$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: Rp7JbITCOGycVX2KNCXfAyrnXq0NXH5Q0ppvNZO7Whk= Subject key identifier: 0E:69:83:E7:16:43:6C:61:B4:A6:9B:57:70:E4:7B:3C:F8:63:69:18 Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0CAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0C98 Signing time: Sat 18 Oct 2025 19:02:40 +0000 Manifest this update: Sat 18 Oct 2025 19:02:40 +0000 Manifest next update: Sat 25 Oct 2025 19:02:40 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: OIR2To8zsVEUMNECArzdAP9OW5NPzsdoSRvTo65thrY=) 2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: hMRVZDPhI9uQhHlcLsQL6+B9hhuCOLqR+jjUlDn3sAQ=) 3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: s3U0q40HWyXJCTwtjWa8KKHr421/tnOx6JMPLRqROA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3243 (0xcab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Oct 18 19:02:40 2025 GMT Not After : Oct 25 19:02:40 2025 GMT Subject: CN=68f3e450-dd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:66:d1:20:98:af:c4:6e:e8:28:37:4c:db: f3:76:75:5a:86:e9:c7:57:a1:c8:65:e2:e8:a2:ad: 61:02:b5:e0:c1:10:2c:0d:80:51:59:3d:ce:41:a0: b9:41:25:cd:e1:77:5d:e8:00:d2:fd:ee:0e:d2:6a: 06:6c:d6:f6:9a:d6:38:fb:c4:ec:db:50:21:c1:4f: 87:aa:27:96:c2:eb:39:cf:f2:c4:1b:6c:74:7c:1c: ce:64:a7:1b:04:9b:3f:5e:af:e0:d2:37:11:d6:9c: 79:e2:26:be:96:5b:7c:1f:e2:6f:09:6f:68:ec:99: ee:00:44:2c:67:2b:00:7a:5b:1a:2c:83:28:e8:17: d4:2f:13:52:6f:ce:3e:70:fa:15:7f:1e:2a:9c:cd: ac:16:7a:5b:ae:b7:a3:a6:c3:c7:2b:42:e8:ad:01: 2b:94:1b:ac:16:3e:15:7c:3f:2d:a0:b9:24:a7:53: d3:af:3e:c6:7a:1c:ba:54:35:66:40:14:6b:b4:5e: d1:30:bc:f3:8e:0e:f1:1c:7e:77:5d:a8:b4:87:1f: 90:a1:76:c2:d2:5f:8c:aa:f9:ef:64:42:08:8e:9c: c3:8e:51:e6:55:f7:b6:b4:a9:f8:f1:60:6d:e0:52: 93:ee:87:f4:2d:26:74:93:28:f3:a9:71:e2:b9:3f: 06:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:69:83:E7:16:43:6C:61:B4:A6:9B:57:70:E4:7B:3C:F8:63:69:18 X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:06:11:b3:75:30:28:5b:f4:52:c0:5f:a0:ba:4c:a9:7c:2c: b6:13:1b:f6:70:a1:3c:a4:c4:7f:2a:e7:f5:fe:ba:c0:4a:5f: 75:4a:d5:11:78:27:c5:ca:f7:9c:59:5b:6b:0a:6c:d2:78:3c: cc:10:e0:82:41:9b:7c:f7:c5:d0:d9:16:bc:c6:a2:34:0e:47: 57:c6:8c:33:4d:21:fb:d7:80:14:f9:9b:b6:65:a3:84:bb:86: bb:2e:36:2b:f2:46:b6:7a:f5:f4:ed:1a:ac:66:e7:f0:81:f9: 74:72:db:bb:b1:60:34:bd:1b:b2:38:65:cd:04:ea:49:0f:d6: 74:64:c4:e7:e3:08:c4:4e:d7:74:76:10:77:94:f4:da:57:e2: d2:38:9d:40:9b:84:6c:6c:a5:3e:72:aa:94:03:2b:2e:ba:d1: 09:c0:21:4a:8d:0b:5a:8b:ae:88:40:85:65:43:7e:85:ef:c1: 9d:36:8f:40:e5:d3:56:68:aa:40:45:0e:9c:fe:c0:fa:0d:10: ec:de:a4:72:31:ff:32:5f:71:49:9c:8e:e4:ba:4b:79:01:5d: 06:85:c0:e5:45:54:9e:99:66:b8:41:24:3c:47:36:bc:32:07: c3:af:1b:62:8d:64:be:a9:d4:2c:cc:d6:04:70:33:ea:63:3f: 68:b4:e2:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjUxMDE4MTkwMjQwWhcNMjUxMDI1MTkwMjQwWjAYMRYwFAYD VQQDEw02OGYzZTQ1MC1kZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzpm0SCYr8Ru6Cg3TNvzdnVahunHV6HIZeLooq1hArXgwRAsDYBRWT3OQaC5 QSXN4Xdd6ADS/e4O0moGbNb2mtY4+8Ts21AhwU+HqieWwus5z/LEG2x0fBzOZKcb BJs/Xq/g0jcR1px54ia+llt8H+JvCW9o7JnuAEQsZysAelsaLIMo6BfULxNSb84+ cPoVfx4qnM2sFnpbrrejpsPHK0LorQErlBusFj4VfD8toLkkp1PTrz7Gehy6VDVm QBRrtF7RMLzzjg7xHH53Xai0hx+QoXbC0l+MqvnvZEIIjpzDjlHmVfe2tKn48WBt 4FKT7of0LSZ0kyjzqXHiuT8GtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5pg+cW Q2xhtKabV3Dkezz4Y2kYMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2BhGzdTAoW/RSwF+gukypfCy2Exv2cKE8pMR/Kuf1/rrASl91StUR eCfFyvecWVtrCmzSeDzMEOCCQZt898XQ2Ra8xqI0DkdXxowzTSH714AU+Zu2ZaOE u4a7LjYr8ka2evX07RqsZufwgfl0ctu7sWA0vRuyOGXNBOpJD9Z0ZMTn4wjETtd0 dhB3lPTaV+LSOJ1Am4RsbKU+cqqUAysuutEJwCFKjQtai66IQIVlQ36F78GdNo9A 5dNWaKpARQ6c/sD6DRDs3qRyMf8yX3FJnI7kukt5AV0GhcDlRVSemWa4QSQ8Rza8 MgfDrxtijWS+qdQszNYEcDPqYz9otOJq -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:02 2025 by rpki-client