$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json) Hash identifier: JotVYG3VIlimq/jvDfBISpJvfkPn4lVmYwtuflMosMk= Subject key identifier: B4:35:AA:E9:71:E9:20:D8:6D:55:E8:C1:02:54:E8:28:BF:36:70:13 Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft Manifest number: 0245 Signing time: Thu 23 Oct 2025 03:12:53 +0000 Manifest this update: Thu 23 Oct 2025 03:12:52 +0000 Manifest next update: Thu 30 Oct 2025 03:12:52 +0000 Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: YnyNHFkIw0X8wpHW8J86hoMdzmV6uPMSh26Ay8jq3DQ=) 2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: Bpmtc+dst8i9fWSSTK2qFRlGSZiBtVfIZ/yU5akTF90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: Oct 23 03:12:52 2025 GMT Not After : Oct 30 03:12:52 2025 GMT Subject: CN=68f99d35-3af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:c9:ab:7d:81:72:09:e1:ef:59:97:5b:08: 47:0e:de:10:3a:a1:5a:1d:73:f2:29:7c:0f:44:6b: c8:be:42:ac:64:51:cc:28:48:a1:de:65:45:a2:be: 23:c6:25:a6:8b:ca:b4:a5:d1:1c:17:67:0c:43:0d: 56:59:62:05:2b:33:de:d7:7e:05:12:c4:bb:c4:f2: 36:96:45:bf:cc:c3:e5:eb:fa:15:4a:5c:19:2f:cd: 74:6c:68:c7:a4:64:3e:bb:cd:3a:b5:11:ff:eb:09: af:2e:17:cc:87:f3:f2:e3:2e:44:f2:4b:11:58:4d: 85:d8:45:23:db:45:fe:b0:36:e1:c3:f7:08:06:3e: 87:81:b8:cb:ae:0e:07:10:45:3a:3c:00:37:4d:94: c5:73:55:6a:c6:20:86:86:b5:fe:3d:51:49:7c:b6: 18:5a:dd:e8:23:f2:7b:ce:2a:3f:65:a0:a1:e4:37: 82:e2:49:f0:f3:1d:8b:d3:08:05:ed:92:1d:7f:98: 17:10:d8:8b:9c:e5:f9:2d:4d:f5:bd:63:33:10:b9: 44:ea:21:f7:89:e2:a5:09:76:9a:a4:50:0e:dc:4f: 07:94:e3:b5:d4:fa:b8:6f:13:ca:af:f8:b1:5b:07: 90:d7:02:47:0f:11:0c:82:e6:68:1b:f1:6c:7e:1d: 95:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:35:AA:E9:71:E9:20:D8:6D:55:E8:C1:02:54:E8:28:BF:36:70:13 X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:25:9b:c4:31:fa:b8:e1:41:09:fb:2b:81:70:1c:ae:dc:1b: e0:5c:33:0f:8b:48:ec:c8:64:5f:58:ce:3d:f8:c5:c4:e0:ce: 45:c8:61:40:cc:b5:6b:3f:99:79:37:a2:39:86:dc:dd:1d:10: f9:63:32:1e:26:91:a0:42:44:a6:83:a5:13:c8:42:40:cf:8c: cd:a2:d3:94:77:cd:2e:f1:69:f0:77:9c:bf:d1:e0:01:60:2d: a3:4c:3d:77:f4:b9:4d:1c:4e:ba:bb:68:c1:eb:8e:22:2e:55: b8:6c:6f:5a:12:9e:36:c3:16:8b:70:41:2e:06:2a:80:f8:bb: f6:7c:d0:d2:d3:11:ce:dd:08:9b:b1:92:7d:33:30:ff:e3:5a: 4e:fd:d7:0d:1d:67:9c:5e:00:17:8b:a8:79:6a:b7:95:2b:6e: 67:fc:a6:a1:77:43:42:84:b7:77:d8:21:ec:d5:6d:86:e2:74: 42:f0:8e:9e:dd:8f:93:b2:4d:51:25:69:68:0d:1f:e1:53:fa: dd:de:71:01:61:ba:a7:41:39:77:d3:97:0c:d7:0d:9a:42:c0: 1e:b4:51:7e:d7:e5:b5:fe:87:ae:04:bd:9a:d7:e9:6a:39:f2: d0:00:13:b9:55:50:b5:bf:20:36:06:5a:1c:7a:30:1f:69:a4: 27:21:bd:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjUxMDIzMDMxMjUyWhcNMjUxMDMwMDMxMjUyWjAYMRYwFAYD VQQDEw02OGY5OWQzNS0zYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhvJq32Bcgnh71mXWwhHDt4QOqFaHXPyKXwPRGvIvkKsZFHMKEih3mVFor4j xiWmi8q0pdEcF2cMQw1WWWIFKzPe134FEsS7xPI2lkW/zMPl6/oVSlwZL810bGjH pGQ+u806tRH/6wmvLhfMh/Py4y5E8ksRWE2F2EUj20X+sDbhw/cIBj6HgbjLrg4H EEU6PAA3TZTFc1VqxiCGhrX+PVFJfLYYWt3oI/J7zio/ZaCh5DeC4knw8x2L0wgF 7ZIdf5gXENiLnOX5LU31vWMzELlE6iH3ieKlCXaapFAO3E8HlOO11Pq4bxPKr/ix WweQ1wJHDxEMguZoG/Fsfh2ViwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQ1qulx 6SDYbVXowQJU6Ci/NnATMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t OWozbWdfUWtKSUpBLTNJcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqJZvEMfq44UEJ+yuBcByu3BvgXDMPi0jsyGRfWM49+MXE4M5FyGFA zLVrP5l5N6I5htzdHRD5YzIeJpGgQkSmg6UTyEJAz4zNotOUd80u8Wnwd5y/0eAB YC2jTD139LlNHE66u2jB644iLlW4bG9aEp42wxaLcEEuBiqA+Lv2fNDS0xHO3Qib sZJ9MzD/41pO/dcNHWecXgAXi6h5areVK25n/Kahd0NChLd32CHs1W2G4nRC8I6e 3Y+Tsk1RJWloDR/hU/rd3nEBYbqnQTl305cM1w2aQsAetFF+1+W1/oeuBL2a1+lq OfLQABO5VVC1vyA2BlocejAfaaQnIb3j -----END CERTIFICATE-----Generated at Thu Oct 23 05:54:59 2025 by rpki-client