$ rpki-client -vvf rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft File: R-8IU6LX3qJJt8P694FpyPjbx-k.mft (raw, json) Hash identifier: QIdCJVq0M5z4NxhFUiKwrBwOc1Hjibl8hNCdy733/lc= Subject key identifier: D4:3C:72:34:D7:F8:20:3B:FF:0D:1E:32:C4:BF:C9:FB:A7:E3:69:75 Authority key identifier: 47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9 Certificate issuer: /CN=A912946F/serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft Manifest number: 0A Signing time: Mon 03 Nov 2025 07:59:39 +0000 Manifest this update: Mon 03 Nov 2025 07:59:39 +0000 Manifest next update: Mon 10 Nov 2025 07:59:39 +0000 Files and hashes: 1: R-8IU6LX3qJJt8P694FpyPjbx-k.crl (hash: zerERfjkkBcGXeTBSpqSOgBoyfRS3DVyMpf0Nff1TiI=) 2: 6F324D3CAB2811F08D96D563C4F9AE02.roa (hash: 88QIr/+6SV1XGmbtRjlIpjfP33+g+SedUIOc4mh9AFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912946F, serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9 Validity Not Before: Nov 3 07:59:39 2025 GMT Not After : Nov 10 07:59:39 2025 GMT Subject: CN=690860eb-0783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e1:28:53:82:db:df:66:ee:a5:eb:ad:aa:ea: 26:e7:9f:80:f6:b6:58:23:28:f6:3d:e7:a7:55:ae: 57:0b:fc:79:2f:29:f1:e1:6a:35:25:6d:e0:6d:f1: 1f:60:b4:62:b1:df:34:e3:8e:ec:bb:1e:33:ea:34: f0:19:7f:0f:cb:39:b1:0f:0f:04:c4:f5:20:41:cd: 0a:c3:00:ef:ef:37:bc:dc:c9:9e:55:6f:fe:bf:03: aa:43:2b:3f:b8:b8:2a:1a:ee:b4:c0:9e:9a:9d:fe: 80:4c:91:cd:43:9d:12:ae:ee:11:62:6b:b9:a1:b3: e3:e8:8a:8f:fc:ce:d8:9e:e3:0c:bd:21:6b:6e:f0: 9e:b8:61:c6:6f:97:ae:44:6c:a0:70:2f:c4:d2:a7: 16:cd:b7:84:65:22:09:3d:7c:69:62:d3:bc:77:54: c1:a5:5c:a4:2e:ef:95:92:8a:0f:8f:73:d1:02:00: 29:a0:12:eb:08:9e:b8:36:c6:ff:13:e1:3f:75:eb: 8e:6f:5d:02:77:50:2e:06:1b:02:41:b7:21:44:49: 87:08:d4:b9:32:4c:79:f8:9d:53:a2:9c:0d:d7:14: b9:85:49:9c:d0:2b:17:eb:7a:f3:0c:1d:ac:e3:f2: 6e:e0:37:bd:d2:b6:b1:04:e7:4a:15:b6:f5:e0:8b: a2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3C:72:34:D7:F8:20:3B:FF:0D:1E:32:C4:BF:C9:FB:A7:E3:69:75 X509v3 Authority Key Identifier: keyid:47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:3c:52:21:8c:3e:e1:f5:de:2d:9c:c5:1a:4a:58:70:3a:ba: b2:a9:cf:c3:7d:a3:50:69:c4:61:01:da:fb:2e:3f:28:d6:5b: 78:af:aa:72:b1:4c:6d:bd:5b:a3:85:f7:8c:5a:0a:96:3b:54: a5:9d:80:16:b2:e8:e5:eb:f0:de:3f:58:67:60:f4:4a:f8:46: e3:c4:d0:19:ca:ef:7a:20:3a:99:5d:b8:94:20:9e:56:bd:a5: 5e:70:82:f4:9b:7c:85:4a:61:22:6b:5c:14:f6:cf:2b:72:45: 15:70:91:be:6f:31:b7:1b:92:d6:13:2e:a6:23:8b:e0:4a:7e: b8:d5:f5:c1:94:95:7f:7b:59:90:65:b0:2f:50:ec:32:6f:3f: 1f:c2:c9:38:58:63:e6:f6:7e:75:97:82:11:95:6a:1b:6e:4d: 77:19:59:25:7d:5e:92:a3:f8:55:41:81:f4:2f:0e:ac:ec:36: d7:da:12:6e:ee:54:05:84:4c:32:1d:41:01:d8:99:82:4f:f2: 71:69:7d:aa:91:07:9b:4e:e0:69:9a:57:a5:1c:38:00:6f:1c: e4:dd:86:f0:f3:5e:b3:fe:d1:db:16:48:19:a1:26:c1:e5:45: 06:c2:84:a2:0a:30:4c:b5:9f:5e:9f:8a:73:6e:1c:80:22:3f: 0e:e5:38:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTQ2RjExMC8GA1UEBRMoNDdFRjA4NTNBMkQ3REVBMjQ5QjdDM0ZBRjc4MTY5QzhG OERCQzdFOTAeFw0yNTExMDMwNzU5MzlaFw0yNTExMTAwNzU5MzlaMBgxFjAUBgNV BAMTDTY5MDg2MGViLTA3ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn4ShTgtvfZu6l662q6ibnn4D2tlgjKPY956dVrlcL/HkvKfHhajUlbeBt8R9g tGKx3zTjjuy7HjPqNPAZfw/LObEPDwTE9SBBzQrDAO/vN7zcyZ5Vb/6/A6pDKz+4 uCoa7rTAnpqd/oBMkc1DnRKu7hFia7mhs+Poio/8ztie4wy9IWtu8J64YcZvl65E bKBwL8TSpxbNt4RlIgk9fGli07x3VMGlXKQu75WSig+Pc9ECACmgEusInrg2xv8T 4T91645vXQJ3UC4GGwJBtyFESYcI1LkyTHn4nVOinA3XFLmFSZzQKxfrevMMHazj 8m7gN73StrEE50oVtvXgi6KpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1DxyNNf4 IDv/DR4yxL/J+6fjaXUwHwYDVR0jBBgwFoAUR+8IU6LX3qJJt8P694FpyPjbx+kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NDZGLzI1RDU5OERFQUIy NzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FKSnQ4UDY5NEZweVBqYngt ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUi04SVU2TFgzcUpKdDhQNjk0RnB5UGpieC1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NDZGLzI1RDU5OERFQUIyNzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FK SnQ4UDY5NEZweVBqYngtay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKE8UiGMPuH13i2cxRpKWHA6urKpz8N9o1BpxGEB2vsuPyjWW3ivqnKx TG29W6OF94xaCpY7VKWdgBay6OXr8N4/WGdg9Er4RuPE0BnK73ogOplduJQgnla9 pV5wgvSbfIVKYSJrXBT2zytyRRVwkb5vMbcbktYTLqYji+BKfrjV9cGUlX97WZBl sC9Q7DJvPx/CyThYY+b2fnWXghGVahtuTXcZWSV9XpKj+FVBgfQvDqzsNtfaEm7u VAWETDIdQQHYmYJP8nFpfaqRB5tO4GmaV6UcOABvHOTdhvDzXrP+0dsWSBmhJsHl RQbChKIKMEy1n16finNuHIAiPw7lOBo= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:49 2025 by rpki-client