$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: Q8g+F4QwqDnm9rWz4ZgqpUURAk0el3ckh+HRTcc46NU= Subject key identifier: 9F:DD:6E:C7:3A:B2:A5:78:1E:02:63:EC:29:BC:EB:00:EC:98:94:EB Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0CF8 Signing time: Tue 04 Nov 2025 18:09:51 +0000 Manifest this update: Tue 04 Nov 2025 18:09:51 +0000 Manifest next update: Tue 11 Nov 2025 18:09:51 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: BVOEKRpkWDr7qOcWf+gmvJf/SyypRWwRlxxzUbUiIw4=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Nov 4 18:09:51 2025 GMT Not After : Nov 11 18:09:51 2025 GMT Subject: CN=690a416f-00c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:4e:ad:fd:73:78:69:3c:1d:28:48:3e:ce: 39:d5:c4:9b:51:f8:26:a9:54:1b:98:66:c9:a9:38: 75:fb:7c:c0:93:99:68:76:1d:79:e8:d9:94:06:fa: d7:34:82:7d:a1:f5:f7:e7:cf:fa:e1:6e:e9:bc:53: 34:f5:72:a5:b4:e2:fc:a3:60:e9:71:bf:cc:54:27: 7a:fe:4c:8a:64:3e:17:31:d7:ce:53:d0:bb:6c:1a: 6e:ff:43:1f:79:65:d3:44:84:95:70:2a:c3:ae:87: 80:91:52:e6:a8:d6:d3:23:5f:82:3a:ad:b1:c8:de: 3c:26:9c:2e:b5:07:dd:f9:d4:2a:1a:2f:f2:12:37: 7a:b0:58:a4:e5:6b:e8:4a:b8:9b:47:76:6a:65:6e: 73:d0:91:e5:8b:45:d3:79:a8:d5:85:40:31:3e:18: 02:c4:5a:c9:87:3d:4a:8a:ac:f5:68:e0:d2:6a:7d: 49:13:a5:92:a9:f0:71:86:89:2d:6f:85:92:20:9d: 91:74:43:c3:5e:ed:02:3b:f0:f6:b2:87:c4:5b:ec: 6c:59:8d:2d:fd:47:da:5a:ce:44:2a:ad:c3:3f:a8: ba:e9:ac:37:3d:d0:bc:33:ba:09:64:5c:f1:8e:c5: 8c:8d:e6:6b:53:86:f3:27:a5:06:e1:7a:cd:7b:66: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DD:6E:C7:3A:B2:A5:78:1E:02:63:EC:29:BC:EB:00:EC:98:94:EB X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e3:ba:9e:64:83:9e:fc:17:cc:51:66:8a:bd:b2:18:c6:27: d2:c8:af:3b:c1:73:e7:07:a0:dc:4e:85:84:6b:fd:0f:2e:da: ff:df:cc:b6:ac:1f:39:1e:4f:c4:26:86:73:51:3b:e0:75:1a: 68:e6:d6:9d:e3:1d:e0:a0:c7:8c:48:e9:17:cf:50:40:50:81: 36:3b:4b:98:d9:18:3e:c6:0d:51:a1:a0:75:19:aa:48:da:fe: 55:9b:5e:b3:a3:31:0f:66:06:32:61:2f:e5:bf:d8:bb:79:c5: f4:77:6a:16:7b:cd:34:8c:b4:b7:c4:b5:a6:51:05:9b:ec:82: ed:4e:e3:89:8b:ef:b8:97:b7:4e:1b:f6:4b:62:6d:81:d6:8d: 90:ac:c5:52:9e:6b:f8:0a:3b:a2:df:cd:1a:74:32:8c:4a:73: 18:af:0a:c2:97:59:dd:b3:43:a5:75:73:d0:76:69:00:35:0e: 10:61:4a:56:3c:e8:43:23:e8:a6:fd:02:76:e6:9d:3c:a5:03: 7b:6b:f5:f1:79:8d:d4:1f:67:1d:dd:e0:4a:fc:70:f9:fd:07: 49:69:f0:fc:f4:98:8a:df:53:95:e3:43:8e:7a:2a:35:0b:87: 8d:77:9e:2e:43:e7:3e:fc:52:d0:4d:6e:05:19:d1:13:0b:13: d3:9f:09:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUxMTA0MTgwOTUxWhcNMjUxMTExMTgwOTUxWjAYMRYwFAYD VQQDEw02OTBhNDE2Zi0wMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsNOrf1zeGk8HShIPs451cSbUfgmqVQbmGbJqTh1+3zAk5lodh156NmUBvrX NIJ9ofX358/64W7pvFM09XKltOL8o2Dpcb/MVCd6/kyKZD4XMdfOU9C7bBpu/0Mf eWXTRISVcCrDroeAkVLmqNbTI1+COq2xyN48JpwutQfd+dQqGi/yEjd6sFik5Wvo SribR3ZqZW5z0JHli0XTeajVhUAxPhgCxFrJhz1Kiqz1aODSan1JE6WSqfBxhokt b4WSIJ2RdEPDXu0CO/D2sofEW+xsWY0t/UfaWs5EKq3DP6i66aw3PdC8M7oJZFzx jsWMjeZrU4bzJ6UG4XrNe2ZM9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/dbsc6 sqV4HgJj7Cm86wDsmJTrMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu47qeZIOe/BfMUWaKvbIYxifSyK87wXPnB6DcToWEa/0PLtr/38y2 rB85Hk/EJoZzUTvgdRpo5tad4x3goMeMSOkXz1BAUIE2O0uY2Rg+xg1RoaB1GapI 2v5Vm16zozEPZgYyYS/lv9i7ecX0d2oWe800jLS3xLWmUQWb7ILtTuOJi++4l7dO G/ZLYm2B1o2QrMVSnmv4Cjui380adDKMSnMYrwrCl1nds0OldXPQdmkANQ4QYUpW POhDI+im/QJ25p08pQN7a/XxeY3UH2cd3eBK/HD5/QdJafD89JiK31OV40OOeio1 C4eNd54uQ+c+/FLQTW4FGdETCxPTnwm/ -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:05 2025 by rpki-client