$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft File: Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json) Hash identifier: fhmRiISrYFRGlEP2KMJ7SPzNT8XMtjR3InZ0kJ+mtO4= Subject key identifier: D4:55:64:FB:99:20:AA:FE:F6:EB:18:98:B3:3C:79:F0:ED:50:33:0F Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Certificate serial: 1FC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft Manifest number: 1FB9 Signing time: Sat 18 Oct 2025 16:15:33 +0000 Manifest this update: Sat 18 Oct 2025 16:15:32 +0000 Manifest next update: Sat 25 Oct 2025 16:15:32 +0000 Files and hashes: 1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: 6KYJmhjSOk57v3LUsSCdA93pPYpa4rGtqC4tkX+nPXo=) 2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: bpwG3qWkZqt3c9e2parZM85DcFLWLncfBgOv3ugwly0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8135 (0x1fc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Validity Not Before: Oct 18 16:15:32 2025 GMT Not After : Oct 25 16:15:32 2025 GMT Subject: CN=68f3bd25-4107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:52:68:46:d7:f4:d8:93:8e:1b:e2:86:01: ed:8b:b1:f5:8c:c9:89:c6:35:e9:9f:2e:f7:7a:21: b8:9a:6a:f0:fa:a7:6d:2c:0b:45:a5:83:1c:d8:3f: c8:18:bd:df:8d:93:ea:35:36:62:2d:b3:7c:ba:2f: 3d:df:06:6c:bb:bf:ba:4a:1f:00:5d:36:32:0b:26: fe:43:89:3a:52:f0:93:d1:77:16:11:55:3e:a4:a7: 50:71:48:05:5e:88:b7:6b:4a:93:20:06:72:74:e1: 38:a0:d5:d9:49:9d:28:9b:aa:de:ea:3e:61:c2:f8: b8:53:4d:f6:6a:0f:cc:87:7b:40:ce:bf:a7:e8:6f: 94:33:d4:1f:5f:2a:76:9c:04:ee:28:ed:7c:09:a5: 20:99:a4:7c:07:bb:07:6c:97:0d:0b:43:ec:52:aa: 0b:51:80:ae:4a:2a:84:71:2f:a2:65:4e:5a:6f:48: 40:69:9b:b3:10:c2:3a:bd:95:56:5a:4e:26:fb:3e: 08:40:5d:6d:61:66:1a:c8:9b:19:68:36:f4:70:33: e1:84:3c:9f:79:02:32:5e:cc:3b:47:0f:8e:c3:2e: d5:e0:1c:d1:c4:54:8d:63:91:9e:3f:f8:10:c6:f5: 27:f5:73:5a:81:78:15:a2:67:b1:fc:d0:72:5e:c1: 3b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:55:64:FB:99:20:AA:FE:F6:EB:18:98:B3:3C:79:F0:ED:50:33:0F X509v3 Authority Key Identifier: keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:6f:65:0a:4a:c8:a3:5c:bc:19:dc:f5:af:21:3b:cc:b3:22: db:2d:d8:58:0f:9d:0b:1e:7d:28:52:94:9e:4b:17:b9:06:2c: 91:8d:de:82:88:e4:81:42:e4:ab:d6:43:43:e3:5e:36:bb:2e: d8:a9:9c:77:20:8c:d3:3d:f8:c4:a8:9e:4b:df:d1:ca:57:8b: b1:47:19:40:50:8b:b7:70:cb:ed:5a:72:1e:6a:f9:97:b2:a8: 0f:fe:bd:c6:8d:55:3a:e4:14:0a:ce:64:da:32:6f:76:ac:f5: 49:b9:7c:45:07:62:86:70:c0:e2:20:3c:b4:6b:64:71:4f:1b: 0a:62:53:a5:d8:19:8c:6d:67:c3:20:b6:eb:21:03:04:d6:b9: 7e:ed:7c:c3:b2:ea:9c:fe:1b:64:6c:59:9d:1d:1a:e2:6e:6d: 39:4a:e3:f5:2d:7a:53:60:de:ab:f3:62:ba:a6:86:ee:8e:6d: ef:5f:51:a0:9c:7f:51:e0:58:db:60:cc:dd:be:7d:de:e8:89: 62:86:ac:62:94:ef:95:ce:63:80:a2:e9:4d:7b:42:08:75:84: 13:67:ba:aa:36:ed:db:93:5e:e6:8a:a1:19:69:32:f6:63:a8: 9e:94:21:ff:18:52:97:62:b0:36:4f:f5:8d:af:fc:d4:39:2d: 0d:ad:3b:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI0MEIxMTAvBgNVBAUTKDJBNkYxMjA0MTJEODIwRjlGRjI0Q0QwNUQ1RUNGNDlF NjYyRDk5Q0EwHhcNMjUxMDE4MTYxNTMyWhcNMjUxMDI1MTYxNTMyWjAYMRYwFAYD VQQDEw02OGYzYmQyNS00MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy51SaEbX9NiTjhvihgHti7H1jMmJxjXpny73eiG4mmrw+qdtLAtFpYMc2D/I GL3fjZPqNTZiLbN8ui893wZsu7+6Sh8AXTYyCyb+Q4k6UvCT0XcWEVU+pKdQcUgF Xoi3a0qTIAZydOE4oNXZSZ0om6re6j5hwvi4U032ag/Mh3tAzr+n6G+UM9QfXyp2 nATuKO18CaUgmaR8B7sHbJcNC0PsUqoLUYCuSiqEcS+iZU5ab0hAaZuzEMI6vZVW Wk4m+z4IQF1tYWYayJsZaDb0cDPhhDyfeQIyXsw7Rw+Owy7V4BzRxFSNY5GeP/gQ xvUn9XNagXgVomex/NByXsE7LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRVZPuZ IKr+9usYmLM8efDtUDMPMB8GA1UdIwQYMBaAFCpvEgQS2CD5/yTNBdXs9J5mLZnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjQwQi81QjczNkQ5MjQz MzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQbl9KTTBGMWV6MG5tWXRt Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttOFNCQkxZSVBuX0pNMEYxZXowbm1ZdG1jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjQwQi81QjczNkQ5MjQzMzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQ bl9KTTBGMWV6MG5tWXRtY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/b2UKSsijXLwZ3PWvITvMsyLbLdhYD50LHn0oUpSeSxe5BiyRjd6C iOSBQuSr1kND4142uy7YqZx3IIzTPfjEqJ5L39HKV4uxRxlAUIu3cMvtWnIeavmX sqgP/r3GjVU65BQKzmTaMm92rPVJuXxFB2KGcMDiIDy0a2RxTxsKYlOl2BmMbWfD ILbrIQME1rl+7XzDsuqc/htkbFmdHRribm05SuP1LXpTYN6r82K6pobujm3vX1Gg nH9R4FjbYMzdvn3e6IlihqxilO+VzmOAoulNe0IIdYQTZ7qqNu3bk17miqEZaTL2 Y6ielCH/GFKXYrA2T/WNr/zUOS0NrTvm -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:51 2025 by rpki-client