$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: zPQIsoDzj/rtpXWODdt6ahdVr0S2XkmQ1jiSwd2TyIM= Subject key identifier: F1:FB:54:B4:3B:8C:32:91:57:7F:8B:E0:C6:E4:EE:69:15:A5:40:D9 Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 0301 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 02F5 Signing time: Mon 27 Oct 2025 02:42:10 +0000 Manifest this update: Mon 27 Oct 2025 02:42:09 +0000 Manifest next update: Mon 03 Nov 2025 02:42:09 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: QeGCsmeRuzv32EyS4UaNG9PU8IIRFCEFTvpnLekCU1M=) 2: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: l12GGHb5zU8WFaP5yfw8CrXUTcEdQRcdzqYPOrrqqtY=) 3: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: mBez32ljXmIU/FGdNqv/QIBBd8Jpz2uUA0e46aOruT4=) 4: 5E616E44841711F0B7A8C63CC4F9AE02.roa (hash: I75VXJWFaD1GwhF1O0TXZ8SEa9d38CWsNr1ZhVLKJs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 769 (0x301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: Oct 27 02:42:09 2025 GMT Not After : Nov 3 02:42:09 2025 GMT Subject: CN=68fedc02-6086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:36:e4:0c:80:8c:45:9f:33:ec:6f:8f:97: a8:a1:6c:44:bc:c9:53:2c:26:8e:15:f8:d9:13:fb: 35:85:8c:f5:84:76:ed:59:37:07:8a:5c:d4:6c:3b: f4:62:42:b3:ec:40:b3:b3:cd:0c:9d:24:6c:9f:c8: 35:95:e4:d9:da:71:1c:39:74:12:f8:3d:76:ae:f7: 82:ae:b2:d7:b3:a7:79:4b:45:32:e0:aa:60:52:c6: 67:6f:ce:47:9f:38:a4:9f:a0:b5:37:54:5c:c0:00: c2:45:41:b9:20:6e:23:a8:33:ab:42:83:d3:e8:53: 9a:52:63:cb:a8:a0:63:d8:9b:a0:77:4d:cc:7f:67: 13:4c:c0:6b:b0:18:dd:0b:58:cb:5f:af:da:f2:88: 74:cb:f4:b3:7b:19:b7:34:51:20:1c:68:3e:df:2d: f1:3d:7e:c2:32:75:49:c9:68:7e:f8:22:60:59:fe: b5:f7:65:5b:a8:eb:1c:67:40:dd:b1:81:b0:97:dc: 5e:65:28:92:5b:ba:52:4f:5f:2f:c8:4a:b2:9f:f4: cc:2e:8a:f2:f2:f7:aa:7e:85:b6:e3:c9:1c:0f:a4: 61:de:07:52:8d:c6:47:79:8d:17:4d:82:1c:5d:58: b2:f7:0a:36:c5:65:58:ab:86:93:a4:7a:00:bf:cb: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FB:54:B4:3B:8C:32:91:57:7F:8B:E0:C6:E4:EE:69:15:A5:40:D9 X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:cb:23:22:ae:8c:33:ed:3b:1d:3b:e8:33:1e:b8:36:90:1c: 78:23:f1:30:d2:d8:a3:4d:a5:89:f1:ec:9e:6a:f3:21:7d:23: ee:7f:75:31:29:ab:9f:df:ac:ae:71:41:a9:18:8d:d3:3c:81: 27:ae:62:e7:6c:69:47:f3:42:87:56:fa:45:0c:c4:c1:26:16: 7c:8d:8b:4e:5b:03:3f:2e:40:dc:62:89:ea:5b:bb:96:ed:28: 0a:1d:04:cd:2c:6d:66:d3:57:23:33:77:83:88:59:2b:41:58: 97:9c:53:e7:35:a3:9f:0b:e3:2e:25:f7:c8:0b:51:4b:ee:19: f5:54:d6:d8:d6:21:2a:40:d7:2a:c5:72:ea:bd:e6:92:4d:2f: bb:f1:91:cb:f1:ed:bc:bd:ff:74:56:70:e7:7f:06:11:aa:b8: f5:84:bd:d0:e6:b9:1e:fc:87:96:e6:90:65:48:84:c0:78:cf: ac:3d:66:cd:a4:b1:58:40:82:f4:22:45:43:89:f8:90:93:8b: ed:a5:51:fa:15:8f:6f:4b:bf:88:41:52:97:30:93:f3:86:47: d7:e2:5e:5c:99:13:62:bf:92:61:11:df:d9:20:8f:45:f4:7f: bf:47:ea:a1:fe:48:57:af:65:28:61:46:8d:91:a0:f2:c6:8f: 32:33:25:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjUxMDI3MDI0MjA5WhcNMjUxMTAzMDI0MjA5WjAYMRYwFAYD VQQDEw02OGZlZGMwMi02MDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5s25AyAjEWfM+xvj5eooWxEvMlTLCaOFfjZE/s1hYz1hHbtWTcHilzUbDv0 YkKz7ECzs80MnSRsn8g1leTZ2nEcOXQS+D12rveCrrLXs6d5S0Uy4KpgUsZnb85H nzikn6C1N1RcwADCRUG5IG4jqDOrQoPT6FOaUmPLqKBj2Jugd03Mf2cTTMBrsBjd C1jLX6/a8oh0y/Szexm3NFEgHGg+3y3xPX7CMnVJyWh++CJgWf6192VbqOscZ0Dd sYGwl9xeZSiSW7pST18vyEqyn/TMLory8veqfoW248kcD6Rh3gdSjcZHeY0XTYIc XViy9wo2xWVYq4aTpHoAv8tbOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPH7VLQ7 jDKRV3+L4Mbk7mkVpUDZMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDyyMirowz7TsdO+gzHrg2kBx4I/Ew0tijTaWJ8eyeavMhfSPuf3Ux Kauf36yucUGpGI3TPIEnrmLnbGlH80KHVvpFDMTBJhZ8jYtOWwM/LkDcYonqW7uW 7SgKHQTNLG1m01cjM3eDiFkrQViXnFPnNaOfC+MuJffIC1FL7hn1VNbY1iEqQNcq xXLqveaSTS+78ZHL8e28vf90VnDnfwYRqrj1hL3Q5rke/IeW5pBlSITAeM+sPWbN pLFYQIL0IkVDifiQk4vtpVH6FY9vS7+IQVKXMJPzhkfX4l5cmRNiv5JhEd/ZII9F 9H+/R+qh/khXr2UoYUaNkaDyxo8yMyV+ -----END CERTIFICATE-----Generated at Tue Oct 28 18:47:29 2025 by rpki-client