$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: fC+NXi7wjMbTVT5SK9Pdl1FG/+lwDzPeos+NOuTqF64= Subject key identifier: F1:B4:2E:62:9A:91:F9:41:A9:B8:4D:33:6D:57:1F:7F:D6:A6:65:1F Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 01A7 Signing time: Sun 19 Oct 2025 05:45:26 +0000 Manifest this update: Sun 19 Oct 2025 05:45:25 +0000 Manifest next update: Sun 26 Oct 2025 05:45:25 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: pKeiEurWrR2fdghciAjrY7eEGW/ijhGUoMCkHlxKTNQ=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: JUSU1VmCrt2YGTrN+Q0jV8oiBs7Aumf+6ve9iuHLrvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Oct 19 05:45:25 2025 GMT Not After : Oct 26 05:45:25 2025 GMT Subject: CN=68f47af6-85a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4d:fa:23:22:ab:57:dc:70:4c:65:b2:42:13: dd:de:df:47:65:fd:de:0b:a9:ae:37:2d:8b:53:04: 9c:42:70:5d:c8:c4:4d:8d:74:e1:2c:dd:0f:24:38: 81:0b:3b:00:ea:95:4e:89:9c:a8:9e:19:f1:75:3e: 03:c7:a1:2b:f4:bc:5f:35:dd:25:25:a2:95:de:33: 3a:2a:d4:ab:4b:5a:a1:6c:a6:dd:5d:9b:75:5c:fa: e1:10:ad:00:38:1b:b4:56:2b:81:8d:7c:2e:28:ea: 8f:72:15:0c:e4:10:94:9d:58:94:3b:2c:97:67:7b: 40:86:45:74:9b:52:eb:bc:89:32:d3:cb:d3:ae:b0: 17:83:70:8a:eb:0f:e1:5e:58:1d:cb:4d:ae:6f:67: f6:3c:ed:14:86:cb:f7:db:f3:c4:8f:83:80:f6:a5: 50:bb:26:12:64:19:c1:7d:a7:1d:0c:e8:a9:a0:38: 26:df:fe:5e:80:1d:28:da:c7:ae:21:5d:ef:5c:b9: 31:23:ea:66:7e:3c:2c:3a:83:a7:80:68:97:3a:ca: 81:86:77:b4:d7:9c:6e:40:82:3c:97:2a:8f:21:b8: 76:e9:e6:41:1b:1d:1f:f7:03:e3:3e:e9:7b:31:db: 10:63:fa:6f:2d:11:50:8d:a4:6c:2c:e5:04:70:81: 29:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B4:2E:62:9A:91:F9:41:A9:B8:4D:33:6D:57:1F:7F:D6:A6:65:1F X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b3:b3:e2:95:2a:82:14:4b:fb:29:89:d8:a9:b8:40:51:5c: 4e:25:48:37:13:a6:aa:4c:53:92:06:74:21:99:e1:79:3b:55: 31:ec:ef:12:85:ec:4c:ce:85:81:c5:a5:84:8a:e9:75:d9:fe: bf:9d:8f:c0:f7:e9:0f:f7:78:cd:a3:b3:72:2d:c2:a5:cd:92: fd:74:4f:8d:3b:f9:cd:c3:3e:20:c3:74:aa:dc:9d:82:e3:0c: d2:38:28:43:21:d4:53:a6:dc:19:3c:a6:d0:91:cd:48:9e:8a: 94:66:ba:13:1d:8c:4f:dc:db:44:b8:bc:70:08:72:24:91:f3: ab:8e:34:de:d9:d7:1d:3d:a3:0f:ec:20:a1:47:cc:48:0d:d3: 6e:4b:63:4f:e5:86:12:b1:a6:6e:f2:13:5c:72:0f:f5:44:31: 28:33:52:84:44:1c:ab:8d:c7:e0:03:87:e1:21:1b:4e:67:1b: 1b:11:6d:7b:2a:81:89:9c:ed:43:fe:14:75:9f:52:8e:23:1d: df:ef:e5:e9:ec:db:2e:a8:5f:23:18:0b:44:69:cd:ba:86:b0: 2b:e9:1e:d2:0d:2c:16:d6:3b:c7:0c:37:f4:a1:fc:6b:21:3a: 6f:23:69:7d:51:07:29:8c:34:b4:65:69:35:e8:a5:12:8b:53: cd:7c:d8:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUxMDE5MDU0NTI1WhcNMjUxMDI2MDU0NTI1WjAYMRYwFAYD VQQDEw02OGY0N2FmNi04NWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2E36IyKrV9xwTGWyQhPd3t9HZf3eC6muNy2LUwScQnBdyMRNjXThLN0PJDiB CzsA6pVOiZyonhnxdT4Dx6Er9LxfNd0lJaKV3jM6KtSrS1qhbKbdXZt1XPrhEK0A OBu0ViuBjXwuKOqPchUM5BCUnViUOyyXZ3tAhkV0m1LrvIky08vTrrAXg3CK6w/h Xlgdy02ub2f2PO0Uhsv32/PEj4OA9qVQuyYSZBnBfacdDOipoDgm3/5egB0o2seu IV3vXLkxI+pmfjwsOoOngGiXOsqBhne015xuQII8lyqPIbh26eZBGx0f9wPjPul7 MdsQY/pvLRFQjaRsLOUEcIEpBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPG0LmKa kflBqbhNM21XH3/WpmUfMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOs7PilSqCFEv7KYnYqbhAUVxOJUg3E6aqTFOSBnQhmeF5O1Ux7O8S hexMzoWBxaWEiul12f6/nY/A9+kP93jNo7NyLcKlzZL9dE+NO/nNwz4gw3Sq3J2C 4wzSOChDIdRTptwZPKbQkc1InoqUZroTHYxP3NtEuLxwCHIkkfOrjjTe2dcdPaMP 7CChR8xIDdNuS2NP5YYSsaZu8hNccg/1RDEoM1KERByrjcfgA4fhIRtOZxsbEW17 KoGJnO1D/hR1n1KOIx3f7+Xp7NsuqF8jGAtEac26hrAr6R7SDSwW1jvHDDf0ofxr ITpvI2l9UQcpjDS0ZWk16KUSi1PNfNge -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:40 2025 by rpki-client