$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: CkHCQlubyQYLUcElFpiixdeXUb56u0X/p5KT8U32DV0= Subject key identifier: DC:53:20:EB:8D:5A:C4:64:FD:4F:48:18:7E:71:41:2F:25:D0:10:71 Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0CFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0CF7 Signing time: Sun 02 Nov 2025 18:04:17 +0000 Manifest this update: Sun 02 Nov 2025 18:04:16 +0000 Manifest next update: Sun 09 Nov 2025 18:04:16 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: B57XXOio/s/JIPbTp2KLyG03+GVoJzO6Gj3jg2MM+oE=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3326 (0xcfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Nov 2 18:04:16 2025 GMT Not After : Nov 9 18:04:16 2025 GMT Subject: CN=69079d20-b589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:69:cc:84:0d:8d:ca:00:69:1d:95:67:af:d1: f2:45:8c:68:14:6c:80:a3:cf:01:e2:10:89:05:4e: c8:90:f5:6e:1c:fc:13:21:35:6e:e1:af:1c:1d:3a: e0:24:03:73:81:2f:87:36:92:b0:27:53:1d:fc:6c: 52:ae:f4:61:1e:9c:87:84:9e:63:a4:1d:a1:21:19: f6:7b:e3:cb:aa:b0:1d:ab:03:c4:2f:d2:7e:ad:86: be:be:2c:3c:9c:4f:2f:42:2c:de:16:ae:e5:fa:15: 14:f0:b0:cd:cc:81:ce:39:4f:be:9d:39:84:7e:22: 69:4b:bf:33:81:c3:5e:d2:63:cb:06:f9:70:30:de: b8:d4:e7:4b:e4:82:e2:ce:69:53:2a:f7:15:3d:ed: 7a:b0:a9:d1:f3:e7:6e:8e:3e:51:4f:32:33:e1:4e: d1:df:a4:5a:c0:63:1f:f8:c7:a8:d2:fb:7b:9f:2c: 7c:22:d3:27:17:c6:ab:f4:a8:02:bd:ab:e5:bf:16: 48:14:9c:32:50:28:06:4e:19:df:8a:9e:89:0a:72: b2:cc:66:06:48:67:46:3e:c2:d3:57:1d:cb:e2:d8: bd:db:47:20:3e:d5:02:65:a1:a4:8a:ea:d8:c4:a0: e3:2d:1d:25:77:57:42:e3:8e:84:45:b9:bb:c4:69: 5d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:53:20:EB:8D:5A:C4:64:FD:4F:48:18:7E:71:41:2F:25:D0:10:71 X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:6d:be:5a:ac:07:72:73:20:67:35:7b:77:dd:7b:35:c0:54: f6:5f:ec:86:90:f7:db:3d:f6:5e:39:25:aa:d4:c5:15:8a:fe: 5e:79:e3:92:6e:3d:c8:bf:77:26:df:f3:71:e9:a1:bf:74:86: ed:6d:ed:8e:c0:b8:28:44:54:90:e8:f5:09:35:5a:49:a5:64: f4:17:df:02:d7:30:79:df:7e:e6:09:77:61:45:20:1b:04:fa: e4:20:a3:13:d2:d3:87:34:46:e6:ba:0c:54:02:df:25:84:36: 2f:3c:50:41:5d:84:b0:5c:b4:ba:5d:6a:d9:27:eb:0e:13:b0: 79:f1:07:eb:a0:ac:62:d8:25:df:f7:42:94:22:da:5a:c1:3e: de:03:7a:e4:30:ec:81:63:04:b5:e6:d8:5d:61:e4:0e:18:c9: 20:f8:5e:12:52:a7:88:b5:26:26:80:a3:cb:d9:4a:91:18:58: f1:85:49:9c:f2:80:9e:af:4e:8f:16:01:74:bc:b0:f4:c1:a8: e3:ed:0a:bb:e9:d0:b9:0c:cf:8a:1c:34:bf:0e:3f:29:0c:d3: 7a:fb:f1:1c:df:ea:bc:ca:bc:b4:64:b5:fe:b0:1f:bf:4c:09: fa:68:f9:ad:cf:d0:58:ee:60:e0:e0:89:94:e6:7d:85:a2:e2: 1c:57:dd:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUxMTAyMTgwNDE2WhcNMjUxMTA5MTgwNDE2WjAYMRYwFAYD VQQDEw02OTA3OWQyMC1iNTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mnMhA2NygBpHZVnr9HyRYxoFGyAo88B4hCJBU7IkPVuHPwTITVu4a8cHTrg JANzgS+HNpKwJ1Md/GxSrvRhHpyHhJ5jpB2hIRn2e+PLqrAdqwPEL9J+rYa+viw8 nE8vQizeFq7l+hUU8LDNzIHOOU++nTmEfiJpS78zgcNe0mPLBvlwMN641OdL5ILi zmlTKvcVPe16sKnR8+dujj5RTzIz4U7R36RawGMf+Meo0vt7nyx8ItMnF8ar9KgC vavlvxZIFJwyUCgGThnfip6JCnKyzGYGSGdGPsLTVx3L4ti920cgPtUCZaGkiurY xKDjLR0ld1dC446ERbm7xGldDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxTIOuN WsRk/U9IGH5xQS8l0BBxMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCobb5arAdycyBnNXt33Xs1wFT2X+yGkPfbPfZeOSWq1MUViv5eeeOS bj3Iv3cm3/Nx6aG/dIbtbe2OwLgoRFSQ6PUJNVpJpWT0F98C1zB5337mCXdhRSAb BPrkIKMT0tOHNEbmugxUAt8lhDYvPFBBXYSwXLS6XWrZJ+sOE7B58QfroKxi2CXf 90KUItpawT7eA3rkMOyBYwS15thdYeQOGMkg+F4SUqeItSYmgKPL2UqRGFjxhUmc 8oCer06PFgF0vLD0wajj7Qq76dC5DM+KHDS/Dj8pDNN6+/Ec3+q8yry0ZLX+sB+/ TAn6aPmtz9BY7mDg4ImU5n2FouIcV937 -----END CERTIFICATE-----Generated at Tue Nov 4 08:29:00 2025 by rpki-client