$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: 2l4c0T/GJzcAFGC+S9ZmW9adq1vF5IB638EVMh8FvPc= Subject key identifier: F6:FC:E0:57:C3:6E:86:81:41:9F:EC:DA:8F:2D:E3:46:64:D8:5C:01 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 05E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 05CF Signing time: Wed 22 Oct 2025 03:47:52 +0000 Manifest this update: Wed 22 Oct 2025 03:47:50 +0000 Manifest next update: Wed 29 Oct 2025 03:47:50 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: mNpzmHZ1c7rlL5ugxmbJ7B9BciqvEBub4yElNZXN3Hk=) 2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: KgAjUYIuzjhpkZFNtYWs181NTAA2NQcYLWH/gU6nAAg=) 3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: lBw/oXqYii+CxdFQl9gOeByngEJHo8e2NzPJY0PJwPA=) 4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: q2RN3xLXUOsYwfNjHGYHuCEJyjXQ1ifjwY5JK1sjpVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 03:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1507 (0x5e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Oct 22 03:47:50 2025 GMT Not After : Oct 29 03:47:50 2025 GMT Subject: CN=68f853e7-2708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1c:9e:80:73:8c:d2:36:d7:fe:61:bb:88:59: 33:f4:53:0f:ab:ef:3d:ca:36:92:34:16:5f:03:59: 7b:06:21:75:09:91:bc:22:d3:22:1b:de:de:1c:fa: ab:e7:a6:fe:c1:a8:c0:b2:22:48:02:96:3f:30:a2: ae:88:59:d2:09:ee:43:5b:8c:f1:bc:1c:09:38:e5: 99:44:9b:ac:9d:b2:eb:45:6d:8a:73:e5:37:04:b8: 8a:25:c5:a0:61:09:86:97:9b:db:88:30:08:05:36: 1d:2b:f8:34:70:7d:22:f5:d1:76:39:25:2b:a3:2e: 51:db:42:8f:6f:e3:69:00:37:7e:81:6f:7a:4e:00: ec:d0:c9:03:da:9a:66:02:9e:2e:f9:6c:2a:fd:77: e0:9f:ee:fa:1f:ca:ad:67:50:9a:84:43:03:9d:0c: 7e:15:60:db:cf:3d:68:3d:e4:f4:f0:18:18:93:b1: 99:c9:f6:a3:37:03:b2:eb:15:d6:8c:5f:3a:f7:f7: f4:0a:a1:ce:2c:c6:ea:7a:8b:26:85:96:94:66:8a: cc:36:3a:f5:b1:46:a0:41:39:6d:89:c7:19:bf:fe: b9:26:ef:89:59:35:f0:78:0b:2a:e6:99:5b:95:cb: 96:a9:8f:75:36:bd:b4:0a:a0:8d:af:6a:c5:d9:a6: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FC:E0:57:C3:6E:86:81:41:9F:EC:DA:8F:2D:E3:46:64:D8:5C:01 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:df:62:47:f9:b7:23:2f:63:32:09:f5:79:81:34:5e:11:5d: fe:14:cb:b1:ff:9a:c5:a0:a0:0c:e8:ce:21:5c:56:29:1a:53: b0:94:9f:53:f4:a8:e8:9c:6f:e8:fa:bc:74:bc:b7:b4:d1:0d: 7e:c5:52:ed:ba:41:da:c4:c1:8b:81:7d:eb:a7:68:18:5b:23: f1:28:a8:e2:fd:90:1d:22:f1:43:3c:6a:c0:d5:dd:fd:97:ab: 94:f9:79:da:75:5e:23:0e:70:15:20:6d:88:2e:88:fa:09:04: 94:a3:32:46:9d:04:49:03:56:b8:47:5d:e6:1b:6c:35:7b:1e: 2b:75:6d:bb:30:0b:86:fd:df:65:9a:45:ea:b4:b4:21:eb:70: 5b:fb:2c:13:c1:6e:b6:b6:01:9a:35:73:a6:a7:1f:88:0a:c5: 90:7f:8c:74:56:9c:9b:96:91:4a:9c:01:2a:3e:79:61:97:06: 65:bc:02:04:92:90:54:91:8f:ff:5a:cf:25:51:16:16:34:c3: 26:df:4d:16:1d:78:e4:ee:f9:36:21:de:87:07:de:1e:6d:5b: f6:6f:37:7d:18:02:69:15:fa:32:42:09:04:4b:1d:2f:c5:ab: 4f:03:4d:3b:40:f1:6b:32:07:07:19:a5:83:7f:e1:45:3f:52: 4b:fd:92:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjUxMDIyMDM0NzUwWhcNMjUxMDI5MDM0NzUwWjAYMRYwFAYD VQQDEw02OGY4NTNlNy0yNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xyegHOM0jbX/mG7iFkz9FMPq+89yjaSNBZfA1l7BiF1CZG8ItMiG97eHPqr 56b+wajAsiJIApY/MKKuiFnSCe5DW4zxvBwJOOWZRJusnbLrRW2Kc+U3BLiKJcWg YQmGl5vbiDAIBTYdK/g0cH0i9dF2OSUroy5R20KPb+NpADd+gW96TgDs0MkD2ppm Ap4u+Wwq/Xfgn+76H8qtZ1CahEMDnQx+FWDbzz1oPeT08BgYk7GZyfajNwOy6xXW jF869/f0CqHOLMbqeosmhZaUZorMNjr1sUagQTlticcZv/65Ju+JWTXweAsq5plb lcuWqY91Nr20CqCNr2rF2aaPDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPb84FfD boaBQZ/s2o8t40Zk2FwBMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf32JH+bcjL2MyCfV5gTReEV3+FMux/5rFoKAM6M4hXFYpGlOwlJ9T 9KjonG/o+rx0vLe00Q1+xVLtukHaxMGLgX3rp2gYWyPxKKji/ZAdIvFDPGrA1d39 l6uU+XnadV4jDnAVIG2ILoj6CQSUozJGnQRJA1a4R13mG2w1ex4rdW27MAuG/d9l mkXqtLQh63Bb+ywTwW62tgGaNXOmpx+ICsWQf4x0VpyblpFKnAEqPnlhlwZlvAIE kpBUkY//Ws8lURYWNMMm300WHXjk7vk2Id6HB94ebVv2bzd9GAJpFfoyQgkESx0v xatPA007QPFrMgcHGaWDf+FFP1JL/ZLE -----END CERTIFICATE-----Generated at Wed Oct 22 13:28:52 2025 by rpki-client