$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json) Hash identifier: IfaXYOB0Xh2wPo5OdrOfdvrbp4z3po021gdRiLGzu8Y= Subject key identifier: D3:FA:62:94:4A:DC:53:04:B9:0B:69:2F:D9:FC:05:04:00:51:C7:0F Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft Manifest number: B8 Signing time: Sat 11 Oct 2025 09:29:05 +0000 Manifest this update: Sat 11 Oct 2025 09:29:05 +0000 Manifest next update: Sat 18 Oct 2025 09:29:05 +0000 Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: lkdH5ljxC+/90f3xmmWKZLKkuF5cOCd00wulkU4krmQ=) 2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: fbK2ihQUPhJ5r2ba5rzkEzE0phvIKmf+DwHm9D+Afg4=) 3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: NNRqGSmWdoe7pDPxn2mpdNUa0PJKi1Ydbw5oFhxloG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Oct 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: Oct 11 09:29:05 2025 GMT Not After : Oct 18 09:29:05 2025 GMT Subject: CN=68ea2361-fea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:f9:0a:4d:c0:a8:90:80:b1:7f:3a:62:ae: 6e:7e:43:87:19:25:ce:82:79:30:6b:94:d4:d0:cd: 63:29:4a:50:0f:45:48:7f:83:eb:db:fa:5d:e9:fd: b8:03:94:05:85:90:59:a5:84:c2:3b:75:43:22:82: 54:49:51:eb:8d:f6:57:c7:05:36:06:70:25:72:6b: 31:ee:3a:b8:08:62:04:02:b6:b1:53:4d:f5:87:62: 36:59:58:d0:99:84:45:27:b3:87:82:44:dc:51:8f: ad:95:ab:37:79:ec:3c:ad:44:02:2b:60:18:bf:d6: a2:91:25:3a:01:53:ca:56:b7:4d:d2:fe:41:ce:49: 8f:7b:4d:a4:eb:43:eb:d8:26:b1:88:b1:3b:0f:22: 22:92:ee:4d:dc:86:93:3f:88:d5:8f:59:b7:73:71: ae:a6:6c:02:2f:3b:91:72:9f:00:df:96:aa:07:a1: 1c:e0:cd:7e:2f:9f:84:9c:2e:4f:50:be:eb:fb:78: ce:8d:78:c0:e7:3d:e0:80:6e:a0:d4:38:d2:e3:cc: b1:60:e7:ad:49:d7:45:20:14:1b:42:1b:65:6e:b6: 7e:2d:40:7f:84:61:96:07:64:cf:e2:b6:26:29:ff: c4:6a:17:8e:7c:25:e9:90:10:fd:82:99:32:2b:69: c3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FA:62:94:4A:DC:53:04:B9:0B:69:2F:D9:FC:05:04:00:51:C7:0F X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c7:34:15:3b:24:d0:fa:a5:ae:49:90:ae:af:16:13:81:53: 62:28:a2:6e:e4:e3:3e:0d:36:c9:1a:06:f3:0b:93:98:6b:ce: 92:36:f3:c8:c0:48:74:57:c0:88:c8:95:cd:e3:f1:52:0e:e5: 75:bf:76:d2:a1:5c:42:3c:0b:c2:ac:de:be:96:0e:a6:66:4d: f2:77:47:c3:c1:e3:42:9c:c6:f7:8c:8e:2d:e6:6e:6b:0b:3a: e7:81:15:1f:77:e8:16:08:f8:31:ec:56:b1:49:89:eb:a2:5c: c0:63:b3:07:74:ed:c4:27:c7:dd:70:f5:78:68:2c:63:8b:96: 4a:ce:e7:fd:52:20:58:a6:81:9a:6f:b6:80:71:71:09:a1:bc: 5f:ba:5e:95:6e:65:98:26:b7:99:3b:86:7b:99:dc:43:cc:20: f4:4a:ee:07:91:b9:48:51:0c:ef:61:ff:c2:bb:3e:cf:c3:76: fd:89:f0:62:2f:b5:47:c6:9d:54:ce:66:95:64:dc:a2:33:3a: ed:5f:f6:76:e9:b4:59:a6:25:35:a2:81:25:02:00:bb:f9:3b: 59:db:58:c1:38:1e:9f:37:d8:44:00:0a:91:5f:24:c7:56:5a: ff:6d:ff:a7:11:24:2b:73:99:be:e7:15:17:33:ab:cd:cb:89: ae:0a:a0:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4RjAxMTAvBgNVBAUTKDgzMTdGQzdBODJCMEVFODY1MjBERjE4RkZENTcyOTUx MTZEQTVERjIwHhcNMjUxMDExMDkyOTA1WhcNMjUxMDE4MDkyOTA1WjAYMRYwFAYD VQQDEw02OGVhMjM2MS1mZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LD5Ck3AqJCAsX86Yq5ufkOHGSXOgnkwa5TU0M1jKUpQD0VIf4Pr2/pd6f24 A5QFhZBZpYTCO3VDIoJUSVHrjfZXxwU2BnAlcmsx7jq4CGIEAraxU031h2I2WVjQ mYRFJ7OHgkTcUY+tlas3eew8rUQCK2AYv9aikSU6AVPKVrdN0v5BzkmPe02k60Pr 2CaxiLE7DyIiku5N3IaTP4jVj1m3c3GupmwCLzuRcp8A35aqB6Ec4M1+L5+EnC5P UL7r+3jOjXjA5z3ggG6g1DjS48yxYOetSddFIBQbQhtlbrZ+LUB/hGGWB2TP4rYm Kf/EaheOfCXpkBD9gpkyK2nDEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNP6YpRK 3FMEuQtpL9n8BQQAUccPMB8GA1UdIwQYMBaAFIMX/HqCsO6GUg3xj/1XKVEW2l3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzhGMC8wQTc3MUEzNjkz QUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9LdzdvWlNEZkdQX1ZjcFVSYmFY ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzhGMC8wQTc3MUEzNjkzQUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9Ldzdv WlNEZkdQX1ZjcFVSYmFYZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIxzQVOyTQ+qWuSZCurxYTgVNiKKJu5OM+DTbJGgbzC5OYa86SNvPI wEh0V8CIyJXN4/FSDuV1v3bSoVxCPAvCrN6+lg6mZk3yd0fDweNCnMb3jI4t5m5r CzrngRUfd+gWCPgx7FaxSYnrolzAY7MHdO3EJ8fdcPV4aCxji5ZKzuf9UiBYpoGa b7aAcXEJobxful6VbmWYJreZO4Z7mdxDzCD0Su4HkblIUQzvYf/Cuz7Pw3b9ifBi L7VHxp1UzmaVZNyiMzrtX/Z26bRZpiU1ooElAgC7+TtZ21jBOB6fN9hEAAqRXyTH Vlr/bf+nESQrc5m+5xUXM6vNy4muCqAU -----END CERTIFICATE-----Generated at Sat Oct 11 11:31:25 2025 by rpki-client