$ rpki-client -vvf rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft File: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft (raw, json) Hash identifier: vZDyYHtkdvQxnlTr31xSXkcGxsrGbWqdZIV2OBR8Hvk= Subject key identifier: A8:51:26:33:48:36:AA:EB:7E:6B:53:10:96:EA:68:5A:0F:77:9B:3C Authority key identifier: F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05 Certificate issuer: /CN=A9140332/serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft Manifest number: 3F Signing time: Mon 03 Nov 2025 07:33:25 +0000 Manifest this update: Mon 03 Nov 2025 07:33:25 +0000 Manifest next update: Mon 10 Nov 2025 07:33:24 +0000 Files and hashes: 1: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl (hash: E5uAF7uZLwUTW1wuw2QMl1fYLaAD6TnmGrtPz0H+WlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140332, serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305 Validity Not Before: Nov 3 07:33:25 2025 GMT Not After : Nov 10 07:33:24 2025 GMT Subject: CN=69085ac5-0572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bf:9f:8e:31:a9:58:34:37:88:0d:5b:0c:25: cb:a0:a3:ee:26:87:8a:c7:1d:89:ad:e2:0e:10:9f: 05:a7:e6:ab:f3:39:2f:57:86:50:8a:cf:84:af:d1: 6e:4d:82:c1:b4:4b:2d:26:ab:9a:0c:f6:e3:69:09: 90:1c:4d:b2:1f:fd:6b:6e:40:48:01:e7:24:39:51: 37:29:1a:0e:ef:c5:cd:aa:ef:42:75:ae:c0:e0:3a: 2d:41:0d:c1:2e:cb:a1:5d:c1:6b:b4:08:56:68:59: ed:55:91:95:e3:1e:71:26:d6:ce:13:58:91:23:40: 72:50:26:c1:64:13:8a:8a:8c:25:12:33:00:5e:38: 53:e3:d6:35:ff:8a:c4:fd:08:3f:8f:80:aa:c9:5b: bc:ca:39:88:bc:1e:04:b7:c4:c3:2b:74:2f:65:59: cf:6e:2c:11:7d:05:c8:3c:6c:d1:49:c8:78:c1:26: c7:5d:93:d3:22:1b:a9:17:0c:d1:f3:ca:fa:4e:83: 09:34:0b:a1:bc:fe:5e:65:c8:f4:a4:fe:48:86:87: 32:03:da:7b:81:99:df:5a:1f:56:96:1f:dd:8c:1a: 10:66:53:f6:74:e1:f0:ac:ab:4a:4a:e3:f6:30:e5: 10:b8:7f:a4:02:d6:9b:9d:05:14:59:e9:d8:88:f7: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:51:26:33:48:36:AA:EB:7E:6B:53:10:96:EA:68:5A:0F:77:9B:3C X509v3 Authority Key Identifier: keyid:F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e6:a1:6a:43:64:a3:67:6f:6c:77:5f:00:cf:76:9b:30:e3: ba:8d:cc:67:df:90:8b:61:61:cb:b4:76:99:8e:b7:8b:7d:c5: 0f:f5:ef:bd:ba:f0:57:b5:94:6a:76:76:80:fc:a7:db:51:98: 9a:96:52:a2:37:6c:54:1b:c6:60:0b:4b:cf:99:4c:e4:a5:73: d9:ce:e9:a7:d4:6a:20:b5:98:62:ec:aa:29:12:de:b8:0b:08: ea:2f:54:cf:30:a8:b5:33:f8:67:cc:13:b4:46:b2:19:3e:42: c9:54:03:f5:04:7e:d1:23:4e:06:2c:cf:a0:cb:5d:1a:f6:a3: 5b:cc:a2:2f:8b:4d:e8:66:16:e8:a0:ee:0c:88:83:36:7e:1f: 1c:ef:85:db:93:d8:69:f9:dd:f2:13:78:2c:95:83:18:54:df: be:42:c1:fe:d9:56:84:b5:92:ec:bc:14:61:00:20:30:c4:b4: 9d:8e:d9:99:c9:a4:c9:a9:cc:2f:6a:0d:b0:a3:07:e3:44:7c: 85:12:01:c4:01:5b:94:80:76:b2:f7:b3:3a:fa:ff:1a:3f:36: 8a:12:63:6c:b5:35:c5:0b:37:1d:41:bf:bf:30:b3:aa:b9:95: ee:3a:2d:86:f4:32:db:ed:f6:54:66:e9:32:72:b0:da:80:b9: 50:9b:eb:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDMzMjExMC8GA1UEBRMoRjE0MkZBOTA3NEYxNTU1OTNENDRDM0QxRDAxNEE3REUz OTczNzMwNTAeFw0yNTExMDMwNzMzMjVaFw0yNTExMTAwNzMzMjRaMBgxFjAUBgNV BAMTDTY5MDg1YWM1LTA1NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnv5+OMalYNDeIDVsMJcugo+4mh4rHHYmt4g4QnwWn5qvzOS9XhlCKz4Sv0W5N gsG0Sy0mq5oM9uNpCZAcTbIf/WtuQEgB5yQ5UTcpGg7vxc2q70J1rsDgOi1BDcEu y6FdwWu0CFZoWe1VkZXjHnEm1s4TWJEjQHJQJsFkE4qKjCUSMwBeOFPj1jX/isT9 CD+PgKrJW7zKOYi8HgS3xMMrdC9lWc9uLBF9Bcg8bNFJyHjBJsddk9MiG6kXDNHz yvpOgwk0C6G8/l5lyPSk/kiGhzID2nuBmd9aH1aWH92MGhBmU/Z04fCsq0pK4/Yw 5RC4f6QC1pudBRRZ6diI9wn3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqFEmM0g2 qut+a1MQlupoWg93mzwwHwYDVR0jBBgwFoAU8UL6kHTxVVk9RMPR0BSn3jlzcwUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwMzMyLzQ3RTFDNjE2NjVG MjExRjA4MUI5RjExREM0RjlBRTAyLzhVTDZrSFR4VlZrOVJNUFIwQlNuM2psemN3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFVMNmtIVHhWVms5Uk1QUjBCU24zamx6Y3dVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw MzMyLzQ3RTFDNjE2NjVGMjExRjA4MUI5RjExREM0RjlBRTAyLzhVTDZrSFR4VlZr OVJNUFIwQlNuM2psemN3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADHmoWpDZKNnb2x3XwDPdpsw47qNzGffkIthYcu0dpmOt4t9xQ/17726 8Fe1lGp2doD8p9tRmJqWUqI3bFQbxmALS8+ZTOSlc9nO6afUaiC1mGLsqikS3rgL COovVM8wqLUz+GfME7RGshk+QslUA/UEftEjTgYsz6DLXRr2o1vMoi+LTehmFuig 7gyIgzZ+HxzvhduT2Gn53fITeCyVgxhU375Cwf7ZVoS1kuy8FGEAIDDEtJ2O2ZnJ pMmpzC9qDbCjB+NEfIUSAcQBW5SAdrL3szr6/xo/NooSY2y1NcULNx1Bv78ws6q5 le46LYb0Mtvt9lRm6TJysNqAuVCb6wA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:11 2025 by rpki-client