$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: CeM0PFetFS6K8ZUDBpHhInAcfiffsQS16a43XEgF5NM= Subject key identifier: C1:83:68:6E:6A:59:C9:B2:55:06:A5:EA:99:58:4A:F9:06:70:EA:57 Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 0600 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 05F8 Signing time: Sun 02 Nov 2025 22:56:04 +0000 Manifest this update: Sun 02 Nov 2025 22:56:04 +0000 Manifest next update: Sun 09 Nov 2025 22:56:04 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: KMkws1LMJT0UjELaJyxUDKW+WreqFj20McWXkPpqGQ8=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: Yz0s0SgslhEB/Ux9X8zgj1HP5jX8LMQjR8aSmtueyxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1536 (0x600) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Nov 2 22:56:04 2025 GMT Not After : Nov 9 22:56:04 2025 GMT Subject: CN=6907e184-08ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:f5:fa:5c:30:48:e9:2f:98:55:c0:4d:13: d1:ba:a7:09:b8:77:f5:97:7f:5f:a3:b6:05:2f:cd: 19:54:65:a3:8e:5f:6c:bf:a7:50:89:29:90:f8:f3: 75:2a:87:de:ed:25:8b:9d:26:93:28:02:b0:05:5d: f3:d2:65:84:d9:51:9a:b4:4d:c3:e9:2c:0f:fe:fd: 79:f2:5a:9f:5b:7d:23:2b:0e:fc:ec:8d:0c:cc:57: bd:f1:ff:a1:b8:f6:f3:4a:a2:eb:f0:82:1d:36:48: 9b:eb:a6:a2:5a:d8:93:59:77:8c:ef:2e:e6:96:07: 6d:dc:70:26:ac:6c:28:5e:09:de:e4:56:5d:82:f6: 64:26:79:ad:b0:8b:4a:fb:2b:88:1e:df:26:b4:b1: d5:24:83:83:8b:c7:a0:51:84:eb:66:c2:fa:73:d8: 3e:37:f6:90:dc:de:d0:b1:20:2f:4e:98:aa:e6:13: 16:76:82:49:4a:44:85:51:e2:fe:a4:f8:c7:44:9b: 19:92:8c:77:33:53:62:ba:91:f9:e9:6c:cc:bc:9f: 3d:1b:f7:e6:ef:2f:08:45:59:94:b2:38:44:c9:07: 92:af:ee:69:8d:99:3d:a4:35:ed:78:8a:c5:27:aa: 84:2f:cd:f7:c2:25:f4:17:8e:78:e5:76:41:ab:a7: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:83:68:6E:6A:59:C9:B2:55:06:A5:EA:99:58:4A:F9:06:70:EA:57 X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:74:c0:3f:4d:0e:87:1a:67:7c:ff:8e:b8:d0:ca:cd:62:96: f2:26:a1:d0:97:09:0d:d3:96:3c:c0:80:25:22:1e:53:b1:99: 17:03:c0:02:d0:c5:04:4e:dc:be:c0:97:43:f1:52:2f:49:b9: 31:e6:4c:7f:45:bb:84:02:d9:25:25:f8:c9:d0:51:2f:6b:c9: 0a:ae:75:a2:c4:3d:59:62:85:eb:32:5d:12:90:57:77:83:bd: 03:d9:ab:6c:14:b5:b5:ca:55:22:39:67:41:95:e1:45:76:15: 1b:da:4e:a1:c1:e9:b8:c9:54:04:d5:b6:70:7f:6f:3a:12:8b: 69:0f:33:07:d0:f0:31:9f:6e:b5:10:c4:c8:13:44:22:bb:ce: 90:a9:6e:b2:29:e7:c0:ce:30:95:6c:ed:04:7c:cf:91:42:56: d6:d7:ae:40:98:13:52:18:ea:21:ca:d4:62:09:5a:c9:16:1e: c8:fc:bb:fb:45:e3:ab:0e:e0:77:39:cb:3b:e0:bf:e6:11:7f: 7f:92:60:bb:d7:be:30:5a:6b:e7:8f:54:b6:c6:6f:73:31:6e: 57:91:9d:e4:34:ba:14:bb:f1:3f:fc:fd:03:20:d4:3e:b6:1d: 27:ce:0f:a5:7e:d0:d9:4c:bc:a4:e2:3e:78:29:9c:90:9f:e1: 4c:37:2b:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjUxMTAyMjI1NjA0WhcNMjUxMTA5MjI1NjA0WjAYMRYwFAYD VQQDEw02OTA3ZTE4NC0wOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVj1+lwwSOkvmFXATRPRuqcJuHf1l39fo7YFL80ZVGWjjl9sv6dQiSmQ+PN1 Kofe7SWLnSaTKAKwBV3z0mWE2VGatE3D6SwP/v158lqfW30jKw787I0MzFe98f+h uPbzSqLr8IIdNkib66aiWtiTWXeM7y7mlgdt3HAmrGwoXgne5FZdgvZkJnmtsItK +yuIHt8mtLHVJIODi8egUYTrZsL6c9g+N/aQ3N7QsSAvTpiq5hMWdoJJSkSFUeL+ pPjHRJsZkox3M1NiupH56WzMvJ89G/fm7y8IRVmUsjhEyQeSr+5pjZk9pDXteIrF J6qEL833wiX0F4545XZBq6da7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGDaG5q WcmyVQal6plYSvkGcOpXMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvdMA/TQ6HGmd8/4640MrNYpbyJqHQlwkN05Y8wIAlIh5TsZkXA8AC 0MUETty+wJdD8VIvSbkx5kx/RbuEAtklJfjJ0FEva8kKrnWixD1ZYoXrMl0SkFd3 g70D2atsFLW1ylUiOWdBleFFdhUb2k6hwem4yVQE1bZwf286EotpDzMH0PAxn261 EMTIE0Qiu86QqW6yKefAzjCVbO0EfM+RQlbW165AmBNSGOohytRiCVrJFh7I/Lv7 ReOrDuB3Ocs74L/mEX9/kmC7174wWmvnj1S2xm9zMW5XkZ3kNLoUu/E//P0DINQ+ th0nzg+lftDZTLyk4j54KZyQn+FMNyvA -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:57 2025 by rpki-client