$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json) Hash identifier: gg8CeQGUeL+AmKzRyANd6Nnk2HcH9q2Kaj1zOm7Ed00= Subject key identifier: 3E:90:36:0E:F0:A0:D1:32:91:4D:DA:8E:A2:51:65:EF:C2:DA:B1:FD Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft Manifest number: 018A Signing time: Mon 03 Nov 2025 03:33:09 +0000 Manifest this update: Mon 03 Nov 2025 03:33:08 +0000 Manifest next update: Mon 10 Nov 2025 03:33:08 +0000 Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: BUWvRe4ZvjhKSHn9GvXoyxfLOwXzQfLeohLa5VWtUQA=) 2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: icEjBAvtyS7bBSn0NXrfM0VKf/GFl7OVPnJ58XOd/T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Validity Not Before: Nov 3 03:33:08 2025 GMT Not After : Nov 10 03:33:08 2025 GMT Subject: CN=69082274-2f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:27:9f:6b:e8:f4:06:22:39:7b:ab:70:78: 0e:55:10:51:2b:d0:74:84:3e:68:f3:f1:e9:7b:3e: b2:9d:4f:60:51:92:2b:32:91:19:72:78:7e:ef:f4: 30:54:0c:b0:92:df:13:3e:e8:19:5b:96:f7:f1:5b: a7:de:0a:e4:7e:a3:ef:72:ab:ce:a3:f5:c6:dc:90: 98:8d:bd:2a:68:07:d9:eb:ab:f0:3f:0a:76:26:16: ef:32:8c:01:26:3a:63:9a:32:2c:56:2a:31:05:63: 81:f2:89:4d:0a:2b:45:c6:95:b8:d0:80:b1:5f:48: e4:f1:44:b2:4b:24:bc:f4:3f:f7:47:39:58:5e:81: d4:b8:3e:f2:57:6d:fa:9b:0c:b8:dd:ac:34:a3:71: 7e:7f:75:00:b4:7c:36:c1:63:eb:79:16:fc:e2:14: f1:40:82:f1:dd:6f:a4:41:f9:b1:60:1b:36:ff:1e: 8f:8f:75:f3:20:0c:37:a0:36:cb:be:ce:85:35:2e: bb:a0:82:63:f5:5c:9c:4d:cd:76:24:f1:9f:06:9a: 3c:af:ff:fe:0a:87:d5:9b:ba:b9:5e:af:18:fb:60: bc:48:98:6f:40:71:4f:01:64:da:a0:2c:79:b1:c8: c3:88:0c:4c:4a:e2:06:42:66:5f:18:ca:d8:3b:8a: 68:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:90:36:0E:F0:A0:D1:32:91:4D:DA:8E:A2:51:65:EF:C2:DA:B1:FD X509v3 Authority Key Identifier: keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:4e:1d:6e:ee:82:d9:98:35:17:a4:43:db:07:cc:61:bb:bd: f8:d6:11:3d:fb:b1:58:58:02:cd:da:45:0f:e3:bc:f9:b1:48: a3:f8:29:6b:43:4f:2c:78:fd:6e:9d:f7:0a:3f:19:00:31:88: 61:e8:42:83:74:74:0f:d7:21:ee:04:c6:d4:19:d9:0f:af:5a: 40:4d:ac:d4:a3:ab:98:13:dc:90:9a:c1:0d:71:57:86:70:d4: c7:a2:40:89:eb:d1:fc:29:73:49:9d:d7:f5:83:52:9f:2a:9d: a8:0a:83:74:69:1f:c6:d1:22:e0:08:4f:23:86:c4:cf:da:a3: 69:d0:0d:7b:30:33:22:d2:1e:da:0c:c0:9d:a8:f7:45:34:94: 2d:b7:26:ba:04:4f:41:68:6e:45:55:75:32:c7:41:05:e4:d3: 48:6b:d9:35:f3:d9:76:2d:8d:ad:5e:70:cb:d0:40:94:97:64: 09:58:b8:52:ac:3b:14:1e:28:6b:64:b2:39:84:61:02:f0:1a: fa:c3:c5:65:b9:98:2d:6f:9a:60:02:11:af:d7:89:16:8c:10: 01:a7:dc:ed:e1:f2:e8:42:72:76:5b:1e:df:33:9e:7f:e1:63: e6:dc:e7:1c:bf:8f:0c:0d:1d:af:14:ec:24:c7:e7:a8:98:f7: 15:09:8d:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3 MzBEOTc1OUMwHhcNMjUxMTAzMDMzMzA4WhcNMjUxMTEwMDMzMzA4WjAYMRYwFAYD VQQDEw02OTA4MjI3NC0yZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0Qnn2vo9AYiOXurcHgOVRBRK9B0hD5o8/Hpez6ynU9gUZIrMpEZcnh+7/Qw VAywkt8TPugZW5b38Vun3grkfqPvcqvOo/XG3JCYjb0qaAfZ66vwPwp2JhbvMowB JjpjmjIsVioxBWOB8olNCitFxpW40ICxX0jk8USySyS89D/3RzlYXoHUuD7yV236 mwy43aw0o3F+f3UAtHw2wWPreRb84hTxQILx3W+kQfmxYBs2/x6Pj3XzIAw3oDbL vs6FNS67oIJj9VycTc12JPGfBpo8r//+CofVm7q5Xq8Y+2C8SJhvQHFPAWTaoCx5 scjDiAxMSuIGQmZfGMrYO4po+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6QNg7w oNEykU3ajqJRZe/C2rH9MB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCNC8zQzA5QjNGQTVDRTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2Fj OHp0MlVjYTVrbXB6RFpkWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlTh1u7oLZmDUXpEPbB8xhu7341hE9+7FYWALN2kUP47z5sUij+Clr Q08seP1unfcKPxkAMYhh6EKDdHQP1yHuBMbUGdkPr1pATazUo6uYE9yQmsENcVeG cNTHokCJ69H8KXNJndf1g1KfKp2oCoN0aR/G0SLgCE8jhsTP2qNp0A17MDMi0h7a DMCdqPdFNJQttya6BE9BaG5FVXUyx0EF5NNIa9k189l2LY2tXnDL0ECUl2QJWLhS rDsUHihrZLI5hGEC8Br6w8VluZgtb5pgAhGv14kWjBABp9zt4fLoQnJ2Wx7fM55/ 4WPm3Occv48MDR2vFOwkx+eomPcVCY3/ -----END CERTIFICATE-----Generated at Wed Nov 5 04:25:19 2025 by rpki-client