$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: CctnZmhXehRXjcHzAXkZBpaLEUGBA9f8nnXATBS0Y+s= Subject key identifier: 00:01:29:B0:2D:3F:43:B6:C3:0F:D8:D5:11:29:C7:BE:15:4C:68:1A Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: D4 Signing time: Mon 20 Oct 2025 14:24:19 +0000 Manifest this update: Mon 20 Oct 2025 14:24:18 +0000 Manifest next update: Mon 27 Oct 2025 14:24:18 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: SjwnFfjFQ4ufCqs2Wq7vwrcRAPKNU+lkDvwufVl6yrw=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Oct 20 14:24:18 2025 GMT Not After : Oct 27 14:24:18 2025 GMT Subject: CN=68f64613-15dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d7:9b:66:96:8c:f1:70:d1:c4:ff:36:34:8e: 6d:31:f2:7e:b4:04:52:7f:58:f1:1d:f1:5a:4a:39: 58:60:d9:89:67:96:35:31:f4:d6:f0:52:04:40:9a: d2:ee:65:65:b5:59:0c:64:9a:2d:90:f0:c5:40:f5: 23:28:10:7d:ad:a5:59:56:53:5a:73:1c:23:dc:ba: 8b:82:db:ed:bf:5e:8c:4e:92:df:16:2b:9a:69:5a: 65:1a:7e:ca:d9:36:4f:d7:88:72:3f:47:91:48:90: 53:4c:41:f1:73:7a:f5:ab:c2:d9:84:22:86:1c:a1: 18:70:32:bf:c5:e5:45:00:9f:8d:ec:7a:d7:2b:08: a2:da:df:5d:d3:00:2e:87:61:ad:d1:fa:dc:64:5d: 85:a7:11:bb:53:2c:f2:15:b4:df:44:ce:e2:27:d9: 06:1c:11:a7:05:a8:5e:0f:fc:85:a2:57:d3:55:e8: 77:ca:4b:78:5c:6c:84:a8:8f:07:41:c3:e3:0c:32: de:96:e4:c7:67:11:c2:e4:ee:75:1a:87:64:9d:de: a0:86:f1:5a:36:78:86:75:39:5b:f4:89:5f:4d:5c: f2:31:a9:33:15:0f:b5:8f:54:52:5c:bb:fb:6e:6a: ed:b5:5c:53:88:bc:a0:18:c0:25:42:9f:d9:67:92: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:01:29:B0:2D:3F:43:B6:C3:0F:D8:D5:11:29:C7:BE:15:4C:68:1A X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e9:81:fd:12:32:6e:7c:a5:e1:cf:0c:84:f0:fe:f3:16:66: d0:2d:dd:7f:ec:b4:c2:e1:ba:29:7c:9f:9f:82:76:65:d6:4b: de:f1:e9:ce:fd:f0:db:e0:05:7b:4b:12:e1:df:e7:e5:05:39: ea:e4:54:d5:dc:ee:22:3c:49:a0:eb:a8:48:e4:59:71:02:03: d7:6c:c0:80:20:c6:ae:7d:06:ef:42:16:d6:bb:7b:82:6e:8e: db:34:3f:9c:b3:3a:34:1d:1f:16:36:b6:d0:32:f4:11:f3:4c: 31:b5:45:de:82:80:91:a8:7c:c3:2c:4b:e2:ba:52:c0:a4:44: f0:0d:e5:6c:74:7b:61:53:a5:b8:96:12:52:0b:4d:bb:de:fa: aa:29:75:28:bc:59:c8:7b:7e:88:91:53:25:a8:47:73:a2:ab: f7:1e:d9:42:60:09:cb:56:4a:38:2d:bd:30:ab:5b:5f:a7:f6: cf:e2:e3:1e:ce:a7:7b:04:13:a0:de:98:3e:e3:f7:4f:6c:f7: 6a:6d:9e:98:0f:8e:2a:c7:31:76:a9:c7:d0:b7:27:a2:c7:e7: d2:69:9e:a7:e2:8b:ea:bf:b7:c2:13:01:1f:37:eb:93:ef:34: ee:28:00:1b:f9:ba:3f:6d:84:8e:b5:41:c8:8c:23:a1:a8:00: 62:a4:5c:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjUxMDIwMTQyNDE4WhcNMjUxMDI3MTQyNDE4WjAYMRYwFAYD VQQDEw02OGY2NDYxMy0xNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNebZpaM8XDRxP82NI5tMfJ+tARSf1jxHfFaSjlYYNmJZ5Y1MfTW8FIEQJrS 7mVltVkMZJotkPDFQPUjKBB9raVZVlNacxwj3LqLgtvtv16MTpLfFiuaaVplGn7K 2TZP14hyP0eRSJBTTEHxc3r1q8LZhCKGHKEYcDK/xeVFAJ+N7HrXKwii2t9d0wAu h2Gt0frcZF2FpxG7UyzyFbTfRM7iJ9kGHBGnBaheD/yFolfTVeh3ykt4XGyEqI8H QcPjDDLeluTHZxHC5O51Godknd6ghvFaNniGdTlb9IlfTVzyMakzFQ+1j1RSXLv7 bmrttVxTiLygGMAlQp/ZZ5IcKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAABKbAt P0O2ww/Y1REpx74VTGgaMB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt6YH9EjJufKXhzwyE8P7zFmbQLd1/7LTC4bopfJ+fgnZl1kve8enO /fDb4AV7SxLh3+flBTnq5FTV3O4iPEmg66hI5FlxAgPXbMCAIMaufQbvQhbWu3uC bo7bND+cszo0HR8WNrbQMvQR80wxtUXegoCRqHzDLEviulLApETwDeVsdHthU6W4 lhJSC0273vqqKXUovFnIe36IkVMlqEdzoqv3HtlCYAnLVko4Lb0wq1tfp/bP4uMe zqd7BBOg3pg+4/dPbPdqbZ6YD44qxzF2qcfQtyeix+fSaZ6n4ovqv7fCEwEfN+uT 7zTuKAAb+bo/bYSOtUHIjCOhqABipFzX -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:52 2025 by rpki-client