$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json) Hash identifier: KRToE0dPAtmHmq9b5k8f9hYNlsSXo7btgSqeRqR2E/s= Subject key identifier: C4:63:65:25:3E:A5:6F:BB:C5:27:82:14:E4:23:45:6D:BA:31:79:11 Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft Manifest number: 53 Signing time: Wed 05 Nov 2025 07:29:38 +0000 Manifest this update: Wed 05 Nov 2025 07:29:38 +0000 Manifest next update: Wed 12 Nov 2025 07:29:38 +0000 Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: 820bBZpg74pl3EOjcboOh3kOkcF0wVEb2DWTFCDXAQg=) 2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: lNd0dhVh9oVMjkR+5hS3U5ljCVkdpvgCie/KVi3bQe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Validity Not Before: Nov 5 07:29:38 2025 GMT Not After : Nov 12 07:29:38 2025 GMT Subject: CN=690afce2-0435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:9a:96:df:b9:9e:3e:50:14:92:4b:17:30: d9:37:35:91:dd:9f:ee:63:48:8a:49:c5:3b:e8:6c: 2c:71:24:a8:21:3b:9d:a1:50:d6:08:06:dd:af:6a: bf:7e:71:34:06:45:a7:9b:ab:8c:29:db:72:48:e2: c7:45:e6:e8:63:03:1a:d3:0b:a9:6c:a5:72:6e:09: c0:22:3e:94:b5:a3:b9:a2:15:3e:18:f9:ce:1e:4e: 86:44:4f:38:a1:7c:fc:43:ba:21:09:9c:19:cf:3c: 36:fc:90:a5:c6:28:db:ee:4f:fb:51:39:b6:77:43: 10:b4:cb:fa:ad:32:8b:46:03:84:1c:94:3e:30:24: d3:7e:3c:5d:67:ec:b9:f7:c2:70:d9:49:73:05:07: 69:db:d7:10:14:cd:6e:f4:4e:bc:ec:e8:95:bf:78: 90:74:e8:82:bc:0a:5a:16:8c:ee:ba:ca:ac:ac:f4: 6f:7f:73:e2:fa:9c:17:08:91:3a:eb:5f:49:6b:3d: 32:fd:42:c3:36:d6:59:1b:ea:0f:8e:f7:c3:bd:29: e5:b6:3c:93:75:63:67:6d:75:36:96:3f:7f:bc:12: a4:67:34:a0:c1:27:99:02:71:0d:f8:20:df:e2:5c: b2:e8:7a:c3:a7:77:12:9b:7d:87:be:8a:0b:b2:e5: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:63:65:25:3E:A5:6F:BB:C5:27:82:14:E4:23:45:6D:BA:31:79:11 X509v3 Authority Key Identifier: keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:8a:cd:4a:a1:4c:d1:22:05:8c:8a:76:eb:6e:fd:0f:00:d4: e1:31:c4:bd:48:27:ec:ff:e8:51:89:7f:fa:21:fa:49:63:02: ac:aa:bc:30:0b:2c:ee:83:30:90:01:e6:ef:a9:ff:a6:97:43: 7f:1a:57:a4:80:a3:a2:67:78:24:43:dd:3b:81:57:18:a6:92: 86:ac:04:86:bc:e8:70:74:39:5f:64:32:47:a4:58:f2:c5:c8: cc:f6:78:7d:05:b9:83:6b:cb:f1:d0:50:d7:02:21:78:5a:18: 8d:54:71:ab:ec:99:d6:e3:cf:3c:3e:44:56:50:69:15:ba:e3: 7b:d2:83:7a:f4:c0:e3:15:66:d3:37:c9:9f:94:e9:6c:c6:2a: 55:04:87:c6:3e:73:81:47:a9:35:e7:4c:1f:bb:75:48:a1:62: 30:1b:b0:03:30:61:ef:4f:0e:c1:7c:79:fc:1d:0b:87:34:21: dc:62:0c:bd:2d:e7:24:d6:c8:88:a7:97:33:83:4e:cc:2b:c0: 85:52:ce:05:47:0e:c6:fc:67:ea:e8:54:a6:76:0f:34:f7:97: c6:5c:ad:cd:7d:ac:ef:a9:b2:5a:af:08:5b:d5:47:6b:bf:71: 29:fa:dc:86:7e:ed:a9:48:c8:70:bf:3a:91:da:ee:1f:4f:04: 32:fc:90:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoRjE1QzVDNUJBNTIxNDUzNzA3QzgxRjVGRUMwODExQkYy MUNGRjQwRTAeFw0yNTExMDUwNzI5MzhaFw0yNTExMTIwNzI5MzhaMBgxFjAUBgNV BAMTDTY5MGFmY2UyLTA0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl85qW37mePlAUkksXMNk3NZHdn+5jSIpJxTvobCxxJKghO52hUNYIBt2var9+ cTQGRaebq4wp23JI4sdF5uhjAxrTC6lspXJuCcAiPpS1o7miFT4Y+c4eToZETzih fPxDuiEJnBnPPDb8kKXGKNvuT/tRObZ3QxC0y/qtMotGA4QclD4wJNN+PF1n7Ln3 wnDZSXMFB2nb1xAUzW70Trzs6JW/eJB06IK8CloWjO66yqys9G9/c+L6nBcIkTrr X0lrPTL9QsM21lkb6g+O98O9KeW2PJN1Y2dtdTaWP3+8EqRnNKDBJ5kCcQ34IN/i XLLoesOndxKbfYe+iguy5elfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxGNlJT6l b7vFJ4IU5CNFbboxeREwHwYDVR0jBBgwFoAU8VxcW6UhRTcHyB9f7AgRvyHP9A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBLzlBODczRUIwNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRjSHlCOWY3QWdSdnlIUDlB NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFZ4Y1c2VWhSVGNIeUI5ZjdBZ1J2eUhQOUE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBLzlBODczRUIwNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRj SHlCOWY3QWdSdnlIUDlBNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAISKzUqhTNEiBYyKdutu/Q8A1OExxL1IJ+z/6FGJf/oh+kljAqyqvDAL LO6DMJAB5u+p/6aXQ38aV6SAo6JneCRD3TuBVximkoasBIa86HB0OV9kMkekWPLF yMz2eH0FuYNry/HQUNcCIXhaGI1Ucavsmdbjzzw+RFZQaRW643vSg3r0wOMVZtM3 yZ+U6WzGKlUEh8Y+c4FHqTXnTB+7dUihYjAbsAMwYe9PDsF8efwdC4c0IdxiDL0t 5yTWyIinlzODTswrwIVSzgVHDsb8Z+roVKZ2DzT3l8Zcrc19rO+pslqvCFvVR2u/ cSn63IZ+7alIyHC/OpHa7h9PBDL8kJk= -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:19 2025 by rpki-client