$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json) Hash identifier: +sjPGtwnQjpmp+/xeoBdDrFMabgkAKydUsAGRRkkCbI= Subject key identifier: E1:5B:95:4E:E2:9D:57:92:40:73:21:97:7F:67:FF:40:CC:B1:64:21 Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft Manifest number: 06E6 Signing time: Wed 05 Nov 2025 00:09:10 +0000 Manifest this update: Wed 05 Nov 2025 00:09:09 +0000 Manifest next update: Wed 12 Nov 2025 00:09:09 +0000 Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: 7p/sHzTKAbY4f8dDyPQpxrpNvdqlvPePeq90PM8afh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Validity Not Before: Nov 5 00:09:09 2025 GMT Not After : Nov 12 00:09:09 2025 GMT Subject: CN=690a95a6-affa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:ec:e7:28:5d:33:1e:64:23:70:09:b4:aa: 18:7d:43:2f:98:fe:27:37:64:98:44:d7:82:e1:cd: 2a:cc:d3:2e:c5:45:9a:1d:9c:bd:43:e0:06:52:e1: e2:8f:5d:ce:ac:16:4e:c4:e0:b5:45:19:87:af:0f: f2:25:1d:95:6d:c7:4d:6d:8b:1c:73:67:4e:19:8b: 14:31:8a:53:d7:20:45:01:e6:2e:ba:6a:a1:a7:0d: 54:78:95:b5:4f:0f:82:cd:d4:15:0f:82:0e:2b:ba: 47:3b:a8:be:01:34:b8:a8:5d:4a:31:25:93:eb:76: ec:3a:b8:d3:d8:28:da:b3:82:8b:a0:eb:40:0e:68: 6f:ff:68:ff:ad:30:47:ab:21:bd:38:e0:fe:d7:38: b1:c2:04:9f:bb:c4:74:a3:f1:06:62:4d:05:27:31: d1:76:5d:a0:45:c9:c0:63:2c:64:dc:86:4b:97:48: 54:a8:d9:12:3f:61:78:73:25:42:ff:ab:fe:af:70: 48:ad:de:f5:5a:16:97:75:57:a1:b7:5f:1e:a9:81: cd:df:bc:67:76:d1:4f:56:92:f3:2b:11:ab:d8:42: b3:1e:7f:2a:31:26:e4:c0:df:3f:8a:1c:74:00:b8: 68:24:7d:78:54:fa:0b:99:f3:e5:20:94:91:bb:9f: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5B:95:4E:E2:9D:57:92:40:73:21:97:7F:67:FF:40:CC:B1:64:21 X509v3 Authority Key Identifier: keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:6a:1d:cd:24:23:28:85:36:07:68:ba:a7:d9:ab:53:a3:ee: 42:06:63:2f:c7:f1:a0:3c:66:8b:50:83:3d:c9:6b:ef:3f:30: d7:63:02:5b:2a:38:b0:19:0a:e5:e5:3a:b4:8e:26:36:af:c5: cb:64:a2:e4:b8:4d:a5:35:0d:a5:84:8c:c9:7e:ca:21:cd:37: 6e:03:af:4c:7b:86:97:f1:d5:30:cc:01:b1:89:4d:c1:86:7f: e7:70:3e:d9:45:60:ec:5b:b7:97:ac:9b:33:04:1b:9d:ad:b9: 9d:6b:a3:6b:be:a9:3f:24:ad:9d:5f:60:ca:2a:d6:7b:d6:d3: 66:25:57:b1:c0:31:ac:77:55:f0:f3:46:30:18:37:9d:a2:48: f0:50:b0:0e:63:4b:3f:f8:11:a9:c2:07:a9:45:6d:90:0d:97: fe:a7:31:20:3c:e6:98:c5:4b:15:aa:f8:66:f4:f5:17:04:d3: 51:d1:81:57:e3:81:40:66:8a:53:40:0e:f8:5e:63:65:27:e2: a5:d3:1d:ec:ca:65:0b:9f:28:fd:f7:8b:63:f3:60:90:c6:f5: 2d:d4:d7:0f:14:23:60:52:5b:43:ce:d6:c5:c0:65:6a:42:93: 12:19:55:f2:89:49:44:9d:65:c2:0b:18:04:c3:ce:52:07:e8: 17:46:ca:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB RTBCMzVBMTgwHhcNMjUxMTA1MDAwOTA5WhcNMjUxMTEyMDAwOTA5WjAYMRYwFAYD VQQDEw02OTBhOTVhNi1hZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwn/s5yhdMx5kI3AJtKoYfUMvmP4nN2SYRNeC4c0qzNMuxUWaHZy9Q+AGUuHi j13OrBZOxOC1RRmHrw/yJR2VbcdNbYscc2dOGYsUMYpT1yBFAeYuumqhpw1UeJW1 Tw+CzdQVD4IOK7pHO6i+ATS4qF1KMSWT63bsOrjT2Cjas4KLoOtADmhv/2j/rTBH qyG9OOD+1zixwgSfu8R0o/EGYk0FJzHRdl2gRcnAYyxk3IZLl0hUqNkSP2F4cyVC /6v+r3BIrd71WhaXdVeht18eqYHN37xndtFPVpLzKxGr2EKzHn8qMSbkwN8/ihx0 ALhoJH14VPoLmfPlIJSRu599wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFblU7i nVeSQHMhl39n/0DMsWQhMB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf b2JZM0MzUlE4by11Q3pXaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEah3NJCMohTYHaLqn2atTo+5CBmMvx/GgPGaLUIM9yWvvPzDXYwJb KjiwGQrl5Tq0jiY2r8XLZKLkuE2lNQ2lhIzJfsohzTduA69Me4aX8dUwzAGxiU3B hn/ncD7ZRWDsW7eXrJszBBudrbmda6Nrvqk/JK2dX2DKKtZ71tNmJVexwDGsd1Xw 80YwGDedokjwULAOY0s/+BGpwgepRW2QDZf+pzEgPOaYxUsVqvhm9PUXBNNR0YFX 44FAZopTQA74XmNlJ+Kl0x3symULnyj994tj82CQxvUt1NcPFCNgUltDztbFwGVq QpMSGVXyiUlEnWXCCxgEw85SB+gXRsrx -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:06 2025 by rpki-client