$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json) Hash identifier: +ewXgiksSUiF2kybdZw6B298RL1hWHQZNwTUBsxkleM= Subject key identifier: 28:26:28:4B:71:63:67:0F:60:6E:C8:0B:D1:46:32:3A:BA:6D:E8:D0 Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 077B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft Manifest number: 0772 Signing time: Sat 18 Oct 2025 22:58:22 +0000 Manifest this update: Sat 18 Oct 2025 22:58:21 +0000 Manifest next update: Sat 25 Oct 2025 22:58:21 +0000 Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: qhn4lgm9ckmWQUemk+Fm1yjysjzqPyQxcg0yJZZSFxU=) 2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: g4K9selBUQfcqVmjGlsofsYbqF6mIa5tubfOUJ/ha24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1915 (0x77b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Validity Not Before: Oct 18 22:58:21 2025 GMT Not After : Oct 25 22:58:21 2025 GMT Subject: CN=68f41b8d-67f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:a7:92:c0:ed:c9:cf:fa:0f:72:df:fa:15: 3f:ee:b6:85:9c:23:88:d9:2f:6e:26:8d:b1:c1:8f: 2e:05:93:97:77:4d:e2:4c:2f:ae:cc:ba:a1:5d:24: 0d:1e:70:1e:ef:89:5f:b2:cb:9b:c0:b2:44:e8:1c: 9b:be:f3:4c:f1:b4:49:be:83:f5:31:58:1c:83:f1: 7d:d6:b1:35:ad:0f:08:38:90:46:30:4a:43:8d:95: 7b:dc:d4:dc:09:ed:af:b9:ea:69:10:52:6c:c1:08: 2a:08:44:62:12:01:a2:79:e3:da:04:a5:11:84:c0: fd:25:46:25:c2:76:da:f5:fe:a3:41:72:cc:77:9d: e3:28:dc:15:82:63:7d:61:d3:34:bb:cb:f7:af:89: ca:3d:76:bd:e8:67:46:9a:95:b5:98:a3:53:75:e6: 12:57:e8:88:5b:86:a3:ad:2a:60:ad:6f:e4:ff:8b: 03:e0:8f:6b:90:ca:25:c3:75:d0:c1:fb:96:48:d0: 14:b3:e7:9a:db:dc:a3:72:76:bf:12:38:3a:8a:aa: 40:7a:32:db:be:d3:c6:1a:45:5e:59:08:5f:54:ad: 3e:5c:66:e0:ff:a4:b5:00:3b:c8:a9:f1:2f:20:ae: 16:82:59:49:e6:3a:36:66:b9:84:d5:d9:a6:ec:3b: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:26:28:4B:71:63:67:0F:60:6E:C8:0B:D1:46:32:3A:BA:6D:E8:D0 X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b0:0a:1b:99:40:5f:43:9f:ac:4b:e1:4b:3a:e8:fb:86:f5: c8:f2:ec:dc:fc:b4:47:c2:3d:08:6e:82:6d:68:54:74:8c:a9: 14:1a:3c:68:96:6b:bf:8c:2b:f8:32:45:41:c2:54:3e:32:0e: dd:4b:29:81:34:26:5a:84:eb:00:99:eb:fc:39:94:66:31:44: 40:c4:23:bc:c8:c4:35:8c:45:35:d8:63:57:8f:ba:f4:c2:e8: 95:30:12:68:b5:a7:de:57:2c:fc:c4:ca:30:d4:81:17:3d:6e: 39:d8:d4:6a:c0:38:38:dd:36:4b:25:b9:8e:2c:79:c4:f2:54: ed:19:64:c0:a6:86:31:03:6e:2c:d6:1e:3d:3b:c7:02:a4:7e: 02:ef:70:7d:9c:00:22:70:24:20:0f:35:15:70:b2:49:a1:fb: 9b:54:13:05:bd:80:75:ff:20:01:2a:c6:0b:bd:bb:1d:d8:7b: 50:06:6a:fa:c3:fc:54:7e:2f:c1:3f:e7:60:fd:2a:9b:3a:18: 87:ee:a3:0d:4d:b9:c0:33:a0:19:7e:15:8e:21:03:b5:50:7e: 83:c6:1f:df:3d:41:4c:47:d6:de:d1:6d:46:44:fd:ea:1e:9b: 9a:8e:6f:c3:6e:3c:c2:59:3e:08:2f:64:d9:94:90:6c:61:c6: 3a:34:c2:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjUxMDE4MjI1ODIxWhcNMjUxMDI1MjI1ODIxWjAYMRYwFAYD VQQDEw02OGY0MWI4ZC02N2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKynksDtyc/6D3Lf+hU/7raFnCOI2S9uJo2xwY8uBZOXd03iTC+uzLqhXSQN HnAe74lfssubwLJE6BybvvNM8bRJvoP1MVgcg/F91rE1rQ8IOJBGMEpDjZV73NTc Ce2vueppEFJswQgqCERiEgGieePaBKURhMD9JUYlwnba9f6jQXLMd53jKNwVgmN9 YdM0u8v3r4nKPXa96GdGmpW1mKNTdeYSV+iIW4ajrSpgrW/k/4sD4I9rkMolw3XQ wfuWSNAUs+ea29yjcna/Ejg6iqpAejLbvtPGGkVeWQhfVK0+XGbg/6S1ADvIqfEv IK4WgllJ5jo2ZrmE1dmm7Dt3uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgmKEtx Y2cPYG7IC9FGMjq6bejQMB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhGMy9FOUQzMEM4MDM1RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsz a0Y1cDBiOGw5TlU3TlVYSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKsAobmUBfQ5+sS+FLOuj7hvXI8uzc/LRHwj0IboJtaFR0jKkUGjxo lmu/jCv4MkVBwlQ+Mg7dSymBNCZahOsAmev8OZRmMURAxCO8yMQ1jEU12GNXj7r0 wuiVMBJotafeVyz8xMow1IEXPW452NRqwDg43TZLJbmOLHnE8lTtGWTApoYxA24s 1h49O8cCpH4C73B9nAAicCQgDzUVcLJJofubVBMFvYB1/yABKsYLvbsd2HtQBmr6 w/xUfi/BP+dg/SqbOhiH7qMNTbnAM6AZfhWOIQO1UH6Dxh/fPUFMR9be0W1GRP3q Hpuajm/DbjzCWT4IL2TZlJBsYcY6NMKi -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:09 2025 by rpki-client