$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: C7FpJqWJIVnEa4wHgmLIXmWTRIzkLtjOBnaE96ij3a4= Subject key identifier: 86:7C:64:66:C8:C7:C0:1D:84:83:99:6D:F2:36:CD:81:8F:6F:F5:32 Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 01A1 Signing time: Sun 19 Oct 2025 05:50:49 +0000 Manifest this update: Sun 19 Oct 2025 05:50:48 +0000 Manifest next update: Sun 26 Oct 2025 05:50:48 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: jc46vr6GYKM/C8jK9oENmN4u7OS0DEg4hJNjnhYBn0A=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Oct 19 05:50:48 2025 GMT Not After : Oct 26 05:50:48 2025 GMT Subject: CN=68f47c39-4acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:25:f2:b9:5d:c9:45:01:b8:f6:76:92:70: ea:5c:aa:d5:9d:a6:0e:57:2e:b9:cc:f9:d7:08:ae: 11:c7:80:b0:db:c5:49:a6:c1:c5:de:98:c8:a4:93: 16:53:e7:75:e1:0a:01:52:65:2d:9a:25:fe:e4:ac: a8:b4:1a:8f:80:36:62:a8:b5:5a:bc:4e:de:f2:9a: 41:db:82:17:4f:94:7a:fe:6a:df:76:c5:1c:f3:e6: 20:17:44:ef:4a:c2:a5:ec:18:7d:3c:ab:43:30:25: e4:f7:42:32:3f:1b:1a:8b:52:ab:79:34:6b:0f:06: f3:44:54:0f:d1:b4:d1:4f:68:bf:9b:b0:19:8a:c9: ca:75:5e:6d:c8:86:4e:5c:e1:5d:4e:bb:d6:e5:01: 03:b0:5a:83:9d:ac:f3:8b:ce:a2:62:f5:73:73:fb: fc:4f:96:a2:58:4c:90:8b:81:21:9a:d0:e2:62:db: b2:77:1b:18:1c:6e:86:7b:a3:f9:1d:16:a3:0b:b0: 11:e6:ca:23:1b:a7:43:1d:69:f5:c3:9d:84:be:b3: 66:61:b4:96:b5:88:00:d6:81:2f:b8:be:83:0a:57: b5:d7:76:12:8b:6d:ee:f0:f9:9a:41:0f:8c:68:bc: 67:4b:7f:77:15:35:23:29:11:6a:47:ef:af:43:1c: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7C:64:66:C8:C7:C0:1D:84:83:99:6D:F2:36:CD:81:8F:6F:F5:32 X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:21:af:67:55:af:ba:72:12:68:6c:f3:22:b8:30:31:8e:12: 77:79:12:b0:30:e7:3f:b7:26:92:e3:96:13:54:6e:d2:e3:94: aa:c2:bb:a0:e9:a8:d7:b1:7f:2a:9c:04:93:62:d9:4e:4f:ec: cc:19:31:00:dd:cf:23:df:e7:ee:21:2a:dc:0a:1c:ed:ec:37: df:e7:c4:ba:5c:8b:ad:20:f7:da:ec:1a:10:71:4b:e5:ff:24: f6:0c:1c:bc:87:27:64:05:31:42:6f:46:85:74:0a:03:53:7a: 94:8f:45:f3:6e:88:cb:c1:c8:72:21:28:46:23:e4:ff:d1:18: 00:31:f4:e4:de:f3:06:d1:47:51:19:8a:f4:dc:b2:cd:3e:68: 90:bd:4a:0d:c7:1d:97:b2:82:81:96:f3:dd:5f:17:94:f6:85: b3:77:3c:c5:9a:e8:3d:91:82:90:00:46:70:18:b3:e8:bc:84: 58:d4:16:8f:6a:6a:e6:9e:f4:08:dd:7d:52:81:4f:f8:5b:52: 65:29:63:e3:0e:fd:c1:98:f5:fe:1e:aa:07:79:aa:0d:3d:8e: 98:82:91:97:17:a5:26:ca:a4:22:ae:8f:74:ce:df:ee:91:80: 79:56:ab:9f:02:50:a9:a8:32:42:04:33:6c:46:2c:26:c7:db: e4:08:1d:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUxMDE5MDU1MDQ4WhcNMjUxMDI2MDU1MDQ4WjAYMRYwFAYD VQQDEw02OGY0N2MzOS00YWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xol8rldyUUBuPZ2knDqXKrVnaYOVy65zPnXCK4Rx4Cw28VJpsHF3pjIpJMW U+d14QoBUmUtmiX+5KyotBqPgDZiqLVavE7e8ppB24IXT5R6/mrfdsUc8+YgF0Tv SsKl7Bh9PKtDMCXk90IyPxsai1KreTRrDwbzRFQP0bTRT2i/m7AZisnKdV5tyIZO XOFdTrvW5QEDsFqDnazzi86iYvVzc/v8T5aiWEyQi4EhmtDiYtuydxsYHG6Ge6P5 HRajC7AR5sojG6dDHWn1w52EvrNmYbSWtYgA1oEvuL6DCle113YSi23u8PmaQQ+M aLxnS393FTUjKRFqR++vQxzxlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZ8ZGbI x8AdhIOZbfI2zYGPb/UyMB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMIa9nVa+6chJobPMiuDAxjhJ3eRKwMOc/tyaS45YTVG7S45Sqwrug 6ajXsX8qnASTYtlOT+zMGTEA3c8j3+fuISrcChzt7Dff58S6XIutIPfa7BoQcUvl /yT2DBy8hydkBTFCb0aFdAoDU3qUj0XzbojLwchyIShGI+T/0RgAMfTk3vMG0UdR GYr03LLNPmiQvUoNxx2XsoKBlvPdXxeU9oWzdzzFmug9kYKQAEZwGLPovIRY1BaP amrmnvQI3X1SgU/4W1JlKWPjDv3BmPX+HqoHeaoNPY6YgpGXF6UmyqQiro90zt/u kYB5VqufAlCpqDJCBDNsRiwmx9vkCB0s -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:41 2025 by rpki-client