$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: c/CF/7eESveeuvqpLanbup7B1R2eZ1bGz14s18mg9RI= Subject key identifier: F3:CA:D5:42:E0:EA:54:D3:29:9D:B6:A0:06:70:17:BF:E4:FE:EA:9A Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0E56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0E48 Signing time: Sun 02 Nov 2025 17:47:25 +0000 Manifest this update: Sun 02 Nov 2025 17:47:25 +0000 Manifest next update: Sun 09 Nov 2025 17:47:25 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: S0PhduwZdv2G5a5wz3HfTCVAsgOe2H23N5hM0XcuTMw=) 2: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: aiQgD71KIHf3EulghLpV7U2on7ornTtSdk1QL8F6cWM=) 3: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: ueAPuc77rri4PQKwtmMLByRiVZjsosToomd9waxslTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3670 (0xe56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Nov 2 17:47:25 2025 GMT Not After : Nov 9 17:47:25 2025 GMT Subject: CN=6907992d-2a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:5b:e4:19:98:82:f3:91:4f:b8:cd:0f:39: b0:d1:ff:c4:e6:87:0f:d7:4f:ff:67:2e:49:e2:4f: 59:da:97:ed:4d:62:08:51:e3:31:97:8e:6b:04:83: 7e:2b:17:03:58:d6:64:f5:56:cd:e7:b0:98:7e:43: a6:7a:a7:b8:54:cf:5e:ee:e7:43:54:6a:f6:96:69: 33:5e:d5:4e:aa:ef:39:81:a8:81:7d:38:95:87:5d: 41:23:28:b7:53:63:32:06:08:2f:cf:8c:0a:a6:58: 0a:35:19:cf:ed:f8:38:03:6c:61:7c:81:7b:89:bf: d5:13:45:fe:7b:e7:2d:57:6c:61:bf:59:05:77:4e: 6e:aa:bd:25:9a:3d:29:3c:42:3e:36:cf:bf:ba:73: bd:f2:34:12:22:6b:01:2f:66:fe:70:68:7e:53:c4: c2:13:a4:e5:3b:84:d0:2a:86:63:1f:fe:1c:c8:a1: ef:f6:58:0e:25:75:99:ca:19:5f:8a:34:81:24:07: 93:53:30:1b:22:4e:3f:3f:12:1c:83:66:15:1b:2f: 14:54:d3:2d:46:0a:3f:bb:29:1a:2e:c5:5e:f7:9d: 26:eb:9c:a4:d6:92:bf:e3:55:8b:ce:c9:85:87:50: 9a:23:b7:14:4a:47:8f:07:9e:39:c4:91:a1:c9:17: 76:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CA:D5:42:E0:EA:54:D3:29:9D:B6:A0:06:70:17:BF:E4:FE:EA:9A X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:28:b1:12:c3:90:9e:e4:d8:14:00:38:9a:7a:fb:eb:99:da: e6:54:18:b2:80:9c:a9:92:02:6a:5c:bb:cf:39:26:61:0d:48: 9d:61:86:73:da:ae:a7:84:62:bb:f6:d1:97:8f:79:b0:e7:77: e2:0e:a8:ff:a3:89:64:cb:55:20:1a:62:8d:80:a2:60:49:e6: fa:2c:29:3d:de:c9:ee:1a:17:bb:64:88:bc:7b:bf:fc:9f:07: a5:ef:3a:75:de:b7:e0:34:f5:5e:2d:92:1b:ff:f5:b5:69:4f: 79:97:a3:b8:d1:72:8f:c9:32:c5:32:dc:24:e5:8d:f0:bc:41: 7a:b2:7b:9b:f1:a4:a2:a9:ab:45:66:9e:f5:92:ab:f3:54:d8: 32:68:fa:20:4d:42:f7:ac:ed:ea:01:41:43:6f:cf:89:c9:3d: 18:0f:40:d7:99:52:eb:7e:f3:71:49:6d:d5:1c:14:1f:18:b0: 6c:18:0b:14:0c:90:fe:c1:01:d4:de:38:3f:2d:a9:56:91:9c: de:0c:2b:4a:55:64:fa:8f:79:f3:88:57:45:c9:fa:86:de:c6: 3b:5c:2d:f8:06:b1:31:4b:aa:3a:ed:cf:fc:f8:ed:08:b9:c1: 93:60:fa:b5:4a:13:f0:ef:26:6b:aa:0c:ba:96:0f:35:c8:47: 6b:27:89:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjUxMTAyMTc0NzI1WhcNMjUxMTA5MTc0NzI1WjAYMRYwFAYD VQQDEw02OTA3OTkyZC0yYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxptb5BmYgvORT7jNDzmw0f/E5ocP10//Zy5J4k9Z2pftTWIIUeMxl45rBIN+ KxcDWNZk9VbN57CYfkOmeqe4VM9e7udDVGr2lmkzXtVOqu85gaiBfTiVh11BIyi3 U2MyBggvz4wKplgKNRnP7fg4A2xhfIF7ib/VE0X+e+ctV2xhv1kFd05uqr0lmj0p PEI+Ns+/unO98jQSImsBL2b+cGh+U8TCE6TlO4TQKoZjH/4cyKHv9lgOJXWZyhlf ijSBJAeTUzAbIk4/PxIcg2YVGy8UVNMtRgo/uykaLsVe950m65yk1pK/41WLzsmF h1CaI7cUSkePB545xJGhyRd2awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPK1ULg 6lTTKZ22oAZwF7/k/uqaMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIKLESw5Ce5NgUADiaevvrmdrmVBiygJypkgJqXLvPOSZhDUidYYZz 2q6nhGK79tGXj3mw53fiDqj/o4lky1UgGmKNgKJgSeb6LCk93snuGhe7ZIi8e7/8 nwel7zp13rfgNPVeLZIb//W1aU95l6O40XKPyTLFMtwk5Y3wvEF6snub8aSiqatF Zp71kqvzVNgyaPogTUL3rO3qAUFDb8+JyT0YD0DXmVLrfvNxSW3VHBQfGLBsGAsU DJD+wQHU3jg/LalWkZzeDCtKVWT6j3nziFdFyfqG3sY7XC34BrExS6o67c/8+O0I ucGTYPq1ShPw7yZrqgy6lg81yEdrJ4mA -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:59 2025 by rpki-client