$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json) Hash identifier: rhGLSuCD2eYwmWdyrSbJTLEj3wE+srU5rI5VOx8Rd7c= Subject key identifier: FB:06:63:24:10:75:82:3D:88:8F:AF:9C:21:B3:F1:5F:A5:23:F3:DA Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft Manifest number: 07D0 Signing time: Sun 02 Nov 2025 22:46:49 +0000 Manifest this update: Sun 02 Nov 2025 22:46:48 +0000 Manifest next update: Sun 09 Nov 2025 22:46:48 +0000 Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: ND69CA3IslkuSH9KKi+aOHIW/EZY4pSALaOR8kx2C/0=) 2: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: aHhZ09FyTGWuPL21l6sEGdPpH/ZI8e7Ar6oNdRPw5Co=) 3: 8280FB76969E11EF90AEE785C4F9AE02.roa (hash: KrHRF1GAdSejuwJPh8FeCiH4WaaXz6aXNUfwd0PIsqQ=) 4: C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa (hash: 2+pMen1/mVG17axHfaJf6K4zr5VFlLkq/JD7aEzO63s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Validity Not Before: Nov 2 22:46:48 2025 GMT Not After : Nov 9 22:46:48 2025 GMT Subject: CN=6907df59-185a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:c5:62:26:67:c3:c2:3c:0b:e3:55:0c:32: 9b:83:85:f7:71:78:91:be:dd:cf:87:cf:8f:bd:9f: 89:b9:ba:6f:0f:7c:7e:55:33:c6:54:ed:10:a2:0a: d8:df:9f:a7:48:f2:a5:52:3f:b3:fa:38:83:a0:1c: ba:9e:34:f1:68:15:92:b7:d7:13:73:1e:c6:2d:03: 93:5f:e0:a4:ec:25:9c:a7:c5:9a:9b:69:d3:36:8d: 80:ad:0c:db:04:b0:42:c4:88:03:dc:b4:b1:42:41: c7:e8:2c:b0:ff:b8:65:3f:9f:b6:fa:8e:3a:f2:65: d2:34:36:d5:83:c3:34:d5:a3:6c:5d:94:4f:71:e7: f7:d7:6e:8a:86:37:d6:75:a6:f2:24:f2:21:9d:03: 5c:49:65:43:39:71:44:96:b8:4d:09:f9:59:e1:fc: 36:02:3f:92:ad:be:53:70:51:b4:5f:6a:0f:ca:e9: 6c:57:2b:bc:f9:bd:2b:c6:69:5d:14:c9:9e:80:52: e6:4a:3c:28:eb:53:0f:80:07:e5:d7:c3:ab:9b:5d: f5:2d:62:4a:91:0d:cc:a9:1c:4f:2d:66:11:4e:eb: be:7e:da:d5:86:ed:90:d7:6e:09:88:72:7f:71:03: 40:d3:f1:e9:32:a9:90:89:20:73:22:7e:3e:65:51: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:63:24:10:75:82:3D:88:8F:AF:9C:21:B3:F1:5F:A5:23:F3:DA X509v3 Authority Key Identifier: keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b2:1e:78:35:26:2d:e0:5c:02:0f:b9:b6:14:3a:ce:87:8f: 2b:d7:01:8b:56:11:7e:ba:03:35:f5:1f:2a:4d:ef:0d:ca:03: 2e:b2:55:c2:17:4b:f7:86:d3:4d:77:40:af:93:7a:8f:4d:74: ed:10:a1:82:7b:6d:ee:14:00:9b:94:e8:23:77:3c:d2:cd:75: 57:a4:8d:46:01:cc:42:66:ef:90:6e:1e:b0:4c:ca:1f:59:a8: 9d:6f:ca:86:a7:81:17:fb:75:4a:17:68:02:cc:81:f0:66:ca: 89:18:f7:28:d9:ba:b0:2c:36:57:52:98:d3:c4:6f:85:b9:5a: 12:02:4e:53:75:7f:36:41:f0:ba:38:21:ef:8b:8d:f5:a8:c6: 4c:f0:33:37:06:58:f0:5b:c3:36:cb:25:94:88:59:73:af:a8: 9a:4e:f6:c6:fe:4c:c7:42:4c:80:98:0b:90:0a:8e:23:5d:e6: 26:74:5b:71:14:99:d5:8d:fd:93:fa:f7:9e:9d:e1:b5:9f:58: 53:20:15:02:43:ac:72:db:82:c8:d7:d4:fd:80:a0:59:cd:57: b9:ef:73:72:1a:32:4f:0c:fc:a9:28:4a:53:d0:f6:f9:77:2d: 33:a0:7d:89:4c:fe:a6:3f:45:c1:66:cb:af:2a:40:a3:3f:88: 5d:69:26:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKEYxMDg5MkY4NTQ2OEJGMDA0RUVGNUY0RTFGQTU5MTdG MDYzMkEwNDkwHhcNMjUxMTAyMjI0NjQ4WhcNMjUxMTA5MjI0NjQ4WjAYMRYwFAYD VQQDEw02OTA3ZGY1OS0xODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAvFYiZnw8I8C+NVDDKbg4X3cXiRvt3Ph8+PvZ+JubpvD3x+VTPGVO0QogrY 35+nSPKlUj+z+jiDoBy6njTxaBWSt9cTcx7GLQOTX+Ck7CWcp8Wam2nTNo2ArQzb BLBCxIgD3LSxQkHH6Cyw/7hlP5+2+o468mXSNDbVg8M01aNsXZRPcef3126KhjfW dabyJPIhnQNcSWVDOXFElrhNCflZ4fw2Aj+Srb5TcFG0X2oPyulsVyu8+b0rxmld FMmegFLmSjwo61MPgAfl18Orm131LWJKkQ3MqRxPLWYRTuu+ftrVhu2Q124JiHJ/ cQNA0/HpMqmQiSBzIn4+ZVF7RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsGYyQQ dYI9iI+vnCGz8V+lI/PaMB8GA1UdIwQYMBaAFPEIkvhUaL8ATu9fTh+lkX8GMqBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3Qk83MTlPSDZXUmZ3WXlv RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9Fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3 Qk83MTlPSDZXUmZ3WXlvRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvsh54NSYt4FwCD7m2FDrOh48r1wGLVhF+ugM19R8qTe8NygMuslXC F0v3htNNd0Cvk3qPTXTtEKGCe23uFACblOgjdzzSzXVXpI1GAcxCZu+Qbh6wTMof Waidb8qGp4EX+3VKF2gCzIHwZsqJGPco2bqwLDZXUpjTxG+FuVoSAk5TdX82QfC6 OCHvi431qMZM8DM3BljwW8M2yyWUiFlzr6iaTvbG/kzHQkyAmAuQCo4jXeYmdFtx FJnVjf2T+veeneG1n1hTIBUCQ6xy24LI19T9gKBZzVe573NyGjJPDPypKEpT0Pb5 dy0zoH2JTP6mP0XBZsuvKkCjP4hdaSYi -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:01 2025 by rpki-client