$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: 4k0ureT6lPUXPLonreVWvmBX7fCrmrrv/+QCjBTvCbQ= Subject key identifier: 9F:93:1A:84:9A:7C:41:3A:23:FB:62:09:56:60:0F:C6:E3:E6:F2:B2 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0E57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E3F Signing time: Tue 04 Nov 2025 17:54:15 +0000 Manifest this update: Tue 04 Nov 2025 17:54:14 +0000 Manifest next update: Tue 11 Nov 2025 17:54:14 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: LVs7/E9QvzIcrF0m2bJAmtUr3rVS8pyS0xWfsk+lhGs=) 2: 6523917E508911F0A97F9A28C4F9AE02.roa (hash: DurC24jDEySwBvnHLWPC4SxsoJWd0wHtB7dUrheJ8l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3671 (0xe57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Nov 4 17:54:14 2025 GMT Not After : Nov 11 17:54:14 2025 GMT Subject: CN=690a3dc6-cd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:b3:84:98:1f:8e:65:97:df:26:2b:cf:b6: d4:df:aa:9d:25:d4:9b:30:6f:37:8b:51:28:50:3a: 8b:f2:91:00:af:2a:ee:79:22:39:9b:cb:37:5f:18: 01:62:17:74:2c:4d:e7:bb:a4:34:c8:26:9b:a4:bf: 3b:ae:85:d5:72:bd:29:67:b5:01:07:90:5e:8f:83: 77:46:06:14:89:04:ec:12:14:d2:72:42:6f:8c:dd: 60:b4:c4:9a:2a:d7:09:8b:7a:c7:81:dd:6c:b6:31: 2b:c4:46:79:f7:60:ea:b1:ef:3c:8d:ba:a9:4a:d3: 01:ce:be:f3:5f:40:97:70:d0:d2:f9:fa:c0:83:16: 86:a6:c4:c0:83:68:ee:3b:b4:34:13:e0:18:f6:78: b1:c3:c3:fe:cd:c5:75:0d:1a:52:c2:67:f0:4f:0c: 8b:3a:96:1a:ea:ab:0f:cd:0c:41:f2:11:7d:35:1c: 36:a1:d6:dc:5a:6a:e7:c5:e9:1e:bb:96:da:db:0f: 6f:61:11:c4:b7:a6:2b:6f:99:fa:9c:39:74:14:05: f2:6f:a2:df:fb:d0:49:8a:7c:b2:3f:bd:71:82:7c: e8:ac:97:83:02:4b:17:2e:e7:6d:3a:d1:f6:1f:24: 9b:8c:97:18:ed:71:6a:54:f3:47:ee:3b:a0:6e:63: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:93:1A:84:9A:7C:41:3A:23:FB:62:09:56:60:0F:C6:E3:E6:F2:B2 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:67:0c:7a:ca:1d:2c:30:45:20:23:c4:c5:30:b6:bb:2b:d2: f0:e1:0f:5e:eb:17:d2:ed:53:74:64:ed:5a:92:fb:10:b6:d1: ae:e1:af:e6:c7:12:06:0e:b3:e8:ef:02:9a:72:21:f6:94:52: b3:1c:d0:88:6d:25:8b:ac:f2:01:e0:3e:6b:39:7e:f6:f3:ad: 75:b1:eb:96:1c:ed:6c:23:d2:a9:14:9a:c7:dd:fc:7c:39:ec: e2:61:54:81:fb:f3:ed:5d:f7:5d:f5:31:2a:2e:9a:fc:5d:e3: 04:cd:b1:65:bc:16:a4:1f:3e:09:eb:39:4a:84:a9:54:88:a3: 8a:0c:91:5b:e3:9c:61:ca:dd:af:b5:c2:7d:50:2e:bf:78:7e: fd:b3:60:d2:ae:61:c7:b8:4b:cf:d9:76:10:36:3b:ba:88:82: 76:4a:41:f5:25:ed:1b:87:b8:90:26:cc:c7:d4:d6:df:f3:ad: 23:09:44:80:64:fe:a6:9f:2c:cf:94:c2:22:df:38:e6:9c:28: 2f:a6:7e:e2:1a:17:f1:f6:12:98:c5:f2:a0:99:53:52:80:46: f3:12:7f:77:91:09:d2:e5:35:fa:94:68:da:c4:14:f4:23:bc: bc:68:55:6e:9c:2d:db:cf:70:bd:ef:50:ce:d7:e2:a4:22:c9: 3f:9b:c7:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUxMTA0MTc1NDE0WhcNMjUxMTExMTc1NDE0WjAYMRYwFAYD VQQDEw02OTBhM2RjNi1jZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbKzhJgfjmWX3yYrz7bU36qdJdSbMG83i1EoUDqL8pEAryrueSI5m8s3XxgB Yhd0LE3nu6Q0yCabpL87roXVcr0pZ7UBB5Bej4N3RgYUiQTsEhTSckJvjN1gtMSa KtcJi3rHgd1stjErxEZ592Dqse88jbqpStMBzr7zX0CXcNDS+frAgxaGpsTAg2ju O7Q0E+AY9nixw8P+zcV1DRpSwmfwTwyLOpYa6qsPzQxB8hF9NRw2odbcWmrnxeke u5ba2w9vYRHEt6Yrb5n6nDl0FAXyb6Lf+9BJinyyP71xgnzorJeDAksXLudtOtH2 HySbjJcY7XFqVPNH7jugbmO/YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+TGoSa fEE6I/tiCVZgD8bj5vKyMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHZwx6yh0sMEUgI8TFMLa7K9Lw4Q9e6xfS7VN0ZO1akvsQttGu4a/m xxIGDrPo7wKaciH2lFKzHNCIbSWLrPIB4D5rOX728611seuWHO1sI9KpFJrH3fx8 OeziYVSB+/PtXfdd9TEqLpr8XeMEzbFlvBakHz4J6zlKhKlUiKOKDJFb45xhyt2v tcJ9UC6/eH79s2DSrmHHuEvP2XYQNju6iIJ2SkH1Je0bh7iQJszH1Nbf860jCUSA ZP6mnyzPlMIi3zjmnCgvpn7iGhfx9hKYxfKgmVNSgEbzEn93kQnS5TX6lGjaxBT0 I7y8aFVunC3bz3C971DO1+KkIsk/m8eO -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:45 2025 by rpki-client