$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: pa0ONoBW5TeU+CPHud8V+D6pCddKYUWTty16oz2Qr3w= Subject key identifier: DB:63:AC:8A:1A:93:9C:2C:DC:74:5F:1B:06:09:B8:B2:43:F1:8D:72 Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 78 Signing time: Sun 19 Oct 2025 10:09:29 +0000 Manifest this update: Sun 19 Oct 2025 10:09:28 +0000 Manifest next update: Sun 26 Oct 2025 10:09:28 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: ANFf+cQ/ZlC2ZiJS+2+Trv5lzvylTS5N1VaqXLlpGX4=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: Oct 19 10:09:28 2025 GMT Not After : Oct 26 10:09:28 2025 GMT Subject: CN=68f4b8d8-b105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:4e:8e:8c:71:b8:9b:82:7f:b5:97:0e:2b: 3e:95:89:5d:48:5d:fe:80:36:f1:3d:40:74:73:25: 24:2d:7a:94:7c:1c:f3:9c:bb:90:e3:71:8d:2d:c3: d7:38:e7:1e:04:99:cc:cd:3f:7e:92:44:7b:cc:ac: 04:5f:19:44:ea:8a:95:d6:c2:3a:82:bf:dc:17:44: bf:c8:22:be:39:90:2e:e0:20:20:44:bc:e8:02:ef: ac:1d:2d:a9:1e:6a:00:8e:34:73:f7:b9:cd:ad:9e: af:13:1b:7b:4e:bd:7f:77:af:0c:7e:bc:20:11:09: a1:25:95:00:29:c4:2a:9e:a3:1d:f2:23:ae:1b:e4: eb:07:7f:4f:0b:b8:ad:b5:a8:22:77:1d:a5:6d:33: 1f:91:fd:33:50:f4:98:5a:ea:84:1e:1f:f2:c9:30: 35:cf:46:03:b6:b5:ce:96:fd:5f:b9:b8:ae:08:d2: 53:17:20:09:40:77:f1:8e:66:e0:69:5d:62:1b:83: 2e:7d:f9:2e:63:b6:bd:1e:74:8e:0c:4d:05:bf:e8: 3b:83:0e:45:c6:a0:fb:a4:7a:a2:a0:15:41:fe:4f: ea:59:92:d0:42:e9:3f:9c:8a:68:5f:83:12:4d:ba: f5:d0:5f:4f:67:e5:17:0f:63:d9:bb:c1:3a:65:1b: 96:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:63:AC:8A:1A:93:9C:2C:DC:74:5F:1B:06:09:B8:B2:43:F1:8D:72 X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d8:a6:48:f9:4e:53:32:b8:df:c2:fb:e9:a2:35:28:29:4c: 71:96:b7:d8:2c:4b:d4:a8:5c:8d:83:43:86:7b:c2:c3:b5:88: b0:b2:32:94:c0:6a:b9:70:27:73:9d:36:7d:93:e9:1e:b4:6f: 42:90:9e:f6:c9:7e:c2:f0:51:c5:a3:21:5b:a3:97:4f:14:c5: c1:a7:c5:50:9d:0a:6d:f0:49:5d:78:38:01:f0:68:f9:1a:63: 1c:25:4f:55:d7:48:66:2d:25:52:7a:a1:a8:6f:a6:ed:05:94: cb:de:9b:8b:3a:54:e8:9c:5b:a4:7f:ea:4f:2e:d4:70:15:af: 7d:cb:3e:2d:16:0e:dd:d8:ef:1f:9e:a5:a4:ba:60:a6:ff:1b: 91:d9:f7:fc:e0:14:3d:26:35:05:86:3f:21:a6:92:a8:e2:b5: ca:65:a2:6f:9a:49:d1:d4:e1:40:32:01:64:74:84:cd:25:dd: eb:c0:e9:45:0f:14:d1:10:6f:30:f5:bb:01:2b:e7:ab:e6:ab: d5:12:ca:10:9d:20:8c:a9:47:b2:ce:4a:61:15:f6:da:15:57: 59:31:4b:f8:91:92:31:12:d8:ff:5c:8f:a7:af:e7:a7:97:97: 22:52:0f:a8:7d:bd:2d:e7:7d:1b:1c:c1:68:8e:8b:bf:66:a8: e7:07:04:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTEwMTkxMDA5MjhaFw0yNTEwMjYxMDA5MjhaMBgxFjAUBgNV BAMTDTY4ZjRiOGQ4LWIxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvcU6OjHG4m4J/tZcOKz6ViV1IXf6ANvE9QHRzJSQtepR8HPOcu5DjcY0tw9c4 5x4EmczNP36SRHvMrARfGUTqipXWwjqCv9wXRL/IIr45kC7gICBEvOgC76wdLake agCONHP3uc2tnq8TG3tOvX93rwx+vCARCaEllQApxCqeox3yI64b5OsHf08LuK21 qCJ3HaVtMx+R/TNQ9Jha6oQeH/LJMDXPRgO2tc6W/V+5uK4I0lMXIAlAd/GOZuBp XWIbgy59+S5jtr0edI4MTQW/6DuDDkXGoPukeqKgFUH+T+pZktBC6T+cimhfgxJN uvXQX09n5RcPY9m7wTplG5aVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU22OsihqT nCzcdF8bBgm4skPxjXIwHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NzY5LzU0NTY4OENBRkIyNDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFR WHZ1S3EtSU9NNURQaXVEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHDYpkj5TlMyuN/C++miNSgpTHGWt9gsS9SoXI2DQ4Z7wsO1iLCyMpTA arlwJ3OdNn2T6R60b0KQnvbJfsLwUcWjIVujl08UxcGnxVCdCm3wSV14OAHwaPka YxwlT1XXSGYtJVJ6oahvpu0FlMvem4s6VOicW6R/6k8u1HAVr33LPi0WDt3Y7x+e paS6YKb/G5HZ9/zgFD0mNQWGPyGmkqjitcplom+aSdHU4UAyAWR0hM0l3evA6UUP FNEQbzD1uwEr56vmq9USyhCdIIypR7LOSmEV9toVV1kxS/iRkjES2P9cj6ev56eX lyJSD6h9vS3nfRscwWiOi79mqOcHBOQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:49 2025 by rpki-client