$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: Zm9pgR3Ert93N8o/TwUK6tSLB2MJNMZuuUjsVOZ9sIY= Subject key identifier: C0:FC:9F:BF:25:C5:68:24:61:57:7F:DF:37:4A:B4:37:E3:4A:98:C8 Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: 012B Signing time: Wed 05 Nov 2025 04:44:39 +0000 Manifest this update: Wed 05 Nov 2025 04:44:38 +0000 Manifest next update: Wed 12 Nov 2025 04:44:38 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: Qb7iaL4oOlW7u2AYa+sIzZ0nn9i88NJSOG8Y9ytMF6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: Nov 5 04:44:38 2025 GMT Not After : Nov 12 04:44:38 2025 GMT Subject: CN=690ad636-f65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:76:04:4e:16:2f:2b:8f:1e:37:0c:d7:c0: 54:56:4e:c1:03:1c:7f:87:bc:52:4a:0e:c8:17:e8: 3a:7b:5a:7f:3b:c8:b9:44:69:cf:d7:6c:13:f0:4d: 77:0b:44:0e:25:50:43:66:bf:6d:30:33:49:86:e7: ce:89:a4:53:a7:83:b9:5d:11:7f:5e:d6:63:96:13: 8c:ed:2c:a9:f4:6e:5a:b6:33:8f:06:c4:7c:11:cf: db:dc:43:37:59:c8:c9:2c:79:b5:5d:73:96:d7:4d: f1:d2:e1:0f:ff:4a:38:fb:13:d2:c0:a6:31:13:26: fd:da:6e:b0:e7:1b:52:45:d2:28:9c:96:63:3b:c7: db:e7:c4:48:f8:e3:87:77:40:84:1e:fb:65:a7:88: 79:18:d4:53:b2:d7:d5:a4:1c:a4:e7:e4:64:83:cc: 1b:4c:fa:39:b4:da:9a:7b:88:bd:f9:77:ae:0e:3a: ea:3a:92:e2:8b:c0:b6:13:b2:98:fe:4b:40:9a:be: 0d:25:df:cd:8b:3c:e4:ed:43:30:03:77:c2:45:95: 9c:0f:8f:62:43:73:78:4a:de:bc:2f:45:13:c9:85: b1:d9:8e:9d:39:27:1b:e5:4e:de:79:66:c9:ba:d0: 4e:09:40:c5:92:a8:7d:ed:be:93:e6:34:98:9e:72: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FC:9F:BF:25:C5:68:24:61:57:7F:DF:37:4A:B4:37:E3:4A:98:C8 X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:9f:e6:94:3c:11:78:59:92:5c:c6:fa:12:3a:e0:0c:9a:39: 8c:bc:9b:95:31:f9:c8:6f:19:7a:df:74:3a:da:99:ca:84:d9: 8d:29:f0:04:df:f1:55:48:f9:13:e8:bb:ec:d3:cf:8b:dd:50: 4b:3b:37:36:1a:b5:59:3e:46:e6:d9:68:a1:f0:ca:e4:79:f1: e0:5c:c5:52:d4:59:bf:8d:92:9f:a7:25:fd:79:1d:2d:e3:89: 8b:38:66:52:24:7d:83:55:f1:fe:9f:b4:a9:5a:66:0a:bd:b5: b0:63:b1:38:e9:ba:2e:cf:41:9f:25:95:e0:8b:74:46:45:16: 26:5a:76:3f:a3:43:08:ef:26:03:85:dc:09:63:d5:b6:27:f8: 45:b9:17:80:8e:e0:43:b1:39:28:8f:0a:eb:cf:3b:a2:d6:5e: ac:d6:b8:9b:29:38:85:ae:a1:0c:f6:cf:8d:98:3e:8f:d9:6a: dd:7e:4b:fe:0b:77:81:e3:2d:82:35:a9:cb:aa:c5:04:96:52: 28:20:17:a2:b1:4f:63:af:1a:15:d3:e2:7f:31:8e:c0:00:cb: e7:34:15:ed:9e:1f:f1:b8:8e:df:23:89:51:53:10:86:5b:93: c6:5e:d0:28:8d:2d:64:4c:3d:fa:00:30:18:90:08:70:f6:5f: 87:95:80:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDAzRkYwNjU3QzBFQ0Y4NzM5ODMwMzNGN0M2QzY0ODhC MzM3ODlDNDMwHhcNMjUxMTA1MDQ0NDM4WhcNMjUxMTEyMDQ0NDM4WjAYMRYwFAYD VQQDEw02OTBhZDYzNi1mNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TN2BE4WLyuPHjcM18BUVk7BAxx/h7xSSg7IF+g6e1p/O8i5RGnP12wT8E13 C0QOJVBDZr9tMDNJhufOiaRTp4O5XRF/XtZjlhOM7Syp9G5atjOPBsR8Ec/b3EM3 WcjJLHm1XXOW103x0uEP/0o4+xPSwKYxEyb92m6w5xtSRdIonJZjO8fb58RI+OOH d0CEHvtlp4h5GNRTstfVpByk5+Rkg8wbTPo5tNqae4i9+XeuDjrqOpLii8C2E7KY /ktAmr4NJd/Nizzk7UMwA3fCRZWcD49iQ3N4St68L0UTyYWx2Y6dOScb5U7eeWbJ utBOCUDFkqh97b6T5jSYnnKJCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD8n78l xWgkYVd/3zdKtDfjSpjIMB8GA1UdIwQYMBaAFAP/BlfA7PhzmDAz98bGSIszeJxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC81NjFENjYyRUVB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1IT1lNRFAzeHNaSWl6TjRu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC81NjFENjYyRUVBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1I T1lNRFAzeHNaSWl6TjRuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgn+aUPBF4WZJcxvoSOuAMmjmMvJuVMfnIbxl633Q62pnKhNmNKfAE 3/FVSPkT6Lvs08+L3VBLOzc2GrVZPkbm2Wih8MrkefHgXMVS1Fm/jZKfpyX9eR0t 44mLOGZSJH2DVfH+n7SpWmYKvbWwY7E46bouz0GfJZXgi3RGRRYmWnY/o0MI7yYD hdwJY9W2J/hFuReAjuBDsTkojwrrzzui1l6s1ribKTiFrqEM9s+NmD6P2Wrdfkv+ C3eB4y2CNanLqsUEllIoIBeisU9jrxoV0+J/MY7AAMvnNBXtnh/xuI7fI4lRUxCG W5PGXtAojS1kTD36ADAYkAhw9l+HlYAU -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:34 2025 by rpki-client