$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: pT2zygv11A/d704rqP7zVR7VqzTBMgByZzRItSOoLz4= Subject key identifier: AA:BB:B5:57:58:88:52:8D:A5:EB:A1:65:C4:D0:D3:21:51:3B:48:63 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 2711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 268B Signing time: Tue 04 Nov 2025 15:47:34 +0000 Manifest this update: Tue 04 Nov 2025 15:47:33 +0000 Manifest next update: Tue 11 Nov 2025 15:47:33 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: S/KGCcLl+QIx3LSfw+SFybrk4A2rFblu375uJHPAaKs=) 2: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: inYPm2/qoWyhJvYPwsRqidJ8km0pHeal/3nb7zNYQCU=) 3: 694FA6C678B511F0B9F98C80C4F9AE02.roa (hash: 01wLk9RHRk483aM+7518CMU3cV26N05+ze+yCvqPXlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10001 (0x2711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Nov 4 15:47:33 2025 GMT Not After : Nov 11 15:47:33 2025 GMT Subject: CN=690a2016-c542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:0e:d1:f6:56:7a:18:72:55:83:a6:fc:ba: 9e:b0:0e:b3:5c:bf:7a:d1:79:15:32:63:ef:0d:b8: a3:51:d3:71:19:8e:a1:51:6e:90:4f:ec:0f:35:0d: 7c:0e:32:62:d6:5f:ea:a8:02:b3:c4:17:70:4e:32: 61:c9:a5:d5:89:6b:d7:9a:f7:27:d1:e7:cd:42:51: e7:fa:c3:08:1e:39:34:f3:2b:90:f7:4d:50:bf:77: af:84:86:a4:dc:09:43:6f:3b:85:b8:72:35:13:ea: 86:12:8d:a8:1c:86:7f:d4:87:7a:0a:60:d4:15:91: 24:52:d4:0b:3e:d3:2d:1e:1c:ef:e0:e3:33:32:d8: 89:6a:68:3c:fc:79:02:57:02:18:ca:da:87:04:b2: d9:57:22:a9:95:85:ab:13:e2:f7:f2:a9:06:fc:d1: 14:20:48:25:d2:44:b1:44:17:f3:9c:20:90:a6:41: d1:f5:9e:b8:ce:8a:8e:de:85:de:a6:ca:38:b0:92: 75:2f:64:23:48:8d:69:7e:e6:7d:0f:ca:9e:2e:1a: 91:ac:13:d8:0b:59:76:c5:de:10:47:e8:f7:eb:e2: 6a:63:81:fa:06:70:cb:d4:9f:5b:f3:17:f0:bd:25: d6:a9:53:f3:ea:d9:25:b3:67:0d:98:46:4d:ea:52: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BB:B5:57:58:88:52:8D:A5:EB:A1:65:C4:D0:D3:21:51:3B:48:63 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d4:39:9c:61:aa:b6:05:e3:ae:00:88:e5:8c:25:02:40:aa: bb:d7:ea:4c:e7:c9:ae:39:38:13:c5:50:b1:05:94:eb:ef:8f: 3b:ef:9d:b6:46:ab:88:33:16:14:c2:84:24:59:dc:80:38:51: 1c:fa:b0:e9:57:ce:93:17:1c:35:01:14:28:3f:b0:83:43:ad: 4b:1d:24:29:7b:79:1d:6a:96:66:8c:8a:96:6c:40:dc:f8:91: bf:ce:23:6f:d8:d0:16:e0:34:a8:b3:20:8a:ff:46:65:4e:d5: ce:9c:9f:70:43:fa:4c:1d:18:e2:56:23:6e:f4:66:a4:99:1c: 60:0d:98:b1:8f:12:6e:59:cf:ca:cb:6d:2b:f0:2a:2b:f1:92: ae:8e:d3:d9:86:c6:c4:f5:3e:54:47:a2:f9:1a:69:a2:5e:56: d1:30:35:ca:42:6e:4b:57:1e:e2:11:21:47:a9:51:1c:ce:94: f9:df:87:84:7c:0b:d8:61:9f:a9:3b:b3:2a:ee:fa:31:44:d8: 28:be:9f:cc:81:6b:e7:b8:a8:df:3e:25:ee:1e:a4:d3:ec:48: f3:55:ac:f1:ff:a3:4d:43:dc:3d:a5:d3:7e:cd:be:68:a6:10: 2e:06:9b:a8:c5:1c:1c:f5:0c:1b:4a:c6:20:28:f4:8e:ec:45: 33:c3:f7:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjUxMTA0MTU0NzMzWhcNMjUxMTExMTU0NzMzWjAYMRYwFAYD VQQDEw02OTBhMjAxNi1jNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rMO0fZWehhyVYOm/LqesA6zXL960XkVMmPvDbijUdNxGY6hUW6QT+wPNQ18 DjJi1l/qqAKzxBdwTjJhyaXViWvXmvcn0efNQlHn+sMIHjk08yuQ901Qv3evhIak 3AlDbzuFuHI1E+qGEo2oHIZ/1Id6CmDUFZEkUtQLPtMtHhzv4OMzMtiJamg8/HkC VwIYytqHBLLZVyKplYWrE+L38qkG/NEUIEgl0kSxRBfznCCQpkHR9Z64zoqO3oXe pso4sJJ1L2QjSI1pfuZ9D8qeLhqRrBPYC1l2xd4QR+j36+JqY4H6BnDL1J9b8xfw vSXWqVPz6tkls2cNmEZN6lIILwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKq7tVdY iFKNpeuhZcTQ0yFRO0hjMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj1DmcYaq2BeOuAIjljCUCQKq71+pM58muOTgTxVCxBZTr74877522 RquIMxYUwoQkWdyAOFEc+rDpV86TFxw1ARQoP7CDQ61LHSQpe3kdapZmjIqWbEDc +JG/ziNv2NAW4DSosyCK/0ZlTtXOnJ9wQ/pMHRjiViNu9GakmRxgDZixjxJuWc/K y20r8Cor8ZKujtPZhsbE9T5UR6L5GmmiXlbRMDXKQm5LVx7iESFHqVEczpT534eE fAvYYZ+pO7Mq7voxRNgovp/MgWvnuKjfPiXuHqTT7EjzVazx/6NNQ9w9pdN+zb5o phAuBpuoxRwc9QwbSsYgKPSO7EUzw/dk -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:38 2025 by rpki-client