$ rpki-client -vvf rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft File: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft (raw, json) Hash identifier: CIlAqXvz6B/5tNYRJYVmBs79GKUPUMBiQTVB5WM+6A4= Subject key identifier: C3:56:6B:D5:1A:70:D3:2A:69:57:7C:26:DE:45:50:D4:E0:FA:86:AE Authority key identifier: F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05 Certificate issuer: /CN=A9140332/serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft Manifest number: 40 Signing time: Wed 05 Nov 2025 07:45:01 +0000 Manifest this update: Wed 05 Nov 2025 07:45:01 +0000 Manifest next update: Wed 12 Nov 2025 07:45:01 +0000 Files and hashes: 1: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl (hash: AqMOvwCqpwbcW2lQyt2SsFUgdjL5gtecRC4X4rf7Xno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140332, serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305 Validity Not Before: Nov 5 07:45:01 2025 GMT Not After : Nov 12 07:45:01 2025 GMT Subject: CN=690b007d-3a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2f:e7:53:51:5f:b9:17:4b:67:68:6f:c5:30: 71:be:36:e7:c2:df:12:7f:f8:be:1d:f0:27:3b:0a: da:01:94:7e:3a:54:5f:1d:af:f6:17:89:e8:12:5a: c3:2a:28:a0:84:d1:0a:e6:88:d6:a9:88:7c:ca:28: 4e:9c:59:7e:fc:9b:d5:92:de:c5:07:85:06:36:41: c4:fd:5c:3e:ae:db:5e:cd:f9:56:11:a4:56:1c:5e: cc:7d:10:2c:b6:6a:41:e0:41:36:aa:d0:7b:a1:b5: a1:d3:3f:ea:de:8d:ff:f8:ed:e9:27:6b:86:57:ef: d4:65:6b:64:65:c2:09:46:74:f9:42:fa:ba:28:d5: b3:08:fe:e0:49:2e:43:06:e4:7a:bb:50:f0:08:c9: 1f:ee:6e:24:1d:43:c7:67:7f:37:42:61:06:1d:25: 88:45:c4:e5:dd:8a:c7:4e:71:79:53:b8:d6:58:08: 4e:94:ee:df:d8:5d:52:a8:ec:01:76:90:a7:28:a8: 8a:a3:39:4d:7d:fb:78:f4:17:6d:fb:8c:4a:95:66: 6f:fb:04:02:9a:46:61:b4:fd:b1:d9:fd:01:4a:5c: fb:2d:a0:f5:1d:94:77:7d:e1:1a:35:a2:30:ad:c6: 0c:86:3a:b8:24:5a:64:3b:6c:7e:bc:c2:b2:be:a0: f2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:56:6B:D5:1A:70:D3:2A:69:57:7C:26:DE:45:50:D4:E0:FA:86:AE X509v3 Authority Key Identifier: keyid:F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0e:8e:1e:93:4e:09:17:d9:14:93:ab:8b:72:82:18:d4:18: 04:62:2c:68:7f:96:6a:16:8d:da:63:0f:7a:35:b3:49:35:43: 1c:9e:d8:41:12:0d:a7:ab:8c:f6:85:57:17:f3:49:d0:69:57: 05:f9:f4:ae:1c:62:1a:41:4c:5b:b2:05:b3:8b:33:7e:9f:7f: aa:fb:7c:31:4a:9e:ff:f2:2f:77:9b:51:eb:8b:24:e0:46:ef: db:b1:21:ec:8f:e2:f8:1f:29:9a:24:56:6c:92:eb:f4:0e:6c: ef:75:99:1e:bf:c6:45:f2:8b:ac:c2:49:b6:5a:16:74:05:50: 9e:24:fd:e7:0b:81:35:2a:3f:19:90:40:3e:c7:d9:4a:a3:fe: 76:1c:0b:1e:22:d7:5c:f5:0b:cc:c0:91:87:6b:28:47:a2:c8: 76:ee:54:06:68:a9:23:be:39:39:5b:fd:12:b0:74:4b:5f:c5: fd:3e:a7:6d:3f:fb:69:df:d3:7d:97:16:34:9d:4b:07:90:71: 4e:47:2f:05:bc:8d:98:68:1a:65:77:1e:ae:e9:d5:a8:ee:db: b3:70:4d:14:29:b8:e2:44:7f:42:ac:af:b8:10:b0:0b:6b:e1: b4:2a:89:58:15:9d:aa:78:a4:92:4a:81:66:54:ee:14:ec:af: 70:a2:87:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDMzMjExMC8GA1UEBRMoRjE0MkZBOTA3NEYxNTU1OTNENDRDM0QxRDAxNEE3REUz OTczNzMwNTAeFw0yNTExMDUwNzQ1MDFaFw0yNTExMTIwNzQ1MDFaMBgxFjAUBgNV BAMTDTY5MGIwMDdkLTNhNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNL+dTUV+5F0tnaG/FMHG+NufC3xJ/+L4d8Cc7CtoBlH46VF8dr/YXiegSWsMq KKCE0QrmiNapiHzKKE6cWX78m9WS3sUHhQY2QcT9XD6u217N+VYRpFYcXsx9ECy2 akHgQTaq0HuhtaHTP+rejf/47ekna4ZX79Rla2RlwglGdPlC+roo1bMI/uBJLkMG 5Hq7UPAIyR/ubiQdQ8dnfzdCYQYdJYhFxOXdisdOcXlTuNZYCE6U7t/YXVKo7AF2 kKcoqIqjOU19+3j0F237jEqVZm/7BAKaRmG0/bHZ/QFKXPstoPUdlHd94Ro1ojCt xgyGOrgkWmQ7bH68wrK+oPJFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw1Zr1Rpw 0yppV3wm3kVQ1OD6hq4wHwYDVR0jBBgwFoAU8UL6kHTxVVk9RMPR0BSn3jlzcwUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwMzMyLzQ3RTFDNjE2NjVG MjExRjA4MUI5RjExREM0RjlBRTAyLzhVTDZrSFR4VlZrOVJNUFIwQlNuM2psemN3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFVMNmtIVHhWVms5Uk1QUjBCU24zamx6Y3dVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw MzMyLzQ3RTFDNjE2NjVGMjExRjA4MUI5RjExREM0RjlBRTAyLzhVTDZrSFR4VlZr OVJNUFIwQlNuM2psemN3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACoOjh6TTgkX2RSTq4tyghjUGARiLGh/lmoWjdpjD3o1s0k1Qxye2EES DaerjPaFVxfzSdBpVwX59K4cYhpBTFuyBbOLM36ff6r7fDFKnv/yL3ebUeuLJOBG 79uxIeyP4vgfKZokVmyS6/QObO91mR6/xkXyi6zCSbZaFnQFUJ4k/ecLgTUqPxmQ QD7H2Uqj/nYcCx4i11z1C8zAkYdrKEeiyHbuVAZoqSO+OTlb/RKwdEtfxf0+p20/ +2nf032XFjSdSweQcU5HLwW8jZhoGmV3Hq7p1aju27NwTRQpuOJEf0Ksr7gQsAtr 4bQqiVgVnap4pJJKgWZU7hTsr3Cih2g= -----END CERTIFICATE-----Generated at Wed Nov 5 15:41:24 2025 by rpki-client