$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft File: 83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json) Hash identifier: dCIrUubnjCnltF5+5O0uh9t5jBLUnnRpcCIjem0mZhU= Subject key identifier: C1:A8:B2:A3:C1:F2:98:C6:96:BA:43:D9:4A:D6:CB:4B:C4:2D:76:1A Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Certificate serial: 09CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft Manifest number: 09C2 Signing time: Sat 18 Oct 2025 21:01:24 +0000 Manifest this update: Sat 18 Oct 2025 21:01:24 +0000 Manifest next update: Sat 25 Oct 2025 21:01:24 +0000 Files and hashes: 1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: TGnhP/1BV5WK/jtL+o9eXus/UlTJ746JjJb+xElF5VU=) 2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: FDVevWofhV4OBWCY3mCV+bPsuc2xoyahcfyBo3UC3vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2506 (0x9ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Validity Not Before: Oct 18 21:01:24 2025 GMT Not After : Oct 25 21:01:24 2025 GMT Subject: CN=68f40024-81bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:6d:55:43:fd:be:49:07:c8:7e:d6:97:5f: d7:ae:ce:e6:b1:ab:d2:11:e8:47:e4:ad:40:05:34: 2a:fc:1e:53:de:a7:5e:5c:ab:9a:eb:72:31:77:d0: 68:fd:b0:1a:af:7c:8d:8c:b9:bb:0f:4e:17:5b:2f: ab:99:7f:e3:d1:44:70:64:3c:90:7b:07:f3:7c:c0: ef:25:b0:ca:bd:cc:2c:83:77:81:b2:97:a2:25:70: e6:86:28:f6:98:79:f7:83:25:c5:bd:dc:9e:de:47: 1e:ea:31:38:ff:0d:a2:7c:d5:9a:2f:64:3b:23:6b: e0:bd:36:33:fd:c7:e8:62:17:b2:cc:72:51:fb:49: fa:d5:1c:17:3d:0f:fe:22:5d:a4:39:9c:38:c7:45: 6e:3c:65:8f:40:50:58:9d:48:3e:6d:a9:1d:c1:57: d1:a6:2a:d2:60:b3:b7:bf:cb:34:e5:73:4e:65:ac: cc:91:90:65:db:f8:d6:1d:a3:dc:e2:60:81:06:e2: a7:c2:02:4b:6a:77:8f:03:e1:56:c3:24:99:d9:56: d7:2c:4b:a9:c1:00:c7:c8:7d:22:08:c4:8b:19:49: c5:21:5b:60:88:46:68:19:08:29:97:07:af:09:f7: 07:b2:37:55:a3:4e:ef:e4:6a:80:15:f1:c7:99:6e: fb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A8:B2:A3:C1:F2:98:C6:96:BA:43:D9:4A:D6:CB:4B:C4:2D:76:1A X509v3 Authority Key Identifier: keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ae:1d:8a:ea:80:49:49:a9:fc:d9:c9:5b:d9:fd:4b:63:db: 2a:f7:db:c3:a6:16:3a:5a:a1:c3:61:28:41:8c:11:8a:22:17: 3b:5b:d3:fe:b5:b8:83:dd:df:06:c0:c1:32:fb:ab:36:d5:3a: 6c:07:07:61:7a:42:36:3f:e7:bd:be:ae:41:bc:52:71:b5:8d: e5:f5:6d:cc:3e:76:04:2d:e3:53:79:75:7c:1b:88:ab:a7:9c: a3:64:d2:c1:7d:a6:dc:cc:68:d1:99:c1:f6:1f:5c:bb:c0:18: 30:21:61:87:14:31:3f:7d:9b:4c:59:ff:a4:d4:ae:50:25:02: bf:0f:af:9d:b5:9e:58:eb:7d:94:3f:29:67:dc:73:aa:46:95: bc:8d:80:9b:b9:ec:6e:17:33:3e:0c:31:81:66:97:cc:87:b2: ca:2e:fe:ea:04:68:f7:ec:91:67:68:80:20:f6:e7:8b:da:59: 0c:d8:34:a2:85:a1:e1:1f:01:ac:72:57:49:5f:6e:e3:60:81: 2f:a8:d6:50:81:9f:5e:4b:c8:60:e4:77:81:7f:96:29:d9:2c: 21:7c:2a:46:31:dc:fa:d9:e4:18:9b:76:74:b1:6f:5c:f1:63: ed:01:de:a5:58:64:92:f2:b4:93:55:96:82:98:33:13:70:ca: 24:80:a5:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThFQUQxMTAvBgNVBAUTKEYzNzYwOTBERDc5Q0Y2QTI1OUFFMkExNzAyMDM3MkU5 RTYxNjBCQjYwHhcNMjUxMDE4MjEwMTI0WhcNMjUxMDI1MjEwMTI0WjAYMRYwFAYD VQQDEw02OGY0MDAyNC04MWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pdtVUP9vkkHyH7Wl1/Xrs7msavSEehH5K1ABTQq/B5T3qdeXKua63Ixd9Bo /bAar3yNjLm7D04XWy+rmX/j0URwZDyQewfzfMDvJbDKvcwsg3eBspeiJXDmhij2 mHn3gyXFvdye3kce6jE4/w2ifNWaL2Q7I2vgvTYz/cfoYheyzHJR+0n61RwXPQ/+ Il2kOZw4x0VuPGWPQFBYnUg+bakdwVfRpirSYLO3v8s05XNOZazMkZBl2/jWHaPc 4mCBBuKnwgJLanePA+FWwySZ2VbXLEupwQDHyH0iCMSLGUnFIVtgiEZoGQgplwev CfcHsjdVo07v5GqAFfHHmW77UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGosqPB 8pjGlrpD2UrWy0vELXYaMB8GA1UdIwQYMBaAFPN2CQ3XnPaiWa4qFwIDcunmFgu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEVBRC8zQzI0REFEMjhG QUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlxSlpyaW9YQWdOeTZlWVdD N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzWUpEZGVjOXFKWnJpb1hBZ055NmVZV0M3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEVBRC8zQzI0REFEMjhGQUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlx SlpyaW9YQWdOeTZlWVdDN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGrh2K6oBJSan82clb2f1LY9sq99vDphY6WqHDYShBjBGKIhc7W9P+ tbiD3d8GwMEy+6s21TpsBwdhekI2P+e9vq5BvFJxtY3l9W3MPnYELeNTeXV8G4ir p5yjZNLBfabczGjRmcH2H1y7wBgwIWGHFDE/fZtMWf+k1K5QJQK/D6+dtZ5Y632U Pyln3HOqRpW8jYCbuexuFzM+DDGBZpfMh7LKLv7qBGj37JFnaIAg9ueL2lkM2DSi haHhHwGscldJX27jYIEvqNZQgZ9eS8hg5HeBf5Yp2SwhfCpGMdz62eQYm3Z0sW9c 8WPtAd6lWGSS8rSTVZaCmDMTcMokgKWj -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:15 2025 by rpki-client