$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft File: 8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json) Hash identifier: 2d1yKLymi3ZU9kUxfSaIsQn4UdMjlRitMyzyyLGnRdE= Subject key identifier: 4A:1A:DD:EA:31:4B:47:F3:C0:D4:63:B5:BF:AC:27:36:E4:5B:DC:B7 Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft Manifest number: 0A Signing time: Sun 19 Oct 2025 11:37:46 +0000 Manifest this update: Sun 19 Oct 2025 11:37:45 +0000 Manifest next update: Sun 26 Oct 2025 11:37:45 +0000 Files and hashes: 1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: KQ260YRnNWzKEPsuKzbghu/wtBEiGfziVaaAtezZGUo=) 2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: Qyc81RIKSdu+FLrquo5aMNKuhSqU44VyZkyWHyn1G+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Validity Not Before: Oct 19 11:37:45 2025 GMT Not After : Oct 26 11:37:45 2025 GMT Subject: CN=68f4cd8a-a130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:76:63:50:2d:a1:44:33:81:37:04:a2:c9:44: 29:89:d9:6c:2a:64:e7:64:fc:33:cf:9f:14:a9:1b: ba:96:44:ce:d8:0e:4e:c9:6e:f6:e3:40:e1:aa:0c: 48:5e:7c:f5:b1:70:bc:71:49:7a:d1:b5:1a:cc:4c: 21:94:d9:ad:13:91:d8:77:76:25:f1:80:20:7b:ab: 0e:77:08:17:04:d0:f4:e8:97:3a:d2:a2:f0:f7:e4: c0:04:3b:99:91:4c:92:ce:27:a0:40:f0:cd:4e:a2: 32:b8:9d:6a:1c:1d:26:71:f1:e3:01:b0:e8:1b:99: c5:87:5f:03:1d:51:f7:58:c5:c3:07:43:de:8a:f8: 3b:7b:10:20:d4:a6:fd:11:cc:18:bc:2c:72:36:8a: 57:3f:5a:2e:2f:dc:c3:82:b2:11:4b:37:8f:7b:fa: 39:1b:b3:d6:c5:09:f3:30:2b:73:80:bd:1f:b6:31: fa:d9:9b:26:48:5d:a0:63:25:eb:ad:c4:1b:2b:0f: b0:b5:7e:e6:da:a7:70:b2:35:4e:2f:df:69:a3:39: 41:37:46:51:5a:55:9f:5c:91:16:78:c6:9e:81:7f: 6d:2c:ac:62:be:47:5b:c5:89:a2:19:6d:b6:97:27: d5:95:2d:05:0b:1b:2b:e8:09:7a:99:c7:9d:55:44: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1A:DD:EA:31:4B:47:F3:C0:D4:63:B5:BF:AC:27:36:E4:5B:DC:B7 X509v3 Authority Key Identifier: keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:55:c4:2b:ef:77:7a:14:0c:7b:0c:f6:80:5f:1b:9d:c0:f6: 7c:c4:6d:b0:6a:37:20:e9:f3:56:00:b3:08:6c:e6:0a:22:ad: ab:88:7f:1f:71:ca:e5:d5:64:fa:e9:fc:8d:1b:44:9f:dd:be: ee:d0:e2:68:e6:d5:c3:7f:be:5d:d6:3f:3c:69:0c:fe:5f:d7: 14:2f:4b:48:67:57:a5:43:99:7c:19:ce:a0:55:29:91:e4:1e: 97:10:e9:df:e2:de:81:6d:17:c7:bf:79:30:9e:0b:19:c0:05: 8b:42:a5:56:29:f8:57:16:e8:fc:b8:87:1d:72:5b:f5:0f:95: 38:ad:74:5d:1e:0b:04:23:6f:ff:76:9a:c2:bb:d1:09:6e:f1: 83:ea:98:2a:5f:66:e0:47:15:25:f4:d8:d1:57:77:eb:bf:56: 30:45:02:99:e3:77:a1:89:f7:1c:07:da:2f:4b:6b:19:94:fa: 8e:9c:66:24:61:96:e4:07:fb:a2:54:3e:60:80:7c:ca:5f:c4: b3:e6:89:3e:cb:23:79:70:ce:ff:b0:d3:4d:c2:42:39:90:13: ec:6d:83:6c:e2:2c:fb:3a:8a:8a:c7:1f:45:66:b8:60:be:d2: 91:c4:af:53:79:43:cc:62:1f:2c:f6:f7:1c:79:96:af:bf:ab: ce:e0:ab:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoRjI2MTdBNTU0MTU3Q0U5OTIwOUUzOUZERkI1M0Q1MTZE RERFNzhGODAeFw0yNTEwMTkxMTM3NDVaFw0yNTEwMjYxMTM3NDVaMBgxFjAUBgNV BAMTDTY4ZjRjZDhhLWExMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfdmNQLaFEM4E3BKLJRCmJ2WwqZOdk/DPPnxSpG7qWRM7YDk7JbvbjQOGqDEhe fPWxcLxxSXrRtRrMTCGU2a0Tkdh3diXxgCB7qw53CBcE0PTolzrSovD35MAEO5mR TJLOJ6BA8M1OojK4nWocHSZx8eMBsOgbmcWHXwMdUfdYxcMHQ96K+Dt7ECDUpv0R zBi8LHI2ilc/Wi4v3MOCshFLN497+jkbs9bFCfMwK3OAvR+2MfrZmyZIXaBjJeut xBsrD7C1fubap3CyNU4v32mjOUE3RlFaVZ9ckRZ4xp6Bf20srGK+R1vFiaIZbbaX J9WVLQULGyvoCXqZx51VREAPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUShrd6jFL R/PA1GO1v6wnNuRb3LcwHwYDVR0jBBgwFoAU8mF6VUFXzpkgnjn9+1PVFt3eePgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzNGMzc1RDI2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBrZ25qbjktMVBWRnQzZWVQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOG1GNlZVRlh6cGtnbmpuOS0xUFZGdDNlZVBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzNGMzc1RDI2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBr Z25qbjktMVBWRnQzZWVQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAItVxCvvd3oUDHsM9oBfG53A9nzEbbBqNyDp81YAswhs5goirauIfx9x yuXVZPrp/I0bRJ/dvu7Q4mjm1cN/vl3WPzxpDP5f1xQvS0hnV6VDmXwZzqBVKZHk HpcQ6d/i3oFtF8e/eTCeCxnABYtCpVYp+FcW6Py4hx1yW/UPlTitdF0eCwQjb/92 msK70Qlu8YPqmCpfZuBHFSX02NFXd+u/VjBFApnjd6GJ9xwH2i9LaxmU+o6cZiRh luQH+6JUPmCAfMpfxLPmiT7LI3lwzv+w003CQjmQE+xtg2ziLPs6iorHH0VmuGC+ 0pHEr1N5Q8xiHyz29xx5lq+/q87gq1Y= -----END CERTIFICATE-----Generated at Sun Oct 19 14:19:44 2025 by rpki-client