$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json) Hash identifier: S5mweHR+VZGthd6bPe3h3VtY321bWx4mpNXKLKPnTm0= Subject key identifier: 4B:33:54:D2:38:83:99:8D:7C:BC:56:13:36:11:19:09:97:FC:A2:08 Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft Manifest number: 0184 Signing time: Thu 23 Oct 2025 05:19:14 +0000 Manifest this update: Thu 23 Oct 2025 05:19:14 +0000 Manifest next update: Thu 30 Oct 2025 05:19:13 +0000 Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: e6oDLvAHVGDg/TM6heVMLRvFlQMzCLFfdMBoNsIDNh0=) 2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: icEjBAvtyS7bBSn0NXrfM0VKf/GFl7OVPnJ58XOd/T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Validity Not Before: Oct 23 05:19:14 2025 GMT Not After : Oct 30 05:19:13 2025 GMT Subject: CN=68f9bad2-1c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:21:eb:55:a4:07:37:18:14:fd:47:fc:02: a0:7b:bb:c6:d0:b8:e3:0c:25:fd:a8:32:0b:34:ee: 0e:40:33:9e:85:5f:63:55:47:6d:9f:93:dc:e5:f5: f3:fe:a2:13:4f:b3:27:76:ad:d9:0e:d3:09:75:2f: db:9c:43:2f:dc:cc:d7:71:0b:2e:d9:dd:26:94:36: 10:57:45:2e:ce:8a:ad:5f:1b:f2:22:66:65:40:f6: 6d:cc:16:f0:67:b5:d9:92:63:dc:a0:0c:e9:ec:d3: ef:40:ed:68:be:ad:d1:b1:29:d4:85:82:a6:b2:b3: fa:15:45:bc:26:f6:a6:76:0b:62:3b:db:47:1c:5c: 92:7a:ca:a7:47:ff:e1:53:08:d0:68:07:29:a7:c9: 2f:75:0f:6d:ed:88:88:66:b2:7e:c1:20:42:25:8c: 2a:6b:ee:e6:16:15:33:85:bd:a9:84:5a:40:4d:85: 77:cb:1f:09:f8:6e:6b:a8:7e:c0:ab:43:9b:82:9c: fc:d8:ae:52:e7:3f:8f:53:1e:df:1f:85:d7:d6:2f: 68:12:08:99:0e:37:4b:e4:5c:83:2a:b1:4b:99:03: 95:72:d4:7a:62:26:1f:01:c3:4e:85:be:1d:fe:78: bd:82:b7:19:73:98:22:88:fb:94:a0:85:28:51:68: 01:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:33:54:D2:38:83:99:8D:7C:BC:56:13:36:11:19:09:97:FC:A2:08 X509v3 Authority Key Identifier: keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8f:2a:e8:dc:21:ae:96:0d:9e:d1:a2:8c:7b:8a:81:7a:99: 74:80:8f:ce:f2:c3:e9:14:2a:e7:73:aa:35:0f:ac:b4:1a:b4: e9:43:19:0b:68:b2:3c:91:85:63:89:24:84:6e:25:b9:c3:ad: b1:63:29:a4:e2:dd:12:10:c9:db:97:2f:3c:93:eb:9e:0f:e5: c1:b5:e5:31:03:2d:a9:ad:89:8c:30:ce:17:e5:79:47:00:f1: 02:32:c6:d8:f8:d9:c2:e2:da:9b:bf:f1:10:af:cc:00:aa:01: 3a:05:1f:f5:2b:db:f0:48:22:69:c9:25:67:01:b3:5f:9f:99: cc:e9:fe:7d:b1:ba:db:3c:bf:0e:91:cf:d8:6d:1b:b8:21:45: a6:54:f2:68:ce:f3:c4:d0:93:ac:5f:e1:c9:e7:7c:91:00:bf: 78:55:5e:e1:3c:f3:86:8b:9a:8c:98:e8:9b:be:2f:5a:5b:e3: 8a:6b:90:50:4e:99:9a:a6:ff:84:f7:15:a2:50:86:3f:a2:2d: 4e:19:a0:68:cc:d9:87:a5:30:52:0d:c9:51:97:d1:56:66:21: 24:1e:ec:b0:7b:ab:77:99:4a:c2:b4:13:1e:d1:82:94:a7:bf: e2:0b:69:de:8f:1c:24:d6:fb:74:d4:1d:15:72:b4:76:57:77: fc:e8:e6:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3 MzBEOTc1OUMwHhcNMjUxMDIzMDUxOTE0WhcNMjUxMDMwMDUxOTEzWjAYMRYwFAYD VQQDEw02OGY5YmFkMi0xYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3Uh61WkBzcYFP1H/AKge7vG0LjjDCX9qDILNO4OQDOehV9jVUdtn5Pc5fXz /qITT7Mndq3ZDtMJdS/bnEMv3MzXcQsu2d0mlDYQV0UuzoqtXxvyImZlQPZtzBbw Z7XZkmPcoAzp7NPvQO1ovq3RsSnUhYKmsrP6FUW8JvamdgtiO9tHHFySesqnR//h UwjQaAcpp8kvdQ9t7YiIZrJ+wSBCJYwqa+7mFhUzhb2phFpATYV3yx8J+G5rqH7A q0Obgpz82K5S5z+PUx7fH4XX1i9oEgiZDjdL5FyDKrFLmQOVctR6YiYfAcNOhb4d /ni9grcZc5giiPuUoIUoUWgBtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEszVNI4 g5mNfLxWEzYRGQmX/KIIMB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCNC8zQzA5QjNGQTVDRTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2Fj OHp0MlVjYTVrbXB6RFpkWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdjyro3CGulg2e0aKMe4qBepl0gI/O8sPpFCrnc6o1D6y0GrTpQxkL aLI8kYVjiSSEbiW5w62xYymk4t0SEMnbly88k+ueD+XBteUxAy2prYmMMM4X5XlH APECMsbY+NnC4tqbv/EQr8wAqgE6BR/1K9vwSCJpySVnAbNfn5nM6f59sbrbPL8O kc/YbRu4IUWmVPJozvPE0JOsX+HJ53yRAL94VV7hPPOGi5qMmOibvi9aW+OKa5BQ Tpmapv+E9xWiUIY/oi1OGaBozNmHpTBSDclRl9FWZiEkHuywe6t3mUrCtBMe0YKU p7/iC2nejxwk1vt01B0VcrR2V3f86ObV -----END CERTIFICATE-----Generated at Thu Oct 23 20:32:25 2025 by rpki-client