$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: KJ+sh83yj/Ut1CwXtuuaLHI2erQoAHeMo+Gfn3b45tE= Subject key identifier: 3D:36:C8:D6:4E:63:04:FA:34:15:16:96:8A:8F:7F:0A:D0:AC:0E:30 Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 14EA Signing time: Thu 18 Sep 2025 18:39:43 +0000 Manifest this update: Thu 18 Sep 2025 18:39:42 +0000 Manifest next update: Thu 25 Sep 2025 18:39:42 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: LGGRYxsAJSgJ2KLjwjxAjbHookfDKZI7pmkCj0NIBNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: Sep 18 18:39:42 2025 GMT Not After : Sep 25 18:39:42 2025 GMT Subject: CN=68cc51ef-9a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:3d:02:e5:ae:0d:3f:5e:0b:bf:d5:44:d3: 93:2b:4a:38:ba:52:77:2d:ad:6d:c3:1e:46:83:29: 9b:56:9b:1b:d5:b7:c1:80:c5:73:a3:2e:1e:a2:0b: e0:8b:2d:42:10:b3:39:3c:e2:7f:bd:34:07:8f:62: ff:68:cb:ba:56:4b:33:ad:e3:7a:01:67:e1:22:13: 50:e5:ab:e3:1e:6d:05:88:ba:f2:4d:38:8e:b8:66: 81:ea:55:51:57:dc:fd:11:d7:1c:94:20:f0:21:15: 5b:2f:b2:e5:97:9b:34:fd:af:58:9a:6d:85:26:0f: 1b:e3:ef:d1:b5:f6:73:9c:b8:00:ba:75:4b:a2:1b: 3f:b9:06:82:f9:97:0c:b9:a1:a3:54:dc:ce:c7:2c: e1:e8:4a:b2:10:7c:bb:8e:e3:6e:a4:8f:91:30:fd: 01:0d:82:09:0a:4b:b1:99:39:00:13:3f:68:47:d0: 44:f5:67:a0:d6:c5:ca:29:9b:d1:04:5b:9a:9a:19: 9f:cb:50:8c:1a:9b:6c:31:da:c2:13:d7:cc:b1:ab: d9:ba:98:bd:85:c6:f0:75:d9:08:2d:ef:a0:ba:51: 76:5e:78:0f:93:9a:52:0e:d8:e7:f4:0f:85:c4:59: 70:ce:fa:9e:9d:f8:31:85:a2:90:04:6c:e0:64:e4: 56:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:36:C8:D6:4E:63:04:FA:34:15:16:96:8A:8F:7F:0A:D0:AC:0E:30 X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:e6:f6:26:9b:a5:b7:ce:bd:66:26:5f:79:67:86:1a:0b:dc: bc:83:32:90:08:c2:64:3b:79:ea:38:c9:90:78:e1:eb:47:56: 63:fe:36:7c:e8:32:0f:7d:60:c4:e9:e7:94:3d:cd:9a:ff:00: c3:ea:49:b6:29:cb:4b:8d:6f:07:e7:e3:a6:32:03:91:23:95: 5f:0c:59:83:24:8e:75:9e:e7:1b:67:42:6c:4e:10:19:80:47: 41:fb:9e:0a:c3:85:69:ed:fa:97:8b:d7:ec:81:96:d7:d8:84: da:f2:6a:db:b8:06:5c:90:8f:68:dc:40:0c:14:9c:25:ae:f1: 5b:5c:6b:f8:a1:ac:c2:f4:cf:c9:27:6d:41:ab:ec:e6:27:25: bf:b2:b0:e6:82:63:57:09:15:c6:aa:f6:c2:38:b1:85:a9:c6: a1:b5:8f:fe:4a:04:03:f2:41:d3:75:8c:d2:40:f3:c3:94:b1: e2:ab:2b:86:7c:ed:e0:55:32:81:28:53:68:f6:6c:80:b4:e0: 1a:f8:98:30:ed:59:2a:1e:fd:03:76:a5:a8:26:57:cf:ad:e9: 16:db:f8:00:a0:2d:99:97:67:dd:38:a9:8f:ea:48:73:56:f5: 40:f2:a8:2d:56:b1:ef:56:48:64:a9:3a:c1:a7:51:1f:02:93: 29:93:c4:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjUwOTE4MTgzOTQyWhcNMjUwOTI1MTgzOTQyWjAYMRYwFAYD VQQDEw02OGNjNTFlZi05YTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkw9AuWuDT9eC7/VRNOTK0o4ulJ3La1twx5GgymbVpsb1bfBgMVzoy4eogvg iy1CELM5POJ/vTQHj2L/aMu6VkszreN6AWfhIhNQ5avjHm0FiLryTTiOuGaB6lVR V9z9EdcclCDwIRVbL7Lll5s0/a9Ymm2FJg8b4+/RtfZznLgAunVLohs/uQaC+ZcM uaGjVNzOxyzh6EqyEHy7juNupI+RMP0BDYIJCkuxmTkAEz9oR9BE9Weg1sXKKZvR BFuamhmfy1CMGptsMdrCE9fMsavZupi9hcbwddkILe+gulF2XngPk5pSDtjn9A+F xFlwzvqenfgxhaKQBGzgZORWqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD02yNZO YwT6NBUWloqPfwrQrA4wMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK5vYmm6W3zr1mJl95Z4YaC9y8gzKQCMJkO3nqOMmQeOHrR1Zj/jZ8 6DIPfWDE6eeUPc2a/wDD6km2KctLjW8H5+OmMgORI5VfDFmDJI51nucbZ0JsThAZ gEdB+54Kw4Vp7fqXi9fsgZbX2ITa8mrbuAZckI9o3EAMFJwlrvFbXGv4oazC9M/J J21Bq+zmJyW/srDmgmNXCRXGqvbCOLGFqcahtY/+SgQD8kHTdYzSQPPDlLHiqyuG fO3gVTKBKFNo9myAtOAa+Jgw7VkqHv0DdqWoJlfPrekW2/gAoC2Zl2fdOKmP6khz VvVA8qgtVrHvVkhkqTrBp1EfApMpk8R0 -----END CERTIFICATE-----Generated at Fri Sep 19 00:41:19 2025 by rpki-client