$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: d6ZttD/yPHYPodSxy+GTjwBiQcxpyrJNs2na/cGUKJg= Subject key identifier: 64:70:8D:9F:BC:62:C0:39:6B:DC:68:6E:F7:03:4E:D8:F5:68:DA:61 Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: 0123 Signing time: Sun 19 Oct 2025 07:31:13 +0000 Manifest this update: Sun 19 Oct 2025 07:31:13 +0000 Manifest next update: Sun 26 Oct 2025 07:31:12 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: AHr+B4CHKYtEkgovxY8VZQJ+/kc3d/rSeB8+Au/7vMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: Oct 19 07:31:13 2025 GMT Not After : Oct 26 07:31:12 2025 GMT Subject: CN=68f493c1-6e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2f:01:f4:c5:09:1d:b4:ba:48:f8:08:a2:3c: 79:0a:80:ea:08:c1:22:22:1c:1e:3b:cf:02:d4:42: 92:6d:5b:1c:d8:e1:6e:26:67:1f:28:1d:0a:91:07: 77:5c:02:fc:b5:37:67:2a:3e:5b:a8:80:4f:29:b3: d3:4c:63:0f:30:3d:8c:d2:c1:a9:6d:a6:bf:cf:c2: ea:4d:b5:06:93:86:a2:96:fc:e4:c7:8f:6d:65:4a: 15:38:f2:5b:9d:67:5c:1a:03:60:e7:3b:8b:1c:c2: 8b:67:66:03:eb:9f:fe:38:19:18:f9:7b:e3:cb:35: da:7c:d4:fb:d3:8c:92:76:4f:a7:f3:1b:ad:34:25: e2:03:20:fb:f4:da:83:27:31:bd:dd:09:a3:5a:16: 21:55:47:ac:19:9a:bf:e3:a1:68:8d:ea:f1:4d:97: 28:e2:dc:44:a0:9d:68:bd:18:18:9f:ad:8a:75:17: 0a:8a:24:38:3f:43:ef:f6:d6:53:a1:b2:48:b8:0b: ef:7f:68:2d:ba:f4:c5:c3:72:24:96:5a:5a:48:7f: 95:c8:ec:bd:b4:af:ed:1b:05:74:73:aa:f6:03:31: e4:5e:f3:85:d6:72:1d:f3:f1:1b:12:f9:61:86:35: 2a:b1:cd:75:3b:3b:e9:1e:d8:d6:bc:be:9d:89:37: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:70:8D:9F:BC:62:C0:39:6B:DC:68:6E:F7:03:4E:D8:F5:68:DA:61 X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d2:73:f3:4c:11:81:b4:3a:df:62:60:73:65:eb:6c:25:15: f3:df:9f:96:36:b9:4e:d7:76:ab:7d:6a:45:e7:99:af:70:7a: 1a:b9:e4:ef:74:81:96:1a:1c:e2:77:a3:08:c6:f6:86:5d:e4: b1:75:7c:0a:b9:fd:05:6f:b7:8d:ca:d3:2f:18:f4:f7:c1:a0: 29:e2:d7:fe:87:24:6b:52:0e:de:f7:49:82:a6:a8:ad:54:b0: 7b:32:a7:f8:33:9a:80:06:32:d5:18:7c:75:96:56:f7:78:c8: ca:4e:13:3b:bf:74:6d:18:96:c7:5c:7d:bf:df:5c:fd:e7:0f: 52:6b:7a:ab:f0:ce:4b:b4:33:16:73:8c:8c:47:8c:28:94:69: 35:95:9b:7b:ec:21:22:9c:b7:57:32:81:e0:48:ea:27:d0:57: 17:d6:e3:7d:fb:f7:c2:e2:9b:bd:62:0e:d0:99:97:af:c5:e0: b3:64:7f:8c:2b:17:50:3a:aa:a5:7d:94:25:c0:5b:24:ed:09: 98:fa:60:f6:04:7d:81:f5:f7:cc:48:bf:9c:6e:55:e3:ad:6d: 59:5d:21:8b:21:a4:ae:7f:83:af:60:cf:41:4c:9b:a1:80:a6: d4:e9:05:06:69:c5:6f:03:51:aa:f5:3f:91:de:ed:d5:8c:16: 2e:cd:65:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDAzRkYwNjU3QzBFQ0Y4NzM5ODMwMzNGN0M2QzY0ODhC MzM3ODlDNDMwHhcNMjUxMDE5MDczMTEzWhcNMjUxMDI2MDczMTEyWjAYMRYwFAYD VQQDEw02OGY0OTNjMS02ZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5C8B9MUJHbS6SPgIojx5CoDqCMEiIhweO88C1EKSbVsc2OFuJmcfKB0KkQd3 XAL8tTdnKj5bqIBPKbPTTGMPMD2M0sGpbaa/z8LqTbUGk4ailvzkx49tZUoVOPJb nWdcGgNg5zuLHMKLZ2YD65/+OBkY+XvjyzXafNT704ySdk+n8xutNCXiAyD79NqD JzG93QmjWhYhVUesGZq/46FojerxTZco4txEoJ1ovRgYn62KdRcKiiQ4P0Pv9tZT obJIuAvvf2gtuvTFw3IkllpaSH+VyOy9tK/tGwV0c6r2AzHkXvOF1nId8/EbEvlh hjUqsc11OzvpHtjWvL6diTde1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRwjZ+8 YsA5a9xobvcDTtj1aNphMB8GA1UdIwQYMBaAFAP/BlfA7PhzmDAz98bGSIszeJxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC81NjFENjYyRUVB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1IT1lNRFAzeHNaSWl6TjRu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC81NjFENjYyRUVBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1I T1lNRFAzeHNaSWl6TjRuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF0nPzTBGBtDrfYmBzZetsJRXz35+WNrlO13arfWpF55mvcHoaueTv dIGWGhzid6MIxvaGXeSxdXwKuf0Fb7eNytMvGPT3waAp4tf+hyRrUg7e90mCpqit VLB7Mqf4M5qABjLVGHx1llb3eMjKThM7v3RtGJbHXH2/31z95w9Sa3qr8M5LtDMW c4yMR4wolGk1lZt77CEinLdXMoHgSOon0FcX1uN9+/fC4pu9Yg7QmZevxeCzZH+M KxdQOqqlfZQlwFsk7QmY+mD2BH2B9ffMSL+cblXjrW1ZXSGLIaSuf4OvYM9BTJuh gKbU6QUGacVvA1Gq9T+R3u3VjBYuzWXF -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:10 2025 by rpki-client