$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: NMyOelHj10rnbXXOekj2MTbmK+ZipC7RW9SIswmwjd0= Subject key identifier: C3:DE:BE:56:75:7D:C6:04:5B:2A:68:8B:00:27:EF:55:AE:C2:81:D0 Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0B59 Signing time: Tue 04 Nov 2025 19:16:14 +0000 Manifest this update: Tue 04 Nov 2025 19:16:14 +0000 Manifest next update: Tue 11 Nov 2025 19:16:14 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: X5d7dYzDmbsnMF9f+xD/c1hdo4cA33CzHyPA/9ppyQc=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Nov 4 19:16:14 2025 GMT Not After : Nov 11 19:16:14 2025 GMT Subject: CN=690a50fe-a09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:2e:8b:14:b2:d3:f5:25:84:6e:df:b8:11: c8:40:5a:c6:d7:60:2e:c4:b2:55:57:93:40:ba:44: c6:d5:ff:fe:e5:e2:d0:4f:fe:dc:65:91:52:1b:fc: 49:95:b8:d9:91:01:62:45:a4:65:28:17:9d:52:85: af:21:fd:8b:83:eb:1d:ee:ae:45:e2:e9:c5:f8:96: 24:4e:6e:7f:e0:6a:55:c2:98:ac:36:af:2a:60:2e: cb:4c:c5:04:d4:2e:69:1f:5e:95:97:ba:7b:54:50: 28:f2:53:18:2f:29:ba:af:7f:1c:25:b8:c4:b4:09: 0a:4e:61:f7:01:39:34:01:a4:cd:bb:c2:de:5b:ef: bd:23:54:44:f6:53:7f:32:27:ed:83:b3:fc:a1:84: 75:d6:9d:50:21:f5:97:d0:b6:0f:28:c8:30:a2:4d: 86:3f:9c:0c:ba:06:5d:92:1b:e9:fc:18:5a:96:05: 08:11:93:b3:3c:43:40:0b:cc:af:16:89:20:17:53: a6:f8:bd:ce:27:af:3b:cc:f4:73:5c:05:b3:ab:7b: 67:65:94:73:d7:01:89:37:4a:db:35:8b:ee:8b:5d: c2:81:4e:13:0a:5c:1b:c2:8f:c5:57:c0:97:0f:80: 66:ba:d8:8b:c9:88:87:4c:69:e1:55:45:47:62:94: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DE:BE:56:75:7D:C6:04:5B:2A:68:8B:00:27:EF:55:AE:C2:81:D0 X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:cb:22:55:ef:3e:85:56:ae:7c:76:08:bf:a8:cd:8b:e7:cb: 6e:a3:59:bc:25:00:5c:c9:b9:ba:c0:a2:92:45:83:28:e7:65: 56:28:93:47:07:55:7d:af:d3:bc:c9:88:c1:7d:fd:24:8f:e1: e4:d1:75:22:8a:7d:74:b3:f1:c3:b2:67:b6:fd:06:57:e1:06: be:3b:cd:28:79:76:37:5f:92:b0:d9:93:ba:0c:a4:d0:01:a0: 71:29:0d:09:75:f3:f0:e5:73:fa:d6:53:4e:94:45:71:b1:4b: 96:d1:e7:39:d9:8c:94:3b:0d:eb:d9:f0:7c:b8:c7:7e:37:5d: 9f:fb:02:ef:6a:ee:b2:30:bc:9b:76:5c:28:94:ef:07:6d:61: 28:c1:2c:49:ea:bc:cc:26:23:32:a2:da:6a:bd:26:bf:ac:f1: 7c:ea:a6:60:57:5a:36:fc:a0:ce:79:a3:de:cd:71:dd:19:00: 7e:22:21:2c:b2:70:4f:ea:fd:eb:cd:98:b2:a1:5c:21:57:b4: 53:04:ea:08:3e:28:32:21:b5:ec:3b:70:32:b2:da:95:ff:db: 5c:4f:09:5c:5a:26:30:03:44:60:da:cc:cf:27:a4:db:ae:01: 41:c5:8d:e6:12:1b:e3:52:f1:1b:96:70:36:c3:90:b6:8e:3b: 12:30:69:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUxMTA0MTkxNjE0WhcNMjUxMTExMTkxNjE0WjAYMRYwFAYD VQQDEw02OTBhNTBmZS1hMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw84uixSy0/UlhG7fuBHIQFrG12AuxLJVV5NAukTG1f/+5eLQT/7cZZFSG/xJ lbjZkQFiRaRlKBedUoWvIf2Lg+sd7q5F4unF+JYkTm5/4GpVwpisNq8qYC7LTMUE 1C5pH16Vl7p7VFAo8lMYLym6r38cJbjEtAkKTmH3ATk0AaTNu8LeW++9I1RE9lN/ Miftg7P8oYR11p1QIfWX0LYPKMgwok2GP5wMugZdkhvp/BhalgUIEZOzPENAC8yv FokgF1Om+L3OJ687zPRzXAWzq3tnZZRz1wGJN0rbNYvui13CgU4TClwbwo/FV8CX D4BmutiLyYiHTGnhVUVHYpTtYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPevlZ1 fcYEWypoiwAn71WuwoHQMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoyyJV7z6FVq58dgi/qM2L58tuo1m8JQBcybm6wKKSRYMo52VWKJNH B1V9r9O8yYjBff0kj+Hk0XUiin10s/HDsme2/QZX4Qa+O80oeXY3X5Kw2ZO6DKTQ AaBxKQ0JdfPw5XP61lNOlEVxsUuW0ec52YyUOw3r2fB8uMd+N12f+wLvau6yMLyb dlwolO8HbWEowSxJ6rzMJiMyotpqvSa/rPF86qZgV1o2/KDOeaPezXHdGQB+IiEs snBP6v3rzZiyoVwhV7RTBOoIPigyIbXsO3AystqV/9tcTwlcWiYwA0Rg2szPJ6Tb rgFBxY3mEhvjUvEblnA2w5C2jjsSMGmV -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:12 2025 by rpki-client