$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: G6s13RckxXOxFQNMcArt+26wESjEAsRXoryGFsBp1Ec= Subject key identifier: 26:8B:36:77:B1:7D:19:AE:12:7E:7B:DC:49:9C:3A:B9:C8:D3:CA:F7 Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 07B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0CE9 Signing time: Sat 18 Oct 2025 22:40:27 +0000 Manifest this update: Sat 18 Oct 2025 22:40:26 +0000 Manifest next update: Sat 25 Oct 2025 22:40:26 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: 3GgWGMO1bV1RJj7U5ZtzlykpGxsDBBfT1dXvPf+46Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Oct 18 22:40:26 2025 GMT Not After : Oct 25 22:40:26 2025 GMT Subject: CN=68f4175a-5e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a0:6f:6b:fe:77:99:c6:a9:7b:57:17:6c:af: 21:39:05:fd:e8:ea:af:ee:0c:3b:0a:ba:aa:83:bf: 44:bf:da:27:ee:ff:da:6f:6f:a1:df:35:74:10:1b: 85:76:b5:42:72:42:b2:7d:37:ae:6d:04:98:97:98: 7d:58:75:db:a3:1c:e2:0a:8c:51:95:40:01:fa:27: 1c:50:71:4c:f8:af:3b:bd:19:18:5f:a3:d4:8c:0f: 60:b7:6e:0a:e3:46:f3:a9:46:7c:63:b9:55:16:c1: f0:32:75:e9:96:c4:30:77:dd:d8:c3:13:3f:22:eb: 7b:ed:c9:b3:aa:39:bd:1b:76:2a:77:4d:e4:91:05: 62:74:58:bc:5f:8d:fe:6a:84:20:66:47:69:e3:56: 8e:94:a6:8a:77:dd:60:e3:bf:ce:01:a3:77:fa:16: 1e:16:cc:0b:09:5a:2e:a3:a8:74:bf:7d:82:29:13: fe:aa:5e:f9:08:b8:51:7e:46:02:7d:49:70:e4:6a: 6a:c3:e5:e4:e0:de:78:f1:b6:49:dc:2e:1b:0c:52: f5:53:94:25:27:45:ba:a0:0f:0d:f0:63:6b:e8:49: bc:55:a1:83:5b:9c:a9:e5:96:ca:ed:59:0b:b2:66: 59:19:cc:fc:8b:25:85:fa:03:88:9b:4e:b1:e8:41: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8B:36:77:B1:7D:19:AE:12:7E:7B:DC:49:9C:3A:B9:C8:D3:CA:F7 X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:8a:3b:81:f3:d3:f6:ef:a1:9d:07:1c:af:b4:c1:30:f3:9c: e4:90:55:11:39:34:d2:ad:ac:ee:4a:3a:24:43:30:73:8f:62: 28:57:5d:9e:5c:37:fb:32:8e:d0:1a:00:73:e8:0c:3e:21:c0: b5:6b:73:41:6c:f8:6e:27:01:ae:7e:e2:29:f5:41:0e:9b:78: b7:e1:67:bd:82:a1:d5:40:97:c2:75:9d:27:04:c0:e2:e9:c2: 38:fc:17:22:60:4a:6f:e0:22:5e:2a:fb:72:67:09:18:83:55: dc:eb:d8:c2:f2:f5:40:b7:5f:df:c4:2a:29:6d:f2:1a:4b:a1: 9c:ce:1f:84:b1:09:c6:8d:d3:f9:9b:13:85:b3:6c:24:8a:59: 69:47:9d:6e:c0:3d:d1:a1:94:20:9e:ba:62:d4:db:d3:f2:ea: a2:54:bd:c6:0b:86:1e:58:a9:67:32:72:63:0a:d4:bb:02:07: 90:1d:f8:04:99:31:03:3f:49:50:31:04:2e:80:fc:ea:fe:02: 5c:2c:06:4c:1e:63:cf:53:28:03:4c:c2:c0:55:8e:30:a4:8a: de:5a:a0:0c:1e:dc:52:4b:91:bd:29:37:81:ce:e4:36:4e:d3: 31:52:16:07:fe:75:d7:5f:7b:18:c6:1b:8e:67:9e:53:78:70: e6:99:40:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUxMDE4MjI0MDI2WhcNMjUxMDI1MjI0MDI2WjAYMRYwFAYD VQQDEw02OGY0MTc1YS01ZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KBva/53mcape1cXbK8hOQX96Oqv7gw7Crqqg79Ev9on7v/ab2+h3zV0EBuF drVCckKyfTeubQSYl5h9WHXboxziCoxRlUAB+iccUHFM+K87vRkYX6PUjA9gt24K 40bzqUZ8Y7lVFsHwMnXplsQwd93YwxM/Iut77cmzqjm9G3Yqd03kkQVidFi8X43+ aoQgZkdp41aOlKaKd91g47/OAaN3+hYeFswLCVouo6h0v32CKRP+ql75CLhRfkYC fUlw5Gpqw+Xk4N548bZJ3C4bDFL1U5QlJ0W6oA8N8GNr6Em8VaGDW5yp5ZbK7VkL smZZGcz8iyWF+gOIm06x6EF2ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaLNnex fRmuEn573EmcOrnI08r3MB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARijuB89P276GdBxyvtMEw85zkkFUROTTSrazuSjokQzBzj2IoV12e XDf7Mo7QGgBz6Aw+IcC1a3NBbPhuJwGufuIp9UEOm3i34We9gqHVQJfCdZ0nBMDi 6cI4/BciYEpv4CJeKvtyZwkYg1Xc69jC8vVAt1/fxCopbfIaS6Gczh+EsQnGjdP5 mxOFs2wkillpR51uwD3RoZQgnrpi1NvT8uqiVL3GC4YeWKlnMnJjCtS7AgeQHfgE mTEDP0lQMQQugPzq/gJcLAZMHmPPUygDTMLAVY4wpIreWqAMHtxSS5G9KTeBzuQ2 TtMxUhYH/nXXX3sYxhuOZ55TeHDmmUDt -----END CERTIFICATE-----Generated at Sun Oct 19 23:19:54 2025 by rpki-client