$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft File: q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json) Hash identifier: 61KFb9yAqiIA1815e1Wpg1xRBBQYcLsPkxiI7pxUW1E= Subject key identifier: B6:84:96:0D:F7:62:77:09:21:79:38:CC:83:27:9C:60:D4:2A:32:A7 Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Certificate serial: 07F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft Manifest number: 07EC Signing time: Sat 18 Oct 2025 22:18:06 +0000 Manifest this update: Sat 18 Oct 2025 22:18:05 +0000 Manifest next update: Sat 25 Oct 2025 22:18:05 +0000 Files and hashes: 1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: UGPp+rjjnNf5UgqA49AjJkOG8Lj1oTgUamELwwvBrTE=) 2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: cujX/yOvlRxdf5P8eSmQLnHVmBWJtY4Bh7R/a7D9SZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Validity Not Before: Oct 18 22:18:05 2025 GMT Not After : Oct 25 22:18:05 2025 GMT Subject: CN=68f4121e-29cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f6:6e:a2:56:99:96:69:52:95:6a:d8:59:14: 7f:61:26:c5:d4:cf:59:49:e2:2e:2f:4a:b4:0e:4a: 64:7e:10:26:e4:3d:1e:75:8b:88:e8:72:3a:57:0d: 47:51:a8:f2:69:07:88:ad:6b:4e:99:ec:ce:01:22: c9:c9:4e:d1:e2:89:8e:62:79:5d:28:4f:4f:41:68: dd:a4:ba:dc:75:20:f4:10:b7:32:97:59:ee:46:7c: 89:f3:24:e3:86:b2:7e:78:3c:7b:8c:3d:88:16:c2: 28:91:b8:dc:24:ca:eb:5b:ef:02:2a:47:15:21:b2: 2a:40:be:ad:0f:f9:92:4f:28:12:14:69:7e:5a:15: 67:dd:9e:e8:aa:dc:74:14:da:44:81:71:1d:03:7d: 24:31:15:cc:2d:f1:16:da:14:ec:60:3d:80:b1:da: 04:61:a4:8d:03:7f:81:d5:7c:7d:39:c0:0d:38:c8: 83:f6:56:35:22:32:a0:34:90:b6:a7:da:92:64:1e: 4c:6f:dc:e9:8c:a5:11:a2:56:e9:aa:09:cc:95:8b: 22:63:db:6d:f2:9b:3a:8a:50:df:66:12:d4:bf:8c: 3e:5a:39:15:2b:c7:ed:8e:97:ad:d9:95:c2:f9:17: aa:b8:5b:44:bd:49:7c:ad:68:d5:14:c4:a4:8f:63: ce:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:84:96:0D:F7:62:77:09:21:79:38:CC:83:27:9C:60:D4:2A:32:A7 X509v3 Authority Key Identifier: keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f5:21:f2:35:45:ac:27:66:0e:63:7b:a1:5d:4d:df:9b:73: eb:aa:30:41:7b:85:22:d4:44:dc:e5:68:15:0f:f5:6e:90:cc: 9b:d0:45:8b:a5:28:1c:ac:dc:a5:29:ee:01:2b:fb:a4:74:7e: 92:7f:6c:2a:56:52:13:b7:62:08:77:0d:17:f9:6f:f1:df:4e: 7a:e2:35:ed:d4:db:63:ff:75:5d:c6:f8:f7:56:36:58:e8:a6: ea:aa:ac:a5:56:7a:7e:4e:07:06:e4:90:51:c6:ba:b6:73:2a: 87:4e:59:06:9b:a8:f7:3e:25:f8:57:33:9d:b2:4f:c7:a8:21: 9d:ce:89:e9:65:57:15:4d:44:73:8b:86:98:f9:7c:d4:c1:e2: 8c:16:c9:2a:9b:46:5a:92:dd:81:c5:9a:cc:e7:45:a1:6f:e9: 3e:b6:34:28:fb:3b:f5:ff:64:22:e2:7f:0f:11:05:5d:f9:7e: d3:62:70:92:dc:f1:3f:8d:e5:ab:b3:6c:79:56:56:e3:39:19: ed:39:5a:61:2b:1a:5e:97:08:1c:bc:46:d1:92:cb:4a:4a:b4: 1f:46:5c:bf:2c:31:75:2e:d6:67:cb:74:a4:92:f0:04:46:0e: 80:ba:26:2b:77:17:4f:08:46:85:bb:d9:b7:cb:aa:fa:ca:50: 35:3b:99:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB RDU2NzhBNUEwHhcNMjUxMDE4MjIxODA1WhcNMjUxMDI1MjIxODA1WjAYMRYwFAYD VQQDEw02OGY0MTIxZS0yOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8/ZuolaZlmlSlWrYWRR/YSbF1M9ZSeIuL0q0DkpkfhAm5D0edYuI6HI6Vw1H UajyaQeIrWtOmezOASLJyU7R4omOYnldKE9PQWjdpLrcdSD0ELcyl1nuRnyJ8yTj hrJ+eDx7jD2IFsIokbjcJMrrW+8CKkcVIbIqQL6tD/mSTygSFGl+WhVn3Z7oqtx0 FNpEgXEdA30kMRXMLfEW2hTsYD2AsdoEYaSNA3+B1Xx9OcANOMiD9lY1IjKgNJC2 p9qSZB5Mb9zpjKURolbpqgnMlYsiY9tt8ps6ilDfZhLUv4w+WjkVK8ftjpet2ZXC +RequFtEvUl8rWjVFMSkj2POXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaElg33 YncJIXk4zIMnnGDUKjKnMB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzY3RC85OURBN0FCRTAzOTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVV WDBZUGRTZElKQjJ0Vm5pbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr9SHyNUWsJ2YOY3uhXU3fm3PrqjBBe4Ui1ETc5WgVD/VukMyb0EWL pSgcrNylKe4BK/ukdH6Sf2wqVlITt2IIdw0X+W/x30564jXt1Ntj/3Vdxvj3VjZY 6KbqqqylVnp+TgcG5JBRxrq2cyqHTlkGm6j3PiX4VzOdsk/HqCGdzonpZVcVTURz i4aY+XzUweKMFskqm0Zakt2BxZrM50Whb+k+tjQo+zv1/2Qi4n8PEQVd+X7TYnCS 3PE/jeWrs2x5VlbjORntOVphKxpelwgcvEbRkstKSrQfRly/LDF1LtZny3SkkvAE Rg6AuiYrdxdPCEaFu9m3y6r6ylA1O5mH -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:40 2025 by rpki-client