$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: kD6aE6qiwRt4KDGD2xBIpxwEnfDvz0gfaw+WHLm7Ca4= Subject key identifier: E4:FC:86:D1:1A:F9:2A:F2:27:B7:60:A4:A5:E5:93:D9:FA:33:41:BD Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 09A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 098A Signing time: Sun 02 Nov 2025 20:03:52 +0000 Manifest this update: Sun 02 Nov 2025 20:03:52 +0000 Manifest next update: Sun 09 Nov 2025 20:03:52 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: OUijwh9mvCq+nX5TAXknLDe6m2W04grFvu1i5lPJqBc=) 2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: xcMGwOENkpgW2mMW9g8QUOtjynFGqmXhiODYH8mlbPs=) 3: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: qICrQwIHICjNb5ciKPL/CPmev59XQIMgZMKlYhMpE7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2470 (0x9a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Nov 2 20:03:52 2025 GMT Not After : Nov 9 20:03:52 2025 GMT Subject: CN=6907b928-e64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:71:f5:9e:83:87:23:f2:c6:a1:a5:2a:e5: aa:6c:49:80:c5:7e:f3:c4:c4:34:7b:00:9e:35:2c: 3f:31:ee:81:e5:02:c0:a7:24:8c:48:71:b5:14:ec: be:69:7c:48:49:e4:95:f7:54:d5:4d:91:dd:c1:a4: a5:b9:49:17:88:ac:6f:80:51:fc:fe:f9:90:78:93: 0a:1e:8d:0b:7a:1a:0c:31:9f:b2:d5:67:44:ae:1a: cb:29:f3:e4:f8:b8:b9:af:1d:2d:76:e2:bb:06:ee: 03:e4:09:9a:5a:2b:7d:7e:de:91:df:bc:84:4f:33: 61:31:53:36:5d:97:16:dd:50:90:7b:cf:0a:39:77: 00:ba:14:3d:84:cd:cd:a2:58:5f:14:a7:db:b5:46: fb:eb:ec:a6:df:31:04:44:2c:25:86:66:ca:a2:70: 4d:68:56:a2:de:87:6d:48:1f:2e:88:c3:90:86:5f: 77:b6:c2:86:2a:b7:b6:1c:0a:f8:0c:9c:d3:ac:c7: a7:b1:ad:08:17:88:f7:48:b6:6d:37:bf:b9:13:88: b5:74:69:f9:93:ac:5f:42:65:cc:88:31:32:10:ac: e5:dc:3c:d5:5e:7e:90:a5:a6:09:29:b7:88:03:00: 96:ee:79:18:39:eb:c8:d2:fd:41:fc:09:1a:f9:62: f4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FC:86:D1:1A:F9:2A:F2:27:B7:60:A4:A5:E5:93:D9:FA:33:41:BD X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a5:75:a3:5b:83:84:23:46:5c:0e:1e:c5:95:d5:d3:63:2b: 7b:5e:38:70:2a:f3:7e:2d:bb:ce:d9:aa:23:8f:1d:ce:72:2a: 55:ba:b2:59:26:5e:5d:c6:50:ec:db:13:4d:56:78:d4:db:a7: b0:4d:6e:75:0d:39:00:31:93:fb:09:ec:7e:b9:85:d9:63:51: 6b:43:5f:96:18:29:73:af:c3:e5:85:6e:af:ce:2c:1a:3d:0e: 1f:03:85:44:e7:d5:33:e3:49:53:f7:ba:5f:07:eb:5c:06:ff: 7d:df:0e:d9:5d:73:43:18:3e:4e:35:78:9e:6d:da:5a:45:63: 0c:b6:32:71:88:96:c8:02:07:1f:78:b3:40:d7:aa:e4:0d:54: 49:fe:52:2d:1c:a3:0a:25:dc:a9:6c:0c:a3:37:cd:31:d8:ef: c4:70:6f:24:b9:31:d9:85:9a:6e:55:6e:c9:8c:2c:e4:fd:f0: 7a:ac:6a:b0:fc:61:28:1a:f8:5a:c7:2f:b4:35:68:4b:61:8b: 5c:79:89:ac:b8:88:66:4c:fd:ff:94:d6:73:d8:5a:9f:76:ec: 79:85:5c:fd:8b:36:32:ff:11:6c:7e:08:ad:1e:3c:f0:86:c1: b3:3e:c0:85:8d:65:b9:f3:dd:f7:43:4f:43:05:82:68:8c:09: 60:d7:3f:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUxMTAyMjAwMzUyWhcNMjUxMTA5MjAwMzUyWjAYMRYwFAYD VQQDEw02OTA3YjkyOC1lNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs1x9Z6DhyPyxqGlKuWqbEmAxX7zxMQ0ewCeNSw/Me6B5QLApySMSHG1FOy+ aXxISeSV91TVTZHdwaSluUkXiKxvgFH8/vmQeJMKHo0LehoMMZ+y1WdErhrLKfPk +Li5rx0tduK7Bu4D5AmaWit9ft6R37yETzNhMVM2XZcW3VCQe88KOXcAuhQ9hM3N olhfFKfbtUb76+ym3zEERCwlhmbKonBNaFai3odtSB8uiMOQhl93tsKGKre2HAr4 DJzTrMensa0IF4j3SLZtN7+5E4i1dGn5k6xfQmXMiDEyEKzl3DzVXn6QpaYJKbeI AwCW7nkYOevI0v1B/Aka+WL05QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT8htEa +SryJ7dgpKXlk9n6M0G9MB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9pXWjW4OEI0ZcDh7FldXTYyt7XjhwKvN+LbvO2aojjx3OcipVurJZ Jl5dxlDs2xNNVnjU26ewTW51DTkAMZP7Cex+uYXZY1FrQ1+WGClzr8PlhW6vziwa PQ4fA4VE59Uz40lT97pfB+tcBv993w7ZXXNDGD5ONXiebdpaRWMMtjJxiJbIAgcf eLNA16rkDVRJ/lItHKMKJdypbAyjN80x2O/EcG8kuTHZhZpuVW7JjCzk/fB6rGqw /GEoGvhaxy+0NWhLYYtceYmsuIhmTP3/lNZz2Fqfdux5hVz9izYy/xFsfgitHjzw hsGzPsCFjWW58933Q09DBYJojAlg1z9d -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:51 2025 by rpki-client