$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json) Hash identifier: Cve6kEosrTY7fGk5Zro+9mbqZyG5ffKZfXFCHOzm1yQ= Subject key identifier: 57:5A:AB:1F:DB:75:37:D2:A7:80:5E:66:80:3D:FB:7F:D7:81:FB:92 Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft Manifest number: 01D3 Signing time: Wed 05 Nov 2025 02:55:51 +0000 Manifest this update: Wed 05 Nov 2025 02:55:51 +0000 Manifest next update: Wed 12 Nov 2025 02:55:50 +0000 Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: WNLNrdcTyrTNt69aPs3JImn6TBnLXwK+ucQavpA8ohk=) 2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: f37dHVQCBKGAv6cZ++QH+hDhUU+kBGU4CSkotJ/zJb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Validity Not Before: Nov 5 02:55:51 2025 GMT Not After : Nov 12 02:55:50 2025 GMT Subject: CN=690abcb7-919f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:5c:00:b8:6e:a4:78:e0:8c:64:f0:36:c2: dc:3d:45:c8:2f:fa:4a:0b:e6:3d:e1:ed:38:a5:23: 2a:fb:f0:32:5e:38:c0:ed:55:42:c1:df:a3:38:53: ef:b0:e6:9f:12:64:17:aa:da:d1:81:a0:a9:7b:99: ae:5a:05:e0:62:51:3e:a1:09:7a:04:c3:c9:7e:54: 92:aa:27:bc:16:c5:37:b5:d3:fb:8a:7e:33:2c:07: b4:99:05:77:ca:4c:41:7d:30:48:82:5f:73:4e:84: c7:14:61:55:a5:cc:d0:98:f3:34:9c:3c:a4:c7:87: 01:28:0c:be:10:06:46:52:30:eb:7e:6c:64:cc:41: 7f:04:16:09:8f:6c:0d:c3:dc:0c:06:27:a2:d8:21: 50:21:44:ec:6a:46:13:c5:81:c0:01:58:03:18:75: 56:52:ee:b2:59:49:b5:93:b5:75:ed:92:d8:93:92: 1d:94:cd:f9:b1:b5:e0:9d:61:90:51:4e:93:ae:10: 3f:04:b7:01:e5:95:4c:ea:57:90:20:f5:c7:03:25: c2:de:83:fa:0c:c8:3c:30:6e:ca:7c:9e:ea:d3:be: c2:d1:62:f6:25:d0:c4:00:7b:fa:7d:5c:80:0e:8a: 29:5b:8b:c2:ca:aa:6e:53:1f:db:f2:3a:df:30:9d: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5A:AB:1F:DB:75:37:D2:A7:80:5E:66:80:3D:FB:7F:D7:81:FB:92 X509v3 Authority Key Identifier: keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4a:cc:69:4e:66:a3:50:ff:a9:28:81:71:41:2f:a9:f0:2c: da:69:c3:de:52:57:88:75:78:87:5b:d8:79:de:c5:64:e9:3a: 43:4f:ea:79:f3:86:b4:2b:ef:15:49:56:58:9b:e7:4b:80:bf: 76:47:40:4a:49:c9:9b:8a:79:38:b0:f4:46:15:1f:29:40:f5: ff:cd:c8:79:c0:4f:48:cb:b9:08:79:c5:3f:42:86:84:f5:57: e9:38:97:aa:15:1b:c6:e9:eb:be:6a:f2:6f:b3:fa:97:e5:de: 46:36:d6:6f:19:a0:9a:c0:9b:70:89:80:d7:85:a4:44:67:00: 98:dd:ae:ff:18:24:47:bf:23:a9:77:8c:6b:4a:c3:85:6c:85: 22:ed:d1:6c:0c:b0:3b:15:a9:6c:45:e8:1b:43:63:1a:63:2c: 95:11:a6:c1:7c:c2:74:05:10:63:ed:02:6b:6c:a8:5b:d8:8d: 9a:84:39:e5:2f:f0:c8:dc:45:6c:83:b0:2b:ef:c6:02:50:a7: ba:c2:68:d8:0d:5a:14:4d:64:aa:4b:38:dd:e3:26:67:14:cd: 74:6e:80:a9:d7:cc:e2:44:98:10:9f:be:19:b2:66:e9:cf:cf: 8f:18:a9:16:71:c6:19:f6:0f:65:c4:eb:36:6d:06:9c:4b:1d: 19:0b:3f:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY0OEQxMTAvBgNVBAUTKEYxN0I1MzIxQTU4RDc5RTIzMDUzMUM1QUEwRjBCMjRF MUQ4MTIxQTMwHhcNMjUxMTA1MDI1NTUxWhcNMjUxMTEyMDI1NTUwWjAYMRYwFAYD VQQDEw02OTBhYmNiNy05MTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42FcALhupHjgjGTwNsLcPUXIL/pKC+Y94e04pSMq+/AyXjjA7VVCwd+jOFPv sOafEmQXqtrRgaCpe5muWgXgYlE+oQl6BMPJflSSqie8FsU3tdP7in4zLAe0mQV3 ykxBfTBIgl9zToTHFGFVpczQmPM0nDykx4cBKAy+EAZGUjDrfmxkzEF/BBYJj2wN w9wMBiei2CFQIUTsakYTxYHAAVgDGHVWUu6yWUm1k7V17ZLYk5IdlM35sbXgnWGQ UU6TrhA/BLcB5ZVM6leQIPXHAyXC3oP6DMg8MG7KfJ7q077C0WL2JdDEAHv6fVyA DoopW4vCyqpuUx/b8jrfMJ3cxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdaqx/b dTfSp4BeZoA9+3/XgfuSMB8GA1UdIwQYMBaAFPF7UyGljXniMFMcWqDwsk4dgSGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjQ4RC9DM0VFRTJBOEVG RTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVlSXdVeHhhb1BDeVRoMkJJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYdFRJYVdOZWVJd1V4eGFvUEN5VGgyQklhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjQ4RC9DM0VFRTJBOEVGRTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVl SXdVeHhhb1BDeVRoMkJJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbSsxpTmajUP+pKIFxQS+p8CzaacPeUleIdXiHW9h53sVk6TpDT+p5 84a0K+8VSVZYm+dLgL92R0BKScmbink4sPRGFR8pQPX/zch5wE9Iy7kIecU/QoaE 9VfpOJeqFRvG6eu+avJvs/qX5d5GNtZvGaCawJtwiYDXhaREZwCY3a7/GCRHvyOp d4xrSsOFbIUi7dFsDLA7FalsRegbQ2MaYyyVEabBfMJ0BRBj7QJrbKhb2I2ahDnl L/DI3EVsg7Ar78YCUKe6wmjYDVoUTWSqSzjd4yZnFM10boCp18ziRJgQn74Zsmbp z8+PGKkWccYZ9g9lxOs2bQacSx0ZCz+w -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:16 2025 by rpki-client