$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: jWpgZYmBjeoHt07YVxq4OTKPNlqhh0RJWnfEHawtQv0= Subject key identifier: D4:AB:B3:E9:94:27:43:C7:4E:9A:E5:3C:6A:EE:47:59:58:E6:85:75 Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 09DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 09D3 Signing time: Tue 04 Nov 2025 20:01:32 +0000 Manifest this update: Tue 04 Nov 2025 20:01:32 +0000 Manifest next update: Tue 11 Nov 2025 20:01:32 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: kqx/uyya/R9fiPZirq0rWL2pKMgHZoE/0Z3KQ58CSQs=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: DvSBvAVly3QEdI4AtJMEHxBNtfNAhn6C/63PWm2Ji6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2522 (0x9da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Nov 4 20:01:32 2025 GMT Not After : Nov 11 20:01:32 2025 GMT Subject: CN=690a5b9c-9f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:c9:50:82:53:b1:c4:d9:67:6e:31:c4:73: 2b:bf:c2:d9:93:e0:0d:cd:29:20:bb:23:97:2c:a9: af:16:a9:03:cb:42:06:63:ae:fc:07:44:6e:cc:6c: 75:fb:64:38:63:5c:9f:8d:8a:fa:9d:df:0a:41:63: f3:c8:f4:13:33:44:72:d9:6d:aa:7d:5c:1a:ce:4e: 9c:82:ef:f9:97:7d:83:82:31:a3:3d:1b:f7:a6:ea: 39:16:61:94:68:36:0d:5d:bc:af:0c:12:a3:33:27: 76:c3:2d:46:2f:fc:04:27:d9:0a:45:d9:15:33:ec: 4d:96:89:b3:ca:7b:27:a8:c6:59:5c:bd:3b:48:32: f2:8c:36:92:6c:3d:9d:a1:39:13:9a:14:f7:c1:4d: fa:25:ad:56:e1:d0:74:a0:f7:f1:d2:6a:de:0f:16: e1:5c:0d:43:4a:85:39:43:ca:9a:12:ce:77:3a:ac: 73:ac:05:b5:7c:d9:87:4c:36:84:b4:e2:5c:97:d2: 9c:69:a0:e9:d2:0e:be:9c:40:5f:b1:95:6d:f8:70: 9f:d5:4f:06:26:39:ad:e5:6d:98:2e:f1:22:6a:75: ab:8f:1f:13:f8:e6:3d:5d:b3:ec:e7:15:52:50:9f: e6:76:c1:56:b5:ee:76:bb:f6:e2:08:87:8d:b7:be: bc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AB:B3:E9:94:27:43:C7:4E:9A:E5:3C:6A:EE:47:59:58:E6:85:75 X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:bd:04:8e:27:c2:61:b5:8b:6a:16:48:4b:89:66:eb:0c:50: b8:78:09:61:83:75:81:0c:a6:2d:64:14:4d:df:b2:dc:49:01: 3e:86:ca:98:ca:d6:b7:53:e7:68:8b:d8:d2:02:a7:f4:9e:71: f4:34:39:28:b2:dd:95:45:2a:88:94:26:2f:cd:b9:84:ad:28: 2b:87:ed:a4:aa:4f:40:94:43:7a:7e:2e:4d:5e:50:df:2e:31: 94:15:a5:6a:84:f5:aa:29:d0:7c:97:67:f4:44:8c:9a:d6:01: e0:94:97:f8:cd:88:21:15:7a:ca:b7:d1:90:54:ee:ce:30:c2: 72:ba:40:56:bb:6b:04:68:4b:4a:79:d9:65:1b:f2:73:0c:18: 81:36:3c:c7:ce:b3:8e:21:2e:eb:d3:ca:32:f2:4b:0f:82:d8: f6:60:8b:15:3a:74:c9:fd:c8:12:59:67:1a:58:d6:02:47:28: 79:9f:c3:08:90:ab:0e:0c:c0:96:2e:ae:9f:c6:18:48:c8:3a: ae:47:61:b9:19:a9:4c:5f:04:61:4b:16:84:67:e2:bd:fa:05: 18:d9:82:89:30:c6:66:50:cc:b5:a7:90:74:71:13:13:9c:c1: 59:17:fe:58:40:3c:49:f3:3f:5e:d1:6d:3e:73:2d:8d:b0:39: 30:a5:a3:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjUxMTA0MjAwMTMyWhcNMjUxMTExMjAwMTMyWjAYMRYwFAYD VQQDEw02OTBhNWI5Yy05ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAPJUIJTscTZZ24xxHMrv8LZk+ANzSkguyOXLKmvFqkDy0IGY678B0RuzGx1 +2Q4Y1yfjYr6nd8KQWPzyPQTM0Ry2W2qfVwazk6cgu/5l32DgjGjPRv3puo5FmGU aDYNXbyvDBKjMyd2wy1GL/wEJ9kKRdkVM+xNlomzynsnqMZZXL07SDLyjDaSbD2d oTkTmhT3wU36Ja1W4dB0oPfx0mreDxbhXA1DSoU5Q8qaEs53OqxzrAW1fNmHTDaE tOJcl9KcaaDp0g6+nEBfsZVt+HCf1U8GJjmt5W2YLvEianWrjx8T+OY9XbPs5xVS UJ/mdsFWte52u/biCIeNt768cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSrs+mU J0PHTprlPGruR1lY5oV1MB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjvQSOJ8JhtYtqFkhLiWbrDFC4eAlhg3WBDKYtZBRN37LcSQE+hsqY yta3U+doi9jSAqf0nnH0NDkost2VRSqIlCYvzbmErSgrh+2kqk9AlEN6fi5NXlDf LjGUFaVqhPWqKdB8l2f0RIya1gHglJf4zYghFXrKt9GQVO7OMMJyukBWu2sEaEtK edllG/JzDBiBNjzHzrOOIS7r08oy8ksPgtj2YIsVOnTJ/cgSWWcaWNYCRyh5n8MI kKsODMCWLq6fxhhIyDquR2G5GalMXwRhSxaEZ+K9+gUY2YKJMMZmUMy1p5B0cRMT nMFZF/5YQDxJ8z9e0W0+cy2NsDkwpaNL -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:52 2025 by rpki-client