$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json) Hash identifier: J9B43zND5CLLVesKutuBETaSb46MqI98savMNoEo5oU= Subject key identifier: C8:6A:E5:2A:D1:D9:56:07:C0:8B:58:59:4E:89:5E:09:DA:9B:85:3D Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft Manifest number: 06D6 Signing time: Sun 19 Oct 2025 01:56:44 +0000 Manifest this update: Sun 19 Oct 2025 01:56:44 +0000 Manifest next update: Sun 26 Oct 2025 01:56:44 +0000 Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: 13L2weeciU8wunetXQnKBdms8w4xc5rMg9d518UxknQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Validity Not Before: Oct 19 01:56:44 2025 GMT Not After : Oct 26 01:56:44 2025 GMT Subject: CN=68f4455c-d5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:b5:57:ad:34:ae:e8:7e:33:89:4f:3f:73: 3e:b0:64:5a:d6:84:47:62:dc:12:db:c6:57:21:75: 19:ea:d7:8c:74:d0:b8:62:ad:8a:10:db:55:02:e6: 65:2e:85:d5:c2:39:60:6b:83:b5:93:7f:9e:ee:0c: ad:25:44:b3:ba:d0:30:46:e0:52:c3:b9:ef:c7:37: 39:9e:c5:44:ba:87:0c:37:3a:ca:89:d6:6a:d7:b9: 65:19:c7:aa:f5:87:2c:0d:de:3f:9b:1b:58:4a:eb: 51:d0:fb:c4:62:29:d9:f0:90:1b:9b:be:34:5c:49: c1:21:57:d1:13:ce:cb:53:e6:c2:47:20:9f:bb:06: b3:f2:dd:c4:d9:20:b1:de:b6:39:07:c8:6c:79:98: b5:8f:53:f0:c2:5c:a9:f1:1b:b2:3f:92:73:fa:c8: ed:2b:69:10:50:2b:8a:e2:e5:af:6b:0a:eb:57:1c: 50:ea:b0:bd:2f:90:8d:01:6e:c6:ec:10:f5:da:bc: 1a:70:78:29:fb:bf:32:2c:dd:53:38:f4:83:8d:9e: bb:1b:c5:42:a5:75:44:56:de:0b:a0:d6:2a:0f:f5: c5:0b:5e:05:95:3b:f0:59:fe:e5:a6:72:98:ea:8f: 2b:8f:81:14:a6:72:29:4f:a8:52:29:ee:56:82:e2: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6A:E5:2A:D1:D9:56:07:C0:8B:58:59:4E:89:5E:09:DA:9B:85:3D X509v3 Authority Key Identifier: keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:7a:0c:7f:24:69:e8:2d:a4:db:2a:d0:f0:63:ee:7f:7d:fb: 5f:26:fd:c8:f2:a5:16:42:56:14:06:dc:1c:9a:51:47:55:99: 67:cd:96:83:aa:61:98:16:11:bf:37:f7:50:a1:8a:bf:57:38: 5b:b5:ab:d7:66:fe:ef:a5:60:38:3b:74:de:73:8e:32:49:c1: 1d:1f:f5:61:4f:df:b6:dd:e4:02:47:d1:e2:44:a1:c3:ea:3b: 86:0a:4d:9f:0a:49:17:80:d3:2e:99:40:7e:ac:64:b7:99:2e: 8d:43:07:d4:de:0b:66:b9:3c:7b:cc:db:c8:b8:e1:14:e4:1e: 22:1d:02:50:2c:6f:db:e2:70:b5:44:91:14:47:25:2a:d9:51: 0e:c1:54:70:3a:c0:e5:b4:d3:3b:83:01:04:3e:b4:a5:fb:d2: 96:77:4f:7d:52:cc:e5:08:63:db:65:70:ee:46:29:cd:e7:5f: 49:e6:1f:28:66:6e:af:10:a9:39:ef:c4:e8:74:cc:52:53:2a: 93:3d:83:91:cd:bf:e3:3c:40:de:6c:2d:0c:d7:21:cd:02:79: 1e:96:c0:b3:8e:6b:68:f2:b8:59:50:be:d3:34:27:e9:4b:d7: 15:b9:00:ad:5e:e9:47:c0:75:4b:6b:49:de:89:5f:d5:6c:db: eb:6d:ed:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB RTBCMzVBMTgwHhcNMjUxMDE5MDE1NjQ0WhcNMjUxMDI2MDE1NjQ0WjAYMRYwFAYD VQQDEw02OGY0NDU1Yy1kNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKq1V600ruh+M4lPP3M+sGRa1oRHYtwS28ZXIXUZ6teMdNC4Yq2KENtVAuZl LoXVwjlga4O1k3+e7gytJUSzutAwRuBSw7nvxzc5nsVEuocMNzrKidZq17llGceq 9YcsDd4/mxtYSutR0PvEYinZ8JAbm740XEnBIVfRE87LU+bCRyCfuwaz8t3E2SCx 3rY5B8hseZi1j1Pwwlyp8RuyP5Jz+sjtK2kQUCuK4uWvawrrVxxQ6rC9L5CNAW7G 7BD12rwacHgp+78yLN1TOPSDjZ67G8VCpXVEVt4LoNYqD/XFC14FlTvwWf7lpnKY 6o8rj4EUpnIpT6hSKe5WguLjxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhq5SrR 2VYHwItYWU6JXgnam4U9MB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf b2JZM0MzUlE4by11Q3pXaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSegx/JGnoLaTbKtDwY+5/fftfJv3I8qUWQlYUBtwcmlFHVZlnzZaD qmGYFhG/N/dQoYq/VzhbtavXZv7vpWA4O3Tec44yScEdH/VhT9+23eQCR9HiRKHD 6juGCk2fCkkXgNMumUB+rGS3mS6NQwfU3gtmuTx7zNvIuOEU5B4iHQJQLG/b4nC1 RJEURyUq2VEOwVRwOsDltNM7gwEEPrSl+9KWd099UszlCGPbZXDuRinN519J5h8o Zm6vEKk578TodMxSUyqTPYORzb/jPEDebC0M1yHNAnkelsCzjmto8rhZUL7TNCfp S9cVuQCtXulHwHVLa0neiV/VbNvrbe2Z -----END CERTIFICATE-----Generated at Mon Oct 20 08:01:39 2025 by rpki-client