$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft File: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json) Hash identifier: wR8YSR4LogSy4JXl/FmIio+W3/6u+XMWWZa3FOC60zA= Subject key identifier: E6:50:28:C3:E2:4D:C5:C3:0A:F3:36:BB:FD:FC:34:5C:36:B3:21:42 Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 Certificate issuer: /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft Manifest number: 9D Signing time: Mon 03 Nov 2025 06:21:39 +0000 Manifest this update: Mon 03 Nov 2025 06:21:39 +0000 Manifest next update: Mon 10 Nov 2025 06:21:39 +0000 Files and hashes: 1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: lbOZOs7ldg6PIbgwmGBqKfx7V+Fy6/ten1Xsm+oXXyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Validity Not Before: Nov 3 06:21:39 2025 GMT Not After : Nov 10 06:21:39 2025 GMT Subject: CN=690849f3-405c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:da:74:b9:62:ff:31:84:57:9b:ec:07:ea: b5:5d:4b:dd:ad:63:d8:24:5c:66:6f:55:09:8d:7e: 57:40:33:db:dc:24:40:26:6b:8e:97:eb:ef:13:7a: 5d:1d:fd:d2:63:41:51:12:c6:2a:2a:32:10:d6:f3: e1:fa:21:ca:1d:1e:f7:5d:7a:a0:25:85:f9:83:fe: c7:67:0a:f0:74:11:a9:2c:d3:4b:21:22:20:41:55: c6:e1:1b:08:df:61:e4:e9:b6:ba:99:74:3b:16:bb: 18:98:b7:9a:d1:42:d9:30:f2:81:88:cf:97:82:c1: f9:95:5b:e6:e6:fe:e0:ec:42:05:be:4c:ce:e0:56: dc:f0:54:79:d3:ee:ba:fe:eb:e4:f2:8b:ee:5a:9a: 3c:7e:f2:a5:32:4b:83:ac:26:e8:19:60:46:a8:7c: 51:1c:d7:cb:54:35:86:64:50:9b:2b:ca:aa:27:9f: 2d:a5:f0:c1:29:96:79:e0:2a:0f:77:ec:dd:d5:a4: 2c:b6:df:57:b2:5e:a0:e9:dd:c4:28:62:bb:6e:ce: ef:99:21:70:3d:70:ed:76:a2:14:6c:13:86:cc:1a: 1a:e2:dc:d6:8b:f9:90:6a:99:75:d5:f3:1b:96:69: ba:0c:40:23:ef:1b:f1:16:ae:c4:db:f4:6c:85:8e: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:50:28:C3:E2:4D:C5:C3:0A:F3:36:BB:FD:FC:34:5C:36:B3:21:42 X509v3 Authority Key Identifier: keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:cb:ed:d4:f5:fe:d5:b9:ec:12:27:9a:fc:72:2d:1e:5f:ef: 84:73:94:97:39:cf:da:74:4c:62:dc:45:0f:ca:bf:2b:be:65: da:64:d7:f2:4a:4e:75:69:32:20:ee:bb:59:b1:10:ae:fb:88: 31:53:fc:2f:d6:ae:e3:3a:39:44:db:c1:58:4a:87:06:9e:f8: 6f:23:1d:8b:03:30:0f:9c:10:50:3d:cb:b1:d3:53:ce:fe:fc: 8b:1a:5a:e6:d4:f4:e0:a1:64:95:69:5f:dc:06:e4:99:09:9e: a1:89:3d:91:45:cb:3e:fc:88:f1:3d:54:39:13:fb:0e:73:f0: 99:db:23:55:d6:68:64:03:0c:62:ad:f4:36:04:99:c9:8c:01: 73:f2:5f:cc:4f:aa:23:76:6e:2a:e6:54:c6:32:53:a1:57:96: 4c:c1:af:eb:65:64:75:42:8d:34:18:aa:c6:02:79:7c:bf:3e: 8a:dd:09:99:ee:52:70:23:2c:10:f6:7a:49:a4:28:7f:b9:fc: a0:df:46:30:f3:68:df:c2:f5:d0:ca:81:61:2c:c8:e2:65:2a: 44:16:69:ea:c7:12:08:74:4f:2b:53:3f:d4:a8:54:6a:6c:0a: 37:9f:b5:95:ad:aa:cb:9b:5a:3c:32:ca:34:ef:28:db:f8:0a: 17:49:2a:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QUYxMTAvBgNVBAUTKEYzRUJCRkI0QTkzODBGRTA5QTU2MUZDNkFGQTJBMUND MjE0ODg2MTEwHhcNMjUxMTAzMDYyMTM5WhcNMjUxMTEwMDYyMTM5WjAYMRYwFAYD VQQDEw02OTA4NDlmMy00MDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0u/adLli/zGEV5vsB+q1XUvdrWPYJFxmb1UJjX5XQDPb3CRAJmuOl+vvE3pd Hf3SY0FREsYqKjIQ1vPh+iHKHR73XXqgJYX5g/7HZwrwdBGpLNNLISIgQVXG4RsI 32Hk6ba6mXQ7FrsYmLea0ULZMPKBiM+XgsH5lVvm5v7g7EIFvkzO4Fbc8FR50+66 /uvk8ovuWpo8fvKlMkuDrCboGWBGqHxRHNfLVDWGZFCbK8qqJ58tpfDBKZZ54CoP d+zd1aQstt9Xsl6g6d3EKGK7bs7vmSFwPXDtdqIUbBOGzBoa4tzWi/mQapl11fMb lmm6DEAj7xvxFq7E2/RshY7pHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZQKMPi TcXDCvM2u/38NFw2syFCMB8GA1UdIwQYMBaAFPPrv7SpOA/gmlYfxq+iocwhSIYR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVBRi84OERCQTk4MkNC QzExMUVGOUNEMTlENDRDNEY5QUUwMi84LXVfdEtrNEQtQ2FWaF9HcjZLaHpDRklo aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgtdV90S2s0RC1DYVZoX0dyNktoekNGSWhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVBRi84OERCQTk4MkNCQzExMUVGOUNEMTlENDRDNEY5QUUwMi84LXVfdEtrNEQt Q2FWaF9HcjZLaHpDRkloaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGy+3U9f7VuewSJ5r8ci0eX++Ec5SXOc/adExi3EUPyr8rvmXaZNfy Sk51aTIg7rtZsRCu+4gxU/wv1q7jOjlE28FYSocGnvhvIx2LAzAPnBBQPcux01PO /vyLGlrm1PTgoWSVaV/cBuSZCZ6hiT2RRcs+/IjxPVQ5E/sOc/CZ2yNV1mhkAwxi rfQ2BJnJjAFz8l/MT6ojdm4q5lTGMlOhV5ZMwa/rZWR1Qo00GKrGAnl8vz6K3QmZ 7lJwIywQ9npJpCh/ufyg30Yw82jfwvXQyoFhLMjiZSpEFmnqxxIIdE8rUz/UqFRq bAo3n7WVrarLm1o8Mso07yjb+AoXSSrI -----END CERTIFICATE-----Generated at Tue Nov 4 07:19:18 2025 by rpki-client