$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: 3qiuAg/wlaxDqeqQTLeS8P2n3q507E+GHRt3d3KWtRI= Subject key identifier: B4:E0:1D:9F:33:E2:41:2A:BC:3A:FA:B7:8E:A7:B5:69:B5:36:E3:15 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 08E1 Signing time: Wed 22 Oct 2025 21:07:25 +0000 Manifest this update: Wed 22 Oct 2025 21:07:25 +0000 Manifest next update: Wed 29 Oct 2025 21:07:25 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: 5ilOAHkCeYS327aM3b7Y9AunoInMN+IHuBBhUGAjwFs=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Oct 22 21:07:25 2025 GMT Not After : Oct 29 21:07:25 2025 GMT Subject: CN=68f9478d-2d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:f9:ee:7e:60:04:ee:5d:43:ea:f4:b8:1c: 8f:e8:ed:69:10:a3:40:31:4d:05:0f:dc:c7:7e:20: 39:de:e0:41:70:30:38:f5:cc:15:0f:ee:b9:2b:56: d6:15:7b:d4:7d:77:7a:1f:6d:8e:c3:0f:74:48:70: f3:27:44:1e:8e:f3:af:dd:4a:74:65:83:04:2d:db: e8:48:90:6f:35:2b:ed:59:1b:03:08:87:19:2c:77: ee:ce:e8:1d:8c:8e:63:14:57:c0:4d:ef:3c:9a:c4: 76:c0:4c:f1:a9:35:ba:da:da:2c:02:d5:4e:f7:28: e3:9e:27:b4:ff:0f:b3:ee:11:94:48:4a:23:7f:a2: 0d:8c:5d:62:9a:30:1d:ed:f9:6b:b7:8f:48:a5:f7: 59:48:3a:02:39:77:40:72:99:f8:3b:1f:2c:51:ff: 1b:2b:a2:66:4a:2b:b5:30:97:de:2d:8e:4f:aa:09: ba:32:79:cb:e0:c4:72:2c:cc:16:a8:e2:b8:d4:9f: d7:2b:9b:53:47:20:5c:10:db:d0:37:38:d1:e5:76: e0:87:a0:ff:23:29:f4:21:fa:d5:2a:d6:c2:41:1d: 31:9e:a9:ba:64:88:90:fe:1c:77:9a:6f:03:f2:f4: 30:ef:d3:ed:d7:2f:40:1d:e8:70:f7:93:e5:00:70: 67:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E0:1D:9F:33:E2:41:2A:BC:3A:FA:B7:8E:A7:B5:69:B5:36:E3:15 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:38:91:3e:6b:bd:a8:8b:31:b0:d6:c7:0e:c4:c7:21:40:66: 7c:1d:d8:db:7e:96:41:bd:cd:f4:3b:2a:c0:03:04:3e:14:d6: 1e:c2:e6:4c:0d:7a:a8:6f:49:ef:d5:ac:aa:5f:8b:b0:ab:e5: e7:01:4c:30:14:e0:43:5e:ee:81:c0:7c:70:01:a3:96:4e:74: 35:00:60:7c:ae:a5:36:59:72:4f:37:ba:0b:66:aa:b2:66:50: fc:7f:22:c2:86:37:46:7a:39:6a:1f:ce:c3:04:45:0e:b5:66: 9b:c3:44:3e:64:c7:19:f9:13:c5:c4:8c:02:7e:43:6a:22:66: 6b:ff:ac:32:44:fd:3d:37:ba:64:52:8a:4e:78:bf:20:83:6a: 2c:33:ae:e5:5a:57:0f:22:12:9d:60:7d:c4:9d:a9:d5:60:48: 90:0b:73:92:f0:c2:d9:66:13:35:83:bf:2c:cd:94:ed:bf:2a: 96:0a:5c:5f:2e:b7:05:69:cb:16:60:de:a0:b7:bd:76:42:bb: 0e:51:b5:2f:b1:0b:fc:d7:73:27:a6:75:18:db:fb:0a:fa:59: 5e:92:d6:e5:f8:ab:df:a3:94:e3:b1:99:93:4c:e0:db:80:79: 3d:27:4a:5a:ef:69:96:06:4d:49:7f:7c:bb:bc:d3:dd:9d:be: 6c:73:4c:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUxMDIyMjEwNzI1WhcNMjUxMDI5MjEwNzI1WjAYMRYwFAYD VQQDEw02OGY5NDc4ZC0yZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPD57n5gBO5dQ+r0uByP6O1pEKNAMU0FD9zHfiA53uBBcDA49cwVD+65K1bW FXvUfXd6H22Oww90SHDzJ0QejvOv3Up0ZYMELdvoSJBvNSvtWRsDCIcZLHfuzugd jI5jFFfATe88msR2wEzxqTW62tosAtVO9yjjnie0/w+z7hGUSEojf6INjF1imjAd 7flrt49IpfdZSDoCOXdAcpn4Ox8sUf8bK6JmSiu1MJfeLY5Pqgm6MnnL4MRyLMwW qOK41J/XK5tTRyBcENvQNzjR5Xbgh6D/Iyn0IfrVKtbCQR0xnqm6ZIiQ/hx3mm8D 8vQw79Pt1y9AHehw95PlAHBnWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTgHZ8z 4kEqvDr6t46ntWm1NuMVMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcOJE+a72oizGw1scOxMchQGZ8HdjbfpZBvc30OyrAAwQ+FNYewuZM DXqob0nv1ayqX4uwq+XnAUwwFOBDXu6BwHxwAaOWTnQ1AGB8rqU2WXJPN7oLZqqy ZlD8fyLChjdGejlqH87DBEUOtWabw0Q+ZMcZ+RPFxIwCfkNqImZr/6wyRP09N7pk UopOeL8gg2osM67lWlcPIhKdYH3EnanVYEiQC3OS8MLZZhM1g78szZTtvyqWClxf LrcFacsWYN6gt712QrsOUbUvsQv813MnpnUY2/sK+llektbl+Kvfo5TjsZmTTODb gHk9J0pa72mWBk1Jf3y7vNPdnb5sc0zU -----END CERTIFICATE-----Generated at Thu Oct 23 04:34:33 2025 by rpki-client