$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft File: 8reSQiqNuXlUdjz-iRZuki5jGYQ.mft (raw, json) Hash identifier: /M4G6tZJXyivQxL+ECzKdugBlMXeIhzkuXij8ySFJuQ= Subject key identifier: A0:57:34:FD:A9:8D:93:32:7F:7B:7B:EE:0E:26:94:2C:50:DD:39:08 Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 Certificate issuer: /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft Manifest number: 0162 Signing time: Wed 05 Nov 2025 04:11:33 +0000 Manifest this update: Wed 05 Nov 2025 04:11:32 +0000 Manifest next update: Wed 12 Nov 2025 04:11:32 +0000 Files and hashes: 1: 8reSQiqNuXlUdjz-iRZuki5jGYQ.crl (hash: CJEo29HKnbNzD6BwLx4JR04uwFUXfkSl67N4/Th/yro=) 2: F609B0309D5F11EE94076E6FC4F9AE02.roa (hash: uMIbIaAd2q/fAdMbL/3IffciHlHLKK1YHyqz9FvJ9Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Validity Not Before: Nov 5 04:11:32 2025 GMT Not After : Nov 12 04:11:32 2025 GMT Subject: CN=690ace74-93ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:e0:5d:ed:ee:8a:77:e2:d2:ca:67:2f:66: de:32:86:a0:12:5a:9c:f0:d6:3d:78:52:12:80:76: a3:67:db:03:13:60:13:66:d7:ac:70:fc:98:65:88: 30:5c:ad:a7:b2:ca:4b:e6:84:6f:6b:3c:c1:45:c8: 1d:b7:a1:20:ce:2f:bf:00:38:f6:5f:0a:c9:be:ef: 1b:9c:b8:c1:c4:d5:f7:70:be:fd:74:38:60:24:d0: 93:cf:f2:6e:52:af:97:1c:cb:d5:2e:37:5d:a6:9a: 53:e8:9e:43:73:96:d3:ec:e2:fd:42:c1:26:db:1e: 0e:f7:89:30:37:4b:96:56:b5:b8:ae:56:7e:ea:7c: 12:89:49:3b:a8:13:b7:55:dc:bd:e7:61:a8:5b:d8: c6:43:87:14:f5:64:5b:22:b3:2f:e4:a3:82:e7:df: cd:4d:ab:f4:b0:f9:de:08:7e:52:59:1c:4e:10:7a: da:01:62:6f:38:63:87:5a:8e:2d:cf:da:2b:29:69: 06:68:51:c0:95:74:54:9b:37:cf:0e:37:39:53:d0: db:eb:e6:f3:ec:66:99:15:26:f5:00:12:38:82:90: 43:be:8e:83:dc:e1:99:c4:16:97:22:19:13:29:3e: d0:97:9e:b2:21:61:68:87:d9:dc:13:18:e4:60:39: 37:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:57:34:FD:A9:8D:93:32:7F:7B:7B:EE:0E:26:94:2C:50:DD:39:08 X509v3 Authority Key Identifier: keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:99:e6:c0:2a:47:66:d4:8f:72:cd:1e:dc:3c:d7:d2:2d:e5: 34:d2:4b:3e:3f:46:f6:5d:30:eb:17:ed:97:78:d2:6f:21:1d: ad:ec:7c:e4:a9:98:cc:56:4e:d9:d2:b1:a0:8a:e4:2d:b3:3b: 03:2b:c0:2d:45:c4:e2:b5:0f:a8:e7:71:32:05:6c:7d:70:b9: f4:cb:c2:08:2c:b9:fe:5e:37:e7:7d:aa:62:9e:3f:47:ee:59: bd:10:7d:2a:33:f0:96:7d:bd:ca:8c:70:1b:55:07:41:50:00: c9:ca:eb:cd:6a:90:08:dd:f0:da:8f:b9:aa:cd:e0:5f:30:2f: 50:f8:43:68:b7:e6:57:e1:aa:9b:f7:54:40:40:03:c0:fe:fc: 3e:f5:d7:71:99:ae:b4:4a:2c:93:5f:4c:2b:0e:39:f0:52:0d: 34:81:e8:7c:4b:f6:c8:c0:c5:91:f2:2b:fc:8c:49:d4:0d:71: de:c0:d2:2c:fb:55:da:01:79:65:8f:e4:e7:ab:6a:8c:4f:10: 50:14:97:bc:75:d2:67:f4:27:7d:16:68:86:cd:5a:97:96:bf: 98:f6:91:18:b2:62:33:a7:e9:03:6c:04:be:71:be:e5:81:36: a4:08:d3:da:1a:16:a3:90:6f:4e:43:f4:43:1d:ff:13:dd:a7: 35:17:6a:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQjkxMTAvBgNVBAUTKEYyQjc5MjQyMkE4REI5Nzk1NDc2M0NGRTg5MTY2RTky MkU2MzE5ODQwHhcNMjUxMTA1MDQxMTMyWhcNMjUxMTEyMDQxMTMyWjAYMRYwFAYD VQQDEw02OTBhY2U3NC05M2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/bgXe3uinfi0spnL2beMoagElqc8NY9eFISgHajZ9sDE2ATZtescPyYZYgw XK2nsspL5oRvazzBRcgdt6Egzi+/ADj2XwrJvu8bnLjBxNX3cL79dDhgJNCTz/Ju Uq+XHMvVLjddpppT6J5Dc5bT7OL9QsEm2x4O94kwN0uWVrW4rlZ+6nwSiUk7qBO3 Vdy952GoW9jGQ4cU9WRbIrMv5KOC59/NTav0sPneCH5SWRxOEHraAWJvOGOHWo4t z9orKWkGaFHAlXRUmzfPDjc5U9Db6+bz7GaZFSb1ABI4gpBDvo6D3OGZxBaXIhkT KT7Ql56yIWFoh9ncExjkYDk3UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBXNP2p jZMyf3t77g4mlCxQ3TkIMB8GA1UdIwQYMBaAFPK3kkIqjbl5VHY8/okWbpIuYxmE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCOS9GQjA3NEY0NjlD QzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVYbFVkanotaVJadWtpNWpH WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyZVNRaXFOdVhsVWRqei1pUlp1a2k1akdZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCOS9GQjA3NEY0NjlDQzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVY bFVkanotaVJadWtpNWpHWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkmebAKkdm1I9yzR7cPNfSLeU00ks+P0b2XTDrF+2XeNJvIR2t7Hzk qZjMVk7Z0rGgiuQtszsDK8AtRcTitQ+o53EyBWx9cLn0y8IILLn+Xjfnfapinj9H 7lm9EH0qM/CWfb3KjHAbVQdBUADJyuvNapAI3fDaj7mqzeBfMC9Q+ENot+ZX4aqb 91RAQAPA/vw+9ddxma60SiyTX0wrDjnwUg00geh8S/bIwMWR8iv8jEnUDXHewNIs +1XaAXllj+Tnq2qMTxBQFJe8ddJn9Cd9FmiGzVqXlr+Y9pEYsmIzp+kDbAS+cb7l gTakCNPaGhajkG9OQ/RDHf8T3ac1F2ru -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:10 2025 by rpki-client