$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: QMcw5/tOM8aCGLcnTFbeHt48E8JvBMuqa9lxc6MidDI= Subject key identifier: 32:BE:2B:B4:52:4C:59:FE:D9:14:CF:09:59:6D:39:CB:1F:43:CE:26 Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 084A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 0843 Signing time: Tue 16 Sep 2025 20:58:31 +0000 Manifest this update: Tue 16 Sep 2025 20:58:30 +0000 Manifest next update: Tue 23 Sep 2025 20:58:30 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: aqYJty4XyrxzWzzAEyQ8nEKxvqHLilP8sLBA0cSeHwY=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: pAtkMYoP9pyBPl/xXuNkKMm/3mhUwbxuTSTQt0etagU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 20:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2122 (0x84a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: Sep 16 20:58:30 2025 GMT Not After : Sep 23 20:58:30 2025 GMT Subject: CN=68c9cf77-cd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:c0:5c:a6:47:a8:5d:84:4d:6d:a9:e8:82: 9d:5b:11:db:e7:9c:e5:63:72:83:16:0d:d8:79:cc: bd:63:1a:4b:55:3c:9c:fc:d4:30:14:91:7a:8f:ec: b9:5e:54:de:b4:47:eb:b8:a8:7f:22:5e:eb:d3:2f: a3:96:7e:58:31:d7:a7:77:82:ef:f3:ee:68:05:df: 7c:dd:48:b7:50:99:8d:42:9d:97:a7:40:22:03:e6: 92:ad:01:d3:69:8c:aa:66:60:f4:ca:11:31:75:51: 7f:c4:82:5c:fa:aa:f7:a9:fa:ba:95:ff:95:71:ff: d0:76:6a:ab:12:65:bb:e4:24:00:38:e6:85:39:58: 51:d9:e5:d4:88:85:f3:72:b5:f9:d7:0b:c4:0d:c0: 53:9b:78:bc:61:c7:48:ee:b5:e4:16:5b:2f:0b:ba: fe:ca:2e:a9:f8:fd:a9:e0:85:0b:3a:65:fc:27:36: 7e:dd:9b:29:90:de:52:77:a4:0a:65:7e:df:00:a6: ab:2a:4e:3e:59:5e:1a:4d:a7:b2:cf:32:c0:e7:58: 2a:98:df:c2:95:94:9a:e2:af:eb:cf:3a:76:36:e6: 64:67:06:99:73:72:90:5f:09:f2:67:73:ef:31:b4: 94:c1:cb:11:83:41:c2:03:9e:95:9f:d8:01:7e:27: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BE:2B:B4:52:4C:59:FE:D9:14:CF:09:59:6D:39:CB:1F:43:CE:26 X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:08:83:6d:45:1a:82:21:b5:39:d1:94:2c:ad:16:f4:3f:3b: 00:40:1c:bc:3f:3c:ed:fb:d1:bd:12:24:7c:25:fa:a4:dc:7f: 98:63:73:5e:83:a0:18:fb:c3:06:03:d8:6a:ac:1d:6e:74:77: fd:c3:75:d1:18:e6:f3:49:ae:76:9b:17:a1:a0:e7:86:73:2b: ef:0c:e2:e4:9f:27:e8:40:82:80:53:96:c3:8f:ff:26:7f:1c: 53:0e:8a:6f:39:e5:54:5e:93:8b:7e:24:c9:63:96:de:24:71: b4:2e:d5:fe:34:54:bd:39:7e:28:b6:32:e0:66:f8:db:c5:e3: 80:43:b7:62:ee:cc:0d:0c:78:9f:c2:f3:80:65:94:0c:4a:d9: 2a:67:4c:b9:32:c7:98:bc:3a:3b:a9:ae:31:d8:a1:91:cd:41: 38:f3:48:4b:1f:60:69:a7:6a:0e:9b:cd:09:a6:f8:00:87:fd: a4:4e:a0:f4:99:da:47:02:a6:72:0c:5e:7a:b7:38:4d:99:47: 74:00:b8:e8:29:fb:45:55:b6:42:63:d4:2d:37:05:5a:80:a3: 13:0c:f7:1b:96:a6:10:62:8e:c8:4a:ae:f2:e9:57:d6:48:83: ed:78:b8:1c:7f:4f:2c:3f:b5:bb:6b:6b:43:c3:b4:16:8a:01: 79:26:cd:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjUwOTE2MjA1ODMwWhcNMjUwOTIzMjA1ODMwWjAYMRYwFAYD VQQDEw02OGM5Y2Y3Ny1jZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWfAXKZHqF2ETW2p6IKdWxHb55zlY3KDFg3Yecy9YxpLVTyc/NQwFJF6j+y5 XlTetEfruKh/Il7r0y+jln5YMdend4Lv8+5oBd983Ui3UJmNQp2Xp0AiA+aSrQHT aYyqZmD0yhExdVF/xIJc+qr3qfq6lf+Vcf/QdmqrEmW75CQAOOaFOVhR2eXUiIXz crX51wvEDcBTm3i8YcdI7rXkFlsvC7r+yi6p+P2p4IULOmX8JzZ+3ZspkN5Sd6QK ZX7fAKarKk4+WV4aTaeyzzLA51gqmN/ClZSa4q/rzzp2NuZkZwaZc3KQXwnyZ3Pv MbSUwcsRg0HCA56Vn9gBfifUdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK+K7RS TFn+2RTPCVltOcsfQ84mMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/CINtRRqCIbU50ZQsrRb0PzsAQBy8Pzzt+9G9EiR8Jfqk3H+YY3Ne g6AY+8MGA9hqrB1udHf9w3XRGObzSa52mxehoOeGcyvvDOLknyfoQIKAU5bDj/8m fxxTDopvOeVUXpOLfiTJY5beJHG0LtX+NFS9OX4otjLgZvjbxeOAQ7di7swNDHif wvOAZZQMStkqZ0y5MseYvDo7qa4x2KGRzUE480hLH2Bpp2oOm80JpvgAh/2kTqD0 mdpHAqZyDF56tzhNmUd0ALjoKftFVbZCY9QtNwVagKMTDPcblqYQYo7ISq7y6VfW SIPteLgcf08sP7W7a2tDw7QWigF5Js0c -----END CERTIFICATE-----Generated at Thu Sep 18 20:50:42 2025 by rpki-client