$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: 8Mb2dSbCqD3WhKbGpymfXBfw9cxk6ZnDeORDqzHj2jo= Subject key identifier: 80:C6:C9:8A:75:CD:B8:2D:C5:5B:A5:7B:4F:D3:4E:54:5C:D0:EA:2F Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 24B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 2498 Signing time: Sat 18 Oct 2025 16:01:38 +0000 Manifest this update: Sat 18 Oct 2025 16:01:37 +0000 Manifest next update: Sat 25 Oct 2025 16:01:37 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: GfkL44fSevCZIIWRlT99eSUcEeilhOTL+Bi1dTI16uA=) 2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw=) 3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: GhF9PvzI5x/9vujTT/xlTVo+qNPcjDRdk9u4YkdwFYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9400 (0x24b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Oct 18 16:01:37 2025 GMT Not After : Oct 25 16:01:37 2025 GMT Subject: CN=68f3b9e2-08d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0d:ad:65:fa:08:b0:10:99:48:30:c7:8f:2f: 8b:44:a3:b2:a3:6d:fa:0e:ff:64:93:2a:54:e7:3b: 90:7e:93:5c:a0:8d:75:df:97:f8:e8:2b:d2:48:81: f5:50:e0:43:a2:b9:36:25:8d:da:fa:6b:f4:43:a5: 22:0a:a7:3c:fa:e2:51:e6:74:08:ac:ed:0f:db:d8: 9f:c3:7d:95:65:e7:f1:58:45:cc:18:d4:21:3e:a9: e5:86:1b:b4:a3:07:66:77:d6:a6:c6:48:f8:fb:02: 6d:02:c3:ec:71:d0:87:2d:31:46:a5:18:2f:04:e9: f0:d2:c0:ae:3d:5c:38:91:f8:0b:9f:6b:39:a7:23: 50:ee:84:d0:35:3c:d4:03:bc:8f:b6:79:40:e6:2a: da:ad:e5:38:86:5b:34:81:d2:d1:33:ae:3c:be:2b: 96:83:7d:85:8a:16:ee:07:08:2f:a7:94:a5:8a:9f: 7e:7f:62:5a:fc:79:33:1c:3a:33:77:8a:a0:5a:71: e4:f7:bc:e6:88:4a:a5:72:af:4b:e9:77:74:5b:04: 1a:e0:37:36:6c:5a:d1:00:be:51:b8:57:86:9f:ef: 06:78:85:ae:5e:ca:00:0d:a1:e6:40:9e:b8:89:30: 97:fe:6d:b8:fd:46:31:95:89:ca:c9:f0:69:0a:ec: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C6:C9:8A:75:CD:B8:2D:C5:5B:A5:7B:4F:D3:4E:54:5C:D0:EA:2F X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:14:b1:e0:ef:8d:fc:0f:df:82:9d:0e:34:de:ff:33:79:eb: 96:df:e1:15:42:ae:c9:cc:ee:17:ab:8c:1a:73:e1:ce:82:1a: 63:7e:21:f6:57:1a:bd:3b:0b:52:2d:8c:14:67:28:6d:3e:85: fc:49:bd:a3:0b:59:07:1d:bd:0c:85:64:ab:43:23:eb:60:55: 22:8e:cb:a0:25:80:9d:46:5c:bf:52:f1:16:57:71:7e:82:69: ba:eb:82:5b:83:5a:64:82:8b:91:14:24:c4:84:3d:bf:a2:51: 8e:12:d9:f0:02:4b:30:ba:2d:96:20:40:e3:ef:3c:49:62:e8: 9e:e3:23:34:77:c6:83:44:3c:7e:69:36:c5:b3:6e:2a:f6:01: 07:61:7a:7e:ae:5b:ef:ac:14:f4:03:8e:3d:13:06:88:51:23: 12:7a:e8:cf:cd:5e:00:57:06:a1:c4:0d:b7:65:af:5f:df:22: 73:98:77:eb:24:ef:29:a4:20:5b:db:12:b3:80:93:12:ab:c1: a5:34:87:dd:91:71:cd:6d:58:8c:c0:68:c1:5d:eb:ec:b7:7e: 9b:0d:48:38:5f:4a:11:6b:b5:c9:20:1d:7e:da:ea:75:85:04: a3:5b:f9:9b:c1:fd:80:4c:cb:5c:68:70:e3:2d:2f:0f:d6:a1: d3:29:0f:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjUxMDE4MTYwMTM3WhcNMjUxMDI1MTYwMTM3WjAYMRYwFAYD VQQDEw02OGYzYjllMi0wOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7w2tZfoIsBCZSDDHjy+LRKOyo236Dv9kkypU5zuQfpNcoI1135f46CvSSIH1 UOBDork2JY3a+mv0Q6UiCqc8+uJR5nQIrO0P29ifw32VZefxWEXMGNQhPqnlhhu0 owdmd9amxkj4+wJtAsPscdCHLTFGpRgvBOnw0sCuPVw4kfgLn2s5pyNQ7oTQNTzU A7yPtnlA5irareU4hls0gdLRM648viuWg32FihbuBwgvp5Slip9+f2Ja/HkzHDoz d4qgWnHk97zmiEqlcq9L6Xd0WwQa4Dc2bFrRAL5RuFeGn+8GeIWuXsoADaHmQJ64 iTCX/m24/UYxlYnKyfBpCuzd4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDGyYp1 zbgtxVule0/TTlRc0OovMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOFLHg7438D9+CnQ403v8zeeuW3+EVQq7JzO4Xq4wac+HOghpjfiH2 Vxq9OwtSLYwUZyhtPoX8Sb2jC1kHHb0MhWSrQyPrYFUijsugJYCdRly/UvEWV3F+ gmm664Jbg1pkgouRFCTEhD2/olGOEtnwAkswui2WIEDj7zxJYuie4yM0d8aDRDx+ aTbFs24q9gEHYXp+rlvvrBT0A449EwaIUSMSeujPzV4AVwahxA23Za9f3yJzmHfr JO8ppCBb2xKzgJMSq8GlNIfdkXHNbViMwGjBXevst36bDUg4X0oRa7XJIB1+2up1 hQSjW/mbwf2ATMtcaHDjLS8P1qHTKQ+W -----END CERTIFICATE-----Generated at Mon Oct 20 16:26:00 2025 by rpki-client