$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: afEmcDmyxxB2uSiw4AJkS2gXPV5z4PChQ3/vMNebh1E= Subject key identifier: DF:7D:3A:E2:1A:7A:33:47:49:E8:F2:2E:AE:8F:D3:4C:45:80:7E:05 Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 0A39 Signing time: Thu 18 Sep 2025 19:57:40 +0000 Manifest this update: Thu 18 Sep 2025 19:57:39 +0000 Manifest next update: Thu 25 Sep 2025 19:57:39 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: xzdVvMUoHYUb4cKU0u33clPG8bW2D/6q/Kp7i9V/NSE=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: Sep 18 19:57:39 2025 GMT Not After : Sep 25 19:57:39 2025 GMT Subject: CN=68cc6434-b44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:c2:75:62:36:13:cc:ea:38:77:37:31:6f: e3:57:4c:58:3f:58:15:81:18:6e:0a:ee:85:d1:30: 68:db:ba:98:44:89:c5:c6:29:78:c2:26:72:20:59: 55:b5:1d:a2:b6:2c:7c:23:e1:e8:32:46:71:46:e3: ce:ff:27:ef:be:70:af:ad:d4:e8:50:1e:e8:78:0c: f5:77:d0:00:ac:fc:68:81:4a:6f:8a:1f:42:21:83: 04:7c:84:18:80:0d:c3:03:af:6b:33:42:1c:11:c9: d9:de:f7:3f:05:5d:b7:71:25:c4:ac:56:28:24:85: 4c:e6:86:0a:47:91:a9:52:16:51:1e:6a:ed:ba:74: ed:c3:42:bc:f7:7b:37:33:b0:ca:21:b6:f9:cb:36: a3:90:63:87:50:af:bb:08:12:68:3c:a8:c1:bb:04: 10:0c:fe:fe:86:ce:cc:86:05:1d:42:e0:0c:d7:a7: 8a:8c:dc:92:a9:00:d6:e2:15:17:e2:1d:6f:a9:fb: 7e:d7:7e:39:1e:ed:d1:1d:51:df:71:c8:62:e2:cf: d6:9a:95:a2:2e:32:29:85:23:2f:31:76:aa:40:86: a0:68:20:7f:22:ea:a2:b3:88:d6:55:7d:4c:93:b8: c8:88:eb:e1:30:2e:4d:01:0d:9e:12:e8:b1:5b:be: 49:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7D:3A:E2:1A:7A:33:47:49:E8:F2:2E:AE:8F:D3:4C:45:80:7E:05 X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:61:79:5a:3a:3d:aa:29:63:b6:00:57:e0:17:ed:35:d6:f1: 4a:67:a1:c3:f0:c6:11:37:d9:45:90:35:68:44:51:4a:39:01: c3:18:f0:99:54:3f:c8:6a:ff:06:b5:ae:8f:89:82:3c:f3:bb: 61:65:99:0a:56:10:a4:32:c5:bf:2e:b8:94:a8:61:8f:b2:bb: 5f:ba:69:43:db:6a:d8:7d:24:31:9c:4a:ec:21:58:d2:e4:42: 9b:29:d4:04:af:6b:ed:27:b9:09:66:04:b4:b0:0b:b2:97:e6: 6c:38:04:c2:16:7b:a0:82:8c:60:20:6c:83:17:74:d9:18:d6: ae:cf:35:2a:25:9d:db:84:42:22:d6:f6:ca:7b:b8:e5:27:04: 0e:80:1d:68:74:92:2f:e4:82:18:6a:e4:ca:9f:25:2d:b9:d3: f7:6e:c5:45:df:3c:c3:20:48:c1:9a:7b:12:ba:d3:4f:76:38: d9:5a:de:88:7e:4f:4c:1b:d3:ec:39:9f:6f:34:55:6a:67:24: 89:25:44:0c:a6:a7:7f:9e:13:da:de:41:08:a1:ac:04:f0:89: 76:95:69:63:a0:f9:1f:29:bb:e8:ba:94:3a:bb:94:22:bd:c2: f5:07:9e:db:c8:4b:7d:f7:a4:ff:00:d6:6b:44:d1:06:75:6e: 2d:eb:e5:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjUwOTE4MTk1NzM5WhcNMjUwOTI1MTk1NzM5WjAYMRYwFAYD VQQDEw02OGNjNjQzNC1iNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygzCdWI2E8zqOHc3MW/jV0xYP1gVgRhuCu6F0TBo27qYRInFxil4wiZyIFlV tR2itix8I+HoMkZxRuPO/yfvvnCvrdToUB7oeAz1d9AArPxogUpvih9CIYMEfIQY gA3DA69rM0IcEcnZ3vc/BV23cSXErFYoJIVM5oYKR5GpUhZRHmrtunTtw0K893s3 M7DKIbb5yzajkGOHUK+7CBJoPKjBuwQQDP7+hs7MhgUdQuAM16eKjNySqQDW4hUX 4h1vqft+1345Hu3RHVHfcchi4s/WmpWiLjIphSMvMXaqQIagaCB/Iuqis4jWVX1M k7jIiOvhMC5NAQ2eEuixW75JZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN99OuIa ejNHSejyLq6P00xFgH4FMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXYXlaOj2qKWO2AFfgF+011vFKZ6HD8MYRN9lFkDVoRFFKOQHDGPCZ VD/Iav8Gta6PiYI887thZZkKVhCkMsW/LriUqGGPsrtfumlD22rYfSQxnErsIVjS 5EKbKdQEr2vtJ7kJZgS0sAuyl+ZsOATCFnuggoxgIGyDF3TZGNauzzUqJZ3bhEIi 1vbKe7jlJwQOgB1odJIv5IIYauTKnyUtudP3bsVF3zzDIEjBmnsSutNPdjjZWt6I fk9MG9PsOZ9vNFVqZySJJUQMpqd/nhPa3kEIoawE8Il2lWljoPkfKbvoupQ6u5Qi vcL1B57byEt996T/ANZrRNEGdW4t6+WR -----END CERTIFICATE-----Generated at Fri Sep 19 00:44:12 2025 by rpki-client