$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft File: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft (raw, json) Hash identifier: +aKpTVAYkBrIu+CGwDoHIvMH9rTKt6U6EjGCVJHk1Cg= Subject key identifier: DA:28:35:1B:A5:D1:55:4B:B3:F2:08:E1:51:20:50:13:32:99:94:C2 Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Certificate serial: 27C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft Manifest number: 279A Signing time: Tue 04 Nov 2025 15:43:26 +0000 Manifest this update: Tue 04 Nov 2025 15:43:26 +0000 Manifest next update: Tue 11 Nov 2025 15:43:26 +0000 Files and hashes: 1: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl (hash: dl96lYC50rqTIV8gHPCeo3KGAFNVrbdMcga80u4uDdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10178 (0x27c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B12B, serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Validity Not Before: Nov 4 15:43:26 2025 GMT Not After : Nov 11 15:43:26 2025 GMT Subject: CN=690a1f1e-fa65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:fe:5f:ec:51:c1:93:96:c3:b1:40:31:be: 20:13:52:83:3d:3d:3a:d1:48:86:5b:55:4c:fe:8f: 7f:ae:c3:6f:3a:ef:88:4e:c2:9d:e4:06:ef:30:11: 3c:2d:2f:2b:7c:6b:06:aa:cd:e0:2e:7f:cd:c9:f9: f7:aa:16:a7:69:95:1b:79:28:2c:a2:83:04:9d:ca: 5d:35:12:37:62:2f:e5:a9:ed:c0:4e:f1:b0:9f:98: 4c:0f:5a:ae:8f:1c:c1:3e:98:98:2e:89:b3:ed:2a: b1:37:ce:42:49:3d:87:ab:e3:f7:d4:76:63:d6:82: 3a:4d:ca:23:e7:f3:03:1a:b8:6b:a0:59:5c:01:24: 7b:f1:d5:7b:3d:6f:a6:f6:40:52:8b:6f:ed:78:9d: 2e:a2:ca:93:8a:a6:f6:54:85:65:02:16:09:65:8d: 7c:64:26:4a:4b:82:08:1d:a0:9a:45:7b:6a:f6:33: 48:20:68:87:9d:09:f0:90:25:3f:7a:52:d4:f0:b8: 10:4e:86:ab:48:1c:f0:e0:71:ba:7e:fb:c4:2b:00: e6:b3:a4:2a:4e:0d:2c:0a:22:9c:72:81:4a:cb:7c: 3c:66:83:db:dc:6d:17:dc:2e:85:63:8e:50:e6:70: 5e:ad:12:b5:e2:ae:0c:f1:90:02:35:45:94:1c:35: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:28:35:1B:A5:D1:55:4B:B3:F2:08:E1:51:20:50:13:32:99:94:C2 X509v3 Authority Key Identifier: keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:6e:fe:e4:57:d9:0d:1d:38:8e:72:b7:de:e8:18:db:17:e1: 6f:e2:42:7c:09:4a:f3:ff:03:aa:8e:f2:e7:1b:3e:01:15:15: 12:25:db:49:f3:74:2f:f4:2b:d6:50:66:66:1d:34:54:07:75: bb:20:be:1d:9c:28:af:56:5a:72:e7:27:53:a9:72:83:c2:29: 86:8e:d2:3e:da:b9:93:30:92:5a:5f:01:b5:86:fc:3c:cb:de: 6e:55:bf:31:ad:0c:88:0c:18:70:70:75:39:7c:82:44:8b:07: a8:2e:dd:32:61:6c:4c:ed:e0:b4:3c:98:88:de:3a:2b:1f:eb: 3e:6b:ed:32:d7:a7:b2:0e:e6:66:b5:a7:ea:cd:29:e9:f9:99: b6:8d:a9:8d:48:5a:ec:fd:c2:54:fa:e9:e2:db:61:5b:a9:5c: 24:24:6a:0b:75:bb:2f:8b:33:d2:53:3b:f5:e3:ca:d4:5c:c0: 59:a6:31:87:17:98:e1:f3:c3:fb:db:be:e4:d8:4d:99:91:56: db:e4:5b:b4:af:00:b7:33:07:57:d2:0d:26:79:05:e7:0c:35: 15:cc:27:41:3d:91:46:c3:50:66:71:3d:c0:2e:fa:d5:42:77: 2c:d8:d4:f8:a6:c2:f8:bf:c4:a7:c9:0d:f0:d6:26:8d:f8:b4: b9:46:26:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxMkIxMTAvBgNVBAUTKEYyNjkyMzQ1M0YwMTcwMzA5RkQ1OEJGM0IwQjVEQ0U0 M0ZGOUI0MUMwHhcNMjUxMTA0MTU0MzI2WhcNMjUxMTExMTU0MzI2WjAYMRYwFAYD VQQDEw02OTBhMWYxZS1mYTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EX+X+xRwZOWw7FAMb4gE1KDPT060UiGW1VM/o9/rsNvOu+ITsKd5AbvMBE8 LS8rfGsGqs3gLn/Nyfn3qhanaZUbeSgsooMEncpdNRI3Yi/lqe3ATvGwn5hMD1qu jxzBPpiYLomz7SqxN85CST2Hq+P31HZj1oI6Tcoj5/MDGrhroFlcASR78dV7PW+m 9kBSi2/teJ0uosqTiqb2VIVlAhYJZY18ZCZKS4IIHaCaRXtq9jNIIGiHnQnwkCU/ elLU8LgQToarSBzw4HG6fvvEKwDms6QqTg0sCiKccoFKy3w8ZoPb3G0X3C6FY45Q 5nBerRK14q4M8ZACNUWUHDUsxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNooNRul 0VVLs/II4VEgUBMymZTCMB8GA1UdIwQYMBaAFPJpI0U/AXAwn9WL87C13OQ/+bQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjEyQi9BNTA5RUMxRUJE OUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNEQ2YxWXZ6c0xYYzVEXzV0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhta2pSVDhCY0RDZjFZdnpzTFhjNURfNXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjEyQi9BNTA5RUMxRUJEOUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNE Q2YxWXZ6c0xYYzVEXzV0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzbv7kV9kNHTiOcrfe6BjbF+Fv4kJ8CUrz/wOqjvLnGz4BFRUSJdtJ 83Qv9CvWUGZmHTRUB3W7IL4dnCivVlpy5ydTqXKDwimGjtI+2rmTMJJaXwG1hvw8 y95uVb8xrQyIDBhwcHU5fIJEiweoLt0yYWxM7eC0PJiI3jorH+s+a+0y16eyDuZm tafqzSnp+Zm2jamNSFrs/cJU+uni22FbqVwkJGoLdbsvizPSUzv148rUXMBZpjGH F5jh88P7277k2E2ZkVbb5Fu0rwC3MwdX0g0meQXnDDUVzCdBPZFGw1BmcT3ALvrV Qncs2NT4psL4v8SnyQ3w1iaN+LS5RiZE -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:04 2025 by rpki-client