$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft File: 8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json) Hash identifier: vH+eE2NsXDecchkMXq+aNFp7F6eepdqIREAuwzM1uII= Subject key identifier: 83:2F:EE:88:03:54:C1:3C:CD:CC:1B:A0:D6:85:99:38:52:43:F8:90 Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Certificate serial: 06E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft Manifest number: 06E2 Signing time: Sat 18 Oct 2025 23:25:59 +0000 Manifest this update: Sat 18 Oct 2025 23:25:59 +0000 Manifest next update: Sat 25 Oct 2025 23:25:59 +0000 Files and hashes: 1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: nDmBYQ0D8Gf1XMMrVuwV2XmwsWY3ZOP8xYOgOD0ELTI=) 2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: 52JrCnBm7L06RLcpZu8B4A+YSslnAZRmYTLK9Jex7Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1768 (0x6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Validity Not Before: Oct 18 23:25:59 2025 GMT Not After : Oct 25 23:25:59 2025 GMT Subject: CN=68f42207-d1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d6:11:55:f8:40:03:03:2f:b8:4b:65:a9:a5: 4d:3f:49:b6:97:7e:69:68:a2:f1:3e:bd:f3:c5:7a: df:c5:9e:2b:0d:e8:e2:86:29:2f:11:73:63:6a:ed: ed:99:49:38:9c:84:e3:b6:7d:b9:1f:0a:86:21:ff: b1:bf:fe:e3:46:b0:c4:37:a5:67:0f:ef:36:cf:2e: c1:9c:4a:d7:f0:cf:e5:da:7e:d2:60:81:17:1f:f1: d8:f7:12:d3:9b:c6:97:8e:61:6c:f3:24:c8:02:c5: c8:5a:19:86:ac:ef:0d:11:be:59:e7:a2:6d:27:4c: e0:e9:50:c8:1a:d3:e8:f4:1f:59:57:16:41:d6:b6: b0:ef:0c:bc:57:f5:4e:b4:35:31:fd:66:30:a0:14: 20:6c:84:32:26:aa:84:39:12:4f:6c:9b:2a:e9:16: de:2e:dc:8e:48:7e:1d:36:1a:c4:f5:62:7f:f1:6c: 9b:8e:77:c8:83:77:f1:14:49:b9:6f:7c:77:2a:96: f5:ee:a6:c3:0a:8d:08:47:fc:d9:63:e9:ec:53:eb: de:2f:2b:0e:04:cd:08:ab:51:29:e7:19:52:9e:60: 1e:b4:4a:73:03:18:18:20:44:09:79:8f:61:90:0c: dd:42:61:84:99:dd:92:fa:1c:1a:56:5a:64:15:07: 57:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2F:EE:88:03:54:C1:3C:CD:CC:1B:A0:D6:85:99:38:52:43:F8:90 X509v3 Authority Key Identifier: keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:e2:0a:53:e7:60:2a:77:f3:91:55:a6:7e:40:73:dd:00:4d: ee:bf:04:44:6e:2d:9b:cb:4a:71:22:68:9d:3b:9f:79:31:aa: 20:fd:f1:2c:14:36:a9:53:42:5b:c6:6e:a9:05:f0:74:d0:cf: 95:06:58:06:5c:1c:4c:7f:f0:91:3a:f2:61:c6:73:eb:91:41: 60:10:ba:69:3c:64:84:dd:d9:db:7d:d9:58:e0:64:20:10:f7: 5b:c7:2c:63:da:3c:f5:df:65:63:13:ca:cb:2b:5b:f2:50:4f: d9:fa:19:8a:3b:fa:4d:3f:61:76:e1:72:21:1f:6f:89:86:4e: 1d:12:89:60:4a:24:08:0c:d7:3d:36:80:2b:5b:80:5b:77:b6: 36:85:19:4e:bd:07:27:73:a3:69:05:70:4e:bd:7c:64:95:1b: ab:c0:85:a1:13:6c:43:ee:8c:2d:67:19:ff:ad:ea:e6:14:b8: b5:7f:7d:37:61:d3:b7:39:ae:b1:77:a7:8c:23:73:e3:89:80: 0e:66:7a:f9:d6:81:e5:e9:86:d3:06:35:16:b5:be:31:b0:b4: ff:d0:0d:05:d5:b4:b2:50:5a:8b:33:3f:4f:0d:24:83:20:8d: f1:63:4a:73:14:a1:56:d8:be:b9:ae:1a:64:e3:87:3f:9f:61: 0d:03:34:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MDUxMTAvBgNVBAUTKEYwNDY5MEJCMDNFMEQzOTYyQjQ4MDhFNEQwNkNCMjZB MzQ5MEU1MTYwHhcNMjUxMDE4MjMyNTU5WhcNMjUxMDI1MjMyNTU5WjAYMRYwFAYD VQQDEw02OGY0MjIwNy1kMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NYRVfhAAwMvuEtlqaVNP0m2l35paKLxPr3zxXrfxZ4rDejihikvEXNjau3t mUk4nITjtn25HwqGIf+xv/7jRrDEN6VnD+82zy7BnErX8M/l2n7SYIEXH/HY9xLT m8aXjmFs8yTIAsXIWhmGrO8NEb5Z56JtJ0zg6VDIGtPo9B9ZVxZB1raw7wy8V/VO tDUx/WYwoBQgbIQyJqqEORJPbJsq6RbeLtyOSH4dNhrE9WJ/8WybjnfIg3fxFEm5 b3x3Kpb17qbDCo0IR/zZY+nsU+veLysOBM0Iq1Ep5xlSnmAetEpzAxgYIEQJeY9h kAzdQmGEmd2S+hwaVlpkFQdXowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMv7ogD VME8zcwboNaFmThSQ/iQMB8GA1UdIwQYMBaAFPBGkLsD4NOWK0gI5NBssmo0kOUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYwNS83MjUwQ0E0NDZD MzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1WXJTQWprMEd5eWFqU1E1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFYVF1d1BnMDVZclNBamswR3l5YWpTUTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYwNS83MjUwQ0E0NDZDMzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1 WXJTQWprMEd5eWFqU1E1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW4gpT52Aqd/ORVaZ+QHPdAE3uvwREbi2by0pxImidO595Maog/fEs FDapU0Jbxm6pBfB00M+VBlgGXBxMf/CROvJhxnPrkUFgELppPGSE3dnbfdlY4GQg EPdbxyxj2jz132VjE8rLK1vyUE/Z+hmKO/pNP2F24XIhH2+Jhk4dEolgSiQIDNc9 NoArW4Bbd7Y2hRlOvQcnc6NpBXBOvXxklRurwIWhE2xD7owtZxn/rermFLi1f303 YdO3Oa6xd6eMI3PjiYAOZnr51oHl6YbTBjUWtb4xsLT/0A0F1bSyUFqLMz9PDSSD II3xY0pzFKFW2L65rhpk44c/n2ENAzTf -----END CERTIFICATE-----Generated at Mon Oct 20 16:05:08 2025 by rpki-client