$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: HjCZMYVXZduM3Kv0txYNOjMhXx9sAj+MNsOvWP5WKpk= Subject key identifier: A7:23:68:DA:86:47:6D:A9:AD:0E:09:3D:13:88:26:9F:4A:6C:07:50 Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: D3 Signing time: Mon 03 Nov 2025 05:41:42 +0000 Manifest this update: Mon 03 Nov 2025 05:41:41 +0000 Manifest next update: Mon 10 Nov 2025 05:41:41 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: pmGk3WLasVdW0AR/+i5/bd2rzW2OeV4jevkpcKOsOCA=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: i/i9Fi7DO7CQzIWXaTSwtFH1LWaUqhByPYFzXOD85Kk=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: +qIyoxy4aGRwH3KPJiIeeGzTmFk3xSC3JgRiA3rxQ1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Nov 3 05:41:41 2025 GMT Not After : Nov 10 05:41:41 2025 GMT Subject: CN=69084095-568f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:d2:5d:5d:44:7a:07:b7:7f:ce:d1:db:10: 34:50:cd:c0:62:42:a6:56:d8:aa:53:1d:94:0b:2a: 39:49:3e:7e:56:5d:15:7d:32:de:6e:c2:bc:94:3b: 2f:e9:49:1a:8c:d3:74:5a:58:44:00:b5:18:da:06: a6:06:30:3e:01:8c:05:b3:c7:98:da:05:bc:98:ee: d4:d4:53:b8:18:7f:8a:94:0d:08:7e:66:48:eb:88: dc:31:02:63:37:d9:97:2f:2e:d4:35:b6:90:99:5a: a9:63:b9:f4:57:5c:52:d6:ef:51:c2:3b:f9:f3:e9: 05:2f:74:db:05:78:72:bc:23:ad:85:69:0c:a4:05: 44:21:96:09:ba:7d:af:8e:5c:19:57:9c:7e:e7:e4: 1f:a5:2e:a8:90:7f:0f:89:ad:13:c3:9f:f8:bd:1e: 96:ee:49:75:59:d2:e2:c0:d8:6b:d9:40:9a:0f:00: be:b0:a7:fb:75:3e:62:8a:7f:6c:5d:3c:b6:39:29: 90:7e:d2:4a:16:e3:cd:12:9f:30:8b:31:79:b0:f0: 1e:d8:33:a3:19:75:b4:6a:e2:5e:53:70:14:78:5f: 2d:e8:bc:d4:17:40:8f:31:8d:34:5c:cb:cd:c7:61: 9d:ed:e5:1e:2f:66:43:2d:5a:18:9f:38:86:70:ff: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:23:68:DA:86:47:6D:A9:AD:0E:09:3D:13:88:26:9F:4A:6C:07:50 X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:49:de:d3:90:2e:62:73:b3:0a:5c:08:20:c3:df:d8:dc:ae: 2e:f3:c3:5f:31:f5:2e:f8:26:e4:b9:56:99:5e:c9:b2:63:19: d5:58:18:d4:9f:52:a6:79:75:45:a4:10:89:09:3d:ba:24:d9: 01:10:5e:85:aa:f3:ce:94:a2:3c:54:ae:74:b6:d7:05:12:52: 2a:4a:c6:42:d6:41:b1:e8:6a:d5:eb:51:1f:6d:01:ca:af:da: 51:bb:fd:95:92:52:28:50:61:f7:80:0f:b5:a9:35:40:72:f9: a4:be:1f:9f:7c:7c:b2:29:75:1f:66:9a:bf:05:18:63:df:3f: fe:0d:e5:1c:8f:40:49:d8:b8:a0:96:3b:8d:11:74:f3:eb:32: 77:85:26:9c:a0:88:a6:cc:14:1f:17:de:90:dd:59:d6:39:55: ad:c0:1d:94:6e:eb:17:39:2d:ae:1a:c6:8e:5d:4b:32:a5:4e: 4b:6d:2d:31:ff:05:04:d0:64:2b:7e:9d:32:08:a1:ef:69:fd: 94:ec:45:22:33:c7:0d:12:18:cc:32:00:f2:ed:ae:41:28:02: a0:01:25:78:74:08:82:04:b4:2e:8a:38:3d:96:14:a8:93:6b: 66:b7:02:6a:30:e7:84:08:3a:df:a4:e8:2e:e6:88:6a:6c:2e: c7:30:58:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjUxMTAzMDU0MTQxWhcNMjUxMTEwMDU0MTQxWjAYMRYwFAYD VQQDEw02OTA4NDA5NS01NjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAzSXV1Eege3f87R2xA0UM3AYkKmVtiqUx2UCyo5ST5+Vl0VfTLebsK8lDsv 6UkajNN0WlhEALUY2gamBjA+AYwFs8eY2gW8mO7U1FO4GH+KlA0IfmZI64jcMQJj N9mXLy7UNbaQmVqpY7n0V1xS1u9Rwjv58+kFL3TbBXhyvCOthWkMpAVEIZYJun2v jlwZV5x+5+QfpS6okH8Pia0Tw5/4vR6W7kl1WdLiwNhr2UCaDwC+sKf7dT5iin9s XTy2OSmQftJKFuPNEp8wizF5sPAe2DOjGXW0auJeU3AUeF8t6LzUF0CPMY00XMvN x2Gd7eUeL2ZDLVoYnziGcP9eGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcjaNqG R22prQ4JPROIJp9KbAdQMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHSd7TkC5ic7MKXAggw9/Y3K4u88NfMfUu+CbkuVaZXsmyYxnVWBjU n1KmeXVFpBCJCT26JNkBEF6FqvPOlKI8VK50ttcFElIqSsZC1kGx6GrV61EfbQHK r9pRu/2VklIoUGH3gA+1qTVAcvmkvh+ffHyyKXUfZpq/BRhj3z/+DeUcj0BJ2Lig ljuNEXTz6zJ3hSacoIimzBQfF96Q3VnWOVWtwB2UbusXOS2uGsaOXUsypU5LbS0x /wUE0GQrfp0yCKHvaf2U7EUiM8cNEhjMMgDy7a5BKAKgASV4dAiCBLQuijg9lhSo k2tmtwJqMOeECDrfpOgu5ohqbC7HMFg9 -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:14 2025 by rpki-client