$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: ocdJxaUb6lxTiW5s17+NTFyWAFEY4LhdgW9qXlqMeS4= Subject key identifier: 41:A8:ED:B8:C9:6F:A0:26:99:AB:11:04:46:58:FF:7B:CE:85:B1:FE Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: 68 Signing time: Wed 05 Nov 2025 07:11:28 +0000 Manifest this update: Wed 05 Nov 2025 07:11:28 +0000 Manifest next update: Wed 12 Nov 2025 07:11:28 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: 3uYKfgWlI+7RSgjz216JgylnQMZnbMYt7KiLHjmZ5mw=) 2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: o/13AO8mPDvXBUbVg85hPilsA+v8uBO89/ms9/UgUgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Nov 5 07:11:28 2025 GMT Not After : Nov 12 07:11:28 2025 GMT Subject: CN=690af8a0-7f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:f6:b8:1b:56:55:e2:6a:63:7f:b6:ad:89: 08:85:d3:86:d9:af:75:6c:73:f6:d1:b4:a0:36:9d: a3:ed:64:81:7b:13:ba:dc:7f:df:d9:f1:ad:0e:c7: bb:0b:fe:3b:b7:1a:e9:2d:81:71:64:aa:9e:14:5e: a1:40:8a:08:33:8d:c8:f8:6d:84:de:86:cb:97:22: 3b:27:6a:3f:1b:76:bd:59:71:d1:89:7c:58:72:f1: 62:f3:af:47:71:a9:c2:78:c7:b6:c0:d6:1b:f8:fa: 0f:bb:90:39:b3:75:9c:c6:0b:6a:91:17:d5:3f:d0: 7f:85:ff:29:cf:e0:7b:a0:58:7c:00:a5:c7:2e:b0: 38:a8:f7:77:f1:f6:09:a2:e5:8f:22:52:b6:f3:02: 69:ca:59:2b:f0:6c:05:c6:a6:8a:88:9c:6a:5c:15: fb:bb:1b:27:73:95:bb:6f:f5:fe:7f:39:9b:4b:70: 70:19:0f:91:23:56:ee:bf:b0:e3:5a:04:6b:4f:a3: d5:1a:e7:49:ff:c3:02:58:4f:18:a3:3f:70:64:45: 21:c9:22:dc:24:0f:df:9b:3b:41:df:41:7b:21:13: 0d:6f:05:91:7b:27:b0:34:e4:15:fc:07:83:19:af: d1:e4:85:75:a7:e8:11:10:5d:d5:4e:3f:eb:58:30: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A8:ED:B8:C9:6F:A0:26:99:AB:11:04:46:58:FF:7B:CE:85:B1:FE X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:ca:d0:b4:16:2e:d5:ea:ba:71:aa:03:48:0c:92:c6:c5:01: 16:5e:88:58:f5:bb:2b:9f:2e:da:33:7e:f4:c5:bb:5c:19:c1: e4:44:49:e8:c9:59:a9:d1:a7:bf:d6:6f:43:a0:b6:92:d6:9d: 66:f0:4d:47:89:83:d5:b3:44:35:e7:3e:e6:d8:20:db:fc:e9: a3:05:b8:29:0c:ad:7e:97:2f:95:1f:17:37:e9:1d:e1:f5:34: dc:e6:30:12:df:85:66:89:b1:72:27:32:04:d4:17:13:f8:5e: b6:10:9a:93:05:b7:4a:d4:df:6a:9c:71:66:3c:46:09:8e:69: 73:fa:5c:ff:bf:ed:9e:8e:d6:16:c7:e4:c8:06:83:c2:04:e7: af:17:bd:76:14:fb:0d:34:2d:9c:c4:43:07:15:8b:30:c2:b9: 62:4a:8b:d4:7f:03:69:05:84:4e:c4:f8:5e:f0:fe:89:05:69: 76:83:62:11:cd:89:39:1e:76:3a:6c:3c:93:c5:e2:44:82:81: cd:a3:80:c6:16:b1:31:11:81:f7:db:62:d2:7d:a3:47:b9:b8: 9f:30:66:75:f8:40:32:6c:c8:0a:21:a2:5c:5f:4e:b3:5c:5e: dc:72:4c:85:0f:9d:ec:a4:54:5d:09:11:c8:c9:d4:61:e2:37: 0d:7c:fc:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkFDQjExMC8GA1UEBRMoRjAwOTIzM0Q4RDA4N0ZDMUQwRjY0MjU3ODBFM0E0RDg0 NEEzNEY4MTAeFw0yNTExMDUwNzExMjhaFw0yNTExMTIwNzExMjhaMBgxFjAUBgNV BAMTDTY5MGFmOGEwLTdmMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnXfa4G1ZV4mpjf7atiQiF04bZr3Vsc/bRtKA2naPtZIF7E7rcf9/Z8a0Ox7sL /ju3GuktgXFkqp4UXqFAiggzjcj4bYTehsuXIjsnaj8bdr1ZcdGJfFhy8WLzr0dx qcJ4x7bA1hv4+g+7kDmzdZzGC2qRF9U/0H+F/ynP4HugWHwApccusDio93fx9gmi 5Y8iUrbzAmnKWSvwbAXGpoqInGpcFfu7Gydzlbtv9f5/OZtLcHAZD5EjVu6/sONa BGtPo9Ua50n/wwJYTxijP3BkRSHJItwkD9+bO0HfQXshEw1vBZF7J7A05BX8B4MZ r9HkhXWn6BEQXdVOP+tYMLVtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQajtuMlv oCaZqxEERlj/e86Fsf4wHwYDVR0jBBgwFoAU8AkjPY0If8HQ9kJXgOOk2ESjT4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQUNCLzc0QkQ4NThBMUIz RDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEFralBZMElmOEhROWtKWGdPT2syRVNqVDRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy QUNCLzc0QkQ4NThBMUIzRDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhI UTlrSlhnT09rMkVTalQ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL3K0LQWLtXqunGqA0gMksbFARZeiFj1uyufLtozfvTFu1wZweRESejJ WanRp7/Wb0OgtpLWnWbwTUeJg9WzRDXnPubYINv86aMFuCkMrX6XL5UfFzfpHeH1 NNzmMBLfhWaJsXInMgTUFxP4XrYQmpMFt0rU32qccWY8RgmOaXP6XP+/7Z6O1hbH 5MgGg8IE568XvXYU+w00LZzEQwcVizDCuWJKi9R/A2kFhE7E+F7w/okFaXaDYhHN iTkedjpsPJPF4kSCgc2jgMYWsTERgffbYtJ9o0e5uJ8wZnX4QDJsyAoholxfTrNc XtxyTIUPneykVF0JEcjJ1GHiNw18/OI= -----END CERTIFICATE-----Generated at Thu Nov 6 06:45:00 2025 by rpki-client