$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft File: k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json) Hash identifier: nz/9yQESFW84BJ42VZG7WhpXgIM4iBjXF+z5rwPW9zY= Subject key identifier: E2:18:68:BE:BC:43:77:07:31:E7:7A:0E:AC:CA:DC:47:6C:CC:4E:E7 Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Certificate serial: 140D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft Manifest number: 13F2 Signing time: Sat 18 Oct 2025 17:24:49 +0000 Manifest this update: Sat 18 Oct 2025 17:24:48 +0000 Manifest next update: Sat 25 Oct 2025 17:24:48 +0000 Files and hashes: 1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: 62JeIWNOaukw1q2FDTCjB+Adq0TKFvWFgo8hCnMHeAc=) 2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: bw4oyTaqoqfdp29e2lYAU370gy2twH+W8CpSCQrTXLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5133 (0x140d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Validity Not Before: Oct 18 17:24:48 2025 GMT Not After : Oct 25 17:24:48 2025 GMT Subject: CN=68f3cd61-61ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:d6:c9:fc:57:4d:fb:ce:63:a6:34:6a:40: 29:ed:92:0f:cc:e1:48:37:4c:bf:65:86:ce:cd:18: f4:9f:0f:5c:7e:2b:74:d5:36:a2:f1:b3:f4:97:bb: 5c:8a:31:7c:28:78:8d:36:be:cb:3b:18:a1:e4:11: 9b:24:a6:8d:f2:4c:f6:13:f3:1f:55:96:67:43:0b: 18:f4:95:74:80:71:f2:6d:e9:94:3c:02:27:f1:59: 8d:90:97:62:81:7a:33:20:bf:5b:e5:48:ae:61:11: da:50:db:b8:46:e7:d4:b1:2a:f7:49:26:04:04:b3: 0b:cd:d6:aa:50:cc:5c:53:f6:35:55:61:94:d2:cc: c6:ed:c1:53:a9:ff:b4:f3:91:2a:6a:bf:57:da:79: d8:33:5b:22:9a:88:01:53:e8:5f:a7:92:b3:e3:e3: 6f:87:98:60:97:c2:a8:5f:13:9a:54:b2:53:2c:5d: 56:f6:d0:fc:ba:9b:cc:d4:e7:b3:fa:cc:f2:39:50: 3c:f6:87:01:08:30:fa:e1:60:00:9e:26:96:db:ea: 65:66:ee:66:4d:8f:f3:f9:0f:e1:08:dd:07:f8:8f: cd:82:29:84:92:b4:8f:a7:a0:52:35:03:f2:d1:01: 64:59:c5:79:23:3a:80:9f:23:e8:1e:07:d6:bf:9b: e6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:18:68:BE:BC:43:77:07:31:E7:7A:0E:AC:CA:DC:47:6C:CC:4E:E7 X509v3 Authority Key Identifier: keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:15:62:cf:1b:bc:03:30:19:26:04:10:6c:e2:b9:35:a8:41: 67:7b:c8:86:28:75:af:ce:40:24:66:10:9b:dc:60:26:1f:37: f3:71:a4:49:57:ad:3f:7d:82:92:2d:2f:d8:10:48:fd:c5:f0: fc:b4:47:61:66:5a:ec:9f:6f:16:e0:cc:8e:f8:0e:ba:79:eb: 82:f5:e7:8a:ca:80:66:34:d0:7e:9f:ff:b5:6b:73:17:15:f8: 0b:93:df:8a:87:be:a6:4f:4c:da:12:01:52:cd:8a:11:16:f0: 53:15:ea:a4:ac:77:2c:30:e3:ca:b8:fe:f1:46:ad:14:fb:39: d5:b0:6e:03:d2:d9:bc:c5:19:ea:8d:34:1a:d2:a0:cb:7c:b6: 27:b6:8d:cf:41:1e:d7:55:a0:03:6f:d1:53:73:b3:34:ac:34: 46:4f:3d:bd:4e:46:52:ef:01:7d:1b:84:37:fb:e6:d9:83:4b: 55:9b:bb:26:17:2e:19:50:31:22:21:0c:3b:d4:0a:ad:a6:92: 77:26:21:af:8f:e4:12:fd:38:ad:ed:b5:41:79:d4:e2:66:27: a8:4f:66:56:4c:e1:1d:07:ff:e3:76:b5:60:57:64:a6:25:c0: 04:8a:4b:d7:f6:14:12:43:6b:2c:48:c8:ca:59:ad:69:03:8c: 94:d1:52:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMTUxMTAvBgNVBAUTKDkzQzRENzREMThGNTJDRUE1ODUyODBCQjMzMTJGMzEw RTEyMEMwRTkwHhcNMjUxMDE4MTcyNDQ4WhcNMjUxMDI1MTcyNDQ4WjAYMRYwFAYD VQQDEw02OGYzY2Q2MS02MWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuefWyfxXTfvOY6Y0akAp7ZIPzOFIN0y/ZYbOzRj0nw9cfit01Tai8bP0l7tc ijF8KHiNNr7LOxih5BGbJKaN8kz2E/MfVZZnQwsY9JV0gHHybemUPAIn8VmNkJdi gXozIL9b5UiuYRHaUNu4RufUsSr3SSYEBLMLzdaqUMxcU/Y1VWGU0szG7cFTqf+0 85Eqar9X2nnYM1simogBU+hfp5Kz4+Nvh5hgl8KoXxOaVLJTLF1W9tD8upvM1Oez +szyOVA89ocBCDD64WAAniaW2+plZu5mTY/z+Q/hCN0H+I/NgimEkrSPp6BSNQPy 0QFkWcV5IzqAnyPoHgfWv5vm0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIYaL68 Q3cHMed6DqzK3EdszE7nMB8GA1UdIwQYMBaAFJPE100Y9SzqWFKAuzMS8xDhIMDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QxNS83QzY4NUE4Mjk1 QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxPcFlVb0M3TXhMekVPRWd3 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4VFhUUmoxTE9wWVVvQzdNeEx6RU9FZ3dPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QxNS83QzY4NUE4Mjk1QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxP cFlVb0M3TXhMekVPRWd3T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1FWLPG7wDMBkmBBBs4rk1qEFne8iGKHWvzkAkZhCb3GAmHzfzcaRJ V60/fYKSLS/YEEj9xfD8tEdhZlrsn28W4MyO+A66eeuC9eeKyoBmNNB+n/+1a3MX FfgLk9+Kh76mT0zaEgFSzYoRFvBTFeqkrHcsMOPKuP7xRq0U+znVsG4D0tm8xRnq jTQa0qDLfLYnto3PQR7XVaADb9FTc7M0rDRGTz29TkZS7wF9G4Q3++bZg0tVm7sm Fy4ZUDEiIQw71AqtppJ3JiGvj+QS/Tit7bVBedTiZieoT2ZWTOEdB//jdrVgV2Sm JcAEikvX9hQSQ2ssSMjKWa1pA4yU0VLS -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:19 2025 by rpki-client