$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: uapYfAPU/UOYC0Pm+PURJAU4alpS+qbWCXzus76sNtM= Subject key identifier: 9F:D9:E5:DC:74:2F:A0:72:2C:8E:DD:E7:A1:4E:E7:9F:7E:C8:75:B1 Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 0292 Signing time: Wed 05 Nov 2025 01:42:38 +0000 Manifest this update: Wed 05 Nov 2025 01:42:37 +0000 Manifest next update: Wed 12 Nov 2025 01:42:37 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: 3oumeg/9aTZnCkChIWgr+XA984o438aA8IgNK5rSGDY=) 2: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: 6sLu3BEdx9/7hIQ0xnLxfwDmYeLLmzHWwmPjiKZ/kzE=) 3: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: orsVYI0WPqRRwsJkvK9ISroiZMKS0a+gVuvh69buNNs=) 4: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: 0QIge9qVdWiYUccpaSzR0ATAUWXdicUdgJEiPZ4i2aA=) 5: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: V8FSzYBLLsXQQnxTAHA6zEryNBNGiFUPQmH0Cpz+QYg=) 6: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: 2oEdY4ta3hN90rZpyN1SlR035NNb05Tx7U/Ur7N9XJo=) 7: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: /C0qtTA5i0rVvnV/xAh9o5sYCzRTxWzn/hNOktwoiis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: Nov 5 01:42:37 2025 GMT Not After : Nov 12 01:42:37 2025 GMT Subject: CN=690aab8e-7cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:09:e5:02:77:51:43:a8:2c:0b:81:fa:da: e7:07:df:8a:22:d0:12:cc:58:ef:0e:ca:13:82:07: 35:46:f3:4a:e0:af:bc:d1:c2:12:75:79:21:61:b4: ed:5e:a3:cf:ba:10:5a:dc:26:21:37:ed:7e:1f:db: 87:79:df:14:d1:a3:51:5a:3c:e0:d0:b2:29:06:41: be:51:db:ee:f6:ac:0c:7b:34:17:54:1f:ba:2b:21: 28:b7:97:5f:cd:cc:ac:f6:19:58:91:e8:73:99:97: d0:15:9c:ce:a7:46:fc:97:8b:50:1a:f1:84:57:e5: 08:13:50:47:ba:cd:38:51:98:c4:28:e2:a1:ea:7e: fb:98:c9:02:0b:52:62:7e:ab:6a:08:53:ef:57:95: 93:78:65:7f:cc:f6:fe:ce:d7:5d:9b:61:23:5d:3b: 1f:be:f5:81:1b:40:91:88:d3:99:fb:27:c0:6c:d2: d2:87:fb:09:98:55:9e:5c:f3:64:44:8c:e6:79:1c: dc:6b:40:21:89:11:38:df:22:2d:bc:c5:f0:e0:20: 5c:55:af:da:9a:97:cf:2b:cc:79:0f:15:fc:2e:75: 8d:8d:0e:b7:2c:e7:e4:f2:2d:c8:7c:4a:85:14:f0: 24:c6:80:20:a1:46:99:7b:68:d9:31:ee:b2:35:cb: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D9:E5:DC:74:2F:A0:72:2C:8E:DD:E7:A1:4E:E7:9F:7E:C8:75:B1 X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:70:4b:24:75:04:50:bc:cc:58:d6:a5:54:70:d0:49:df:b1: ee:6d:f6:8a:18:c7:9c:2a:29:16:d5:cb:7c:f9:5a:03:15:40: ba:5e:b8:de:01:1f:11:2d:c8:01:a5:c9:39:a0:39:24:75:74: b7:d0:1c:0d:e3:04:79:c4:fc:d6:70:54:c0:3b:d2:2d:51:0c: f9:36:34:4b:b7:ad:6a:c5:32:c9:11:c7:c2:27:8b:63:7d:e7: f2:f9:f5:f1:5d:3a:2e:9d:75:72:d4:b1:ec:7b:e0:cb:18:d4: 57:bb:e0:e7:f4:46:05:f7:35:e4:2d:cc:36:d1:65:2e:f0:b3: 0b:d1:12:cf:99:33:98:74:29:be:03:6d:fe:4f:39:6b:88:ef: 5a:15:44:f5:3a:83:5f:9d:2e:fa:fe:27:6c:ec:58:c2:b1:25: be:f0:76:09:3e:d7:ed:0c:ac:24:24:93:02:56:12:50:80:69: d2:0e:5a:d9:74:f8:3d:a1:6c:81:f9:9d:f0:71:58:f3:bd:57: 51:26:b4:68:9f:d4:8a:6f:cb:b5:02:fe:8a:a6:dd:11:4a:e5: a9:94:bb:7b:11:7b:91:da:d3:5f:a2:ef:33:67:54:e7:3d:00: 9c:6c:af:88:29:36:3f:51:95:75:05:71:8b:79:64:23:f9:b4: 04:8a:30:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjUxMTA1MDE0MjM3WhcNMjUxMTEyMDE0MjM3WjAYMRYwFAYD VQQDEw02OTBhYWI4ZS03Y2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsgJ5QJ3UUOoLAuB+trnB9+KItASzFjvDsoTggc1RvNK4K+80cISdXkhYbTt XqPPuhBa3CYhN+1+H9uHed8U0aNRWjzg0LIpBkG+Udvu9qwMezQXVB+6KyEot5df zcys9hlYkehzmZfQFZzOp0b8l4tQGvGEV+UIE1BHus04UZjEKOKh6n77mMkCC1Ji fqtqCFPvV5WTeGV/zPb+ztddm2EjXTsfvvWBG0CRiNOZ+yfAbNLSh/sJmFWeXPNk RIzmeRzca0AhiRE43yItvMXw4CBcVa/ampfPK8x5DxX8LnWNjQ63LOfk8i3IfEqF FPAkxoAgoUaZe2jZMe6yNct0kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/Z5dx0 L6ByLI7d56FO559+yHWxMB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJcEskdQRQvMxY1qVUcNBJ37HubfaKGMecKikW1ct8+VoDFUC6Xrje AR8RLcgBpck5oDkkdXS30BwN4wR5xPzWcFTAO9ItUQz5NjRLt61qxTLJEcfCJ4tj fefy+fXxXTounXVy1LHse+DLGNRXu+Dn9EYF9zXkLcw20WUu8LML0RLPmTOYdCm+ A23+TzlriO9aFUT1OoNfnS76/ids7FjCsSW+8HYJPtftDKwkJJMCVhJQgGnSDlrZ dPg9oWyB+Z3wcVjzvVdRJrRon9SKb8u1Av6Kpt0RSuWplLt7EXuR2tNfou8zZ1Tn PQCcbK+IKTY/UZV1BXGLeWQj+bQEijA2 -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:52 2025 by rpki-client