$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft File: r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json) Hash identifier: QlN18PLvfC9uGfncWBnNAiZHQ4umTyaqzQkI7Bkukk0= Subject key identifier: 0F:2B:B1:73:3B:DB:37:E5:27:31:6E:49:F1:F7:12:AA:E4:24:77:03 Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 Certificate issuer: /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Certificate serial: 0844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft Manifest number: 0837 Signing time: Sat 18 Oct 2025 22:00:01 +0000 Manifest this update: Sat 18 Oct 2025 22:00:00 +0000 Manifest next update: Sat 25 Oct 2025 22:00:00 +0000 Files and hashes: 1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: jl9Vj8eZ10OmBK93iCO3SmfGr9sNlFQpLJq3aFbq65o=) 2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: QE3nW2mNMr96ecxL+2Sa0cUHeFInEqjbi3IjJoVbX1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2116 (0x844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BD9, serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Validity Not Before: Oct 18 22:00:00 2025 GMT Not After : Oct 25 22:00:00 2025 GMT Subject: CN=68f40de0-b853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:83:ad:a6:fd:d4:36:a6:8d:e3:02:d4:2a: 17:1e:93:58:8c:e5:fd:5b:6f:81:05:fd:a3:b1:e3: ea:ce:76:e9:d7:8a:7f:18:6a:1a:39:73:53:2b:40: 71:35:e3:49:d5:4d:2e:57:57:6b:95:5d:6d:cf:92: be:32:91:11:20:3b:65:4e:6d:66:a2:82:69:3c:54: 0e:2f:50:e0:92:6c:23:ee:f5:91:cf:1b:82:e7:75: ea:32:ad:b9:dc:a9:8d:59:87:e9:78:74:f5:6e:0b: 18:97:80:36:a2:c3:76:cd:c0:07:3c:18:bd:6e:fa: d4:d5:f4:d5:fd:bc:99:ca:46:6e:16:da:92:85:07: fa:aa:70:3a:45:70:d9:2e:ed:4e:2d:d9:5d:04:69: 45:b9:54:ec:31:6e:f9:f3:5b:00:2c:15:b0:b0:6e: 7c:21:32:53:41:a1:c2:cb:9f:d4:7f:d8:4b:39:25: 14:c4:8c:b6:3c:74:7e:fd:43:53:d2:f4:d5:5d:81: af:c8:7e:8b:91:43:a7:40:80:58:97:23:e1:13:ef: d3:4a:9e:8a:e5:90:45:98:26:f2:d2:c4:5d:89:7a: e1:4f:b2:58:0b:2b:2c:c6:f8:82:9b:d5:e0:ec:01: fa:da:09:8f:b2:ae:b3:09:ac:e6:0d:ee:b7:5f:3f: 6e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2B:B1:73:3B:DB:37:E5:27:31:6E:49:F1:F7:12:AA:E4:24:77:03 X509v3 Authority Key Identifier: keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:bd:89:ab:83:8c:9d:01:9a:f1:46:d3:da:50:a0:c1:d3:ac: 29:46:a1:55:4a:1e:2a:c7:6a:59:a9:02:dd:eb:c1:c4:b4:74: c1:8c:df:88:b6:64:a7:a9:05:1d:1c:5e:a3:b6:87:7e:ee:05: 34:e8:78:2b:ff:bf:54:1f:7a:61:09:75:2c:bd:ae:ca:57:4f: 79:46:6c:f2:65:7d:ef:c8:c3:b2:40:bd:fe:2c:43:3a:eb:a1: e4:74:f1:a2:ec:be:5a:b8:d5:78:a1:13:14:5d:c4:09:8d:32: 7a:f9:1d:1a:15:1b:26:91:9c:29:b1:72:15:b4:e4:fe:67:6d: 04:53:e7:0a:ce:50:c5:21:c8:62:d9:31:a0:44:a1:32:9e:02: 4a:67:58:97:92:26:29:f1:cc:70:14:a4:ee:c5:9a:62:70:05: 35:a7:12:53:82:90:f2:f4:77:41:ca:22:aa:fe:88:94:be:8e: 83:b5:b5:36:6b:d2:ef:8c:5d:ce:d9:62:63:26:29:84:80:c1: 15:40:2c:d4:b1:86:9e:40:26:9f:c2:c7:62:d9:a3:6a:03:a3: 10:03:58:d2:bc:c0:0f:24:f0:3c:7a:36:b0:ef:9c:f5:26:55: 46:56:c2:bb:9a:70:8d:40:51:40:d6:83:52:d3:3b:95:72:91: 2a:65:94:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCRDkxMTAvBgNVBAUTKEFGQ0QxMkYzNDA5ODc4Q0Q0QUI0NDVDNDQ1NTQ0QUU4 REE4NTFBODQwHhcNMjUxMDE4MjIwMDAwWhcNMjUxMDI1MjIwMDAwWjAYMRYwFAYD VQQDEw02OGY0MGRlMC1iODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUiDrab91DamjeMC1CoXHpNYjOX9W2+BBf2jsePqznbp14p/GGoaOXNTK0Bx NeNJ1U0uV1drlV1tz5K+MpERIDtlTm1mooJpPFQOL1Dgkmwj7vWRzxuC53XqMq25 3KmNWYfpeHT1bgsYl4A2osN2zcAHPBi9bvrU1fTV/byZykZuFtqShQf6qnA6RXDZ Lu1OLdldBGlFuVTsMW7581sALBWwsG58ITJTQaHCy5/Uf9hLOSUUxIy2PHR+/UNT 0vTVXYGvyH6LkUOnQIBYlyPhE+/TSp6K5ZBFmCby0sRdiXrhT7JYCyssxviCm9Xg 7AH62gmPsq6zCazmDe63Xz9uHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8rsXM7 2zflJzFuSfH3EqrkJHcDMB8GA1UdIwQYMBaAFK/NEvNAmHjNSrRFxEVUSujahRqE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJEOS8wNDgxRjc4NkVD MTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVNMUt0RVhFUlZSSzZOcUZH b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4MFM4MENZZU0xS3RFWEVSVlJLNk5xRkdvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJEOS8wNDgxRjc4NkVDMTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVN MUt0RVhFUlZSSzZOcUZHb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBvYmrg4ydAZrxRtPaUKDB06wpRqFVSh4qx2pZqQLd68HEtHTBjN+I tmSnqQUdHF6jtod+7gU06Hgr/79UH3phCXUsva7KV095RmzyZX3vyMOyQL3+LEM6 66HkdPGi7L5auNV4oRMUXcQJjTJ6+R0aFRsmkZwpsXIVtOT+Z20EU+cKzlDFIchi 2TGgRKEyngJKZ1iXkiYp8cxwFKTuxZpicAU1pxJTgpDy9HdByiKq/oiUvo6DtbU2 a9LvjF3O2WJjJimEgMEVQCzUsYaeQCafwsdi2aNqA6MQA1jSvMAPJPA8ejaw75z1 JlVGVsK7mnCNQFFA1oNS0zuVcpEqZZRZ -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:26 2025 by rpki-client