$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: 3t8KQhUnTPusmczTm99NWNqoCsiad/TdoQRFDejiKp4= Subject key identifier: 59:CE:43:0E:B3:0A:B2:FE:7E:8E:8A:49:16:40:9D:74:09:13:F9:0E Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 0A6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 0A5A Signing time: Tue 04 Nov 2025 19:46:55 +0000 Manifest this update: Tue 04 Nov 2025 19:46:55 +0000 Manifest next update: Tue 11 Nov 2025 19:46:55 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: tZv9oO4J0XAKZbW8ns3ogg8TtwSt4tH016fd2h1zgQI=) 2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: 3SdLflE7QNKZukodJvPP0+VEXx4PpxcKaoT3DVdeoho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2667 (0xa6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Nov 4 19:46:55 2025 GMT Not After : Nov 11 19:46:55 2025 GMT Subject: CN=690a582f-7454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7b:9c:60:71:32:4e:ed:51:9a:d8:4a:4b:d0: 53:0d:75:47:bb:98:de:8d:38:cf:fc:ed:d3:0a:1f: 45:f4:cb:7d:40:f6:77:d4:27:57:59:95:5c:7b:ca: 10:44:e3:d4:70:0d:33:da:b4:3a:23:1f:76:a9:5d: 6f:89:95:29:c3:db:45:14:af:11:fc:31:03:a5:d1: 94:de:3e:6e:cb:4e:92:0f:1e:79:74:eb:fc:d3:e5: 20:90:03:fe:d1:c6:d0:6a:50:ee:cc:52:64:44:ca: 83:cf:a0:b9:82:d3:fd:65:9a:03:a6:07:ab:5a:21: 55:7c:01:e1:cf:1f:21:3a:ca:8c:ae:91:60:97:23: 6d:91:08:16:c8:be:7d:5a:a5:68:dd:50:c3:a3:5d: 4a:ae:99:e2:d3:37:48:23:f3:7a:f8:cc:4a:6c:57: 4c:6d:71:f4:17:c3:18:1f:23:03:55:5a:45:84:68: b0:da:eb:67:14:67:35:9a:11:16:7b:d7:3f:5c:71: 29:35:2b:32:e9:aa:99:65:cc:2b:5a:b4:5d:fa:86: 06:9a:4f:66:31:ee:92:6a:84:22:bd:8c:eb:c9:9b: c6:29:63:d6:c2:ec:26:62:6d:37:49:92:92:18:e1: 18:a9:cb:43:65:b3:e5:cd:2d:a7:59:dd:89:f6:a0: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CE:43:0E:B3:0A:B2:FE:7E:8E:8A:49:16:40:9D:74:09:13:F9:0E X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:28:e0:9c:02:78:69:47:20:7f:cf:73:54:fb:2d:73:d0:38: 5d:9a:31:59:c5:cb:92:aa:66:4f:1d:c6:58:d5:27:01:f1:71: 80:a3:a9:af:4a:c1:6c:11:f7:2f:fa:d9:2e:04:2e:a5:3a:ff: 74:da:05:a1:57:dd:fd:39:9e:1b:d4:ea:95:7f:53:fb:e5:09: c5:4a:43:d0:d3:87:ef:2b:25:e8:32:e9:06:34:7a:8c:9d:86: 12:7e:16:e9:3a:7f:d3:0a:e1:81:46:2a:23:b9:67:33:35:11: 4b:8a:e4:22:63:f4:0f:67:8a:2e:75:bc:27:ab:44:3c:ad:a7: e9:6d:49:79:85:ac:47:d0:4c:17:58:d0:35:e5:83:d3:31:e2: ff:17:13:64:94:c9:12:55:f4:6f:88:07:03:df:a4:0f:be:03: 97:93:8d:24:2c:f6:a2:5c:b5:9f:ec:a0:89:ea:6c:09:6d:c0: 14:63:34:2a:58:e2:04:7d:45:70:1f:37:03:f0:14:fc:6e:c8: 63:45:b4:20:fa:42:98:c4:04:ec:78:a6:6d:2a:bc:f4:f9:da: 19:aa:e5:85:a8:83:3d:79:06:36:f9:4a:15:08:67:17:86:79: c6:ed:38:55:72:39:12:e0:8a:94:d2:71:89:01:ba:eb:e8:d2: 82:14:91:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjUxMTA0MTk0NjU1WhcNMjUxMTExMTk0NjU1WjAYMRYwFAYD VQQDEw02OTBhNTgyZi03NDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HucYHEyTu1RmthKS9BTDXVHu5jejTjP/O3TCh9F9Mt9QPZ31CdXWZVce8oQ ROPUcA0z2rQ6Ix92qV1viZUpw9tFFK8R/DEDpdGU3j5uy06SDx55dOv80+UgkAP+ 0cbQalDuzFJkRMqDz6C5gtP9ZZoDpgerWiFVfAHhzx8hOsqMrpFglyNtkQgWyL59 WqVo3VDDo11Krpni0zdII/N6+MxKbFdMbXH0F8MYHyMDVVpFhGiw2utnFGc1mhEW e9c/XHEpNSsy6aqZZcwrWrRd+oYGmk9mMe6SaoQivYzryZvGKWPWwuwmYm03SZKS GOEYqctDZbPlzS2nWd2J9qDZkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnOQw6z CrL+fo6KSRZAnXQJE/kOMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDoKOCcAnhpRyB/z3NU+y1z0DhdmjFZxcuSqmZPHcZY1ScB8XGAo6mv SsFsEfcv+tkuBC6lOv902gWhV939OZ4b1OqVf1P75QnFSkPQ04fvKyXoMukGNHqM nYYSfhbpOn/TCuGBRiojuWczNRFLiuQiY/QPZ4oudbwnq0Q8rafpbUl5haxH0EwX WNA15YPTMeL/FxNklMkSVfRviAcD36QPvgOXk40kLPaiXLWf7KCJ6mwJbcAUYzQq WOIEfUVwHzcD8BT8bshjRbQg+kKYxATseKZtKrz0+doZquWFqIM9eQY2+UoVCGcX hnnG7ThVcjkS4IqU0nGJAbrr6NKCFJGc -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:25 2025 by rpki-client