$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: ive9UzGUGsyohQe3hjWSqqtw4VfxD5Vu6txTIf26Br0= Subject key identifier: B0:75:32:F0:C2:4C:78:0A:06:9C:69:34:A8:4A:6F:CD:57:99:26:04 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: DC Signing time: Tue 04 Nov 2025 14:23:26 +0000 Manifest this update: Tue 04 Nov 2025 14:23:25 +0000 Manifest next update: Tue 11 Nov 2025 14:23:25 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: nJ57Cw74H6WNM2jgkak/wwicMqorTH/uMARYVGgZIE0=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Nov 4 14:23:25 2025 GMT Not After : Nov 11 14:23:25 2025 GMT Subject: CN=690a0c5d-e356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:0e:1a:37:d9:95:de:98:47:81:02:d4:cc: 44:89:98:36:26:fa:ed:06:1b:ea:96:d3:49:58:00: e5:0b:0b:b2:66:36:5a:3b:82:5f:77:f2:dd:96:c9: e6:7e:4f:29:98:4a:21:af:b7:90:88:9a:59:79:d5: 81:aa:fc:09:d5:1b:1d:d1:e4:7a:9f:36:e1:3b:d5: 55:d1:f1:38:4c:11:dd:25:f4:44:36:5d:17:a0:f9: c2:32:83:61:bc:1e:ec:99:0f:14:20:59:32:d5:5c: 89:bd:4d:8b:37:0d:e5:2b:de:46:0a:bf:0a:87:37: 28:36:4d:29:83:a8:c3:8c:da:be:49:9c:b6:3a:43: bb:bc:e5:19:8b:17:51:9a:9a:0e:b7:a4:6f:63:2e: 17:6d:24:ce:88:b6:52:4e:b4:3e:cc:b3:4c:08:c8: 88:52:ee:0c:52:30:aa:ab:4b:09:d3:24:95:99:8b: b2:a2:88:1a:e3:3e:4f:44:11:fb:03:57:fd:a0:f2: 5f:d5:cd:0d:d1:88:8d:96:8e:6f:9c:50:9b:22:85: 78:15:4f:b1:86:c1:df:7a:61:a8:4d:f2:c4:65:e4: 88:c2:e8:4d:71:34:3e:ca:a4:a4:21:97:74:9f:5b: 00:a6:d8:97:53:e7:44:94:b0:97:76:ac:a6:85:e4: 4c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:75:32:F0:C2:4C:78:0A:06:9C:69:34:A8:4A:6F:CD:57:99:26:04 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ac:cd:ed:df:dc:49:6f:2b:7f:e8:19:05:64:21:ac:93:0e: be:7a:51:b6:16:fc:08:c8:13:b0:15:be:6e:9f:1e:de:60:84: 78:4a:10:9e:9e:97:cd:ec:55:f8:a9:57:31:d3:7b:d1:96:b6: 40:77:31:73:cf:95:f2:cd:58:38:81:70:11:ba:f2:59:7e:0f: 8e:33:fa:08:01:31:b9:55:1c:e6:59:7d:ba:a4:7d:d0:ff:55: fe:2b:ff:ce:14:56:5a:2e:f0:63:54:e4:50:45:86:2f:9c:9a: 4d:16:a3:cc:00:28:d6:f4:9e:f3:28:62:a2:24:d4:f6:e4:78: ac:30:0b:8a:39:df:a9:e5:11:76:c7:39:ad:47:3e:4e:2b:ef: d5:54:5e:f6:e1:6c:6d:25:ef:91:ce:39:e4:9f:06:80:b2:0f: 5e:95:60:05:08:2b:0b:e0:ef:5c:a5:c8:d2:54:f7:a4:c2:d8: 06:91:53:67:b9:8c:f0:7b:17:9b:4a:4e:8e:4d:ec:34:69:ca: 01:5c:10:e7:79:68:29:cf:31:d3:1e:ac:ec:5f:d0:95:07:b0: 8a:60:a0:5b:01:34:86:49:1b:00:3c:5d:3f:46:cf:9f:b1:82: 5b:2f:e7:56:eb:bb:64:1d:95:81:4d:9e:76:67:10:67:fe:a1: 3a:70:a5:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjUxMTA0MTQyMzI1WhcNMjUxMTExMTQyMzI1WjAYMRYwFAYD VQQDEw02OTBhMGM1ZC1lMzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/QOGjfZld6YR4EC1MxEiZg2JvrtBhvqltNJWADlCwuyZjZaO4Jfd/Ldlsnm fk8pmEohr7eQiJpZedWBqvwJ1Rsd0eR6nzbhO9VV0fE4TBHdJfRENl0XoPnCMoNh vB7smQ8UIFky1VyJvU2LNw3lK95GCr8KhzcoNk0pg6jDjNq+SZy2OkO7vOUZixdR mpoOt6RvYy4XbSTOiLZSTrQ+zLNMCMiIUu4MUjCqq0sJ0ySVmYuyooga4z5PRBH7 A1f9oPJf1c0N0YiNlo5vnFCbIoV4FU+xhsHfemGoTfLEZeSIwuhNcTQ+yqSkIZd0 n1sAptiXU+dElLCXdqymheRM/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB1MvDC THgKBpxpNKhKb81XmSYEMB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCarM3t39xJbyt/6BkFZCGskw6+elG2FvwIyBOwFb5unx7eYIR4ShCe npfN7FX4qVcx03vRlrZAdzFzz5XyzVg4gXARuvJZfg+OM/oIATG5VRzmWX26pH3Q /1X+K//OFFZaLvBjVORQRYYvnJpNFqPMACjW9J7zKGKiJNT25HisMAuKOd+p5RF2 xzmtRz5OK+/VVF724WxtJe+RzjnknwaAsg9elWAFCCsL4O9cpcjSVPekwtgGkVNn uYzwexebSk6OTew0acoBXBDneWgpzzHTHqzsX9CVB7CKYKBbATSGSRsAPF0/Rs+f sYJbL+dW67tkHZWBTZ52ZxBn/qE6cKVQ -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:35 2025 by rpki-client