$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: mV3hrvCnrb7x7m6YpSmtnc7F/hmRfV0N7UTHa58tQ4w= Subject key identifier: C3:B0:3A:12:69:A4:2A:1E:14:39:2C:AC:25:0C:A2:44:7D:27:C8:7E Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 08F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 08E8 Signing time: Tue 04 Nov 2025 20:27:32 +0000 Manifest this update: Tue 04 Nov 2025 20:27:32 +0000 Manifest next update: Tue 11 Nov 2025 20:27:32 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: nmENjKL4KDs3WCWbuBSwGUsAzDbEqmIYR7EHH6nmCrE=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2294 (0x8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Nov 4 20:27:32 2025 GMT Not After : Nov 11 20:27:32 2025 GMT Subject: CN=690a61b4-5d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:64:de:58:e8:4a:bf:49:0f:ad:c1:40:fc: 7f:4a:14:8f:a9:8a:b3:e6:dc:24:de:1a:39:5d:39: f7:6a:ca:79:60:22:6c:80:a3:27:28:e8:b1:7b:c5: a1:17:ff:06:33:65:e0:67:86:32:bc:24:c8:43:42: 3e:45:55:e4:f0:41:c2:21:89:b5:c1:23:9f:68:11: f1:79:24:5b:38:ab:fe:8f:5e:dc:24:63:29:2d:8c: 37:df:b5:f0:38:ca:a6:dc:7d:7d:6c:ab:27:2f:75: f3:d0:c4:6a:5b:40:44:42:06:03:97:a2:8d:a8:ac: 9b:c3:1b:b8:0b:98:ae:cc:5f:7e:bc:59:d7:b0:26: 9b:a9:e3:98:be:84:86:6e:e2:9a:3f:3f:e6:ee:81: 6f:f4:f2:4b:f6:b0:1f:1e:27:df:34:0a:cc:f1:5f: 31:12:85:b3:12:2b:38:33:b8:91:4b:c1:27:8a:dd: 0c:5b:3e:bb:83:95:16:1f:49:ac:03:d8:90:83:13: 22:1e:ef:b8:ce:5e:dc:b2:45:60:ec:11:fd:5d:32: 86:0b:28:0c:05:50:24:87:28:36:a2:08:6e:47:ac: 97:d7:47:3e:bf:65:c9:75:9a:9b:a1:16:7a:a5:61: af:46:e6:af:5e:b4:77:24:97:0b:58:57:0a:6a:81: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B0:3A:12:69:A4:2A:1E:14:39:2C:AC:25:0C:A2:44:7D:27:C8:7E X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:42:0f:db:62:91:1c:63:4a:2a:b2:5f:f5:5f:51:ab:e7:6e: 92:24:5b:0b:cf:fc:69:70:32:91:ab:20:a3:25:17:41:fe:3e: c8:98:52:3f:de:13:49:49:cb:d1:38:95:e6:40:f4:b8:43:3a: 9b:76:b4:e5:10:6e:ef:fc:b7:d4:6c:43:3f:a0:67:96:43:27: 7a:aa:46:cf:73:24:98:10:3a:d5:a7:82:16:13:ea:22:fb:7a: c8:df:38:17:3e:8a:b4:00:ce:8b:17:ba:51:22:22:1d:d0:aa: d4:98:a9:76:f8:70:b5:49:60:00:78:0f:92:37:42:14:6b:9f: 5d:5f:00:d0:a5:f7:9f:31:19:9e:f6:d1:49:80:ba:ba:52:01: 3c:bb:6a:33:6d:fb:33:d6:e6:6a:13:b5:59:2d:98:fc:63:d9: d9:c0:fe:a5:9b:9c:44:ca:56:02:3b:a2:cd:db:9e:cb:3c:a7: 85:7c:7e:7f:3c:19:8a:05:d4:a9:ce:52:1b:81:ba:8c:24:49: 2c:d9:c0:cb:21:3e:11:4a:b0:1c:a9:32:18:f3:34:87:2a:24: 7d:94:a6:81:a6:6d:4e:89:f4:83:20:b5:92:51:94:2e:cd:8b: fe:84:1d:56:16:94:35:ba:b5:ed:4c:fb:cc:d3:60:7f:b1:99: e8:c3:29:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUxMTA0MjAyNzMyWhcNMjUxMTExMjAyNzMyWjAYMRYwFAYD VQQDEw02OTBhNjFiNC01ZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9pk3ljoSr9JD63BQPx/ShSPqYqz5twk3ho5XTn3asp5YCJsgKMnKOixe8Wh F/8GM2XgZ4YyvCTIQ0I+RVXk8EHCIYm1wSOfaBHxeSRbOKv+j17cJGMpLYw337Xw OMqm3H19bKsnL3Xz0MRqW0BEQgYDl6KNqKybwxu4C5iuzF9+vFnXsCabqeOYvoSG buKaPz/m7oFv9PJL9rAfHiffNArM8V8xEoWzEis4M7iRS8Enit0MWz67g5UWH0ms A9iQgxMiHu+4zl7cskVg7BH9XTKGCygMBVAkhyg2oghuR6yX10c+v2XJdZqboRZ6 pWGvRuavXrR3JJcLWFcKaoEViwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOwOhJp pCoeFDksrCUMokR9J8h+MB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjQg/bYpEcY0oqsl/1X1Gr526SJFsLz/xpcDKRqyCjJRdB/j7ImFI/ 3hNJScvROJXmQPS4QzqbdrTlEG7v/LfUbEM/oGeWQyd6qkbPcySYEDrVp4IWE+oi +3rI3zgXPoq0AM6LF7pRIiId0KrUmKl2+HC1SWAAeA+SN0IUa59dXwDQpfefMRme 9tFJgLq6UgE8u2ozbfsz1uZqE7VZLZj8Y9nZwP6lm5xEylYCO6LN257LPKeFfH5/ PBmKBdSpzlIbgbqMJEks2cDLIT4RSrAcqTIY8zSHKiR9lKaBpm1OifSDILWSUZQu zYv+hB1WFpQ1urXtTPvM02B/sZnowyn5 -----END CERTIFICATE-----Generated at Wed Nov 5 19:33:10 2025 by rpki-client