$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: vqFHm1reiPzo2CK2iv8mefaDtLZ3aztARkow7k4a3tw= Subject key identifier: 0E:C6:BB:19:12:BA:0F:D1:65:AF:5F:3B:84:57:4B:88:5B:4E:10:2E Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 04D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 04CE Signing time: Fri 19 Sep 2025 00:10:45 +0000 Manifest this update: Fri 19 Sep 2025 00:10:44 +0000 Manifest next update: Fri 26 Sep 2025 00:10:44 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: kr5n5lcjj34x1WEwkgr2IvmlsBtUd1sQ0GI0JmjQgPs=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: zdwLUFrK62NtcQ/mdbUvAzqM7ityQdkX7IQIHBe+tG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Sep 19 00:10:44 2025 GMT Not After : Sep 26 00:10:44 2025 GMT Subject: CN=68cc9f84-a227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:ed:60:e9:93:3b:f2:db:3e:99:a4:c7:cf: 64:90:74:3c:03:44:7f:99:b6:c9:1b:d4:d5:9f:7a: b0:02:a5:12:f5:f2:d5:32:a6:24:8f:cb:c9:48:66: 40:a2:56:b9:1a:08:b1:a4:b6:aa:00:bb:e7:74:53: 50:cc:96:d8:ef:ba:61:17:e8:be:dd:64:d5:e0:99: 00:b5:5d:ff:06:b5:da:c6:ad:85:bb:66:5b:9c:94: ea:23:fd:57:37:a7:63:b9:d2:ce:77:61:38:05:3a: 7b:49:93:a4:86:b1:0e:c5:02:56:c7:2d:41:d8:ae: 06:69:83:89:d3:c8:47:e5:9b:3b:cc:05:b5:09:be: 6e:75:13:e5:df:c6:37:31:11:d4:32:6d:22:f1:5a: ce:52:a7:15:7b:a9:9d:f2:50:72:d9:96:3e:d7:dd: ea:2a:98:93:e5:a9:25:26:48:f5:ed:74:cd:59:8d: a2:e4:a0:1a:85:51:92:3b:56:e2:f4:2a:76:f5:80: aa:7e:75:6c:b5:9b:51:50:7f:b5:20:ea:16:87:a2: 85:ca:58:97:6c:1f:9a:55:fe:4c:8d:00:23:61:25: 0b:44:75:69:ac:30:fa:b7:8c:11:34:ea:e9:04:b2: 69:49:6d:73:01:19:3a:d7:b3:09:43:79:26:40:95: e6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C6:BB:19:12:BA:0F:D1:65:AF:5F:3B:84:57:4B:88:5B:4E:10:2E X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:ee:ea:74:eb:80:3e:98:42:45:3d:f3:6f:ad:4d:75:a1:95: 60:19:8f:54:0b:54:43:12:88:dc:13:4c:ff:74:f1:23:14:9c: b9:a8:94:0e:c3:77:61:1a:b2:1b:1b:b6:88:5c:ca:fe:34:9e: d4:6c:35:6b:ef:9e:b8:b0:1c:b2:5a:dc:ca:2f:d6:24:73:d4: d7:d0:5b:6b:d7:6b:18:0c:c1:b9:69:df:a3:f9:15:2c:78:54: c7:f2:fa:6a:08:ef:f2:db:79:10:16:6c:fc:48:0f:98:ec:55: 73:b3:47:4f:a2:e4:a6:7d:ee:58:bc:1d:03:94:1f:94:f8:62: 72:50:b7:bc:fb:58:83:8b:27:09:36:3f:4d:a9:f4:01:85:38: 33:18:ec:94:ed:52:26:be:fa:44:9a:5b:cc:16:5c:e7:3c:e3: 7e:dc:a7:a7:ef:cd:79:41:3a:27:1c:16:96:d6:8b:04:9e:2b: f0:6c:fa:5c:c8:f3:b7:1d:ea:f6:a6:16:b9:0a:05:b0:52:4a: 63:34:cc:9e:ee:21:47:3c:71:45:59:dd:c0:78:6d:12:e2:0d: 3b:d7:b2:98:26:a7:01:52:8f:98:80:03:18:83:ef:b5:40:e9: fa:c6:a5:e7:fd:6f:e4:5d:e3:6e:7a:a5:55:1c:e3:76:e5:df: f0:d3:ca:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjUwOTE5MDAxMDQ0WhcNMjUwOTI2MDAxMDQ0WjAYMRYwFAYD VQQDEw02OGNjOWY4NC1hMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA287tYOmTO/LbPpmkx89kkHQ8A0R/mbbJG9TVn3qwAqUS9fLVMqYkj8vJSGZA ola5GgixpLaqALvndFNQzJbY77phF+i+3WTV4JkAtV3/BrXaxq2Fu2ZbnJTqI/1X N6djudLOd2E4BTp7SZOkhrEOxQJWxy1B2K4GaYOJ08hH5Zs7zAW1Cb5udRPl38Y3 MRHUMm0i8VrOUqcVe6md8lBy2ZY+193qKpiT5aklJkj17XTNWY2i5KAahVGSO1bi 9Cp29YCqfnVstZtRUH+1IOoWh6KFyliXbB+aVf5MjQAjYSULRHVprDD6t4wRNOrp BLJpSW1zARk617MJQ3kmQJXmqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7GuxkS ug/RZa9fO4RXS4hbThAuMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD7up064A+mEJFPfNvrU11oZVgGY9UC1RDEojcE0z/dPEjFJy5qJQO w3dhGrIbG7aIXMr+NJ7UbDVr7564sByyWtzKL9Ykc9TX0Ftr12sYDMG5ad+j+RUs eFTH8vpqCO/y23kQFmz8SA+Y7FVzs0dPouSmfe5YvB0DlB+U+GJyULe8+1iDiycJ Nj9NqfQBhTgzGOyU7VImvvpEmlvMFlznPON+3Ken7815QTonHBaW1osEnivwbPpc yPO3Her2pha5CgWwUkpjNMye7iFHPHFFWd3AeG0S4g0717KYJqcBUo+YgAMYg++1 QOn6xqXn/W/kXeNueqVVHON25d/w08rx -----END CERTIFICATE-----Generated at Fri Sep 19 02:32:33 2025 by rpki-client