$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: qUtuR1aUPX0qekNmSJ3FSgVdixIBhQ7G6cIx4OYzva0= Subject key identifier: 99:87:FE:E3:BB:50:D9:35:88:8B:06:EB:91:D1:DB:76:EA:A8:DB:FF Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 03C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 03B7 Signing time: Sun 19 Oct 2025 02:41:12 +0000 Manifest this update: Sun 19 Oct 2025 02:41:12 +0000 Manifest next update: Sun 26 Oct 2025 02:41:12 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: efk/MC1qEji2nUaPN0/lNJ6Tt0XGNabITEa9TI+Cz9A=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Oct 19 02:41:12 2025 GMT Not After : Oct 26 02:41:12 2025 GMT Subject: CN=68f44fc8-e1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:06:37:cb:76:f4:06:10:d8:ab:74:11:2f: a1:4e:a7:a5:a3:62:39:de:6b:ea:50:a9:3b:60:35: 81:8b:7c:5e:fc:27:09:4d:b5:02:8f:b6:09:50:47: da:1b:d0:ca:72:21:11:e0:49:05:49:15:4d:b0:69: bb:00:89:06:c2:df:47:5b:6f:9b:77:99:ab:83:a6: 23:b2:af:81:5d:e9:ba:9d:29:cc:1e:94:cf:e9:25: a6:45:88:24:c2:18:43:1c:3c:4c:b6:a9:2e:bb:c1: c3:ee:0a:7a:f1:ed:64:41:be:00:5c:62:88:99:af: e7:d1:3a:dd:14:b8:bf:2c:0b:54:bd:ef:a0:3f:bd: ba:36:80:65:a5:3b:59:41:63:dc:d7:d4:cd:a5:67: 4f:e6:58:62:59:a2:85:c7:08:f2:4e:7c:07:dc:aa: 5d:c2:f5:21:11:3e:2f:9f:78:83:28:b8:3a:9d:b3: 9b:93:cf:40:2f:dc:d1:08:c0:33:ef:b8:66:9b:44: 2f:88:ad:fb:6a:dd:90:61:2c:8a:b6:ff:6e:dd:ec: e0:be:f4:bd:dd:93:d4:18:d9:08:a9:cc:59:32:a6: 18:b6:ba:47:12:45:28:69:a2:c6:2c:f0:81:71:73: 6f:7f:04:84:65:0b:9f:25:85:09:2c:af:ea:dd:ea: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:87:FE:E3:BB:50:D9:35:88:8B:06:EB:91:D1:DB:76:EA:A8:DB:FF X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:ad:a6:49:c6:b9:fe:94:54:f2:4d:95:49:c5:51:dc:bd:94: 04:2f:49:a3:48:d1:6c:7a:9d:37:1a:94:e8:da:09:d7:79:c1: f6:67:5c:54:b8:38:39:21:cb:01:dc:f8:89:8a:29:5d:ff:77: a2:03:3b:aa:7c:9a:c2:8e:81:0a:06:4e:4e:75:64:48:09:c5: 71:c7:49:77:cf:ca:e1:51:e4:8b:9b:af:66:af:10:d4:ae:b9: f3:55:de:91:17:19:6f:a9:c4:5f:e4:05:64:0f:e7:35:9e:5e: 23:a4:de:12:8c:41:c3:f0:70:69:2f:fb:1a:f9:c4:ab:b4:2a: 11:88:49:ad:2b:4f:de:23:4d:53:0e:fb:d4:22:74:22:de:7f: 5f:09:af:fd:1b:3d:73:ce:d4:76:51:67:03:bc:98:92:40:19: b7:41:e1:a1:c4:28:87:d3:3c:3d:fa:67:86:fb:2e:89:5a:f2: 0a:5d:83:42:13:15:da:85:dd:a1:9d:f6:3d:83:52:7b:e9:f0: 06:01:ac:00:c2:8e:9f:de:8d:36:5d:ae:ef:fc:2f:35:45:57: 94:d7:db:d7:45:0a:50:5f:66:50:2a:ac:30:a8:aa:f9:49:1a: d2:fe:4e:b6:94:e2:ae:04:c7:f8:bb:15:40:03:2e:dd:a3:16: 9f:c0:02:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjUxMDE5MDI0MTEyWhcNMjUxMDI2MDI0MTEyWjAYMRYwFAYD VQQDEw02OGY0NGZjOC1lMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z0GN8t29AYQ2Kt0ES+hTqelo2I53mvqUKk7YDWBi3xe/CcJTbUCj7YJUEfa G9DKciER4EkFSRVNsGm7AIkGwt9HW2+bd5mrg6Yjsq+BXem6nSnMHpTP6SWmRYgk whhDHDxMtqkuu8HD7gp68e1kQb4AXGKIma/n0TrdFLi/LAtUve+gP726NoBlpTtZ QWPc19TNpWdP5lhiWaKFxwjyTnwH3KpdwvUhET4vn3iDKLg6nbObk89AL9zRCMAz 77hmm0QviK37at2QYSyKtv9u3ezgvvS93ZPUGNkIqcxZMqYYtrpHEkUoaaLGLPCB cXNvfwSEZQufJYUJLK/q3erenwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmH/uO7 UNk1iIsG65HR23bqqNv/MB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7raZJxrn+lFTyTZVJxVHcvZQEL0mjSNFsep03GpTo2gnXecH2Z1xU uDg5IcsB3PiJiild/3eiAzuqfJrCjoEKBk5OdWRICcVxx0l3z8rhUeSLm69mrxDU rrnzVd6RFxlvqcRf5AVkD+c1nl4jpN4SjEHD8HBpL/sa+cSrtCoRiEmtK0/eI01T DvvUInQi3n9fCa/9Gz1zztR2UWcDvJiSQBm3QeGhxCiH0zw9+meG+y6JWvIKXYNC ExXahd2hnfY9g1J76fAGAawAwo6f3o02Xa7v/C81RVeU19vXRQpQX2ZQKqwwqKr5 SRrS/k62lOKuBMf4uxVAAy7doxafwAJ3 -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:14 2025 by rpki-client