$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: hxxqb32oSHBRxU0l1i08UCn5bhF6uXwzq1Hf6M8rAuM= Subject key identifier: 40:21:36:32:98:61:CC:94:58:A7:1E:BF:4C:B9:C4:53:D7:5B:1B:C6 Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 04CD Signing time: Wed 05 Nov 2025 00:02:32 +0000 Manifest this update: Wed 05 Nov 2025 00:02:32 +0000 Manifest next update: Wed 12 Nov 2025 00:02:32 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: hxwnKR1B34N6pKOtf98qTBEGw6kVHDX3Yi2fucyO5ks=) 2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: iwDIeTH9jAKRmJy5+E9fAG3VbE729VNzq/7AMrBopsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: Nov 5 00:02:32 2025 GMT Not After : Nov 12 00:02:32 2025 GMT Subject: CN=690a9418-f556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e0:a4:60:c8:90:4b:4b:fe:0c:bb:77:bc:c4: 63:89:3a:09:be:66:2e:04:c7:27:ce:84:06:a0:e4: 5f:b6:77:d1:7a:80:7e:42:13:81:8a:2f:c7:51:ec: 2e:bc:41:6e:ef:e0:70:38:da:de:4b:ac:6a:e9:9e: cf:84:5d:fe:fb:14:15:fe:11:11:2a:06:23:e2:b2: a5:1a:b7:84:f8:af:e5:59:f4:fd:6b:6d:61:4a:36: 49:a8:52:db:cb:e1:6d:dc:4a:e5:0a:cb:47:e2:23: b3:1c:37:c3:57:14:cf:fd:2c:09:7b:08:9d:f5:b7: d3:66:f3:92:fc:a7:31:67:aa:7b:32:bf:1a:03:c0: d2:03:39:9a:1a:22:50:30:e9:3e:b1:e8:48:2e:3f: d4:bb:2e:8f:50:0e:32:70:3b:33:85:46:d2:af:02: 32:45:f9:06:0b:78:81:9c:07:f5:e5:63:73:32:fa: 40:a2:75:d3:54:33:54:ca:28:c1:02:03:50:a7:dc: 5b:d6:e4:df:c0:24:d1:77:73:6a:cc:91:36:e8:f0: 53:33:f5:2c:75:bc:2e:e3:94:87:0b:32:4f:43:6d: 3f:66:a8:b0:92:41:35:45:b9:96:b1:5f:64:60:8a: 35:dc:8b:32:81:72:a6:2a:16:32:58:8d:28:2b:ce: 12:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:21:36:32:98:61:CC:94:58:A7:1E:BF:4C:B9:C4:53:D7:5B:1B:C6 X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:95:e4:71:9e:e2:5b:40:e8:2f:eb:7e:e2:06:11:80:9f:68: 7e:5b:4d:ed:f2:de:10:7c:08:21:85:77:56:8c:41:b7:f0:2a: 46:aa:0c:f6:af:ca:df:20:64:10:a5:fc:63:fe:59:d5:85:9a: aa:e7:5e:10:ef:99:b4:eb:b6:fd:c9:90:94:a2:c7:db:03:0c: ad:25:a9:9f:b2:3e:ce:6d:61:f8:19:b8:cc:4c:c2:76:54:ca: b1:18:71:88:c2:10:d2:27:d2:45:a4:fc:0f:15:ca:43:43:37: 70:14:ab:0a:af:5e:25:7b:03:6c:a0:50:0e:a1:9f:c9:2d:ac: d9:0f:03:4c:aa:6a:cd:aa:dd:7d:3e:b8:6b:5b:d5:ea:dd:e8: d0:20:5d:2a:f3:30:d7:73:4f:28:2e:a0:8a:01:51:5d:98:c4: a0:60:85:09:36:a9:99:03:61:95:2f:9b:fc:10:e8:c1:f0:d1: 64:59:c1:23:71:45:6e:46:c9:f1:13:5f:99:e8:01:ce:09:e3: fe:ed:86:ed:cc:2a:78:a4:ca:22:e3:01:17:07:de:88:ab:49: 92:ff:b1:46:31:49:2b:6e:a9:90:34:32:f1:e2:68:24:5b:d9: 2d:5e:da:ea:95:d9:ce:a4:cb:5d:f3:ec:bd:ca:73:64:b2:b3: 2b:b1:2b:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjUxMTA1MDAwMjMyWhcNMjUxMTEyMDAwMjMyWjAYMRYwFAYD VQQDEw02OTBhOTQxOC1mNTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOCkYMiQS0v+DLt3vMRjiToJvmYuBMcnzoQGoORftnfReoB+QhOBii/HUewu vEFu7+BwONreS6xq6Z7PhF3++xQV/hERKgYj4rKlGreE+K/lWfT9a21hSjZJqFLb y+Ft3ErlCstH4iOzHDfDVxTP/SwJewid9bfTZvOS/KcxZ6p7Mr8aA8DSAzmaGiJQ MOk+sehILj/Uuy6PUA4ycDszhUbSrwIyRfkGC3iBnAf15WNzMvpAonXTVDNUyijB AgNQp9xb1uTfwCTRd3NqzJE26PBTM/Usdbwu45SHCzJPQ20/ZqiwkkE1RbmWsV9k YIo13IsygXKmKhYyWI0oK84SLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAhNjKY YcyUWKcev0y5xFPXWxvGMB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIleRxnuJbQOgv637iBhGAn2h+W03t8t4QfAghhXdWjEG38CpGqgz2 r8rfIGQQpfxj/lnVhZqq514Q75m067b9yZCUosfbAwytJamfsj7ObWH4GbjMTMJ2 VMqxGHGIwhDSJ9JFpPwPFcpDQzdwFKsKr14lewNsoFAOoZ/JLazZDwNMqmrNqt19 PrhrW9Xq3ejQIF0q8zDXc08oLqCKAVFdmMSgYIUJNqmZA2GVL5v8EOjB8NFkWcEj cUVuRsnxE1+Z6AHOCeP+7YbtzCp4pMoi4wEXB96Iq0mS/7FGMUkrbqmQNDLx4mgk W9ktXtrqldnOpMtd8+y9ynNksrMrsSsW -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:05 2025 by rpki-client