$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: y7c3LVlP4QYf+sgB49PJ5qbODIjlf9/r9RDMTB4yhmU= Subject key identifier: E1:A2:89:CE:F5:89:A9:28:4B:6F:67:00:8D:E0:87:8C:32:EE:A1:4A Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 0482 Signing time: Mon 03 Nov 2025 00:04:25 +0000 Manifest this update: Mon 03 Nov 2025 00:04:24 +0000 Manifest next update: Mon 10 Nov 2025 00:04:24 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: 7DuTSRVXSFK1pHI8MYcF1uhR2wW6C5qy3Ib4f/j2ybk=) 2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: shUyL0T+nIZClfZrL/H8TAF10vSCmqRMW+JFhYiGjJU=) 3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: PInFHi+DRZ/0Ub/EKAgjN1FIJnedDnHONJpIq7oTfD8=) 4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: vkj3SfiZ1waq+IfpcqocmD4VCDj2+bbKheOVyJpVYTY=) 5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: VaOofZOdoeXB+ROUfhfuam0fJhFDWk1WoiIImzNsQ8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: Nov 3 00:04:24 2025 GMT Not After : Nov 10 00:04:24 2025 GMT Subject: CN=6907f188-72db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:5d:eb:c1:60:c9:e1:3a:48:31:a5:ff:65: 70:77:d1:f1:74:0f:77:7b:11:92:6c:e3:92:0b:a1: 50:55:41:25:d1:16:79:6b:f5:e3:ad:62:e8:03:86: 73:57:64:09:75:d9:a3:2a:8a:01:b3:8b:5d:c8:84: 49:0a:3f:7b:f1:cf:c6:d7:c2:25:c1:58:ca:e1:5d: b1:4b:3d:05:fc:e6:6b:ea:e3:9c:0b:81:4b:80:22: b1:50:be:82:9c:39:13:df:b3:4b:6e:aa:ec:93:b0: 92:af:9e:c2:ba:d8:ee:f3:df:03:db:89:d9:1d:b7: 41:fd:b2:6a:78:df:80:54:7e:8c:4d:c2:6d:e9:b7: 59:55:fa:90:56:67:7b:67:55:4e:8f:09:82:36:6a: b2:01:dc:d1:9c:f0:ab:9d:fe:c1:67:3e:5b:3e:01: 61:f2:70:bd:0f:c1:5c:5d:dd:3c:59:86:a3:57:d8: 33:fd:f8:61:4c:bb:bc:08:3c:74:c3:30:1f:5e:ca: 37:51:90:5b:6d:f8:50:8c:29:71:16:9c:25:76:44: e0:5b:74:50:42:d0:eb:45:50:85:af:dc:4c:c6:85: f0:31:b7:bb:57:f4:26:ae:15:c5:e3:d0:d9:bc:38: 03:7f:62:57:95:2c:f8:9e:c4:79:17:41:40:3a:09: f9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A2:89:CE:F5:89:A9:28:4B:6F:67:00:8D:E0:87:8C:32:EE:A1:4A X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:05:cf:e3:9a:9d:2d:c7:c8:eb:df:a2:60:ef:c5:c6:e2:25: ed:a4:fc:e7:e6:76:3d:6c:f8:fc:6d:bc:85:9e:0e:d0:36:13: 74:40:02:cb:e3:2e:d7:72:1f:b2:8b:65:46:eb:95:2f:c3:74: 45:3e:84:ca:a9:81:e8:ff:e3:a6:c7:37:11:82:63:d3:a5:7e: 23:15:04:5b:e7:fb:77:d3:ac:e1:83:b8:88:71:1c:80:b0:80: 4f:45:69:1a:dc:c8:2d:41:5e:7c:4c:49:39:2b:c6:b4:99:ae: ca:48:58:e4:13:18:f6:7f:f4:4d:92:25:99:c7:32:b5:8e:c6: 2d:57:66:f1:ea:ad:32:8f:2b:79:6f:e8:ff:7b:50:7a:3e:aa: c8:e7:92:39:11:f3:12:fa:26:86:16:d5:bc:6e:a6:93:b5:83: 2b:a2:55:3d:08:d3:31:80:06:3b:7b:17:f1:e7:2a:61:09:77: 9c:7a:e5:e7:43:20:c7:7d:4c:3d:71:fa:56:9d:19:55:91:fa: 4e:92:1b:6f:96:c9:db:6f:24:19:19:7d:fd:1c:8d:06:65:36: d9:73:39:6e:fe:a8:30:6d:3a:35:fb:85:e9:96:8f:c8:27:a1: 69:2d:45:8c:d6:71:0a:75:49:ab:54:63:09:83:66:73:32:87: 74:fd:bf:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjUxMTAzMDAwNDI0WhcNMjUxMTEwMDAwNDI0WjAYMRYwFAYD VQQDEw02OTA3ZjE4OC03MmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpVd68FgyeE6SDGl/2Vwd9HxdA93exGSbOOSC6FQVUEl0RZ5a/XjrWLoA4Zz V2QJddmjKooBs4tdyIRJCj978c/G18IlwVjK4V2xSz0F/OZr6uOcC4FLgCKxUL6C nDkT37NLbqrsk7CSr57Cutju898D24nZHbdB/bJqeN+AVH6MTcJt6bdZVfqQVmd7 Z1VOjwmCNmqyAdzRnPCrnf7BZz5bPgFh8nC9D8FcXd08WYajV9gz/fhhTLu8CDx0 wzAfXso3UZBbbfhQjClxFpwldkTgW3RQQtDrRVCFr9xMxoXwMbe7V/QmrhXF49DZ vDgDf2JXlSz4nsR5F0FAOgn5fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGiic71 iakoS29nAI3gh4wy7qFKMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsBc/jmp0tx8jr36Jg78XG4iXtpPzn5nY9bPj8bbyFng7QNhN0QALL 4y7Xch+yi2VG65Uvw3RFPoTKqYHo/+OmxzcRgmPTpX4jFQRb5/t306zhg7iIcRyA sIBPRWka3MgtQV58TEk5K8a0ma7KSFjkExj2f/RNkiWZxzK1jsYtV2bx6q0yjyt5 b+j/e1B6PqrI55I5EfMS+iaGFtW8bqaTtYMrolU9CNMxgAY7exfx5yphCXeceuXn QyDHfUw9cfpWnRlVkfpOkhtvlsnbbyQZGX39HI0GZTbZczlu/qgwbTo1+4Xplo/I J6FpLUWM1nEKdUmrVGMJg2ZzMod0/b8k -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:49 2025 by rpki-client