$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft File: rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json) Hash identifier: 3wVrq4045bVRnmiIpZRhDwEGTddxx9peNTvJdmAChRc= Subject key identifier: 47:96:E5:3B:16:91:32:48:A7:4E:5A:A5:0D:AF:E3:97:69:73:79:39 Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft Manifest number: 08AB Signing time: Sun 02 Nov 2025 20:27:43 +0000 Manifest this update: Sun 02 Nov 2025 20:27:42 +0000 Manifest next update: Sun 09 Nov 2025 20:27:42 +0000 Files and hashes: 1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: eVbOPJU1EGuP08QdGHd9Ui2tnRfxpYnEIx9xQYyns+o=) 2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: p0a0nQBisH4VKwtpLEiKDNLpUVAu9yIvpOIZZoB51RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Validity Not Before: Nov 2 20:27:42 2025 GMT Not After : Nov 9 20:27:42 2025 GMT Subject: CN=6907bebf-ef00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:da:bd:5c:f7:db:9b:cd:27:15:f1:13:b2:bf: de:c4:df:b3:56:31:15:23:08:21:10:53:0b:04:97: 6b:1d:0d:a4:b6:97:83:4d:f0:a0:21:66:63:0e:eb: 65:e4:89:69:39:f6:43:b9:00:43:6e:6d:34:66:42: 54:bf:78:fe:24:68:1a:30:c5:c7:f4:ac:a0:8e:77: ac:d4:81:11:6d:8a:62:4c:f3:4f:72:e4:43:0a:06: 44:7d:b6:ec:bc:8a:11:bf:ac:ac:76:3a:65:f0:c7: 41:0c:01:c3:78:be:4f:79:39:8a:a6:32:6a:63:54: 90:9a:88:8c:eb:bc:79:b5:e4:ac:69:41:78:f7:75: 30:03:a9:07:e3:36:7f:c0:2e:c9:e4:98:7d:49:4b: 9a:47:54:b9:61:93:a6:e6:34:47:56:80:54:17:20: 44:72:c4:80:0e:fa:46:d6:5d:24:9a:8b:25:26:ed: 4c:09:c8:fe:75:a3:9c:b4:3d:a3:49:3a:fa:a2:17: ad:20:be:fa:ed:05:ec:32:d4:32:cb:f0:0c:c9:7f: 47:48:bd:a2:a8:46:9d:87:e7:a5:a5:a8:67:30:f6: 7a:d6:95:31:eb:21:3f:09:32:22:a3:95:25:df:e7: ea:82:c1:ef:63:5b:d7:76:dc:00:55:33:13:2b:67: 32:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:96:E5:3B:16:91:32:48:A7:4E:5A:A5:0D:AF:E3:97:69:73:79:39 X509v3 Authority Key Identifier: keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a6:07:01:54:c7:53:c6:1a:33:e1:4c:3c:ca:80:84:5c:48: 88:c4:b7:19:4e:ec:ee:97:51:de:66:44:88:7a:10:42:f9:13: de:be:53:18:85:f9:82:2c:d4:91:d0:0a:1d:6c:91:b6:88:6f: 0f:e6:10:66:ad:00:64:d8:4f:24:13:90:5f:96:f6:08:fd:05: 09:3c:8b:35:0f:ed:33:bc:3f:31:c2:a2:56:cc:5e:8b:d3:5e: be:bf:e8:4e:ff:a6:26:38:88:4b:22:3a:be:0e:2e:b7:c3:93: 5f:e9:64:9e:16:58:e0:d1:34:c9:ba:fd:90:70:e1:dd:62:08: e0:a9:06:c0:4e:d3:cb:1e:40:49:9f:a3:43:8a:ee:42:3c:38: cc:c8:5c:ff:c1:a1:46:22:e6:d6:76:94:a1:5c:d5:3a:8a:9d: 2c:f8:53:c4:07:83:3f:dd:d0:a6:8d:6d:26:e7:1c:4f:3e:a1: 69:5e:1e:68:ec:5b:45:5f:3f:41:ec:11:c8:cf:6e:9c:c8:db: 02:41:72:b6:6b:dc:ff:8f:15:a4:98:a4:35:9a:18:cd:a9:3f: f0:1c:b6:9b:78:50:cd:48:0d:5d:8d:3a:a5:29:c0:ac:c7:7e: 45:a9:71:d9:d4:4a:12:16:1e:27:9d:7b:43:9a:bb:9e:d3:a0: 2d:a4:02:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx Mjc5MTdBMkYwHhcNMjUxMTAyMjAyNzQyWhcNMjUxMTA5MjAyNzQyWjAYMRYwFAYD VQQDEw02OTA3YmViZi1lZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dq9XPfbm80nFfETsr/exN+zVjEVIwghEFMLBJdrHQ2ktpeDTfCgIWZjDutl 5IlpOfZDuQBDbm00ZkJUv3j+JGgaMMXH9Kygjnes1IERbYpiTPNPcuRDCgZEfbbs vIoRv6ysdjpl8MdBDAHDeL5PeTmKpjJqY1SQmoiM67x5teSsaUF493UwA6kH4zZ/ wC7J5Jh9SUuaR1S5YZOm5jRHVoBUFyBEcsSADvpG1l0kmoslJu1MCcj+daOctD2j STr6ohetIL767QXsMtQyy/AMyX9HSL2iqEadh+elpahnMPZ61pUx6yE/CTIio5Ul 3+fqgsHvY1vXdtwAVTMTK2cyGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeW5TsW kTJIp05apQ2v45dpc3k5MB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3 RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUJDMy8wRDQxRkU1Q0M3RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0 dV9aeEdYT0Vjak1TZVJlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmpgcBVMdTxhoz4Uw8yoCEXEiIxLcZTuzul1HeZkSIehBC+RPevlMY hfmCLNSR0AodbJG2iG8P5hBmrQBk2E8kE5BflvYI/QUJPIs1D+0zvD8xwqJWzF6L 016+v+hO/6YmOIhLIjq+Di63w5Nf6WSeFljg0TTJuv2QcOHdYgjgqQbATtPLHkBJ n6NDiu5CPDjMyFz/waFGIubWdpShXNU6ip0s+FPEB4M/3dCmjW0m5xxPPqFpXh5o 7FtFXz9B7BHIz26cyNsCQXK2a9z/jxWkmKQ1mhjNqT/wHLabeFDNSA1djTqlKcCs x35FqXHZ1EoSFh4nnXtDmrue06AtpAJ8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:33 2025 by rpki-client