$ rpki-client -vvf rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft File: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft (raw, json) Hash identifier: nPNE27rFR3Rabl+ATcF7MMxMpmK0zTtNsVAk1Mayv8o= Subject key identifier: 4E:AA:C5:4B:7A:F4:57:2D:7C:CE:F0:FD:FA:98:EE:51:92:B5:29:E1 Authority key identifier: F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05 Certificate issuer: /CN=A9140332/serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft Manifest number: 38 Signing time: Sun 19 Oct 2025 11:09:40 +0000 Manifest this update: Sun 19 Oct 2025 11:09:40 +0000 Manifest next update: Sun 26 Oct 2025 11:09:40 +0000 Files and hashes: 1: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl (hash: 5cRsUlOnpupILgGLrHF100UBUthhFv5F5CViQnfUcFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140332, serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305 Validity Not Before: Oct 19 11:09:40 2025 GMT Not After : Oct 26 11:09:40 2025 GMT Subject: CN=68f4c6f4-3266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:94:ab:d5:84:bf:ee:f2:1a:c5:88:cf:22: aa:ea:a9:65:6a:e5:7f:fb:de:ce:27:34:51:a0:2e: b7:b9:c2:e9:68:07:ec:25:00:46:d8:dd:61:46:72: 76:b7:33:40:05:63:c3:e0:f5:f4:44:e2:5f:e2:a4: 84:67:d7:53:e7:0c:1e:70:3d:d4:10:98:58:fa:03: 53:74:c8:1e:2a:0f:e7:a8:df:47:46:07:d6:02:c6: de:e8:d8:41:28:2a:d3:c1:08:0c:48:c4:21:c0:0c: a8:b4:58:e2:5f:46:82:95:2d:43:a3:08:7a:7d:20: d9:32:e6:64:e3:d9:bc:6a:53:9e:2b:ef:40:ea:c7: 30:be:c3:b3:d0:53:da:25:41:0b:f2:77:fa:44:9b: f1:19:d2:80:ce:5c:0c:99:98:71:66:a9:f9:b9:62: ff:7f:db:a4:6f:eb:74:3d:4c:5b:f7:6a:1e:6f:8f: 30:30:02:e2:13:32:ee:e1:da:33:91:59:3a:f6:7a: 56:15:75:b6:ea:d4:48:a4:14:dd:53:a8:a3:b8:a2: f8:b7:61:dd:04:15:f3:ee:44:19:79:6d:1d:34:a7: e4:a0:ab:14:15:4b:29:36:26:51:cb:52:c0:36:07: 04:8a:48:6c:5d:65:a8:4b:df:b2:bb:66:a2:f6:c3: 66:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AA:C5:4B:7A:F4:57:2D:7C:CE:F0:FD:FA:98:EE:51:92:B5:29:E1 X509v3 Authority Key Identifier: keyid:F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:30:a7:a2:90:ac:0b:a8:a8:69:2f:fa:81:fc:ed:ed:ff:38: d9:ec:30:c3:d9:aa:3f:cb:d8:26:8c:ec:36:8e:9b:6e:bb:e3: be:e8:9f:6b:85:84:e1:7a:26:9c:4e:a5:50:58:cf:68:16:cf: f9:d9:8b:15:a9:b3:62:1f:4c:56:ff:d0:5f:d2:e2:f9:04:6a: ec:b8:6f:db:d0:bc:32:97:17:84:47:8b:ce:a9:a6:8f:6b:9f: b0:34:c8:49:69:73:1f:e3:fb:c6:56:75:ae:d6:87:ac:6a:1a: b4:b8:72:27:98:6e:e1:da:52:e3:17:f5:4e:2c:2b:7f:40:71: c9:34:ab:22:f1:ee:25:c0:34:48:8a:a5:0c:14:b8:ba:c2:1f: 13:ad:13:f6:4c:c5:bb:d3:42:f2:20:32:eb:76:0c:c9:e6:47: 90:66:a6:df:90:6b:6a:f5:f8:62:a6:52:e2:01:11:b7:0d:cd: bc:d2:bf:79:19:7b:0e:70:3d:37:90:77:a9:2d:e0:a5:c1:20: 34:b0:a7:a8:4c:5e:10:ad:1a:0c:50:b8:5e:ba:bf:1d:38:c7: 9d:64:49:90:48:03:65:e3:b7:14:c3:81:9c:8e:32:b9:0e:49: 18:cb:05:59:89:dd:fc:1d:09:7f:89:3f:4f:00:c4:95:38:42: b9:44:39:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDMzMjExMC8GA1UEBRMoRjE0MkZBOTA3NEYxNTU1OTNENDRDM0QxRDAxNEE3REUz OTczNzMwNTAeFw0yNTEwMTkxMTA5NDBaFw0yNTEwMjYxMTA5NDBaMBgxFjAUBgNV BAMTDTY4ZjRjNmY0LTMyNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMlpSr1YS/7vIaxYjPIqrqqWVq5X/73s4nNFGgLre5wuloB+wlAEbY3WFGcna3 M0AFY8Pg9fRE4l/ipIRn11PnDB5wPdQQmFj6A1N0yB4qD+eo30dGB9YCxt7o2EEo KtPBCAxIxCHADKi0WOJfRoKVLUOjCHp9INky5mTj2bxqU54r70DqxzC+w7PQU9ol QQvyd/pEm/EZ0oDOXAyZmHFmqfm5Yv9/26Rv63Q9TFv3ah5vjzAwAuITMu7h2jOR WTr2elYVdbbq1EikFN1TqKO4ovi3Yd0EFfPuRBl5bR00p+SgqxQVSyk2JlHLUsA2 BwSKSGxdZahL37K7ZqL2w2bjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTqrFS3r0 Vy18zvD9+pjuUZK1KeEwHwYDVR0jBBgwFoAU8UL6kHTxVVk9RMPR0BSn3jlzcwUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwMzMyLzQ3RTFDNjE2NjVG MjExRjA4MUI5RjExREM0RjlBRTAyLzhVTDZrSFR4VlZrOVJNUFIwQlNuM2psemN3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFVMNmtIVHhWVms5Uk1QUjBCU24zamx6Y3dVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw MzMyLzQ3RTFDNjE2NjVGMjExRjA4MUI5RjExREM0RjlBRTAyLzhVTDZrSFR4VlZr OVJNUFIwQlNuM2psemN3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFMwp6KQrAuoqGkv+oH87e3/ONnsMMPZqj/L2CaM7DaOm267477on2uF hOF6JpxOpVBYz2gWz/nZixWps2IfTFb/0F/S4vkEauy4b9vQvDKXF4RHi86ppo9r n7A0yElpcx/j+8ZWda7Wh6xqGrS4cieYbuHaUuMX9U4sK39Acck0qyLx7iXANEiK pQwUuLrCHxOtE/ZMxbvTQvIgMut2DMnmR5Bmpt+Qa2r1+GKmUuIBEbcNzbzSv3kZ ew5wPTeQd6kt4KXBIDSwp6hMXhCtGgxQuF66vx04x51kSZBIA2XjtxTDgZyOMrkO SRjLBVmJ3fwdCX+JP08AxJU4QrlEOYs= -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:44 2025 by rpki-client