$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: Z3+2x0BadtUAaY56Bf0jvvwL3QaHEnZmmXp9zP+A2hA= Subject key identifier: 5C:81:EE:93:E2:88:52:FF:68:FE:C7:17:6B:CB:AC:3C:3C:F2:6F:54 Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 0168 Signing time: Mon 03 Nov 2025 03:58:53 +0000 Manifest this update: Mon 03 Nov 2025 03:58:52 +0000 Manifest next update: Mon 10 Nov 2025 03:58:52 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: RhCLF6ycboYhvmsFzGbMYb5jRjqnnkbGtw+ord+Yx/c=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: qaJjnM/nFYTPN1/4OCWjrzD56e+pIDcvzqv8I7CMWas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Nov 3 03:58:52 2025 GMT Not After : Nov 10 03:58:52 2025 GMT Subject: CN=6908287c-93e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:6d:82:2e:e8:8c:6b:4c:81:5b:04:96:55: da:9d:ae:29:64:0f:c6:e1:ff:d8:f9:43:bf:60:8d: 5f:0b:48:46:ef:a1:89:8e:62:4e:a0:af:80:48:a0: 85:28:0b:5b:c7:f8:7a:e8:c2:27:4a:7e:05:e1:ee: c9:b8:33:a6:15:4e:f3:f9:f9:87:48:07:ef:af:7d: f5:22:24:a8:cb:84:17:8b:16:08:cc:71:44:e3:f5: 83:c2:a5:0f:4e:91:6b:5a:23:13:4a:bc:b3:7f:9e: 9a:fc:b6:0e:ae:57:86:ec:ee:74:af:73:68:95:07: f7:1f:10:a6:ea:ff:39:2e:c0:d8:08:74:b6:f0:8c: cf:70:80:95:b5:d6:72:79:34:91:70:99:f4:46:7d: e4:ea:9e:88:a0:b1:a4:27:85:f5:a5:b2:d1:06:6d: 58:fc:98:8b:d7:3e:86:3a:66:a5:fb:c1:d2:ff:55: ab:fc:7c:05:20:5c:be:87:15:1c:aa:cb:34:18:61: a1:59:6d:df:32:b0:dc:ab:39:ad:f0:93:29:75:b9: 07:de:12:13:af:88:7a:91:11:8c:d3:a6:dc:76:aa: 5c:5e:b2:1e:ad:31:c2:d9:37:c0:8f:73:d0:29:11: 70:ae:e2:ad:65:f0:34:70:07:09:18:eb:30:c8:98: 26:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:81:EE:93:E2:88:52:FF:68:FE:C7:17:6B:CB:AC:3C:3C:F2:6F:54 X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e7:bd:7c:39:bd:2f:79:09:48:ae:21:69:e2:f8:34:61:b9: e4:6a:86:5f:75:08:10:16:cd:b2:cd:8e:78:c6:76:f0:b1:6f: 8d:96:7b:34:e4:d2:29:4f:ea:2a:0f:ee:43:80:bc:54:d7:25: db:b5:38:a1:e0:ab:41:09:7f:1d:a2:3e:2c:9a:99:26:8f:17: 54:7d:2e:c0:dc:fb:99:ef:c0:e8:9c:1e:27:22:0f:f2:9c:30: 62:ab:41:65:9f:01:1e:5b:40:26:a6:d1:fd:8c:93:97:82:07: ad:ab:83:49:cc:e2:c6:8b:e2:2f:b3:2c:36:27:62:2a:4a:e5: ce:10:60:16:5c:5a:40:7b:b1:a8:89:bb:6f:b8:d9:8e:41:d0: f2:33:9c:2b:d8:c9:52:9a:23:8d:cb:01:2f:86:82:e7:66:be: 61:09:92:d7:3b:41:77:80:86:5d:ed:4d:d6:4e:e1:ef:34:f2: aa:ff:1a:f0:b1:00:8d:74:aa:64:bb:02:d8:e7:24:4f:48:f6: ec:75:c6:db:bb:37:c5:ae:78:6e:ce:59:05:01:c9:5d:33:55: 0f:f5:79:16:29:ae:e0:e7:0e:03:2a:cd:b8:44:54:56:58:51: 17:ac:5c:aa:7a:6d:c8:63:09:23:c7:e7:eb:0e:b1:54:3d:c2: b4:83:99:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjUxMTAzMDM1ODUyWhcNMjUxMTEwMDM1ODUyWjAYMRYwFAYD VQQDEw02OTA4Mjg3Yy05M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwthtgi7ojGtMgVsEllXana4pZA/G4f/Y+UO/YI1fC0hG76GJjmJOoK+ASKCF KAtbx/h66MInSn4F4e7JuDOmFU7z+fmHSAfvr331IiSoy4QXixYIzHFE4/WDwqUP TpFrWiMTSryzf56a/LYOrleG7O50r3NolQf3HxCm6v85LsDYCHS28IzPcICVtdZy eTSRcJn0Rn3k6p6IoLGkJ4X1pbLRBm1Y/JiL1z6GOmal+8HS/1Wr/HwFIFy+hxUc qss0GGGhWW3fMrDcqzmt8JMpdbkH3hITr4h6kRGM06bcdqpcXrIerTHC2TfAj3PQ KRFwruKtZfA0cAcJGOswyJgmtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyB7pPi iFL/aP7HF2vLrDw88m9UMB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX5718Ob0veQlIriFp4vg0YbnkaoZfdQgQFs2yzY54xnbwsW+Nlns0 5NIpT+oqD+5DgLxU1yXbtTih4KtBCX8doj4smpkmjxdUfS7A3PuZ78DonB4nIg/y nDBiq0FlnwEeW0AmptH9jJOXggetq4NJzOLGi+Ivsyw2J2IqSuXOEGAWXFpAe7Go ibtvuNmOQdDyM5wr2MlSmiONywEvhoLnZr5hCZLXO0F3gIZd7U3WTuHvNPKq/xrw sQCNdKpkuwLY5yRPSPbsdcbbuzfFrnhuzlkFAcldM1UP9XkWKa7g5w4DKs24RFRW WFEXrFyqem3IYwkjx+frDrFUPcK0g5ng -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:10 2025 by rpki-client