$ rpki-client -vvf rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft File: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft (raw, json) Hash identifier: O7dXZtd+afsyyrxtmh/Nioz85UILxGJLpobm8OlbsL4= Subject key identifier: 8D:6A:B7:C9:F7:7C:04:6D:39:9F:C7:4A:3F:5C:32:5D:45:D8:1E:E1 Authority key identifier: F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6 Certificate issuer: /CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6 Certificate serial: 0ED1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft Manifest number: 0EC3 Signing time: Tue 04 Nov 2025 17:44:57 +0000 Manifest this update: Tue 04 Nov 2025 17:44:56 +0000 Manifest next update: Tue 11 Nov 2025 17:44:56 +0000 Files and hashes: 1: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl (hash: D1Krppv565otLyjMOBHuiSEIEdnoka3Op4+d3Kj6YcA=) 2: E8F7CA24E38211EB8BAE655EC4F9AE02.roa (hash: P6oNgC/+Qy7DzRN3h5YDwNEI2L0F/sePFzpHnyHAcfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3793 (0xed1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E554, serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6 Validity Not Before: Nov 4 17:44:56 2025 GMT Not After : Nov 11 17:44:56 2025 GMT Subject: CN=690a3b99-d923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:11:88:db:91:11:25:6b:d3:dc:40:6a:4c: 2c:49:bc:47:a3:25:d8:16:a3:84:60:2b:0d:d7:03: d7:e3:94:11:30:02:29:97:5e:1f:b5:7b:bf:8d:75: 3e:0a:76:fd:cc:ed:f4:ba:17:81:68:13:06:9e:a1: e1:bd:23:aa:5e:12:e6:dc:a5:74:95:f1:e3:65:00: 4c:82:f4:05:b0:f9:21:a9:33:e7:1d:7e:4a:11:e2: 55:47:f1:59:39:0c:54:04:ef:74:28:ba:5d:19:9d: dd:0f:3f:d2:24:08:13:b6:8d:5b:9e:86:00:2c:4f: bc:48:30:10:09:a2:19:2b:01:f7:b1:1d:a4:9c:3c: 37:6b:47:6d:af:fe:21:c2:cb:e9:09:6f:48:d4:a8: b9:a5:8f:00:3b:99:58:63:4d:cd:56:43:73:62:fb: 02:a5:38:7e:87:18:55:9e:5f:32:cd:1a:90:91:c8: 8a:06:a8:bb:3c:1a:46:aa:fa:43:d2:b1:9b:71:ec: c9:c7:e1:df:f6:4a:f7:a9:50:5a:32:b6:90:db:03: 15:b1:70:78:cd:50:56:97:4d:cb:98:85:15:c5:a0: 8e:93:3b:28:dc:c4:01:e3:94:e2:d7:44:1b:e8:3e: 7d:9d:cd:d6:37:69:1e:57:4b:4d:d9:ce:a5:30:ed: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:B7:C9:F7:7C:04:6D:39:9F:C7:4A:3F:5C:32:5D:45:D8:1E:E1 X509v3 Authority Key Identifier: keyid:F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ad:ee:9b:11:1b:b1:37:dc:12:8c:8e:3d:4f:b1:09:f0:d4: 10:e5:5a:9d:02:73:e7:46:54:8d:71:82:2e:2d:b1:0b:d8:80: 8b:9b:c0:9a:94:e0:5b:5b:3a:2d:68:3f:15:97:36:83:e9:2d: 16:fa:17:69:4c:6a:b8:f1:82:a1:ce:29:11:85:8b:ba:ad:c5: 3f:f7:3c:27:3a:58:1c:12:7d:45:3e:40:72:55:41:51:a8:06: 29:05:a3:ab:be:41:83:d7:df:b8:a8:32:f0:0c:dd:4a:19:ad: 65:d0:70:08:99:ee:9e:68:ad:ec:b1:42:96:09:af:fa:30:c8: 42:39:8a:cc:e4:9a:95:f0:eb:58:43:77:e8:d6:ef:b3:72:4c: ff:0f:a8:5d:b3:10:d6:42:8d:44:3a:10:fd:f9:63:0b:ad:db: 44:ef:21:65:69:ef:2f:e5:5c:7c:8a:0a:00:4f:c9:90:81:79: 38:75:17:c0:2c:99:f6:c1:12:7c:86:08:27:19:cb:25:f7:3c: 13:38:30:ec:66:47:03:f3:61:7b:9c:91:f6:f7:c3:f7:36:b3: f0:9a:7a:6c:48:36:bf:38:bc:10:58:1b:19:f4:be:65:6d:1b: ea:67:5e:3a:fa:1a:d4:e1:f3:e9:2a:e0:6e:ff:6c:48:53:36: 31:a5:bf:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1NTQxMTAvBgNVBAUTKEYzRkMzRThGRTNGQ0Q4NkNBRjBGNzFBRjZGQjQyMzFF QzU3MUJBRjYwHhcNMjUxMTA0MTc0NDU2WhcNMjUxMTExMTc0NDU2WjAYMRYwFAYD VQQDEw02OTBhM2I5OS1kOTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3QRiNuRESVr09xAakwsSbxHoyXYFqOEYCsN1wPX45QRMAIpl14ftXu/jXU+ Cnb9zO30uheBaBMGnqHhvSOqXhLm3KV0lfHjZQBMgvQFsPkhqTPnHX5KEeJVR/FZ OQxUBO90KLpdGZ3dDz/SJAgTto1bnoYALE+8SDAQCaIZKwH3sR2knDw3a0dtr/4h wsvpCW9I1Ki5pY8AO5lYY03NVkNzYvsCpTh+hxhVnl8yzRqQkciKBqi7PBpGqvpD 0rGbcezJx+Hf9kr3qVBaMraQ2wMVsXB4zVBWl03LmIUVxaCOkzso3MQB45Ti10Qb 6D59nc3WN2keV0tN2c6lMO23ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1qt8n3 fARtOZ/HSj9cMl1F2B7hMB8GA1UdIwQYMBaAFPP8Po/j/Nhsrw9xr2+0Ix7Fcbr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTU1NC83RTA1M0U5MDk4 Q0YxMUU5ODYxNzlBODZDNEY5QUUwMi84X3ctai1QODJHeXZEM0d2YjdRakhzVnh1 dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfdy1qLVA4Mkd5dkQzR3ZiN1FqSHNWeHV2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTU1NC83RTA1M0U5MDk4Q0YxMUU5ODYxNzlBODZDNEY5QUUwMi84X3ctai1QODJH eXZEM0d2YjdRakhzVnh1dlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxre6bERuxN9wSjI49T7EJ8NQQ5VqdAnPnRlSNcYIuLbEL2ICLm8Ca lOBbWzotaD8VlzaD6S0W+hdpTGq48YKhzikRhYu6rcU/9zwnOlgcEn1FPkByVUFR qAYpBaOrvkGD19+4qDLwDN1KGa1l0HAIme6eaK3ssUKWCa/6MMhCOYrM5JqV8OtY Q3fo1u+zckz/D6hdsxDWQo1EOhD9+WMLrdtE7yFlae8v5Vx8igoAT8mQgXk4dRfA LJn2wRJ8hggnGcsl9zwTODDsZkcD82F7nJH298P3NrPwmnpsSDa/OLwQWBsZ9L5l bRvqZ146+hrU4fPpKuBu/2xIUzYxpb/A -----END CERTIFICATE-----Generated at Wed Nov 5 20:56:50 2025 by rpki-client