$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: 9XFx8WUhjY1jzPej3FX5X7EmHgfZNTFoTOFC/jVAtWg= Subject key identifier: 12:73:FB:67:C3:BD:FB:7E:1F:BE:97:5C:08:91:D1:89:B1:44:91:F3 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 09FF Signing time: Tue 04 Nov 2025 19:59:57 +0000 Manifest this update: Tue 04 Nov 2025 19:59:57 +0000 Manifest next update: Tue 11 Nov 2025 19:59:57 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: VJYSZAyFZZdAVy5oWXdJfVZlb/rOdQucINVm/GgBisE=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 5Gk4b25F0uq7efelkFmxT/VKGia42LkwXqnCVKORjVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Nov 4 19:59:57 2025 GMT Not After : Nov 11 19:59:57 2025 GMT Subject: CN=690a5b3d-4846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:e5:a8:28:fe:93:40:6b:48:75:0d:00:3c: 27:a3:f4:e5:f0:14:04:45:2a:4a:1a:67:70:33:e2: ca:de:e8:da:b2:7a:0a:e2:68:43:15:c7:42:bd:86: ac:8f:72:ef:ad:76:ce:6c:6b:52:9c:e8:c3:b5:26: 11:45:d5:8e:e1:94:62:85:c7:60:d3:1d:b5:5f:5c: a8:20:6f:a8:40:cb:99:b8:4e:27:5a:83:14:77:8b: 1e:48:2c:9d:c1:ff:31:1b:d5:7a:f5:df:49:5b:b8: 89:60:69:56:55:76:5e:b4:d8:ae:1a:0f:27:a3:ef: 64:9a:eb:18:99:2c:b5:c3:69:c8:41:62:c8:88:9d: 4b:0e:20:b5:73:54:91:ed:b1:8f:a5:c6:12:79:8e: 08:c6:fb:78:1f:b2:a8:12:38:47:17:41:10:fc:e0: 77:66:80:d9:38:ef:5d:60:93:bc:2e:57:5c:a9:6f: cc:a7:33:84:98:74:fb:33:e7:23:fc:17:db:97:c4: 6a:a2:ef:43:24:09:11:7f:a1:6f:29:b7:01:7f:9c: ff:f6:a2:8f:46:f0:85:34:46:b6:14:08:61:c8:b9: cc:ed:3d:a4:7b:ac:bd:2c:4b:d9:ce:de:02:ba:07: df:e5:b3:45:4a:63:bb:a8:c8:9a:6d:c6:6a:21:82: 2a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:73:FB:67:C3:BD:FB:7E:1F:BE:97:5C:08:91:D1:89:B1:44:91:F3 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b6:36:54:e0:61:02:e1:6b:6e:96:de:fd:20:76:5e:c8:6b: 82:bf:af:48:cd:86:f6:64:e8:05:ee:92:94:ee:f5:d2:74:13: 87:1c:6e:0d:73:22:38:03:1a:85:b4:c7:7c:05:f0:1d:0a:80: 72:be:09:e1:44:68:ed:e8:7b:68:5a:d7:60:e0:cb:0a:63:4b: 30:ab:ad:61:74:78:c0:a1:02:d2:cb:22:ae:48:52:87:dc:d0: 54:3d:ea:eb:cf:2e:9f:8c:5d:36:2c:6a:ff:31:9c:65:04:fa: 05:11:0e:71:83:03:fd:11:17:2c:2f:38:ea:10:82:a2:26:02: 14:b1:34:c2:8e:86:95:d2:1c:9c:7b:24:8d:20:5d:35:92:19: f9:c6:3d:c3:94:46:a1:19:bd:d9:d9:6d:8b:cc:0f:93:85:52: ab:b0:78:b2:cf:a1:b8:a7:b0:99:f9:c9:90:76:d9:f9:c7:29: 39:41:b6:ce:6b:76:24:5d:d0:12:3f:c5:97:8f:54:e5:71:3d: 7d:c3:09:00:1d:3d:a2:9c:ce:71:9b:ce:da:fd:96:76:af:dc: 59:85:0f:55:09:88:c3:db:e1:47:20:1e:98:b7:c4:42:75:65: 62:79:9e:d4:b4:ab:a0:79:64:57:63:f7:62:69:5d:a7:1d:04: 06:01:58:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjUxMTA0MTk1OTU3WhcNMjUxMTExMTk1OTU3WjAYMRYwFAYD VQQDEw02OTBhNWIzZC00ODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcPlqCj+k0BrSHUNADwno/Tl8BQERSpKGmdwM+LK3ujasnoK4mhDFcdCvYas j3LvrXbObGtSnOjDtSYRRdWO4ZRihcdg0x21X1yoIG+oQMuZuE4nWoMUd4seSCyd wf8xG9V69d9JW7iJYGlWVXZetNiuGg8no+9kmusYmSy1w2nIQWLIiJ1LDiC1c1SR 7bGPpcYSeY4Ixvt4H7KoEjhHF0EQ/OB3ZoDZOO9dYJO8LldcqW/MpzOEmHT7M+cj /Bfbl8Rqou9DJAkRf6FvKbcBf5z/9qKPRvCFNEa2FAhhyLnM7T2ke6y9LEvZzt4C ugff5bNFSmO7qMiabcZqIYIqYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJz+2fD vft+H76XXAiR0YmxRJHzMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWtjZU4GEC4Wtult79IHZeyGuCv69IzYb2ZOgF7pKU7vXSdBOHHG4N cyI4AxqFtMd8BfAdCoByvgnhRGjt6HtoWtdg4MsKY0swq61hdHjAoQLSyyKuSFKH 3NBUPerrzy6fjF02LGr/MZxlBPoFEQ5xgwP9ERcsLzjqEIKiJgIUsTTCjoaV0hyc eySNIF01khn5xj3DlEahGb3Z2W2LzA+ThVKrsHiyz6G4p7CZ+cmQdtn5xyk5QbbO a3YkXdASP8WXj1TlcT19wwkAHT2inM5xm87a/ZZ2r9xZhQ9VCYjD2+FHIB6Yt8RC dWVieZ7UtKugeWRXY/diaV2nHQQGAVjs -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:26 2025 by rpki-client