$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json) Hash identifier: FxgFDEbhFUx1JrAnWU6RNL1Sp+ohQfVDE4VnI1xupaU= Subject key identifier: D8:07:CA:19:3F:77:8A:FE:BF:D6:AF:E0:15:F6:9F:CD:16:44:03:3A Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft Manifest number: 03AD Signing time: Mon 03 Nov 2025 00:44:25 +0000 Manifest this update: Mon 03 Nov 2025 00:44:25 +0000 Manifest next update: Mon 10 Nov 2025 00:44:25 +0000 Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: qSLtweqEYx17aquzhHOQtd6kshTdyhByhypkELsrNOs=) 2: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (hash: XtdmJSxuSqJLeY4yGf6y31fYXsFvKu/1qBD/nGzqK1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A96A, serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Validity Not Before: Nov 3 00:44:25 2025 GMT Not After : Nov 10 00:44:25 2025 GMT Subject: CN=6907fae9-266b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:ef:32:ac:33:e2:5b:02:6d:05:44:a1:8e: a7:01:26:62:bf:b0:68:e5:8b:6a:db:27:e0:da:9c: 1f:30:5b:12:3d:d8:09:a1:c9:ab:22:ed:d7:95:93: 37:92:14:c3:5c:cd:20:c3:9a:a8:db:cd:4f:7f:2a: 98:69:1c:d5:c7:93:e5:2a:a7:5c:a4:32:34:e8:ba: 3e:a9:32:94:aa:97:5a:08:84:cd:49:41:1f:e8:15: 95:c3:57:1d:ef:d9:dc:22:9a:e3:3d:7a:ad:a0:b1: 91:b5:d6:67:63:1c:77:3d:dd:61:13:48:0f:80:be: b3:7f:d7:b6:3d:aa:8a:2b:fe:15:09:2c:b7:af:6c: 7d:07:b1:1a:9a:25:2c:95:11:81:67:46:f8:80:c5: 4a:17:41:4d:61:5e:94:af:dc:7f:ea:d4:0f:ef:d9: b7:58:5b:d2:35:71:a7:44:12:65:3f:57:f8:b7:e8: 86:c6:5f:ae:f7:ad:3f:c3:21:87:91:96:f5:3d:d8: 04:7d:c3:72:93:d4:d9:c3:5c:e8:33:e7:cd:b9:d9: 10:11:cf:44:76:2a:d4:be:8d:54:38:b1:9b:1e:eb: a9:ea:f6:a0:09:00:b9:af:7d:cc:16:7f:14:da:71: 55:68:4c:f5:70:da:25:3e:83:37:00:ec:2d:65:b4: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:07:CA:19:3F:77:8A:FE:BF:D6:AF:E0:15:F6:9F:CD:16:44:03:3A X509v3 Authority Key Identifier: keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:cc:0f:91:ec:35:e2:af:83:8e:3d:07:ff:16:03:60:27:71: a5:37:3b:2a:80:09:7b:b0:2b:24:d4:d3:a3:74:77:a8:26:33: c7:23:ba:45:5f:45:f2:91:b8:4a:69:84:89:b5:ce:00:8e:84: 82:d2:2f:80:65:61:a1:d4:c9:e6:d6:d6:1e:a1:f9:b0:41:05: f5:80:b3:03:d2:9f:e4:c2:a5:96:4c:9f:46:f2:85:07:cb:b1: 2f:c7:ad:c9:60:c9:1c:33:61:7d:63:4b:d0:fb:06:54:db:cb: b2:0e:6d:14:66:6b:d7:b3:07:d2:7c:56:37:36:e3:62:86:dd: 2e:73:cb:de:7f:60:cf:e4:c0:f1:2e:c6:e9:d2:5c:81:b3:19: 8a:c3:e0:60:c6:34:c9:f6:fd:a1:68:bf:1f:5b:5d:d1:db:e6: 66:e0:85:76:a6:d0:1e:9c:14:c7:a1:b6:6d:0c:c7:b6:2b:f9: 0a:80:79:18:22:65:69:8c:41:7c:c4:ed:5e:33:b5:2e:fb:7c: dd:cf:e5:7c:af:04:1d:ee:24:fd:86:d0:62:3b:5c:9f:44:91: 07:3a:f5:a3:2f:de:67:92:00:25:13:66:1f:81:ca:ea:3b:85: 31:9e:fb:24:d3:02:07:e8:8a:f4:7d:ff:a0:c4:5a:4f:25:cd: fb:e7:9a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5NkExMTAvBgNVBAUTKEYwMjI0NTM1M0ZDMUYxOTRBOTAyMkE0QUMwMTk3N0RF NUZERTM2RjkwHhcNMjUxMTAzMDA0NDI1WhcNMjUxMTEwMDA0NDI1WjAYMRYwFAYD VQQDEw02OTA3ZmFlOS0yNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYHvMqwz4lsCbQVEoY6nASZiv7Bo5Ytq2yfg2pwfMFsSPdgJocmrIu3XlZM3 khTDXM0gw5qo281PfyqYaRzVx5PlKqdcpDI06Lo+qTKUqpdaCITNSUEf6BWVw1cd 79ncIprjPXqtoLGRtdZnYxx3Pd1hE0gPgL6zf9e2PaqKK/4VCSy3r2x9B7EamiUs lRGBZ0b4gMVKF0FNYV6Ur9x/6tQP79m3WFvSNXGnRBJlP1f4t+iGxl+u960/wyGH kZb1PdgEfcNyk9TZw1zoM+fNudkQEc9EdirUvo1UOLGbHuup6vagCQC5r33MFn8U 2nFVaEz1cNolPoM3AOwtZbRdRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgHyhk/ d4r+v9av4BX2n80WRAM6MB8GA1UdIwQYMBaAFPAiRTU/wfGUqQIqSsAZd95f3jb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk2QS8yODc4NUY2MEJG QkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjhaU3BBaXBLd0JsMzNsX2VO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDSkZOVF9COFpTcEFpcEt3QmwzM2xfZU52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk2QS8yODc4NUY2MEJGQkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjha U3BBaXBLd0JsMzNsX2VOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgzA+R7DXir4OOPQf/FgNgJ3GlNzsqgAl7sCsk1NOjdHeoJjPHI7pF X0XykbhKaYSJtc4AjoSC0i+AZWGh1Mnm1tYeofmwQQX1gLMD0p/kwqWWTJ9G8oUH y7Evx63JYMkcM2F9Y0vQ+wZU28uyDm0UZmvXswfSfFY3NuNiht0uc8vef2DP5MDx Lsbp0lyBsxmKw+BgxjTJ9v2haL8fW13R2+Zm4IV2ptAenBTHobZtDMe2K/kKgHkY ImVpjEF8xO1eM7Uu+3zdz+V8rwQd7iT9htBiO1yfRJEHOvWjL95nkgAlE2Yfgcrq O4Uxnvsk0wIH6Ir0ff+gxFpPJc3755ph -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:20 2025 by rpki-client