$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft File: s8jMSc2pmXofeyj1RvyRIdqhkzw.mft (raw, json) Hash identifier: 4Lc1xjm4GEnvwtfQE/fHR/HjFUNdFBI2MwRPM59MjKw= Subject key identifier: 1B:31:1E:F7:0D:63:49:85:A7:47:B8:10:B3:FF:DD:C4:A6:7C:1D:05 Authority key identifier: B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C Certificate issuer: /CN=A913E83E/serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft Manifest number: 42 Signing time: Mon 03 Nov 2025 07:24:19 +0000 Manifest this update: Mon 03 Nov 2025 07:24:18 +0000 Manifest next update: Mon 10 Nov 2025 07:24:18 +0000 Files and hashes: 1: s8jMSc2pmXofeyj1RvyRIdqhkzw.crl (hash: MEX7C4sh5Zvvo15SdtqiY6exQ6ImM0LYmg/gjrtm/8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Validity Not Before: Nov 3 07:24:18 2025 GMT Not After : Nov 10 07:24:18 2025 GMT Subject: CN=690858a3-dd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a7:97:b7:57:15:6f:b8:a5:0c:ce:10:24:7e: b0:25:94:32:d0:56:ee:a2:e0:52:4e:45:53:20:b8: cc:de:33:d6:78:ab:b9:07:a4:c0:ef:5a:35:8f:5e: c3:01:c0:db:82:a2:36:d1:4b:49:29:27:58:bf:a9: 27:e9:82:4a:15:83:b4:e5:ef:2b:be:6d:c7:fb:a9: 5b:0b:e1:4a:07:19:06:87:b2:e6:d0:89:04:49:cc: c6:09:78:99:db:7a:13:4f:5a:f9:3a:ba:d3:46:a8: 2b:c6:a2:45:1c:53:9a:ec:66:51:21:a5:1e:6e:6e: 6b:0c:0e:ba:25:29:df:24:2d:bd:32:5e:e6:69:ef: 7d:6c:93:70:78:6f:a1:63:f6:c1:23:0e:1e:3f:0e: 6f:98:fd:5f:d0:08:fa:14:de:00:1a:99:6d:5e:40: e1:05:6f:11:05:6a:ca:27:4a:ca:b1:6b:db:68:db: dd:3b:b3:c4:94:6a:47:9b:c2:ea:72:c4:2a:4d:90: 73:c3:89:21:ee:65:c6:30:4c:4c:3e:af:b3:b8:66: 6e:19:c3:a3:ff:b3:43:8a:3d:3f:7b:ca:a1:aa:5e: 9e:b9:00:52:9f:e1:45:68:05:94:9c:3b:0a:aa:9c: 25:d2:99:89:86:78:bb:5e:95:f1:a2:49:40:aa:03: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:31:1E:F7:0D:63:49:85:A7:47:B8:10:B3:FF:DD:C4:A6:7C:1D:05 X509v3 Authority Key Identifier: keyid:B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:30:f4:6f:b6:f1:af:ec:b2:cd:87:5f:52:18:a8:27:3c:f2: 99:16:2a:06:73:bc:0f:7e:8a:f2:b1:e4:62:b1:6c:cd:21:77: 1b:60:42:2f:2a:3a:0b:ea:0d:81:c3:c1:ef:d8:f9:dc:6c:9d: 75:4c:e1:c2:e6:0f:04:b9:2d:87:ee:5f:4c:5e:05:f8:34:00: 37:20:de:42:3a:2b:dd:2a:8a:09:ef:2b:55:82:56:99:eb:4a: 91:a5:21:3f:9f:ac:5e:75:5a:9a:c5:61:04:28:c7:62:c0:4a: 64:ac:e3:f3:32:ad:e6:0e:4b:45:7d:8d:77:ae:34:29:f8:48: de:72:35:8d:e0:fe:b1:6d:46:16:b2:fe:83:ce:a3:23:09:39: 45:9d:fc:35:71:80:68:8d:d7:e3:3c:44:59:f7:90:d2:a7:2b: a7:70:7b:75:17:c7:5f:e8:64:38:72:7f:7f:2a:7e:0a:43:c0: 25:ea:db:b5:3f:b2:5d:1d:04:ac:88:98:77:22:f7:ee:8c:61: 3d:81:79:a1:cb:a1:87:29:b0:d9:9c:03:24:80:df:73:cd:9c: 68:21:3b:81:97:be:fb:25:aa:6c:b6:08:5d:43:04:06:e0:33: b4:59:fe:9b:6e:bd:f5:39:e5:40:20:9e:ad:1f:ff:d4:0c:9e: 9e:c7:db:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoQjNDOENDNDlDREE5OTk3QTFGN0IyOEY1NDZGQzkxMjFE QUExOTMzQzAeFw0yNTExMDMwNzI0MThaFw0yNTExMTAwNzI0MThaMBgxFjAUBgNV BAMTDTY5MDg1OGEzLWRkNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkp5e3VxVvuKUMzhAkfrAllDLQVu6i4FJORVMguMzeM9Z4q7kHpMDvWjWPXsMB wNuCojbRS0kpJ1i/qSfpgkoVg7Tl7yu+bcf7qVsL4UoHGQaHsubQiQRJzMYJeJnb ehNPWvk6utNGqCvGokUcU5rsZlEhpR5ubmsMDrolKd8kLb0yXuZp731sk3B4b6Fj 9sEjDh4/Dm+Y/V/QCPoU3gAamW1eQOEFbxEFasonSsqxa9to2907s8SUakebwupy xCpNkHPDiSHuZcYwTEw+r7O4Zm4Zw6P/s0OKPT97yqGqXp65AFKf4UVoBZScOwqq nCXSmYmGeLtelfGiSUCqA7O7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGzEe9w1j SYWnR7gQs//dxKZ8HQUwHwYDVR0jBBgwFoAUs8jMSc2pmXofeyj1RvyRIdqhkzww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0YzOTEwQzkwNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhvZmV5ajFSdnlSSWRxaGt6 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczhqTVNjMnBtWG9mZXlqMVJ2eVJJZHFoa3p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0YzOTEwQzkwNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhv ZmV5ajFSdnlSSWRxaGt6dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADkw9G+28a/sss2HX1IYqCc88pkWKgZzvA9+ivKx5GKxbM0hdxtgQi8q OgvqDYHDwe/Y+dxsnXVM4cLmDwS5LYfuX0xeBfg0ADcg3kI6K90qignvK1WCVpnr SpGlIT+frF51WprFYQQox2LASmSs4/MyreYOS0V9jXeuNCn4SN5yNY3g/rFtRhay /oPOoyMJOUWd/DVxgGiN1+M8RFn3kNKnK6dwe3UXx1/oZDhyf38qfgpDwCXq27U/ sl0dBKyImHci9+6MYT2BeaHLoYcpsNmcAySA33PNnGghO4GXvvslqmy2CF1DBAbg M7RZ/ptuvfU55UAgnq0f/9QMnp7H29M= -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:00 2025 by rpki-client