$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: 4kuUfoIiMewBGjF+7UupmXu3e5P08J4YrvSRaZgXYp0= Subject key identifier: 3C:A3:4A:38:F3:68:AF:DE:96:50:32:E9:2F:DB:7F:ED:C9:37:59:43 Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0CF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0CEF Signing time: Sat 18 Oct 2025 18:46:18 +0000 Manifest this update: Sat 18 Oct 2025 18:46:17 +0000 Manifest next update: Sat 25 Oct 2025 18:46:17 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: as33JdIwEjWI5sYak3sE3TwQGNrKwa4/zhsb2I1pYuk=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3318 (0xcf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Oct 18 18:46:17 2025 GMT Not After : Oct 25 18:46:17 2025 GMT Subject: CN=68f3e079-e220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cd:59:fa:83:3e:ab:33:eb:22:95:0a:6f:ec: 8b:a4:a6:7c:ec:fb:db:58:ed:16:60:2d:2e:6a:df: 04:97:52:52:da:8c:6b:e1:6a:3a:99:ee:e3:19:9b: ea:74:8e:fb:eb:39:62:47:5e:62:26:c1:4f:d3:10: c1:3d:f5:c4:96:54:b3:4b:94:b7:d3:f2:99:67:e7: 80:f9:2d:18:ce:fb:ec:ad:f2:c4:9c:5d:ea:fb:5c: 4e:d4:5c:b2:a5:cf:b4:17:cd:b5:e5:9b:35:63:86: d4:d8:41:a8:c3:bb:6b:76:aa:3a:37:3e:6a:aa:32: e6:d5:3f:f1:c5:29:fb:0f:dc:55:74:f3:a5:f4:c9: 55:79:f1:76:4c:83:7b:bb:bc:5c:25:d2:73:d5:a7: 93:e6:4e:8e:5e:91:3f:d0:67:7d:16:45:42:52:e1: 8b:59:ee:c4:96:2c:4a:8b:a8:73:3e:32:be:6a:c6: 7f:71:d5:36:e5:8e:43:8f:85:ed:8a:77:87:ae:89: 88:c5:08:3f:f7:a6:a7:dc:e7:d9:0a:f9:85:83:5b: f4:bb:cf:20:2a:7a:1a:a9:5c:5f:15:2e:f2:cc:25: 8f:75:42:b7:ea:aa:2f:b3:87:e2:cd:45:be:6d:3d: 84:a3:cc:49:54:45:eb:a1:de:e0:9b:94:10:ee:69: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A3:4A:38:F3:68:AF:DE:96:50:32:E9:2F:DB:7F:ED:C9:37:59:43 X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ec:38:98:1b:1f:c2:02:a5:3c:6f:72:89:d4:50:92:dc:af: bd:e4:53:2d:13:2c:03:3b:ac:50:51:1f:e4:4b:91:37:30:66: 5f:3d:f3:11:e6:52:6c:98:3f:ab:62:3b:09:81:85:d8:fa:17: e1:5c:de:c1:b7:95:ae:29:1b:c9:ab:24:ba:7d:07:d5:f1:f8: ca:6a:49:dc:e7:af:a2:fd:73:e7:31:4d:d4:87:52:b7:44:5f: 1b:63:82:db:14:1f:1d:e7:75:ac:dc:b0:5a:8a:39:1c:6f:fe: f0:be:f9:4b:cc:2c:ce:0f:03:f6:9f:b9:d3:7d:c0:53:d7:a5: a5:4f:f6:c6:3d:8d:8d:91:26:6a:7e:f7:a1:0d:05:ad:66:df: 9b:1c:5d:3e:7a:b3:06:cb:b4:c9:5c:69:c6:3d:28:e0:c1:3f: a5:9d:13:01:95:4b:f9:89:f8:3f:c5:9d:b5:be:b6:e0:74:82: c4:a1:c1:f2:3d:16:4f:68:99:47:b7:5a:de:10:a9:90:ac:02: 40:e9:52:5b:e7:50:a3:c9:06:cc:2f:ad:25:64:18:32:4d:10: 11:b8:d0:9b:c8:f8:d4:da:b2:d0:45:b5:7b:40:cb:0d:88:ac: 9c:aa:0a:61:44:af:53:13:26:1e:b2:c0:ba:e3:cf:91:d1:58: cf:f0:ea:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUxMDE4MTg0NjE3WhcNMjUxMDI1MTg0NjE3WjAYMRYwFAYD VQQDEw02OGYzZTA3OS1lMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2s1Z+oM+qzPrIpUKb+yLpKZ87PvbWO0WYC0uat8El1JS2oxr4Wo6me7jGZvq dI776zliR15iJsFP0xDBPfXEllSzS5S30/KZZ+eA+S0YzvvsrfLEnF3q+1xO1Fyy pc+0F8215Zs1Y4bU2EGow7trdqo6Nz5qqjLm1T/xxSn7D9xVdPOl9MlVefF2TIN7 u7xcJdJz1aeT5k6OXpE/0Gd9FkVCUuGLWe7ElixKi6hzPjK+asZ/cdU25Y5Dj4Xt ineHromIxQg/96an3OfZCvmFg1v0u88gKnoaqVxfFS7yzCWPdUK36qovs4fizUW+ bT2Eo8xJVEXrod7gm5QQ7mkK7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyjSjjz aK/ellAy6S/bf+3JN1lDMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ7DiYGx/CAqU8b3KJ1FCS3K+95FMtEywDO6xQUR/kS5E3MGZfPfMR 5lJsmD+rYjsJgYXY+hfhXN7Bt5WuKRvJqyS6fQfV8fjKaknc56+i/XPnMU3Uh1K3 RF8bY4LbFB8d53Ws3LBaijkcb/7wvvlLzCzODwP2n7nTfcBT16WlT/bGPY2NkSZq fvehDQWtZt+bHF0+erMGy7TJXGnGPSjgwT+lnRMBlUv5ifg/xZ21vrbgdILEocHy PRZPaJlHt1reEKmQrAJA6VJb51CjyQbML60lZBgyTRARuNCbyPjU2rLQRbV7QMsN iKycqgphRK9TEyYessC648+R0VjP8Org -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:55 2025 by rpki-client