$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: uxwtlWkU8PYNVXu16mJtBtx4XVIpHxdbhNZLI33gLKs= Subject key identifier: 28:26:D6:DB:D9:77:03:8C:39:93:24:EB:9D:C0:A4:EE:2E:F0:10:FF Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0C9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0C96 Signing time: Sun 02 Nov 2025 18:17:03 +0000 Manifest this update: Sun 02 Nov 2025 18:17:02 +0000 Manifest next update: Sun 09 Nov 2025 18:17:02 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: aQFmMSJ99HQuLANO3jiTFVhyb+YqnahsEi5cr/7L/mI=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: QFXAssP53pMm/bFh5UJHCvk6JCuQJOPSQpSae2xtEZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02, serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Validity Not Before: Nov 2 18:17:02 2025 GMT Not After : Nov 9 18:17:02 2025 GMT Subject: CN=6907a01f-e9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:02:44:da:be:01:c3:d8:6f:f5:2c:47:46:fc: 3f:48:51:ff:1e:ff:12:76:ba:2b:9c:ea:9a:f9:3d: 3f:0b:7d:59:be:b9:11:f2:2d:7e:64:fc:6d:fd:15: 95:49:17:8d:54:ae:e8:0f:e8:ed:56:a8:dd:1d:db: 2e:ce:81:7b:20:28:f9:1a:4c:f0:b9:bb:8c:46:3c: 44:7d:0d:79:71:69:10:87:ab:69:60:f0:56:f9:07: 22:91:17:c1:82:80:c3:02:66:3a:a1:20:a5:30:b0: 28:90:b6:31:6f:ba:d3:6f:87:38:62:00:c7:93:36: 4a:d6:81:d5:59:6f:63:67:1d:b1:9f:a2:10:97:5d: aa:9d:68:fa:59:e5:11:92:b4:f2:32:22:39:eb:ef: ec:e5:c4:a5:9c:03:a2:03:30:03:84:c1:b8:07:32: c1:17:94:7e:92:dc:ef:a6:34:4f:cf:fb:df:de:4c: 14:49:8f:2d:ce:5d:9a:f0:bf:35:2e:13:ff:c2:b4: f0:42:68:e6:a4:19:de:93:2b:8f:39:67:79:53:b2: 4b:86:86:66:1a:49:7d:d8:c6:7e:84:87:b9:c9:86: ec:56:34:26:1c:e9:22:2f:3b:b0:85:0d:67:fc:3b: 7e:b9:89:8b:a9:3e:fb:40:30:d9:11:a0:9a:fb:53: ac:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:26:D6:DB:D9:77:03:8C:39:93:24:EB:9D:C0:A4:EE:2E:F0:10:FF X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:be:97:96:15:b9:ac:3e:9d:52:7c:52:2c:c4:bd:de:e8:ea: 90:e2:b5:04:4b:4d:8e:72:74:72:a1:bc:d5:90:08:56:37:7e: 10:f5:b3:dc:00:9c:1b:fa:96:3f:6d:50:9b:f3:de:b0:45:bc: e3:9b:28:a1:7f:2a:0a:46:44:94:9b:ec:74:d7:75:4f:45:30: 18:1f:9b:87:3a:49:ee:51:35:ee:1a:3e:54:d6:59:e9:f5:de: 6a:2d:e4:0e:f4:58:72:d3:22:33:91:21:c4:cb:02:00:68:c7: c2:e1:a3:d1:f8:4d:e3:27:06:4f:b7:36:46:2e:c2:33:6e:d3: 24:37:ca:f8:b4:06:cb:7b:84:6a:64:f3:b7:89:87:f0:b8:38: d5:d8:e4:e6:37:87:78:d3:ff:7e:f0:f9:aa:1a:57:cf:42:89: 7e:f2:9f:9f:83:e1:0d:6d:3a:2b:aa:54:16:34:60:9c:44:59: 86:0b:24:65:d9:4a:a9:cd:87:45:0d:8f:d4:40:a0:ea:05:10: d7:07:08:51:f6:f2:c5:d5:d8:a7:0a:0f:ad:95:28:cc:bf:6a: 07:ab:5c:eb:ae:59:45:fe:c6:da:44:24:f9:37:18:71:67:39: c7:cc:77:82:df:89:53:b4:cb:8f:64:47:cc:82:59:5f:67:7e: ff:ff:4d:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjUxMTAyMTgxNzAyWhcNMjUxMTA5MTgxNzAyWjAYMRYwFAYD VQQDEw02OTA3YTAxZi1lOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wJE2r4Bw9hv9SxHRvw/SFH/Hv8SdrornOqa+T0/C31ZvrkR8i1+ZPxt/RWV SReNVK7oD+jtVqjdHdsuzoF7ICj5GkzwubuMRjxEfQ15cWkQh6tpYPBW+QcikRfB goDDAmY6oSClMLAokLYxb7rTb4c4YgDHkzZK1oHVWW9jZx2xn6IQl12qnWj6WeUR krTyMiI56+/s5cSlnAOiAzADhMG4BzLBF5R+ktzvpjRPz/vf3kwUSY8tzl2a8L81 LhP/wrTwQmjmpBnekyuPOWd5U7JLhoZmGkl92MZ+hIe5yYbsVjQmHOkiLzuwhQ1n /Dt+uYmLqT77QDDZEaCa+1Os6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgm1tvZ dwOMOZMk653ApO4u8BD/MB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQvpeWFbmsPp1SfFIsxL3e6OqQ4rUES02OcnRyobzVkAhWN34Q9bPc AJwb+pY/bVCb896wRbzjmyihfyoKRkSUm+x013VPRTAYH5uHOknuUTXuGj5U1lnp 9d5qLeQO9Fhy0yIzkSHEywIAaMfC4aPR+E3jJwZPtzZGLsIzbtMkN8r4tAbLe4Rq ZPO3iYfwuDjV2OTmN4d40/9+8PmqGlfPQol+8p+fg+ENbTorqlQWNGCcRFmGCyRl 2UqpzYdFDY/UQKDqBRDXBwhR9vLF1dinCg+tlSjMv2oHq1zrrllF/sbaRCT5Nxhx ZznHzHeC34lTtMuPZEfMgllfZ37//02A -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:29 2025 by rpki-client