$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: nr7ZjlVE1J7n4f905gxcG3Du5PTSxaCDUwBPNREVZ2A= Subject key identifier: 91:52:C1:35:E6:C1:87:6B:E6:50:C6:DF:E3:19:E2:97:68:AB:BA:F8 Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 04DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 04D9 Signing time: Sun 19 Oct 2025 01:33:24 +0000 Manifest this update: Sun 19 Oct 2025 01:33:24 +0000 Manifest next update: Sun 26 Oct 2025 01:33:24 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: MMT92IznnZ14fYe7mktGNjszHlF7imP5BOvhg5DJRHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Oct 19 01:33:24 2025 GMT Not After : Oct 26 01:33:24 2025 GMT Subject: CN=68f43fe4-91bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:af:45:f2:be:d3:e9:4f:15:0d:91:4c:46: 0b:c7:ab:fd:20:09:ba:75:cb:37:00:ea:69:65:78: 70:59:cb:09:71:74:04:3c:aa:f4:08:ad:f2:07:85: 90:81:e5:e1:d2:45:83:63:1d:ef:03:fc:3d:13:65: 92:8e:40:20:b8:04:67:dc:67:18:33:c0:4b:5c:02: 4d:94:80:15:6d:03:7a:c1:7b:35:39:e8:61:7d:87: 5e:54:5a:41:5b:a4:0b:0d:a5:a5:45:06:2e:f5:3d: 24:9a:49:87:5a:b2:5a:42:b5:a3:61:a7:cf:ec:94: 0f:ca:f9:d1:43:54:64:88:ab:74:d3:2d:ea:e5:18: 2c:e7:67:1a:7e:85:0f:16:97:b2:33:61:fe:e5:f7: d9:a2:b4:88:c4:16:81:cb:c2:63:dd:f2:d4:41:5f: 03:a3:7e:6c:bd:03:a0:da:b3:15:8c:41:de:5d:ad: 69:f5:0a:94:73:ce:33:ca:ed:60:a4:cf:5f:76:1e: 0c:67:c8:56:96:c1:23:86:ca:34:db:11:b4:71:81: 2e:d9:ce:5b:a4:d2:c0:de:1b:a3:0a:2a:23:87:aa: d5:ba:e6:8e:80:d8:5e:79:f0:a0:de:4a:84:0a:42: 1d:13:e5:a0:ea:4c:6b:d6:87:de:56:72:03:d3:79: 22:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:52:C1:35:E6:C1:87:6B:E6:50:C6:DF:E3:19:E2:97:68:AB:BA:F8 X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:44:2f:f0:97:8e:6a:0a:53:60:e3:e7:e9:1e:df:15:db:43: ad:c5:04:c7:ef:68:11:46:5b:a7:ba:ac:ee:41:71:e4:c2:f4: 7f:f3:a1:f4:0f:4c:55:67:41:43:c7:78:c9:35:ef:5a:51:65: a6:18:be:d2:60:6d:64:e2:25:9f:f8:7f:9a:a0:aa:f9:35:2c: 95:b1:a4:17:70:17:98:a6:09:74:d6:2a:c7:34:57:96:d9:2c: bb:e7:80:46:71:c6:e1:16:1c:13:de:a5:d6:20:a7:43:25:24: 86:fd:8c:81:96:de:40:d1:3d:62:e1:a5:cd:ee:a3:26:8e:50: d9:b6:5f:a1:64:c7:ef:55:97:ac:cb:f5:ef:5d:1c:c8:20:f9: 62:9d:5b:d6:0f:0c:35:87:25:69:cb:d4:b0:b1:cb:26:cf:58: c3:be:c1:5a:8c:5a:df:6c:94:4f:93:60:92:6b:2f:f9:f1:c8: 2b:16:d6:5a:9a:96:68:ee:29:98:f6:b9:34:1d:78:1d:2c:73: ce:5a:54:90:c5:2a:74:2a:d0:9a:d7:bd:44:fb:12:a9:47:99: 1c:d3:ab:60:fb:62:6b:94:c9:03:f3:6f:33:82:17:5e:f2:08: d0:4e:c9:c1:0b:71:56:de:33:24:d0:af:ce:cb:af:02:22:c3: 05:78:b8:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUxMDE5MDEzMzI0WhcNMjUxMDI2MDEzMzI0WjAYMRYwFAYD VQQDEw02OGY0M2ZlNC05MWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDevRfK+0+lPFQ2RTEYLx6v9IAm6dcs3AOppZXhwWcsJcXQEPKr0CK3yB4WQ geXh0kWDYx3vA/w9E2WSjkAguARn3GcYM8BLXAJNlIAVbQN6wXs1OehhfYdeVFpB W6QLDaWlRQYu9T0kmkmHWrJaQrWjYafP7JQPyvnRQ1RkiKt00y3q5Rgs52cafoUP FpeyM2H+5ffZorSIxBaBy8Jj3fLUQV8Do35svQOg2rMVjEHeXa1p9QqUc84zyu1g pM9fdh4MZ8hWlsEjhso02xG0cYEu2c5bpNLA3hujCiojh6rVuuaOgNheefCg3kqE CkIdE+Wg6kxr1ofeVnID03kiQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFSwTXm wYdr5lDG3+MZ4pdoq7r4MB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/RC/wl45qClNg4+fpHt8V20OtxQTH72gRRlunuqzuQXHkwvR/86H0 D0xVZ0FDx3jJNe9aUWWmGL7SYG1k4iWf+H+aoKr5NSyVsaQXcBeYpgl01irHNFeW 2Sy754BGccbhFhwT3qXWIKdDJSSG/YyBlt5A0T1i4aXN7qMmjlDZtl+hZMfvVZes y/XvXRzIIPlinVvWDww1hyVpy9Swscsmz1jDvsFajFrfbJRPk2CSay/58cgrFtZa mpZo7imY9rk0HXgdLHPOWlSQxSp0KtCa171E+xKpR5kc06tg+2JrlMkD828zghde 8gjQTsnBC3FW3jMk0K/Oy68CIsMFeLgI -----END CERTIFICATE-----Generated at Mon Oct 20 21:45:21 2025 by rpki-client