:a5:2b:ab:41:b2: 9a:f5:94:8d:f2:e4:6e:7a:30:ce:8c:96:0f:92:fd:ac:19:6a: 31:cc:34:1f:f7:3f:78:4a:cb:52:59:61:40:08:07:1e:76:40: b9:ba:39:67:7a:36:5e:1e:64:21:38:b1:c5:64:f0:56:ad:a7: f7:df:b5:d0:ca:ce:14:6b:52:92:79:87:50:eb:d2:66:f8:07: 6f:a0:99:ef:9b:8b:cd:56:c1:19:b7:a4:3c:c2:62:82:ef:67: 44:58:ed:64:00:e9:60:1e:69:54:39:9c:65:ae:fc:6a:07:a6: 8b:49:f0:02:7d:75:c5:d9:6d:f3:86:f6:7c:55:59:8c:75:f2: ce:52:0b:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjUxMDE4MjI1MzM4WhcNMjUxMDI1MjI1MzM4WjAYMRYwFAYD VQQDEw02OGY0MWE3My04NDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TORKPljfXatuyGWO6Uv9w+NYF2x6D76KVt4Lp8/ZjHgn4UM88IaLxd/Jj7j 9sK45jmNZvLJBqnwFEeI4x6gQMcNNgFJYLw0rudvLw5MQHRBgLXsqx1PoVvdLQxf 2rY7uetcVgnM9cNTMS8qeYr/enq/3CtkHymqUJaQ2/gYnmoy5nhmc7nMTzjSC46V L9tBISPwUugVWynIWvuQQj8oTOfIKSIzE5FAABp5+ZZgEysz92gMGD1HBc0G34zm EgJ8fndKTn6RB4elUeuoj0YZP4zTa7mSxGa4fpPQAnMR8XNwEyQoGYCII6I6Jy1+ 1JQ5cRIkq0oXcFnCXyDkt+Kq/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrlkg0N ro4nP14znd/jXLj7tjsJMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMUHmpn4P4TJObaMJohuofBPpO7vjJn1oRqmuycx4oRLBmCda8/AXe fIBPH3TpUbVnDmZHoUU/UqTM1iRLSrI31eaU5JtolbV2+f+iiiFN6603bqBPEo7a rrB5+6BYDWB4miPiUrF06sO/oalNmomP27/hk3qV4O1ZpSurQbKa9ZSN8uRuejDO jJYPkv2sGWoxzDQf9z94SstSWWFACAcedkC5ujlnejZeHmQhOLHFZPBWraf337XQ ys4Ua1KSeYdQ69Jm+AdvoJnvm4vNVsEZt6Q8wmKC72dEWO1kAOlgHmlUOZxlrvxq B6aLSfACfXXF2W3zhvZ8VVmMdfLOUgvx -----END CERTIFICATE-----Generated at Mon Oct 20 08:24:18 2025 by rpki-client