$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json) Hash identifier: wA9ZMSzPKy4Y7Bz4b1ZdJ4oL+LUenpN8Rb8qPa9vL/w= Subject key identifier: C7:AA:A9:D8:0E:05:A5:00:BA:22:DF:60:00:91:AB:91:74:D7:5F:B0 Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft Manifest number: 02C7 Signing time: Wed 05 Nov 2025 01:27:55 +0000 Manifest this update: Wed 05 Nov 2025 01:27:54 +0000 Manifest next update: Wed 12 Nov 2025 01:27:54 +0000 Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: slqq0gbz9cl8gOvber1szT/oD9Nv5vspbWfClkHMTLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Validity Not Before: Nov 5 01:27:54 2025 GMT Not After : Nov 12 01:27:54 2025 GMT Subject: CN=690aa81a-62ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:8b:d6:23:bd:f7:fb:65:82:24:ef:0d:3e: d7:68:6a:48:a4:c3:74:f5:69:a0:b3:1b:02:a2:f4: af:8e:51:fc:8f:51:7c:3b:72:f4:a3:62:d6:53:9b: 35:70:13:90:27:e3:8d:f8:6f:41:f3:22:00:d2:4d: f1:0e:2f:7a:e4:dc:8a:fd:65:47:34:a8:5a:9a:e6: 7e:88:b6:04:fb:ea:95:53:db:70:d3:75:2f:23:48: 75:1f:64:0d:af:22:5d:40:2c:5f:fe:e7:bf:80:a6: 14:50:52:04:2e:a3:b1:ad:3c:00:9d:e1:a5:38:ed: 82:c5:ee:f5:49:2e:0d:3e:9a:6a:b3:e2:a5:bd:90: bf:e8:06:64:f1:de:9a:07:15:1d:05:cb:a5:0d:81: 1a:77:03:db:d1:5a:6d:d1:bd:dc:0d:b0:c8:3d:cc: 6e:69:f8:12:c3:7f:3c:ec:15:db:0b:32:cc:36:a9: 10:2d:c0:e9:35:0a:d8:3f:43:67:36:ec:6e:40:cf: d9:45:1e:cc:96:5e:a4:14:a3:4a:39:35:63:03:de: 3b:80:3a:ea:67:5d:4c:96:56:95:78:a2:a7:6f:9a: af:53:81:5a:b6:57:cb:06:6a:90:fc:1e:6a:8c:4c: 39:c5:18:c3:c5:16:bb:da:21:31:57:9f:67:7e:87: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AA:A9:D8:0E:05:A5:00:BA:22:DF:60:00:91:AB:91:74:D7:5F:B0 X509v3 Authority Key Identifier: keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e5:56:7f:45:8a:a5:4d:3c:9d:12:0f:81:ca:26:a4:e6:3e: 46:22:cb:9c:15:24:b2:31:cb:57:e0:93:91:68:e9:d4:af:d9: dd:04:47:d8:9c:c1:ed:6b:9a:34:33:6d:f6:ec:93:ea:73:ed: 22:20:81:23:84:a2:c3:11:61:5d:c0:c7:89:28:d2:22:aa:ff: ee:ef:ff:e7:b3:84:d4:8e:e4:9b:6e:2a:66:7d:54:1b:a0:b8: 67:7c:ac:7a:39:f8:84:6f:48:33:88:c8:d7:db:4a:52:1d:98: d9:15:f8:a9:c6:42:1d:3e:6a:ef:e5:07:5e:9f:db:8b:76:85: 4c:61:34:27:34:d3:a8:fd:31:fd:58:ab:69:9b:77:c5:6e:c2: aa:7b:14:67:58:b0:fd:9a:75:3f:9c:b3:cf:b2:36:75:49:fa: 37:f2:f1:5b:4a:7c:9e:9c:14:3b:ac:5b:9f:9f:8a:73:79:79: 83:1a:be:cd:a5:98:c1:c9:53:e9:07:17:b8:d0:43:d9:93:ae: 27:6c:02:d2:ef:79:2d:49:7f:10:84:b3:13:6c:55:7d:36:bb: 5f:e6:30:15:4e:9b:89:8d:89:ca:d0:20:5f:4c:8f:01:98:eb: 84:65:de:21:96:96:c7:c3:67:45:b4:8b:96:8a:5d:2f:e7:61: f4:82:f9:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKEYxMTZFOTEyQTk1MDlERTRCMkQ2QjNEOTNDQkMxOEY1 MDAzNkUxNjgwHhcNMjUxMTA1MDEyNzU0WhcNMjUxMTEyMDEyNzU0WjAYMRYwFAYD VQQDEw02OTBhYTgxYS02MmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLuL1iO99/tlgiTvDT7XaGpIpMN09WmgsxsCovSvjlH8j1F8O3L0o2LWU5s1 cBOQJ+ON+G9B8yIA0k3xDi965NyK/WVHNKhamuZ+iLYE++qVU9tw03UvI0h1H2QN ryJdQCxf/ue/gKYUUFIELqOxrTwAneGlOO2Cxe71SS4NPppqs+KlvZC/6AZk8d6a BxUdBculDYEadwPb0Vpt0b3cDbDIPcxuafgSw3887BXbCzLMNqkQLcDpNQrYP0Nn NuxuQM/ZRR7Mll6kFKNKOTVjA947gDrqZ11MllaVeKKnb5qvU4FatlfLBmqQ/B5q jEw5xRjDxRa72iExV59nfof5NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeqqdgO BaUAuiLfYACRq5F011+wMB8GA1UdIwQYMBaAFPEW6RKpUJ3kstaz2Ty8GPUANuFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC84NTI3RTRCNjBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5lU3kxclBaUEx3WTlRQTI0 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSYnBFcWxRbmVTeTFyUFpQTHdZOVFBMjRXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC84NTI3RTRCNjBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5l U3kxclBaUEx3WTlRQTI0V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB95VZ/RYqlTTydEg+Byiak5j5GIsucFSSyMctX4JORaOnUr9ndBEfY nMHta5o0M2327JPqc+0iIIEjhKLDEWFdwMeJKNIiqv/u7//ns4TUjuSbbipmfVQb oLhnfKx6OfiEb0gziMjX20pSHZjZFfipxkIdPmrv5Qden9uLdoVMYTQnNNOo/TH9 WKtpm3fFbsKqexRnWLD9mnU/nLPPsjZ1Sfo38vFbSnyenBQ7rFufn4pzeXmDGr7N pZjByVPpBxe40EPZk64nbALS73ktSX8QhLMTbFV9Nrtf5jAVTpuJjYnK0CBfTI8B mOuEZd4hlpbHw2dFtIuWil0v52H0gvl0 -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:59 2025 by rpki-client