$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: eKwmJgEm2GuiOOX7CR6yI1Iu0Ajtl0HsFaL3NIbxBY0= Subject key identifier: 33:59:49:17:1C:2D:49:84:11:59:EA:27:59:4C:38:06:B8:31:2D:6B Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 09F6 Signing time: Sat 18 Oct 2025 20:57:17 +0000 Manifest this update: Sat 18 Oct 2025 20:57:17 +0000 Manifest next update: Sat 25 Oct 2025 20:57:17 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: 5gxUOMgi0sPNOUdFd7GF3Gw7t8CGfugN3R2KN3uBqPE=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 5Gk4b25F0uq7efelkFmxT/VKGia42LkwXqnCVKORjVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Oct 18 20:57:17 2025 GMT Not After : Oct 25 20:57:17 2025 GMT Subject: CN=68f3ff2d-2a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:40:23:95:6a:46:75:a1:26:df:39:ce:a9:62: 6a:3d:79:0c:4e:94:65:ef:df:d8:4b:f5:3d:91:23: 6a:14:c2:ce:89:5b:99:40:82:67:5d:54:ef:f2:67: 25:68:5f:2d:0b:e3:38:df:64:bb:27:c7:4d:15:bd: 98:ed:93:fb:bf:fb:12:7c:26:c3:94:f7:46:e9:31: a5:f4:81:89:38:a8:a2:37:d7:2b:43:49:3c:25:55: f3:2d:cd:af:be:f6:a1:7d:a7:a8:a4:35:dc:65:90: 8a:ea:1b:57:9a:69:c1:38:0c:34:e7:b9:46:59:3d: 2e:d8:53:64:13:10:45:b4:d8:f5:02:ef:19:07:67: 7f:12:d9:a5:3f:92:9a:52:f0:bd:2d:73:30:68:e1: 20:62:92:f3:06:61:10:ed:67:bb:4d:7e:e3:56:2e: 42:04:de:8e:d4:85:fc:a8:21:79:86:b7:6c:7b:ae: c4:b8:37:5d:28:66:59:c7:58:88:b6:a8:a8:fb:12: 64:d8:59:37:09:1b:9d:79:ce:2d:0a:63:b4:03:07: cd:26:02:db:de:4b:32:63:6a:6a:88:42:a6:7f:26: 61:f7:f4:8d:91:fb:f7:a3:a5:b6:66:5c:6b:97:5f: e0:c5:c2:24:0c:f2:35:a3:67:ba:17:d0:20:fb:e7: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:59:49:17:1C:2D:49:84:11:59:EA:27:59:4C:38:06:B8:31:2D:6B X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1f:d8:97:39:a4:45:3e:2b:0b:06:f0:08:38:83:80:a4:09: ea:b2:3a:f9:f6:71:dd:87:a1:c7:2d:cf:9d:22:a5:97:46:aa: d0:56:69:79:14:6c:f1:20:5c:29:b5:80:f8:bf:f5:69:9c:c5: e6:7a:38:ab:4f:96:ae:7a:93:8c:f5:df:20:b7:28:69:c7:b1: b8:2e:c9:58:00:a2:16:54:91:01:d1:e5:29:5b:55:d1:0f:8d: 3e:34:9f:4d:f7:86:c5:b7:cd:18:8b:c0:ca:61:02:36:f3:cf: e1:02:03:a8:06:12:b8:a9:d1:f1:9f:c7:b2:2d:72:9e:e9:49: 81:9b:06:97:5c:95:2e:79:9f:67:f8:ca:40:10:77:8c:59:a4: b7:a9:ec:bd:3e:1a:9a:f7:e3:bc:71:56:7d:fd:2d:81:dc:44: 54:34:0d:bf:10:ce:1d:63:5b:c1:c1:eb:5e:21:4b:bd:24:48: aa:4c:19:ee:46:76:2d:a4:63:70:fe:de:56:cf:c6:e0:8a:6c: 41:aa:54:95:26:22:af:4e:3c:71:ad:d6:29:ff:8e:de:bc:37: f7:1d:c9:90:81:a4:a4:48:07:73:d5:35:ca:c4:1b:83:0b:7d: 54:e8:04:37:f3:76:90:0f:a8:a5:82:af:54:32:48:8d:87:65: 68:4d:ca:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjUxMDE4MjA1NzE3WhcNMjUxMDI1MjA1NzE3WjAYMRYwFAYD VQQDEw02OGYzZmYyZC0yYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UAjlWpGdaEm3znOqWJqPXkMTpRl79/YS/U9kSNqFMLOiVuZQIJnXVTv8mcl aF8tC+M432S7J8dNFb2Y7ZP7v/sSfCbDlPdG6TGl9IGJOKiiN9crQ0k8JVXzLc2v vvahfaeopDXcZZCK6htXmmnBOAw057lGWT0u2FNkExBFtNj1Au8ZB2d/EtmlP5Ka UvC9LXMwaOEgYpLzBmEQ7We7TX7jVi5CBN6O1IX8qCF5hrdse67EuDddKGZZx1iI tqio+xJk2Fk3CRudec4tCmO0AwfNJgLb3ksyY2pqiEKmfyZh9/SNkfv3o6W2Zlxr l1/gxcIkDPI1o2e6F9Ag++f3qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNZSRcc LUmEEVnqJ1lMOAa4MS1rMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuH9iXOaRFPisLBvAIOIOApAnqsjr59nHdh6HHLc+dIqWXRqrQVml5 FGzxIFwptYD4v/VpnMXmejirT5auepOM9d8gtyhpx7G4LslYAKIWVJEB0eUpW1XR D40+NJ9N94bFt80Yi8DKYQI288/hAgOoBhK4qdHxn8eyLXKe6UmBmwaXXJUueZ9n +MpAEHeMWaS3qey9Phqa9+O8cVZ9/S2B3ERUNA2/EM4dY1vBweteIUu9JEiqTBnu RnYtpGNw/t5Wz8bgimxBqlSVJiKvTjxxrdYp/47evDf3HcmQgaSkSAdz1TXKxBuD C31U6AQ383aQD6ilgq9UMkiNh2VoTcrB -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:50 2025 by rpki-client