$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft File: g8K1S2QeP_BuMaK0RQwVetrVm2g.mft (raw, json) Hash identifier: 1pyBnjh5UamV10nBckhnBe6jsptwvne6cXqGRIVaoE8= Subject key identifier: F5:99:9C:C1:40:B1:E5:69:44:0A:17:56:19:BC:27:31:03:BE:39:C1 Authority key identifier: 83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68 Certificate issuer: /CN=A9137E5F/serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft Manifest number: DF Signing time: Mon 03 Nov 2025 05:31:14 +0000 Manifest this update: Mon 03 Nov 2025 05:31:14 +0000 Manifest next update: Mon 10 Nov 2025 05:31:14 +0000 Files and hashes: 1: g8K1S2QeP_BuMaK0RQwVetrVm2g.crl (hash: V2UVKsgDy2ypY5xLbWFChAbvsWDCLb/baBks7o3L6bE=) 2: 7114716A653911EFB61F430DC4F9AE02.roa (hash: Jxy+pvv4xysDlIQZeDPDC9SdzrWtHicNhXpYrAxOrBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.crl rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E5F, serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68 Validity Not Before: Nov 3 05:31:14 2025 GMT Not After : Nov 10 05:31:14 2025 GMT Subject: CN=69083e22-6492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:22:20:57:e9:6b:cb:c9:8c:d7:46:d8:89: 9d:1f:af:8a:bf:e4:16:98:dc:50:34:ce:5c:84:f8: 54:15:44:0f:44:fd:13:04:14:b3:13:0d:ca:72:0c: d5:fe:d4:1c:5b:b2:57:c0:87:c0:df:d8:3e:83:00: 1a:45:7f:c4:bd:64:b7:4a:1f:d3:df:09:35:c2:01: c7:98:f6:f0:83:3e:4d:86:70:e3:88:2f:7b:07:ef: fa:60:c0:ab:ea:38:43:b5:36:d2:5f:d3:44:71:92: 77:00:98:64:2c:8f:c9:e6:97:d1:9f:b9:f4:bb:d7: 2d:29:63:f4:44:b1:4f:1b:70:fa:ca:a4:21:0a:b1: 3b:de:26:3e:6f:97:05:d6:f3:50:5c:af:e3:14:54: b8:4c:15:18:4e:ff:ac:87:c9:7c:c1:77:0c:63:b9: cd:79:5b:ef:9b:7d:81:dd:0a:a6:67:eb:08:b5:d2: dd:c4:90:89:0a:8f:0d:d2:c4:fe:1e:02:fc:4a:49: b8:ba:4f:33:13:89:32:69:04:c4:4f:0c:f9:e7:d4: a8:b0:ab:de:3a:42:a6:5f:8c:cb:96:e5:7e:2b:23: 2e:2e:3f:ca:49:71:82:af:4d:55:f8:25:c7:3a:bc: e7:f4:ae:a2:04:1d:49:57:62:e5:c8:2c:b8:8a:41: 10:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:9C:C1:40:B1:E5:69:44:0A:17:56:19:BC:27:31:03:BE:39:C1 X509v3 Authority Key Identifier: keyid:83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:80:36:f9:c7:33:4b:91:78:0d:37:60:b9:7e:5e:14:37:ab: e9:4c:21:de:e5:d3:27:07:67:96:0d:35:75:38:27:3d:c8:bd: 0a:b1:23:42:5c:f3:e0:cc:7b:2e:4b:2e:0e:3b:7b:c8:43:8e: 44:36:9e:87:e5:1f:c2:14:59:04:86:2b:a7:d9:5d:27:1c:70: 57:78:7e:36:e0:57:75:9f:b0:59:6c:e2:eb:9a:af:c9:7d:ce: 26:37:db:8f:eb:58:a3:7f:8d:6a:0d:bf:e8:7d:20:bb:88:45: 1b:82:e2:a8:62:a2:e8:ac:ef:87:42:a1:d4:34:b4:39:6e:75: 69:75:76:96:9c:7e:c4:fe:75:f7:19:22:14:b9:7d:77:cb:af: 9a:3c:18:8e:d0:a5:1d:70:7a:7a:98:5e:9a:ee:77:70:38:89: ad:da:f8:c3:aa:78:3b:ca:b5:3b:5e:53:f6:36:13:38:8d:f0: 36:48:73:9d:1c:80:06:b6:3c:31:8a:a0:00:8e:45:82:df:b4: 68:02:22:cf:2a:da:b8:c6:0d:fc:c6:a7:e0:23:0b:27:38:68: e2:37:98:4b:e2:2a:e1:fa:37:2e:b9:9c:cc:b1:60:53:75:32: e0:9e:68:b4:31:60:4a:a4:4f:b2:f5:18:3e:bf:90:af:cd:ed: fb:f3:e9:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFNUYxMTAvBgNVBAUTKDgzQzJCNTRCNjQxRTNGRjA2RTMxQTJCNDQ1MEMxNTdB REFENTlCNjgwHhcNMjUxMTAzMDUzMTE0WhcNMjUxMTEwMDUzMTE0WjAYMRYwFAYD VQQDEw02OTA4M2UyMi02NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS0iIFfpa8vJjNdG2ImdH6+Kv+QWmNxQNM5chPhUFUQPRP0TBBSzEw3KcgzV /tQcW7JXwIfA39g+gwAaRX/EvWS3Sh/T3wk1wgHHmPbwgz5NhnDjiC97B+/6YMCr 6jhDtTbSX9NEcZJ3AJhkLI/J5pfRn7n0u9ctKWP0RLFPG3D6yqQhCrE73iY+b5cF 1vNQXK/jFFS4TBUYTv+sh8l8wXcMY7nNeVvvm32B3QqmZ+sItdLdxJCJCo8N0sT+ HgL8Skm4uk8zE4kyaQTETwz559SosKveOkKmX4zLluV+KyMuLj/KSXGCr01V+CXH Orzn9K6iBB1JV2LlyCy4ikEQIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWZnMFA seVpRAoXVhm8JzEDvjnBMB8GA1UdIwQYMBaAFIPCtUtkHj/wbjGitEUMFXra1Zto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U1Ri84MEM0QjMwMDY1 MzgxMUVGOEI0Njg5NkVDNEY5QUUwMi9nOEsxUzJRZVBfQnVNYUswUlF3VmV0clZt MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4SzFTMlFlUF9CdU1hSzBSUXdWZXRyVm0yZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0U1Ri84MEM0QjMwMDY1MzgxMUVGOEI0Njg5NkVDNEY5QUUwMi9nOEsxUzJRZVBf QnVNYUswUlF3VmV0clZtMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbgDb5xzNLkXgNN2C5fl4UN6vpTCHe5dMnB2eWDTV1OCc9yL0KsSNC XPPgzHsuSy4OO3vIQ45ENp6H5R/CFFkEhiun2V0nHHBXeH424Fd1n7BZbOLrmq/J fc4mN9uP61ijf41qDb/ofSC7iEUbguKoYqLorO+HQqHUNLQ5bnVpdXaWnH7E/nX3 GSIUuX13y6+aPBiO0KUdcHp6mF6a7ndwOImt2vjDqng7yrU7XlP2NhM4jfA2SHOd HIAGtjwxiqAAjkWC37RoAiLPKtq4xg38xqfgIwsnOGjiN5hL4irh+jcuuZzMsWBT dTLgnmi0MWBKpE+y9Rg+v5Cvze378+ky -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:38 2025 by rpki-client