$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft File: s8jMSc2pmXofeyj1RvyRIdqhkzw.mft (raw, json) Hash identifier: Jj3r8I5X2596Ej9acyHU1eRgOhi0wRoN3kcwmpu0NEM= Subject key identifier: 4A:57:8C:7A:43:D8:55:53:73:B9:AD:F7:67:5E:67:2F:A1:F0:FC:28 Authority key identifier: B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C Certificate issuer: /CN=A913E83E/serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft Manifest number: 3A Signing time: Sun 19 Oct 2025 10:57:56 +0000 Manifest this update: Sun 19 Oct 2025 10:57:55 +0000 Manifest next update: Sun 26 Oct 2025 10:57:55 +0000 Files and hashes: 1: s8jMSc2pmXofeyj1RvyRIdqhkzw.crl (hash: 0mBAJEv2dyfBNBcFYp9SLoBrNhZu+ZabKFWXaPuKVt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Validity Not Before: Oct 19 10:57:55 2025 GMT Not After : Oct 26 10:57:55 2025 GMT Subject: CN=68f4c433-1164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:a3:a4:d6:df:7f:38:f0:50:87:9a:25:e5: ab:1b:02:f5:ee:1a:38:0d:26:68:b9:a7:1e:5c:11: d8:a9:0d:4a:18:56:4c:ee:56:3c:f3:27:69:a6:53: 8a:c2:6d:76:63:65:94:fd:fb:3a:0a:46:5a:7d:6e: ac:52:f6:2f:fb:3a:b1:08:6b:07:67:81:6f:2d:c3: 26:3c:05:fd:f7:41:ae:d5:c1:50:a4:62:81:a7:ee: e6:17:fb:ec:c4:10:19:f4:3c:1e:4d:21:b7:95:ef: c3:82:7d:a1:f2:84:d0:25:21:0e:54:1d:ae:c7:62: 75:d4:62:7a:0f:b8:ef:9f:b8:24:d5:c8:58:d0:79: df:6e:c7:4a:86:1b:3a:e7:53:5a:47:f9:de:bc:c4: ac:f5:09:11:5a:fc:50:17:ce:f8:14:b0:f0:57:be: 17:bf:e2:4c:c9:be:9e:6c:3c:d0:1a:70:32:81:4f: 7b:e8:38:12:62:5d:63:6b:72:25:af:63:4c:f3:5a: da:aa:a9:ca:82:76:6a:86:98:cf:1b:ae:c6:83:e6: e6:b4:51:31:23:d7:d4:bd:d2:ee:f1:53:23:e7:e3: 85:b6:e0:da:80:61:5b:bc:08:e8:62:4b:69:c9:04: 0c:83:51:9d:cc:09:d4:3d:b3:15:d7:f3:8f:69:43: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:57:8C:7A:43:D8:55:53:73:B9:AD:F7:67:5E:67:2F:A1:F0:FC:28 X509v3 Authority Key Identifier: keyid:B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d8:6f:28:a5:0b:25:69:a1:a5:4e:a5:66:04:3c:8b:f4:f9: af:28:b2:76:bf:df:19:5b:4e:d6:5b:1c:c7:b0:9a:5b:09:df: 5b:19:f8:c9:43:e3:75:de:b3:3a:89:80:37:de:3c:62:29:f0: 1f:39:d3:a9:1c:55:3a:7e:b0:6b:85:4e:41:04:c2:59:70:c7: a3:20:39:a9:4a:02:c1:05:cd:e2:0c:68:89:9e:24:e8:e7:81: 0b:e8:5b:92:32:51:db:81:29:39:fa:d1:a4:cc:9a:5d:f7:49: 5d:3a:30:c0:fd:99:22:0d:f0:cc:35:31:1e:10:0d:b3:ba:9a: 9a:f6:e0:9f:e9:7d:24:19:08:b2:c8:28:8b:39:e6:bd:54:8f: 1c:8d:a4:28:6c:4f:a1:4a:78:e0:3a:ae:2a:32:51:e5:ee:a4: ef:f6:52:74:70:15:db:0b:9d:38:49:0f:f1:6b:af:c9:bf:49: b6:86:c3:c0:6d:fa:e2:14:1e:84:de:67:17:c3:e4:62:9c:a7: 8c:fa:65:c0:d4:1c:a3:ff:81:25:12:d3:c3:57:84:b1:f3:13: b7:0f:8f:c4:e0:9d:ba:df:a2:9e:31:34:bd:2b:e7:de:ae:3f: 80:7e:98:87:d8:ab:6a:e7:47:f0:87:72:90:0b:85:e2:96:aa: 1f:89:d0:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoQjNDOENDNDlDREE5OTk3QTFGN0IyOEY1NDZGQzkxMjFE QUExOTMzQzAeFw0yNTEwMTkxMDU3NTVaFw0yNTEwMjYxMDU3NTVaMBgxFjAUBgNV BAMTDTY4ZjRjNDMzLTExNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxk6Ok1t9/OPBQh5ol5asbAvXuGjgNJmi5px5cEdipDUoYVkzuVjzzJ2mmU4rC bXZjZZT9+zoKRlp9bqxS9i/7OrEIawdngW8twyY8Bf33Qa7VwVCkYoGn7uYX++zE EBn0PB5NIbeV78OCfaHyhNAlIQ5UHa7HYnXUYnoPuO+fuCTVyFjQed9ux0qGGzrn U1pH+d68xKz1CRFa/FAXzvgUsPBXvhe/4kzJvp5sPNAacDKBT3voOBJiXWNrciWv Y0zzWtqqqcqCdmqGmM8brsaD5ua0UTEj19S90u7xUyPn44W24NqAYVu8COhiS2nJ BAyDUZ3MCdQ9sxXX849pQ98pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSleMekPY VVNzua33Z15nL6Hw/CgwHwYDVR0jBBgwFoAUs8jMSc2pmXofeyj1RvyRIdqhkzww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0YzOTEwQzkwNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhvZmV5ajFSdnlSSWRxaGt6 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczhqTVNjMnBtWG9mZXlqMVJ2eVJJZHFoa3p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0YzOTEwQzkwNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhv ZmV5ajFSdnlSSWRxaGt6dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKTYbyilCyVpoaVOpWYEPIv0+a8osna/3xlbTtZbHMewmlsJ31sZ+MlD 43XeszqJgDfePGIp8B8506kcVTp+sGuFTkEEwllwx6MgOalKAsEFzeIMaImeJOjn gQvoW5IyUduBKTn60aTMml33SV06MMD9mSIN8Mw1MR4QDbO6mpr24J/pfSQZCLLI KIs55r1UjxyNpChsT6FKeOA6rioyUeXupO/2UnRwFdsLnThJD/Frr8m/SbaGw8Bt +uIUHoTeZxfD5GKcp4z6ZcDUHKP/gSUS08NXhLHzE7cPj8Tgnbrfop4xNL0r596u P4B+mIfYq2rnR/CHcpALheKWqh+J0EE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:59 2025 by rpki-client