$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft File: u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json) Hash identifier: uGK6kIlLhd6AYT9pg+inZ9tHC4vFrWjekiMciePHGis= Subject key identifier: 00:90:81:68:10:9A:65:88:3F:70:F7:3C:72:98:4A:A6:36:1C:99:35 Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7 Certificate issuer: /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7 Certificate serial: 06E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft Manifest number: 06E2 Signing time: Tue 04 Nov 2025 22:04:21 +0000 Manifest this update: Tue 04 Nov 2025 22:04:21 +0000 Manifest next update: Tue 11 Nov 2025 22:04:21 +0000 Files and hashes: 1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: ayXGiWnwgSL0gbCJ803a2nt2ZRe2Z4LrSkcXW+uFZzk=) 2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: hyfMZHqHSYXqXmUoPBYl5C2bAAKrO9L6ZCwOSgIJA4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1768 (0x6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7 Validity Not Before: Nov 4 22:04:21 2025 GMT Not After : Nov 11 22:04:21 2025 GMT Subject: CN=690a7865-9c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:92:9a:62:8b:97:19:a0:b8:69:2a:f3:b1: 4c:00:b1:a9:10:cc:2c:9c:29:6c:2a:65:8b:3f:18: 76:46:b1:a7:fd:f0:06:b1:e7:23:ba:fb:62:4e:06: 1e:28:d1:84:73:6c:59:a5:37:cb:b0:cb:75:7e:da: 0f:64:20:7d:22:64:59:b5:48:65:13:cd:dd:72:e4: 6a:4a:72:8f:df:30:28:2c:75:0f:fa:f3:74:9e:ca: 46:d8:3f:db:48:f0:f0:b9:74:df:f7:8b:cd:9f:92: ae:f8:46:1c:91:7b:65:40:d5:3c:8c:4e:22:ab:45: c0:d0:89:41:fb:ac:4f:06:d1:70:5d:dc:d2:68:b5: 44:43:f1:71:c2:44:2a:e3:41:00:72:80:8e:db:be: cf:4b:c0:6c:2f:4b:1a:ad:eb:44:88:a7:dc:91:47: 6d:28:69:ea:72:a1:27:c8:79:67:85:05:f4:cd:1b: 64:f9:01:e4:ca:ca:69:d2:b0:48:c2:7c:96:38:76: fe:95:3b:ca:8c:9e:38:bf:2d:7b:de:e3:8f:7f:01: eb:27:7c:99:a7:53:a8:0c:c4:d1:30:1e:12:4d:de: 5b:3f:bc:e9:9e:b7:3c:e7:43:1c:b6:ea:cf:c4:e2: 11:9a:df:7a:ed:f2:4c:47:0f:c1:3a:2b:45:26:c1: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:90:81:68:10:9A:65:88:3F:70:F7:3C:72:98:4A:A6:36:1C:99:35 X509v3 Authority Key Identifier: keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f2:09:74:b5:1a:5e:48:65:93:14:98:6e:fd:97:f6:e3:0b:f8: 1f:25:99:09:ba:57:e5:d3:45:05:8b:96:89:5c:ce:12:63:ae: 20:40:82:79:58:b5:f7:0e:fd:27:f0:8f:e1:65:33:50:9b:63: d5:af:a1:9f:4e:65:3a:2d:28:21:20:5a:0a:ab:63:4e:12:c6: 62:13:6a:2f:9c:51:1d:c0:5a:20:b0:18:7c:9f:e8:05:b6:fa: 70:59:14:8f:e2:86:62:17:8d:0d:8d:5b:ee:b0:6b:01:d5:9b: 2a:00:30:8f:66:e0:18:c5:53:84:81:51:28:11:0f:1e:49:f6: 80:ff:e8:7b:f6:e5:15:fd:8b:09:4e:eb:a1:86:4e:2e:eb:65: 89:be:34:94:d4:3b:ab:38:ad:57:83:b5:4b:95:dc:97:41:e5: a6:ab:81:c2:46:be:74:2e:cb:c1:79:74:00:32:de:ba:71:1c: 4e:2e:54:2b:0e:50:94:cb:0b:5a:94:b2:f2:f0:f0:e7:ba:a7: 8f:9d:30:a9:12:a5:f0:d6:c9:8c:bc:f3:57:ad:13:06:67:98: 43:62:d7:bf:53:a8:cf:a8:c9:13:64:4d:de:2b:4b:37:de:e4: d2:6b:ae:ab:4c:84:11:5c:dc:3d:c1:c9:2b:d6:c0:29:7d:59: d4:cb:43:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRTMxMTAvBgNVBAUTKEJCQ0M3NjBBRkUzRTlGMEE5Qjg4QzhFQzdBNDlFRDdD REQwMzk2RjcwHhcNMjUxMTA0MjIwNDIxWhcNMjUxMTExMjIwNDIxWjAYMRYwFAYD VQQDEw02OTBhNzg2NS05YzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BqSmmKLlxmguGkq87FMALGpEMwsnClsKmWLPxh2RrGn/fAGsecjuvtiTgYe KNGEc2xZpTfLsMt1ftoPZCB9ImRZtUhlE83dcuRqSnKP3zAoLHUP+vN0nspG2D/b SPDwuXTf94vNn5Ku+EYckXtlQNU8jE4iq0XA0IlB+6xPBtFwXdzSaLVEQ/FxwkQq 40EAcoCO277PS8BsL0saretEiKfckUdtKGnqcqEnyHlnhQX0zRtk+QHkyspp0rBI wnyWOHb+lTvKjJ44vy173uOPfwHrJ3yZp1OoDMTRMB4STd5bP7zpnrc850McturP xOIRmt967fJMRw/BOitFJsH4BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACQgWgQ mmWIP3D3PHKYSqY2HJk1MB8GA1UdIwQYMBaAFLvMdgr+Pp8Km4jI7HpJ7XzdA5b3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNFMy8wOEI4RDBEMjZG M0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53cWJpTWpzZWtudGZOMERs dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U4eDJDdjQtbndxYmlNanNla250Zk4wRGx2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNFMy8wOEI4RDBEMjZGM0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53 cWJpTWpzZWtudGZOMERsdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDyCXS1Gl5IZZMUmG79l/bjC/gfJZkJulfl00UFi5aJXM4SY64gQIJ5 WLX3Dv0n8I/hZTNQm2PVr6GfTmU6LSghIFoKq2NOEsZiE2ovnFEdwFogsBh8n+gF tvpwWRSP4oZiF40NjVvusGsB1ZsqADCPZuAYxVOEgVEoEQ8eSfaA/+h79uUV/YsJ Tuuhhk4u62WJvjSU1DurOK1Xg7VLldyXQeWmq4HCRr50LsvBeXQAMt66cRxOLlQr DlCUywtalLLy8PDnuqePnTCpEqXw1smMvPNXrRMGZ5hDYte/U6jPqMkTZE3eK0s3 3uTSa66rTIQRXNw9wckr1sApfVnUy0Mu -----END CERTIFICATE-----Generated at Wed Nov 5 12:29:06 2025 by rpki-client