$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: e8yionToC82B5/lr2IpG/TMWCTUGTH6Dd0COLm2twEI= Subject key identifier: 82:5F:8E:8A:EF:E4:B0:84:B8:8D:5A:C1:34:35:9E:2D:71:BE:65:16 Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 0497 Signing time: Wed 05 Nov 2025 00:04:00 +0000 Manifest this update: Wed 05 Nov 2025 00:03:59 +0000 Manifest next update: Wed 12 Nov 2025 00:03:59 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: cQ8i8Fyq+ShUu9lDfWQFurncTEgRGFB0OVcvo46Zcdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Validity Not Before: Nov 5 00:03:59 2025 GMT Not After : Nov 12 00:03:59 2025 GMT Subject: CN=690a9470-b86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:19:6d:50:82:d5:cb:b7:c3:63:b8:17:ca: 88:23:be:c5:2f:71:0d:14:49:98:a0:09:60:f0:a1: ca:d2:51:80:33:22:29:e8:d5:b7:ee:36:ae:67:df: 0e:6d:60:8e:b3:39:e3:54:65:84:34:3b:db:34:f0: 88:8a:3c:05:ea:ca:eb:01:18:0b:6f:5f:8a:2b:d5: 6d:53:2f:07:7d:84:0a:98:38:9c:f6:62:4f:53:80: 68:e7:8e:be:40:f7:9f:20:c3:4a:6d:22:7a:64:cc: 1c:c7:fa:91:7a:08:ad:1a:ab:58:e7:8e:cf:65:2b: 93:98:c0:b4:78:d3:ab:1f:86:ec:f1:1a:bb:12:fe: b0:6d:5b:13:6d:a4:4c:70:3b:7f:d1:1f:db:19:31: 65:e6:aa:87:41:07:2b:e9:a0:28:71:5e:a5:3c:94: 08:f5:2f:5a:ca:f0:cd:50:1c:31:73:64:e0:8d:8d: 42:01:9a:b1:c3:29:00:b1:0d:11:44:ff:73:91:ac: e4:a9:c7:8d:4f:48:9f:a0:b9:6b:b2:55:72:c8:e9: b7:c4:77:11:cd:c3:de:3f:1d:9d:3e:1d:ca:f8:82: be:b7:8f:e8:1c:5e:74:47:03:4b:2f:76:35:a7:59: 91:62:e0:1f:a0:86:e2:38:9d:31:92:38:32:58:60: ce:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5F:8E:8A:EF:E4:B0:84:B8:8D:5A:C1:34:35:9E:2D:71:BE:65:16 X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9d:bb:74:3a:45:88:40:02:8e:a9:24:81:c5:38:0e:17:d1: 10:cd:96:07:51:cb:92:6b:4f:08:67:27:eb:ab:bd:b7:f6:5b: 32:29:19:d7:b8:34:67:5a:23:a8:f3:ef:73:e2:b1:f1:a5:5b: ea:d4:75:dd:84:a2:9e:97:25:fe:a1:9e:78:ec:0c:6c:e2:06: 54:dc:6d:14:cc:43:59:2d:db:17:b8:6b:bb:4a:df:8e:9c:0c: 0a:40:1a:6e:af:0d:ad:73:7f:73:b5:f3:4e:cb:05:8a:04:be: a5:0a:21:28:22:5b:08:86:a0:91:62:ad:e2:e9:13:e2:19:90: dc:77:49:c7:5d:5d:fd:17:19:05:a8:8e:e5:73:c4:84:a9:78: f3:a9:b6:e8:75:7d:a0:cc:04:d0:bf:ff:e2:34:b0:b3:71:78: ad:0c:6f:6b:16:9e:cf:37:17:d9:df:14:d5:27:2d:ea:54:26: 73:4d:6c:5f:75:d8:fd:af:c4:4e:3d:b6:e8:b1:bf:57:a5:0d: f5:72:f0:39:00:42:84:b1:33:bb:fc:1a:86:f1:af:24:bd:60: 10:89:d9:2e:65:a3:1c:3f:da:d3:52:84:dd:15:0b:83:8d:11: a0:7e:2d:f0:c2:67:f7:15:82:d6:40:36:84:0e:ef:13:a1:15: d7:8e:5e:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjUxMTA1MDAwMzU5WhcNMjUxMTEyMDAwMzU5WjAYMRYwFAYD VQQDEw02OTBhOTQ3MC1iODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ0ZbVCC1cu3w2O4F8qII77FL3ENFEmYoAlg8KHK0lGAMyIp6NW37jauZ98O bWCOsznjVGWENDvbNPCIijwF6srrARgLb1+KK9VtUy8HfYQKmDic9mJPU4Bo546+ QPefIMNKbSJ6ZMwcx/qRegitGqtY547PZSuTmMC0eNOrH4bs8Rq7Ev6wbVsTbaRM cDt/0R/bGTFl5qqHQQcr6aAocV6lPJQI9S9ayvDNUBwxc2TgjY1CAZqxwykAsQ0R RP9zkazkqceNT0ifoLlrslVyyOm3xHcRzcPePx2dPh3K+IK+t4/oHF50RwNLL3Y1 p1mRYuAfoIbiOJ0xkjgyWGDOXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJfjorv 5LCEuI1awTQ1ni1xvmUWMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbnbt0OkWIQAKOqSSBxTgOF9EQzZYHUcuSa08IZyfrq7239lsyKRnX uDRnWiOo8+9z4rHxpVvq1HXdhKKelyX+oZ547Axs4gZU3G0UzENZLdsXuGu7St+O nAwKQBpurw2tc39ztfNOywWKBL6lCiEoIlsIhqCRYq3i6RPiGZDcd0nHXV39FxkF qI7lc8SEqXjzqbbodX2gzATQv//iNLCzcXitDG9rFp7PNxfZ3xTVJy3qVCZzTWxf ddj9r8ROPbbosb9XpQ31cvA5AEKEsTO7/BqG8a8kvWAQidkuZaMcP9rTUoTdFQuD jRGgfi3wwmf3FYLWQDaEDu8ToRXXjl7+ -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:40 2025 by rpki-client