$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json) Hash identifier: unQd5mDtX9J9eRNLTr86PUNTaIbZvOBMK58jXaNUmvo= Subject key identifier: F4:94:6A:EC:80:F8:0F:43:A5:2C:9F:5E:79:37:97:92:28:01:C3:E4 Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft Manifest number: 4C Signing time: Thu 23 Oct 2025 09:33:20 +0000 Manifest this update: Thu 23 Oct 2025 09:33:20 +0000 Manifest next update: Thu 30 Oct 2025 09:33:20 +0000 Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: NNAfqM0Pq31oZKpR4lMaFiwLGXUg74eRddzjEXX6FR4=) 2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: lNd0dhVh9oVMjkR+5hS3U5ljCVkdpvgCie/KVi3bQe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Validity Not Before: Oct 23 09:33:20 2025 GMT Not After : Oct 30 09:33:20 2025 GMT Subject: CN=68f9f660-e8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:45:a8:bf:63:e4:f6:df:ff:dd:74:e3:e4:a0: 62:64:7d:d1:6d:75:bc:f2:43:dc:16:86:fa:e4:43: ad:2c:8b:b1:42:ff:bd:3a:31:ab:dc:44:af:f1:92: 25:f3:4b:75:b8:ba:66:6f:08:7d:76:aa:19:8d:f7: ed:9c:80:68:5a:39:cb:13:f2:a3:3c:e7:a3:c8:b3: 08:04:4d:0c:fe:2d:60:9a:a6:3c:e2:76:bc:bd:5d: 45:6f:a4:7e:ed:9e:17:ba:e8:94:ca:2c:3e:3d:5b: e0:14:6a:45:c2:af:4b:08:37:6b:f9:72:0b:09:00: d7:68:d5:a2:ba:89:af:76:83:27:1d:3b:0a:c7:0b: 6b:c1:1f:97:90:97:2c:98:63:c4:a9:c1:01:07:df: 51:3e:5e:8e:8d:8c:fa:bb:df:fe:a5:d8:49:73:21: 9f:20:70:9c:1f:36:37:00:01:0c:95:04:1d:02:b8: c5:aa:8b:78:58:0d:a3:da:d0:56:b4:45:79:42:bc: 64:e9:7e:8e:63:2f:54:a2:cb:ca:c1:4b:0a:f8:57: e4:3a:7b:54:4b:9c:0d:99:90:41:dc:74:c2:11:bb: 00:35:28:8d:73:3d:74:50:6b:c0:15:79:4a:19:8e: b2:21:85:1c:14:95:4c:f0:e8:70:c5:13:03:36:31: 80:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:94:6A:EC:80:F8:0F:43:A5:2C:9F:5E:79:37:97:92:28:01:C3:E4 X509v3 Authority Key Identifier: keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:92:ac:ac:c5:74:02:ba:8d:08:89:93:70:2e:46:bd:08:eb: af:e5:e8:8a:89:52:8d:06:e0:ec:09:14:b7:11:50:b4:4b:e8: 18:60:d2:64:c1:6a:24:99:af:52:e5:e8:b3:18:b2:ac:37:2a: 4b:2a:f1:6d:50:7c:9a:a9:52:c0:d2:46:30:ad:82:a5:39:ec: be:90:d2:5d:1c:31:4f:5c:31:15:2d:3b:44:06:94:32:35:62: 6e:2c:4a:d4:a5:c2:61:5d:0c:1d:e3:9a:89:3b:3a:98:04:3e: 34:75:cf:f5:92:11:db:75:03:1e:56:17:d4:93:dc:55:1a:72: aa:11:81:9a:6b:76:dd:ce:24:61:6b:42:12:b2:de:37:06:ce: e9:4e:4e:4d:54:89:ac:95:06:87:08:62:77:9f:f3:23:3d:0c: b0:c3:f6:be:e5:23:6e:fc:d5:74:06:3d:21:db:43:36:68:4b: aa:90:a8:d3:85:3d:bd:c3:71:2d:99:ca:31:88:20:e8:96:0f: 67:8d:7d:c8:f2:13:ad:f3:1d:ab:04:ba:b2:6e:30:b4:53:9b: d6:a0:c7:30:e0:88:04:aa:ff:a1:73:73:50:34:35:f5:ac:5b: 3d:06:a1:54:1b:b1:94:73:1f:19:e1:bc:28:05:6f:bf:bf:14: 39:a0:3f:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoRjE1QzVDNUJBNTIxNDUzNzA3QzgxRjVGRUMwODExQkYy MUNGRjQwRTAeFw0yNTEwMjMwOTMzMjBaFw0yNTEwMzAwOTMzMjBaMBgxFjAUBgNV BAMTDTY4ZjlmNjYwLWU4ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDORai/Y+T23//ddOPkoGJkfdFtdbzyQ9wWhvrkQ60si7FC/706MavcRK/xkiXz S3W4umZvCH12qhmN9+2cgGhaOcsT8qM856PIswgETQz+LWCapjzidry9XUVvpH7t nhe66JTKLD49W+AUakXCr0sIN2v5cgsJANdo1aK6ia92gycdOwrHC2vBH5eQlyyY Y8SpwQEH31E+Xo6NjPq73/6l2ElzIZ8gcJwfNjcAAQyVBB0CuMWqi3hYDaPa0Fa0 RXlCvGTpfo5jL1Siy8rBSwr4V+Q6e1RLnA2ZkEHcdMIRuwA1KI1zPXRQa8AVeUoZ jrIhhRwUlUzw6HDFEwM2MYDvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9JRq7ID4 D0OlLJ9eeTeXkigBw+QwHwYDVR0jBBgwFoAU8VxcW6UhRTcHyB9f7AgRvyHP9A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBLzlBODczRUIwNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRjSHlCOWY3QWdSdnlIUDlB NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFZ4Y1c2VWhSVGNIeUI5ZjdBZ1J2eUhQOUE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBLzlBODczRUIwNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRj SHlCOWY3QWdSdnlIUDlBNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIuSrKzFdAK6jQiJk3AuRr0I66/l6IqJUo0G4OwJFLcRULRL6Bhg0mTB aiSZr1Ll6LMYsqw3Kksq8W1QfJqpUsDSRjCtgqU57L6Q0l0cMU9cMRUtO0QGlDI1 Ym4sStSlwmFdDB3jmok7OpgEPjR1z/WSEdt1Ax5WF9ST3FUacqoRgZprdt3OJGFr QhKy3jcGzulOTk1UiayVBocIYnef8yM9DLDD9r7lI2781XQGPSHbQzZoS6qQqNOF Pb3DcS2ZyjGIIOiWD2eNfcjyE63zHasEurJuMLRTm9agxzDgiASq/6Fzc1A0NfWs Wz0GoVQbsZRzHxnhvCgFb7+/FDmgP+U= -----END CERTIFICATE-----Generated at Thu Oct 23 19:45:22 2025 by rpki-client