$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: dX7DVT/ijOsCz3qjExdXlrHrzExs6skt8CCMulJGhQw= Subject key identifier: 3F:BB:71:0C:71:6C:F8:E7:28:48:40:6E:82:EC:31:CE:4A:55:51:A2 Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: 012A Signing time: Mon 03 Nov 2025 04:35:48 +0000 Manifest this update: Mon 03 Nov 2025 04:35:47 +0000 Manifest next update: Mon 10 Nov 2025 04:35:47 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: HwiRj7H7/Utjcszq/F91W8bYgRwLuQZvR7WVJ6M8mdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: Nov 3 04:35:47 2025 GMT Not After : Nov 10 04:35:47 2025 GMT Subject: CN=69083124-f49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:ae:b3:bc:19:21:94:2e:13:43:10:71:f2: 63:47:47:b0:43:73:28:83:71:d0:91:7b:ad:2b:e0: 01:2c:62:37:35:2c:95:89:eb:4b:5a:59:bc:d8:1b: 0f:47:47:ec:cb:9f:40:e7:92:23:d8:d3:cb:ac:57: 05:80:c5:58:4e:5f:2b:57:81:c2:1e:9e:10:f7:21: 58:6e:a3:b3:43:bd:d4:7d:d7:bf:5d:42:dc:0a:48: 85:21:fc:8e:42:4f:09:c1:1d:e1:a1:b5:29:ca:93: d1:b7:59:47:e3:05:be:39:b3:5a:f0:f1:99:7e:68: 92:1c:e6:d2:1f:1d:6a:aa:84:66:a2:c2:ea:3e:7f: 62:57:dc:eb:b0:85:c2:68:fa:a8:bf:f0:f0:0a:93: 0e:61:1f:ff:47:9e:c6:c6:1e:62:c8:61:bd:e4:39: c7:90:3b:18:a1:34:b3:18:ca:55:77:81:13:b2:fe: f7:3f:dd:c9:13:78:a0:6b:f1:7a:90:ad:59:5a:fe: 6b:ff:0c:4b:d9:8d:4f:45:fa:aa:7c:41:ff:bf:dd: 85:ae:b9:46:97:11:23:95:a3:df:01:6c:29:f4:65: ae:3b:8d:c7:a4:5d:52:6c:76:b9:3a:f5:7f:e9:0a: 7e:88:75:2a:60:08:42:38:1f:4c:8e:10:a1:32:df: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BB:71:0C:71:6C:F8:E7:28:48:40:6E:82:EC:31:CE:4A:55:51:A2 X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:41:60:65:2f:d9:f6:a1:c5:2b:75:e9:2f:6d:27:58:18:99: fa:92:1b:19:84:55:e4:3c:a7:b8:3d:35:be:41:e8:13:b7:1f: 8e:5f:72:c4:26:fd:31:01:87:30:55:8e:76:30:0d:3e:fa:4e: 84:2b:e2:d4:e7:ff:be:27:e7:e8:b7:a2:dd:3b:7b:a8:66:f4: 0c:72:07:00:81:0f:9e:af:fd:d1:ce:e6:f1:29:dd:a7:e1:f5: e5:cc:3e:c1:b1:ee:90:75:57:bf:98:75:8b:13:30:a0:1a:77: 3f:21:bb:00:1d:6f:c3:0d:6b:fa:17:45:f6:fb:b9:3f:ce:16: d7:7a:63:19:f3:d8:a0:86:ea:68:c2:44:c9:1d:38:0a:31:cf: 69:d4:7b:7f:9d:56:f1:b7:d5:d6:61:66:05:e2:85:d8:ca:5e: 98:f5:97:e0:31:75:30:b4:6d:d3:4c:9c:75:8b:c8:0f:3f:12: 0b:0e:53:20:4f:48:f1:ca:9e:8d:c3:17:9d:ea:8b:da:07:4d: 26:95:17:ce:70:76:4f:11:cc:60:29:e1:3f:20:cf:1b:37:11: 6e:1c:3c:31:47:c1:73:34:94:3a:69:b8:c6:cf:07:9f:15:6a: 3d:94:a9:d4:a9:6b:83:83:cf:3f:96:aa:5d:3f:f0:46:b4:d1: 04:87:a5:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDAzRkYwNjU3QzBFQ0Y4NzM5ODMwMzNGN0M2QzY0ODhC MzM3ODlDNDMwHhcNMjUxMTAzMDQzNTQ3WhcNMjUxMTEwMDQzNTQ3WjAYMRYwFAYD VQQDEw02OTA4MzEyNC1mNDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGaus7wZIZQuE0MQcfJjR0ewQ3Mog3HQkXutK+ABLGI3NSyVietLWlm82BsP R0fsy59A55Ij2NPLrFcFgMVYTl8rV4HCHp4Q9yFYbqOzQ73Ufde/XULcCkiFIfyO Qk8JwR3hobUpypPRt1lH4wW+ObNa8PGZfmiSHObSHx1qqoRmosLqPn9iV9zrsIXC aPqov/DwCpMOYR//R57Gxh5iyGG95DnHkDsYoTSzGMpVd4ETsv73P93JE3iga/F6 kK1ZWv5r/wxL2Y1PRfqqfEH/v92FrrlGlxEjlaPfAWwp9GWuO43HpF1SbHa5OvV/ 6Qp+iHUqYAhCOB9MjhChMt9k1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+7cQxx bPjnKEhAboLsMc5KVVGiMB8GA1UdIwQYMBaAFAP/BlfA7PhzmDAz98bGSIszeJxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC81NjFENjYyRUVB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1IT1lNRFAzeHNaSWl6TjRu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC81NjFENjYyRUVBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1I T1lNRFAzeHNaSWl6TjRuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSQWBlL9n2ocUrdekvbSdYGJn6khsZhFXkPKe4PTW+QegTtx+OX3LE Jv0xAYcwVY52MA0++k6EK+LU5/++J+fot6LdO3uoZvQMcgcAgQ+er/3RzubxKd2n 4fXlzD7Bse6QdVe/mHWLEzCgGnc/IbsAHW/DDWv6F0X2+7k/zhbXemMZ89ighupo wkTJHTgKMc9p1Ht/nVbxt9XWYWYF4oXYyl6Y9ZfgMXUwtG3TTJx1i8gPPxILDlMg T0jxyp6Nwxed6ovaB00mlRfOcHZPEcxgKeE/IM8bNxFuHDwxR8FzNJQ6abjGzwef FWo9lKnUqWuDg88/lqpdP/BGtNEEh6Xf -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:23 2025 by rpki-client