$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: 144e143a6TZa8p6zzCO9i6p0qPnMJ302rNp8t7yFGLU= Subject key identifier: 71:62:C3:26:46:E2:9B:D0:D9:50:5D:48:DE:69:09:AD:28:77:27:10 Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 06FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 06F5 Signing time: Wed 22 Oct 2025 22:51:29 +0000 Manifest this update: Wed 22 Oct 2025 22:51:28 +0000 Manifest next update: Wed 29 Oct 2025 22:51:28 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: z0QC2BywaxumzFVgBKcm21TpdZF6HvMZxFdZNDB5+bY=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Oct 22 22:51:28 2025 GMT Not After : Oct 29 22:51:28 2025 GMT Subject: CN=68f95ff1-2819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:e9:6c:e1:42:7f:f6:0b:1b:66:c1:e4:6b: 5a:33:82:37:f6:37:a4:eb:bf:96:a3:2d:81:1c:ee: ac:a6:61:94:bd:ff:68:46:aa:08:20:27:f6:d0:a5: 98:90:b7:06:32:94:63:54:f1:93:46:26:44:22:55: b4:cc:38:da:ed:c6:04:a1:9e:95:11:71:cb:25:2b: 39:32:79:6e:06:e3:41:e5:38:a0:8e:ab:85:1b:d3: f0:ec:03:c9:ab:8a:d1:e1:a6:b5:ea:65:9a:9b:4c: dd:35:b3:54:96:75:5a:fe:2e:c4:8d:77:a7:80:d1: b2:d6:0e:5e:52:03:11:dc:a0:6a:ab:c3:44:ca:be: 18:1e:28:10:46:90:81:70:60:a3:65:96:57:4f:ba: f1:dc:af:75:0e:70:f9:a5:97:f1:db:ae:86:93:08: b4:73:d1:31:62:65:c3:8b:83:79:0b:55:27:2a:72: cf:92:5a:2c:03:b9:bb:76:41:6a:e4:01:b2:b6:4c: 50:b6:97:1d:e7:8e:a3:09:0c:65:62:d9:45:a0:d2: 5e:66:27:f3:30:68:3d:0f:7b:68:f7:8b:53:1d:c1: ed:97:83:93:04:56:8e:5e:77:bd:29:54:38:b4:74: 86:14:9b:1a:55:3c:47:ec:4e:61:da:8c:ef:f9:a9: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:62:C3:26:46:E2:9B:D0:D9:50:5D:48:DE:69:09:AD:28:77:27:10 X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:8f:5e:e1:71:ea:5b:7e:5d:0a:3f:26:d0:b7:75:a2:53:38: 2d:b5:cf:7e:07:04:1d:3b:80:8c:58:2f:7a:79:f0:41:a8:c4: bd:ba:94:76:48:fc:59:4b:8b:6a:35:a9:42:27:e0:f0:51:7c: 0f:a4:15:dd:a1:40:01:5c:29:0c:5b:ad:d1:a4:dc:b9:40:d9: c7:c7:2b:7f:a2:9c:d2:cb:ab:f6:14:ed:d0:8c:b5:c9:d9:42: be:7a:cb:98:61:34:48:23:8f:67:9f:d7:03:40:91:a2:99:f4: ce:67:4d:83:b8:10:bf:17:e0:ef:66:48:be:22:ce:7b:8b:d3: 8a:fd:f3:d9:82:30:1c:d4:80:26:fe:93:3c:c6:79:da:3c:4c: 35:3e:83:73:dc:36:02:f5:dc:43:2e:23:8c:18:a2:63:03:29: 17:3e:74:24:27:66:a6:89:c8:5c:df:8b:46:8b:4e:72:36:a7: b9:3c:6b:bb:b8:21:0b:50:f1:5e:52:77:35:0f:a9:e9:a3:24: d2:68:26:81:8c:08:50:31:d9:f6:2d:94:44:b3:34:ed:9c:f4: cd:66:11:23:8d:95:b1:8a:0b:66:e6:d6:43:b0:f8:10:5f:bb: dc:15:7e:0d:a1:d2:07:5e:cd:a3:d8:4f:65:eb:bf:b3:ef:cf: d5:ba:17:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjUxMDIyMjI1MTI4WhcNMjUxMDI5MjI1MTI4WjAYMRYwFAYD VQQDEw02OGY5NWZmMS0yODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TTpbOFCf/YLG2bB5GtaM4I39jek67+Woy2BHO6spmGUvf9oRqoIICf20KWY kLcGMpRjVPGTRiZEIlW0zDja7cYEoZ6VEXHLJSs5MnluBuNB5TigjquFG9Pw7APJ q4rR4aa16mWam0zdNbNUlnVa/i7EjXengNGy1g5eUgMR3KBqq8NEyr4YHigQRpCB cGCjZZZXT7rx3K91DnD5pZfx266Gkwi0c9ExYmXDi4N5C1UnKnLPklosA7m7dkFq 5AGytkxQtpcd546jCQxlYtlFoNJeZifzMGg9D3to94tTHcHtl4OTBFaOXne9KVQ4 tHSGFJsaVTxH7E5h2ozv+amJ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFiwyZG 4pvQ2VBdSN5pCa0odycQMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIj17hcepbfl0KPybQt3WiUzgttc9+BwQdO4CMWC96efBBqMS9upR2 SPxZS4tqNalCJ+DwUXwPpBXdoUABXCkMW63RpNy5QNnHxyt/opzSy6v2FO3QjLXJ 2UK+esuYYTRII49nn9cDQJGimfTOZ02DuBC/F+DvZki+Is57i9OK/fPZgjAc1IAm /pM8xnnaPEw1PoNz3DYC9dxDLiOMGKJjAykXPnQkJ2amichc34tGi05yNqe5PGu7 uCELUPFeUnc1D6npoyTSaCaBjAhQMdn2LZREszTtnPTNZhEjjZWxigtm5tZDsPgQ X7vcFX4NodIHXs2j2E9l67+z78/Vuhf/ -----END CERTIFICATE-----Generated at Fri Oct 24 06:35:28 2025 by rpki-client