$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft File: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft (raw, json) Hash identifier: 1XdfnId426KJAn70s1JPQJMzkR/lk63HstTUk5p54RM= Subject key identifier: DA:D0:B6:78:C0:99:0A:8C:8C:F4:80:A0:4C:32:67:43:EA:C6:BC:83 Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 Certificate issuer: /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft Manifest number: 0687 Signing time: Wed 08 Oct 2025 22:19:26 +0000 Manifest this update: Wed 08 Oct 2025 22:19:26 +0000 Manifest next update: Wed 15 Oct 2025 22:19:26 +0000 Files and hashes: 1: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl (hash: SkpB/i1jQROp9k4dZTssnztGwk4tkJg+VdP4ZJag9TU=) 2: C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (hash: d2oIVGi69pBa33ybuBMk+1p+0WxxE+fB43cE7gCYVHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 22:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD5, serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Validity Not Before: Oct 8 22:19:26 2025 GMT Not After : Oct 15 22:19:26 2025 GMT Subject: CN=68e6e36e-edff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:81:43:a8:e8:99:0a:2d:85:13:27:7a:9b: e6:16:c6:ff:ac:f4:bd:23:fd:24:0c:27:b1:34:3e: e0:4d:ac:bb:0b:bc:dd:13:7b:f1:36:dc:7b:73:0f: 6d:9f:05:51:06:12:6b:fa:a9:79:4f:c3:41:02:15: 02:15:e0:36:32:b0:a5:3d:fb:69:69:eb:77:bd:8d: d0:dd:db:5b:16:f2:b5:27:8b:f9:21:6d:2f:be:8a: 86:98:f7:a3:83:89:9d:e9:2d:85:1d:54:9b:d8:5e: df:b5:a9:53:a3:5e:55:13:3b:8f:86:35:c0:e6:a8: fa:d2:ee:ea:01:1d:a2:57:2a:af:b9:cd:f6:28:40: 83:12:3b:6d:0b:62:ce:45:ac:74:92:3b:80:98:4c: 29:55:b6:93:f3:3d:70:a0:44:8a:62:8a:7b:25:f4: e6:61:81:29:b8:44:7f:92:1b:bc:70:ed:6d:55:84: b6:a9:bc:ba:57:6b:0c:57:5a:97:24:ab:2b:53:5c: 85:27:9a:7f:61:da:8e:cf:0b:da:0c:32:a7:e9:a2: b4:80:7f:2e:14:0b:d3:59:bc:0f:05:f9:33:54:95: 0b:84:6f:4c:9d:89:89:cc:51:75:ec:d4:b4:cd:86: 9c:11:06:c7:bf:56:29:e0:ed:f9:42:eb:5e:5b:2b: af:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D0:B6:78:C0:99:0A:8C:8C:F4:80:A0:4C:32:67:43:EA:C6:BC:83 X509v3 Authority Key Identifier: keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:03:97:2f:f3:e8:4c:b0:2b:25:76:3b:78:d4:33:f4:1f:89: 76:9c:74:d0:85:a4:ab:b1:69:c7:f4:d1:26:7b:db:0d:67:12: 67:e9:b1:49:d1:7f:8c:47:79:b1:5d:bd:98:e3:c2:f3:96:ac: 5c:80:19:4f:22:a7:b0:9b:55:3b:ca:53:c3:68:59:f6:fd:65: 7d:75:83:ea:0d:4b:6a:ca:89:3e:c4:35:e2:d3:70:5c:6c:e2: 72:c9:23:33:80:93:37:a7:8a:d6:1e:65:e5:5e:88:a8:38:0c: 49:66:0d:12:c2:2d:dc:ce:c1:c3:27:86:8c:14:9c:5e:b1:29: 06:2d:2c:f3:b5:e4:2e:c1:d4:80:6b:63:f2:a1:05:58:5a:77: 14:2d:4c:b6:b6:a6:ee:30:13:f7:e5:94:0d:4e:20:62:2b:b7: 45:53:5f:54:21:b9:be:0c:02:37:c6:f5:b7:3e:17:63:92:37: 0c:50:a4:d5:8b:7e:c5:35:c1:3a:0a:e9:d0:33:22:4a:99:b2: d9:60:5e:08:f2:5f:2e:ea:64:85:f7:92:02:fe:6d:51:a9:90: 3f:6d:26:ae:77:60:e1:2e:d8:bc:e2:61:8b:c4:ed:ec:26:e3: cc:b6:42:3e:03:35:fe:1c:95:b1:c4:19:81:ee:45:ba:fb:e4: f9:bb:b3:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDUxMTAvBgNVBAUTKEYwNUJCRDI2RDRERTA4RjY1ODhDQjdGQUZGQjE4MzBG QUJDMzcxNjcwHhcNMjUxMDA4MjIxOTI2WhcNMjUxMDE1MjIxOTI2WjAYMRYwFAYD VQQDEw02OGU2ZTM2ZS1lZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00iBQ6jomQothRMnepvmFsb/rPS9I/0kDCexND7gTay7C7zdE3vxNtx7cw9t nwVRBhJr+ql5T8NBAhUCFeA2MrClPftpaet3vY3Q3dtbFvK1J4v5IW0vvoqGmPej g4md6S2FHVSb2F7ftalTo15VEzuPhjXA5qj60u7qAR2iVyqvuc32KECDEjttC2LO Rax0kjuAmEwpVbaT8z1woESKYop7JfTmYYEpuER/khu8cO1tVYS2qby6V2sMV1qX JKsrU1yFJ5p/YdqOzwvaDDKn6aK0gH8uFAvTWbwPBfkzVJULhG9MnYmJzFF17NS0 zYacEQbHv1Yp4O35QuteWyuv4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrQtnjA mQqMjPSAoEwyZ0PqxryDMB8GA1UdIwQYMBaAFPBbvSbU3gj2WIy3+v+xgw+rw3Fn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJENS8wRDI2RDRBMDhF NTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQWllqTGY2XzdHREQ2dkRj V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhGdTlKdFRlQ1BaWWpMZjZfN0dERDZ2RGNXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJENS8wRDI2RDRBMDhFNTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQ WllqTGY2XzdHREQ2dkRjV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZA5cv8+hMsCsldjt41DP0H4l2nHTQhaSrsWnH9NEme9sNZxJn6bFJ 0X+MR3mxXb2Y48LzlqxcgBlPIqewm1U7ylPDaFn2/WV9dYPqDUtqyok+xDXi03Bc bOJyySMzgJM3p4rWHmXlXoioOAxJZg0Swi3czsHDJ4aMFJxesSkGLSzzteQuwdSA a2PyoQVYWncULUy2tqbuMBP35ZQNTiBiK7dFU19UIbm+DAI3xvW3PhdjkjcMUKTV i37FNcE6CunQMyJKmbLZYF4I8l8u6mSF95IC/m1RqZA/bSaud2DhLti84mGLxO3s JuPMtkI+AzX+HJWxxBmB7kW6++T5u7OR -----END CERTIFICATE-----Generated at Thu Oct 9 06:31:20 2025 by rpki-client