$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: uIIRkFV9R8SiQR0ytc7zs6UzXKZaC7SX0tfeH9dmKSc= Subject key identifier: 66:ED:46:30:7C:56:CF:A0:93:BC:E4:BE:3C:7D:37:B8:12:0D:3A:B1 Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: CE Signing time: Sat 25 Oct 2025 09:30:45 +0000 Manifest this update: Sat 25 Oct 2025 09:30:44 +0000 Manifest next update: Sat 01 Nov 2025 09:30:44 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: wu5X0/vPSF8FS0LyWtPrHf02h2L9UFDAmhbMStJ02KM=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: i/i9Fi7DO7CQzIWXaTSwtFH1LWaUqhByPYFzXOD85Kk=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: +qIyoxy4aGRwH3KPJiIeeGzTmFk3xSC3JgRiA3rxQ1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 09:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Oct 25 09:30:44 2025 GMT Not After : Nov 1 09:30:44 2025 GMT Subject: CN=68fc98c4-2923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:41:f8:1e:4d:7c:18:65:c7:d8:7d:87:ec: 5f:89:58:94:bf:50:9e:a7:e2:91:ef:48:a1:e2:c4: be:53:f0:e5:8e:71:c3:72:99:5d:d7:82:df:d3:fb: b2:48:e8:a6:9b:e5:6e:21:41:3e:d0:98:21:af:29: 4d:a6:94:66:fd:d7:94:89:25:e3:05:af:74:65:40: 0b:cc:da:72:93:7c:e7:75:c2:61:3f:09:3a:c4:60: dc:ba:90:46:e2:7f:32:16:8f:64:c9:8e:53:f1:88: 53:2e:52:43:dc:66:20:4f:74:f0:c0:91:1d:f0:79: f7:3f:26:45:0f:42:36:08:3c:48:c2:4e:4a:f0:52: 85:59:c2:cd:8f:ad:f4:c6:fc:3d:bd:82:b1:72:1f: 9e:37:09:6c:5e:60:e9:65:3e:49:d9:69:ec:46:4e: a8:1a:9c:07:24:76:f2:ed:4a:53:06:66:a5:c3:98: 29:92:05:28:3c:e9:90:be:d6:a8:31:a7:60:92:97: 52:da:8b:f8:be:a8:cd:62:5e:e2:99:2d:06:b7:09: b4:31:17:ba:27:78:6a:a5:ed:cd:3f:d6:f5:0a:4d: d6:83:19:48:1b:44:f2:4e:ce:49:a2:78:55:48:8d: 7d:2d:37:4d:0c:ca:4d:ed:2e:ed:63:c0:6b:8e:2d: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:ED:46:30:7C:56:CF:A0:93:BC:E4:BE:3C:7D:37:B8:12:0D:3A:B1 X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ef:e2:de:63:4e:32:78:f1:55:ff:ad:bc:cb:8b:5f:b3:b4: 33:80:b4:7d:93:9d:a7:75:fc:0d:a6:c0:14:c3:90:0f:26:17: 65:23:75:31:d8:bd:5b:44:09:e9:c6:a2:dc:4b:f6:9f:07:0e: 21:4f:73:fe:80:6e:e6:2c:af:89:e6:f0:0f:bb:93:8e:e0:ed: 21:b2:eb:23:46:a0:d9:ee:5c:2c:cd:c7:b5:b5:ba:76:3a:5d: fe:81:cc:93:a4:54:b9:7d:38:b5:2d:eb:e5:a4:0b:d4:d7:01: 90:2d:7a:d5:70:15:77:5d:14:c4:14:c0:db:f1:ec:1a:45:c5: 72:d0:c8:4b:2f:a7:75:93:7a:88:80:a4:d8:e0:67:46:f6:a1: cb:66:00:96:aa:7d:ea:7d:53:31:ba:fc:50:da:cb:66:6a:86: f7:53:26:a8:02:47:f0:2b:94:55:d1:b4:c6:16:30:8b:09:04: 24:ab:f5:12:a4:ca:f9:5d:b0:4e:38:07:03:df:02:fc:cf:20: 7a:71:b7:fa:6b:7f:da:98:6c:50:ef:ec:68:d7:4e:4b:a1:ff: db:fc:80:fb:51:13:30:aa:bc:32:28:63:74:e5:98:14:7b:71: b9:1a:b2:fc:ce:3e:47:60:4a:97:09:af:22:71:3f:a2:6c:83: 2f:a3:e7:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjUxMDI1MDkzMDQ0WhcNMjUxMTAxMDkzMDQ0WjAYMRYwFAYD VQQDEw02OGZjOThjNC0yOTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3NB+B5NfBhlx9h9h+xfiViUv1Cep+KR70ih4sS+U/DljnHDcpld14Lf0/uy SOimm+VuIUE+0JghrylNppRm/deUiSXjBa90ZUALzNpyk3zndcJhPwk6xGDcupBG 4n8yFo9kyY5T8YhTLlJD3GYgT3TwwJEd8Hn3PyZFD0I2CDxIwk5K8FKFWcLNj630 xvw9vYKxch+eNwlsXmDpZT5J2WnsRk6oGpwHJHby7UpTBmalw5gpkgUoPOmQvtao MadgkpdS2ov4vqjNYl7imS0Gtwm0MRe6J3hqpe3NP9b1Ck3WgxlIG0TyTs5JonhV SI19LTdNDMpN7S7tY8Brji1fxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbtRjB8 Vs+gk7zkvjx9N7gSDTqxMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+7+LeY04yePFV/628y4tfs7QzgLR9k52ndfwNpsAUw5APJhdlI3Ux 2L1bRAnpxqLcS/afBw4hT3P+gG7mLK+J5vAPu5OO4O0hsusjRqDZ7lwszce1tbp2 Ol3+gcyTpFS5fTi1LevlpAvU1wGQLXrVcBV3XRTEFMDb8ewaRcVy0MhLL6d1k3qI gKTY4GdG9qHLZgCWqn3qfVMxuvxQ2stmaob3UyaoAkfwK5RV0bTGFjCLCQQkq/US pMr5XbBOOAcD3wL8zyB6cbf6a3/amGxQ7+xo105Lof/b/ID7URMwqrwyKGN05ZgU e3G5GrL8zj5HYEqXCa8icT+ibIMvo+dg -----END CERTIFICATE-----Generated at Sat Oct 25 17:24:38 2025 by rpki-client