$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft File: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json) Hash identifier: IMj05X2itdkxXf9gU86cIkld6Ht+J9To8NBStXSse94= Subject key identifier: 50:2B:43:86:6B:5D:E0:5E:49:9F:70:D4:DE:CE:B3:A0:D0:C9:8B:88 Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3 Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft Manifest number: 0218 Signing time: Mon 03 Nov 2025 02:10:20 +0000 Manifest this update: Mon 03 Nov 2025 02:10:20 +0000 Manifest next update: Mon 10 Nov 2025 02:10:20 +0000 Files and hashes: 1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: mXQuMHn12lckjVs8sMxH9PEnmtnQTxnFc/Ms9EmMC9c=) 2: 2F43497CA16711EFBB0B733EC4F9AE02.roa (hash: ZYbaEoAWqyp/aPXD71n7sec2EkFfTfM2g3XustUPS1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3 Validity Not Before: Nov 3 02:10:20 2025 GMT Not After : Nov 10 02:10:20 2025 GMT Subject: CN=69080f0c-072c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:7b:67:43:42:cc:fc:22:78:a8:37:8d:a8: 4c:93:46:dc:98:18:ef:9f:aa:95:c3:41:0d:d6:8a: db:e8:e4:f3:32:3b:99:e9:f4:39:80:f4:eb:d7:d7: 35:4c:3c:c1:ac:37:31:e8:20:f9:7c:29:a0:4e:f5: ef:2e:28:e1:75:58:67:5e:2d:f2:4e:52:fa:d1:c6: fe:1c:51:57:e9:2d:9c:f0:c3:e1:c4:86:3b:a6:c8: 66:83:e6:50:0d:5a:46:b2:31:b0:20:57:39:cd:52: db:77:63:1c:44:b1:fb:4d:e9:d4:ee:cb:08:56:b3: e5:34:77:5c:b7:16:08:13:4e:4c:a3:5e:d8:a5:4c: 93:57:7d:ae:21:37:28:19:05:85:58:6a:7a:ed:3c: f6:08:96:5b:57:9e:4c:c6:e8:6b:0a:6d:31:04:22: aa:08:56:9d:26:0c:73:63:e6:4d:89:17:89:39:6e: 67:b0:c3:ed:7d:0e:6e:63:f1:88:d0:1e:60:76:3e: f2:ec:68:f8:a2:61:0d:90:4c:b8:46:ae:85:3e:7f: d8:fc:fc:c6:29:39:36:56:52:11:e5:cf:13:3c:78: 04:b6:97:c6:b1:64:b6:16:99:6a:11:2e:59:ef:ec: 8e:17:ba:ef:e5:0d:81:50:58:40:e8:32:a2:6f:86: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2B:43:86:6B:5D:E0:5E:49:9F:70:D4:DE:CE:B3:A0:D0:C9:8B:88 X509v3 Authority Key Identifier: keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:71:91:a3:71:ff:95:ac:c1:e2:63:93:1f:b6:b9:9d:04:73: c0:5c:aa:aa:1e:b2:de:92:12:ea:38:4b:19:6e:e0:b7:15:17: 6a:58:37:ad:ee:cf:8e:38:96:dc:52:ee:45:22:d5:23:10:50: be:e0:f9:8d:27:5b:28:0d:15:bc:6e:3e:3d:a1:bc:13:94:19: 43:6c:06:8c:90:2b:f8:19:60:c6:e9:6e:2f:7c:ab:0d:49:9a: 1f:c1:38:87:bb:ce:ac:7e:a2:f2:76:95:e6:db:6f:7e:36:8d: 59:bf:42:ba:68:a4:f0:01:62:16:85:9f:a6:a3:9e:eb:a5:e9: 89:da:cf:c8:6e:16:60:ef:3f:c0:eb:e3:ea:3b:13:ee:d6:4b: 3e:aa:9a:6d:6c:15:17:ec:7f:6d:9e:da:fa:a5:c8:37:9e:86: 8e:39:bd:f7:3e:e4:70:b2:a5:48:93:c3:6f:87:6b:cc:2a:e9: 63:00:ec:e9:26:6d:14:c7:c1:84:fb:6f:b9:35:47:e7:52:39: a7:75:8c:c3:d4:bd:f6:23:84:5d:f2:37:2e:fd:fc:50:f4:ec: d8:32:ff:de:dc:77:29:eb:8d:ed:ea:f0:b7:d5:79:b4:05:54: 77:85:d6:ff:21:ce:35:3d:7c:45:52:ba:e4:c4:b3:11:67:e7: 8f:f5:67:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MkExMTAvBgNVBAUTKEYxMjVBMEU2QjhFQkRDMTM2QUI1MzA3RDQ5MTQ3MTBF OTAwNjNCQzMwHhcNMjUxMTAzMDIxMDIwWhcNMjUxMTEwMDIxMDIwWjAYMRYwFAYD VQQDEw02OTA4MGYwYy0wNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuG57Z0NCzPwieKg3jahMk0bcmBjvn6qVw0EN1orb6OTzMjuZ6fQ5gPTr19c1 TDzBrDcx6CD5fCmgTvXvLijhdVhnXi3yTlL60cb+HFFX6S2c8MPhxIY7pshmg+ZQ DVpGsjGwIFc5zVLbd2McRLH7TenU7ssIVrPlNHdctxYIE05Mo17YpUyTV32uITco GQWFWGp67Tz2CJZbV55MxuhrCm0xBCKqCFadJgxzY+ZNiReJOW5nsMPtfQ5uY/GI 0B5gdj7y7Gj4omENkEy4Rq6FPn/Y/PzGKTk2VlIR5c8TPHgEtpfGsWS2FplqES5Z 7+yOF7rv5Q2BUFhA6DKib4agdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFArQ4Zr XeBeSZ9w1N7Os6DQyYuIMB8GA1UdIwQYMBaAFPEloOa469wTarUwfUkUcQ6QBjvD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkyQS84MUEzMDA3MDg2 NjMxMUVEQTAyNDZCMjVDNEY5QUUwMi84U1dnNXJqcjNCTnF0VEI5U1JSeERwQUdP OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTV2c1cmpyM0JOcXRUQjlTUlJ4RHBBR084TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkyQS84MUEzMDA3MDg2NjMxMUVEQTAyNDZCMjVDNEY5QUUwMi84U1dnNXJqcjNC TnF0VEI5U1JSeERwQUdPOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCucZGjcf+VrMHiY5MftrmdBHPAXKqqHrLekhLqOEsZbuC3FRdqWDet 7s+OOJbcUu5FItUjEFC+4PmNJ1soDRW8bj49obwTlBlDbAaMkCv4GWDG6W4vfKsN SZofwTiHu86sfqLydpXm229+No1Zv0K6aKTwAWIWhZ+mo57rpemJ2s/IbhZg7z/A 6+PqOxPu1ks+qpptbBUX7H9tntr6pcg3noaOOb33PuRwsqVIk8Nvh2vMKuljAOzp Jm0Ux8GE+2+5NUfnUjmndYzD1L32I4Rd8jcu/fxQ9OzYMv/e3Hcp643t6vC31Xm0 BVR3hdb/Ic41PXxFUrrkxLMRZ+eP9Wfe -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:29 2025 by rpki-client