$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft File: j8P43lI68p2yShWQ_UCgRHWuCiU.mft (raw, json) Hash identifier: wrVHOETnND6aNBYfpvEOKU9+UvjkOg1xOA1H/gf8rgI= Subject key identifier: FE:CA:C6:E4:47:FD:BA:1A:30:0B:76:90:8D:6A:C5:85:D1:49:6F:A8 Authority key identifier: 8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25 Certificate issuer: /CN=A911AB93/serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25 Certificate serial: 1E97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft Manifest number: 1FD9 Signing time: Tue 04 Nov 2025 16:09:06 +0000 Manifest this update: Tue 04 Nov 2025 16:09:05 +0000 Manifest next update: Tue 11 Nov 2025 16:09:05 +0000 Files and hashes: 1: j8P43lI68p2yShWQ_UCgRHWuCiU.crl (hash: lRHwfmxIV0fWlo0/mKuc7i+Yl5hk7IkkVsa8LQsFgWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7831 (0x1e97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AB93, serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25 Validity Not Before: Nov 4 16:09:05 2025 GMT Not After : Nov 11 16:09:05 2025 GMT Subject: CN=690a2521-88c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:22:7e:80:27:3d:89:ec:84:8a:a3:53:68: ef:40:3d:67:a1:52:33:06:8a:ff:87:49:c4:c4:02: 53:13:3f:8b:3d:6b:91:4d:73:0b:4d:f8:8b:59:2b: 62:05:f0:50:b1:17:ea:27:54:73:17:01:38:d5:3f: 44:f0:f1:b7:17:a2:ca:42:d3:ec:52:ec:3c:0f:f7: a2:e5:a2:6c:9b:97:ec:e6:8c:2e:0d:d0:eb:fa:22: 0c:04:0e:de:be:df:b8:d1:50:d3:7a:97:21:1d:7f: 0a:59:cb:00:e7:67:3c:e1:62:10:2c:b9:e3:57:e9: 5c:35:70:ed:b8:ce:92:eb:ea:8b:47:22:35:21:cd: e3:1a:6a:ae:58:f4:cf:3c:3b:61:a1:6c:78:70:e3: 56:5d:f8:85:32:25:53:43:36:55:3a:6a:50:f6:92: 37:67:10:72:56:9c:eb:ad:15:9f:de:3c:2c:4e:ab: 3c:e3:1c:ed:0f:7c:3c:9f:8b:dc:3f:c3:35:80:12: 61:62:d1:aa:5a:7d:44:65:66:a6:61:cc:cd:00:f0: 59:93:95:81:c3:ff:9f:18:44:f0:65:16:db:1d:d7: 97:e6:b8:ab:24:9c:fe:5d:64:ab:45:ab:dd:ee:21: 10:85:83:5e:96:d8:ec:36:42:74:0f:2a:be:d2:ae: 03:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CA:C6:E4:47:FD:BA:1A:30:0B:76:90:8D:6A:C5:85:D1:49:6F:A8 X509v3 Authority Key Identifier: keyid:8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:39:88:d6:e8:53:b9:b6:98:79:f4:8f:44:12:84:c4:fd:cd: 97:63:d6:69:9e:98:fb:b5:b1:d5:4e:96:33:b1:51:81:94:f0: 02:49:66:a0:af:23:ef:a6:0e:ba:8c:56:06:fb:58:d0:c6:ce: f1:cc:02:79:9f:f2:95:4e:4e:99:b0:18:b4:85:be:81:38:69: 88:9e:62:71:44:18:5a:7e:10:12:3a:e2:4e:41:15:f7:71:97: 25:8c:64:58:21:cc:55:1c:e4:6f:50:f0:14:57:0f:46:bf:e2: 17:28:55:00:d6:a9:d2:be:bc:81:e7:5f:d7:57:a0:19:e4:f7: 01:83:ce:36:b3:6e:19:5f:00:5f:53:91:97:8e:4a:bf:5c:f2: 92:12:6a:91:32:7e:bf:59:b5:32:bf:6a:f9:23:da:e5:80:7d: 0e:72:81:bb:2e:24:7d:02:77:a3:5d:2e:a9:98:79:1b:75:1e: 70:0a:67:94:01:61:c9:23:38:ad:95:59:d5:18:aa:45:ce:82: 0a:a8:73:14:92:22:88:05:71:78:c9:62:49:d5:23:b7:d9:84: 05:7e:29:55:3e:80:ef:e6:87:c3:56:93:ee:15:16:19:3f:ae: 35:46:a8:e8:37:d7:7b:a2:97:32:28:3f:be:4d:46:fc:c7:01: ec:20:ae:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCOTMxMTAvBgNVBAUTKDhGQzNGOERFNTIzQUYyOURCMjRBMTU5MEZENDBBMDQ0 NzVBRTBBMjUwHhcNMjUxMTA0MTYwOTA1WhcNMjUxMTExMTYwOTA1WjAYMRYwFAYD VQQDEw02OTBhMjUyMS04OGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/0ifoAnPYnshIqjU2jvQD1noVIzBor/h0nExAJTEz+LPWuRTXMLTfiLWSti BfBQsRfqJ1RzFwE41T9E8PG3F6LKQtPsUuw8D/ei5aJsm5fs5owuDdDr+iIMBA7e vt+40VDTepchHX8KWcsA52c84WIQLLnjV+lcNXDtuM6S6+qLRyI1Ic3jGmquWPTP PDthoWx4cONWXfiFMiVTQzZVOmpQ9pI3ZxByVpzrrRWf3jwsTqs84xztD3w8n4vc P8M1gBJhYtGqWn1EZWamYczNAPBZk5WBw/+fGETwZRbbHdeX5rirJJz+XWSrRavd 7iEQhYNeltjsNkJ0Dyq+0q4DjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7KxuRH /boaMAt2kI1qxYXRSW+oMB8GA1UdIwQYMBaAFI/D+N5SOvKdskoVkP1AoER1rgol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUI5My84RDMwMzk0Njgx OEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi9qOFA0M2xJNjhwMnlTaFdRX1VDZ1JIV3VD aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o4UDQzbEk2OHAyeVNoV1FfVUNnUkhXdUNpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUI5My84RDMwMzk0NjgxOEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi9qOFA0M2xJNjhw MnlTaFdRX1VDZ1JIV3VDaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAOYjW6FO5tph59I9EEoTE/c2XY9Zpnpj7tbHVTpYzsVGBlPACSWag ryPvpg66jFYG+1jQxs7xzAJ5n/KVTk6ZsBi0hb6BOGmInmJxRBhafhASOuJOQRX3 cZcljGRYIcxVHORvUPAUVw9Gv+IXKFUA1qnSvryB51/XV6AZ5PcBg842s24ZXwBf U5GXjkq/XPKSEmqRMn6/WbUyv2r5I9rlgH0OcoG7LiR9AnejXS6pmHkbdR5wCmeU AWHJIzitlVnVGKpFzoIKqHMUkiKIBXF4yWJJ1SO32YQFfilVPoDv5ofDVpPuFRYZ P641RqjoN9d7opcyKD++TUb8xwHsIK4k -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:17 2025 by rpki-client