$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft File: 8reSQiqNuXlUdjz-iRZuki5jGYQ.mft (raw, json) Hash identifier: HF5b8/NJaJkTDbT64PhhZeZacn2k47QvZ9RpY1xIKmQ= Subject key identifier: 33:10:59:EA:2E:A1:0B:F8:8E:B1:CE:70:2F:9E:BE:50:7C:8A:AD:6B Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 Certificate issuer: /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft Manifest number: 0161 Signing time: Mon 03 Nov 2025 04:03:03 +0000 Manifest this update: Mon 03 Nov 2025 04:03:03 +0000 Manifest next update: Mon 10 Nov 2025 04:03:03 +0000 Files and hashes: 1: 8reSQiqNuXlUdjz-iRZuki5jGYQ.crl (hash: MCp6yVmoDyDFvvHXuS6OnqbID7DBKx45Fec68QaHoVc=) 2: F609B0309D5F11EE94076E6FC4F9AE02.roa (hash: uMIbIaAd2q/fAdMbL/3IffciHlHLKK1YHyqz9FvJ9Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Validity Not Before: Nov 3 04:03:03 2025 GMT Not After : Nov 10 04:03:03 2025 GMT Subject: CN=69082977-7af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:ad:48:a7:ba:54:ea:50:d4:63:c1:50:e6: bc:74:11:a3:3c:82:c9:5e:5b:e6:cd:46:83:2c:5d: a0:ce:34:b3:ea:77:8a:19:87:60:f9:7c:c2:57:b1: ca:f5:38:da:8a:1f:8f:89:e3:c2:e2:cf:64:7a:76: 29:73:50:01:13:d9:f7:8a:7d:3b:17:97:02:b7:82: cf:33:a1:fe:f4:23:79:db:a9:80:d6:bc:f1:a6:9d: 69:3e:b0:69:05:a2:c3:88:f5:df:cb:9a:c0:00:0f: 7c:33:28:d8:cb:16:c3:90:54:b4:f8:ab:42:f0:e0: 80:d1:e8:1d:4b:fe:b8:03:a4:99:bb:fb:20:0a:ab: 5c:c5:02:ef:c1:e3:96:9e:4d:54:01:1a:3c:5d:59: 27:44:4c:ee:44:6e:f8:20:ee:33:56:93:00:25:af: 88:b8:6a:db:28:2d:76:76:9a:32:2c:54:58:63:34: aa:4b:be:c2:40:cc:41:f5:ab:26:86:fa:48:e9:f2: da:6c:2c:31:af:ba:3d:5b:07:e6:e3:7b:b6:3d:70: cf:09:ff:18:a0:36:07:bf:7f:0d:f2:d3:82:c5:6e: 0e:0f:c8:95:12:56:f8:ac:82:fd:54:74:58:b7:b5: f4:73:30:e6:f6:3c:be:6d:54:26:f9:de:05:bd:79: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:10:59:EA:2E:A1:0B:F8:8E:B1:CE:70:2F:9E:BE:50:7C:8A:AD:6B X509v3 Authority Key Identifier: keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:cb:10:f2:62:e3:9f:b8:70:de:cc:95:69:85:81:af:5c:ca: 14:50:52:2c:45:28:60:3e:48:d7:be:84:92:49:6e:15:a2:d7: db:a6:cb:22:6e:47:ee:ae:db:6f:52:2b:45:c6:4a:2f:6f:10: 92:75:63:07:45:d3:a2:94:b2:0a:fc:42:a5:1e:91:dd:75:5f: ef:fe:b6:bd:07:bd:c2:16:17:e6:81:98:f6:ac:4f:77:b3:0a: 12:9b:13:be:3b:8c:f0:21:e5:35:3b:c2:de:15:dd:05:8f:c1: 22:21:87:a5:1e:b2:6c:62:c3:00:39:55:4b:5b:66:ac:16:e1: b1:d4:94:20:c7:84:7d:16:e8:63:98:c4:7b:45:06:40:0b:1c: ac:e7:84:39:2a:e6:4e:ff:fb:f3:c1:8b:b6:72:ee:ee:7f:9b: 97:a4:f8:5a:70:ba:e5:b1:d2:45:bb:94:79:0e:52:a4:fc:41: 9d:03:43:e6:f5:25:38:33:76:a6:fb:7e:de:71:7f:56:b3:9d: eb:ab:97:3a:5d:60:72:64:b2:8d:7a:e1:6c:7c:37:20:4a:25: 64:95:31:56:04:09:1c:54:07:2d:32:95:32:eb:f3:04:bc:8e: b5:8d:69:7f:a8:f0:8d:ed:5d:c9:8f:43:ae:c5:fe:ed:5f:b5: 54:b6:e2:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQjkxMTAvBgNVBAUTKEYyQjc5MjQyMkE4REI5Nzk1NDc2M0NGRTg5MTY2RTky MkU2MzE5ODQwHhcNMjUxMTAzMDQwMzAzWhcNMjUxMTEwMDQwMzAzWjAYMRYwFAYD VQQDEw02OTA4Mjk3Ny03YWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz22tSKe6VOpQ1GPBUOa8dBGjPILJXlvmzUaDLF2gzjSz6neKGYdg+XzCV7HK 9Tjaih+PiePC4s9kenYpc1ABE9n3in07F5cCt4LPM6H+9CN526mA1rzxpp1pPrBp BaLDiPXfy5rAAA98MyjYyxbDkFS0+KtC8OCA0egdS/64A6SZu/sgCqtcxQLvweOW nk1UARo8XVknREzuRG74IO4zVpMAJa+IuGrbKC12dpoyLFRYYzSqS77CQMxB9asm hvpI6fLabCwxr7o9Wwfm43u2PXDPCf8YoDYHv38N8tOCxW4OD8iVElb4rIL9VHRY t7X0czDm9jy+bVQm+d4FvXnUwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMQWeou oQv4jrHOcC+evlB8iq1rMB8GA1UdIwQYMBaAFPK3kkIqjbl5VHY8/okWbpIuYxmE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCOS9GQjA3NEY0NjlD QzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVYbFVkanotaVJadWtpNWpH WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyZVNRaXFOdVhsVWRqei1pUlp1a2k1akdZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCOS9GQjA3NEY0NjlDQzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVY bFVkanotaVJadWtpNWpHWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChyxDyYuOfuHDezJVphYGvXMoUUFIsRShgPkjXvoSSSW4Votfbpssi bkfurttvUitFxkovbxCSdWMHRdOilLIK/EKlHpHddV/v/ra9B73CFhfmgZj2rE93 swoSmxO+O4zwIeU1O8LeFd0Fj8EiIYelHrJsYsMAOVVLW2asFuGx1JQgx4R9Fuhj mMR7RQZACxys54Q5KuZO//vzwYu2cu7uf5uXpPhacLrlsdJFu5R5DlKk/EGdA0Pm 9SU4M3am+37ecX9Ws53rq5c6XWByZLKNeuFsfDcgSiVklTFWBAkcVActMpUy6/ME vI61jWl/qPCN7V3Jj0Ouxf7tX7VUtuKs -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:00 2025 by rpki-client