$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/8DE36DE00AD6C58EE63BE8708533D568D59F03ED.mft File: 8DE36DE00AD6C58EE63BE8708533D568D59F03ED.mft (raw, json) Hash identifier: +WHtJjDo2NWNL61oK3BI6kQi0TjuWuTW9xwZcooxxMQ= Subject key identifier: 41:B8:79:27:78:69:6A:9C:59:43:DF:E7:34:12:62:39:8B:BC:33:80 Authority key identifier: 8D:E3:6D:E0:0A:D6:C5:8E:E6:3B:E8:70:85:33:D5:68:D5:9F:03:ED Certificate issuer: /CN=A918C2870000/serialNumber=8DE36DE00AD6C58EE63BE8708533D568D59F03ED Certificate serial: 2D66D3C75F6E270397D8897B4B35A3EBED261250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeNt4ArWxY7mO-hwhTPVaNWfA-0.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870000/0/8DE36DE00AD6C58EE63BE8708533D568D59F03ED.mft Manifest number: 11 Signing time: Sun 19 Oct 2025 21:00:23 +0000 Manifest this update: Sun 19 Oct 2025 20:55:23 +0000 Manifest next update: Mon 20 Oct 2025 23:21:23 +0000 Files and hashes: 1: 8DE36DE00AD6C58EE63BE8708533D568D59F03ED.crl (hash: qngG5ChGg6IEaqiUElAeu9uhljIcK0KszYFyghRzqMc=) 2: 3230332e3137362e3138392e302f32342d3234203d3e203634343939.roa (hash: cc8VyDqhkEa1zP4MPtaFm5Nq0t+jvQdkIXFmrwtTX4Q=) 3: 3230332e3137362e3138392e302f32352d3235203d3e203634343939.roa (hash: oaWk0P7quIWY48JUJJgD8BGzFYbWfjuctlxnugarjPc=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A918C2870000/0/8DE36DE00AD6C58EE63BE8708533D568D59F03ED.crl rsync://rpki.sub.apnic.net/repository/A918C2870000/0/8DE36DE00AD6C58EE63BE8708533D568D59F03ED.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeNt4ArWxY7mO-hwhTPVaNWfA-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 23:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:66:d3:c7:5f:6e:27:03:97:d8:89:7b:4b:35:a3:eb:ed:26:12:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C2870000, serialNumber=8DE36DE00AD6C58EE63BE8708533D568D59F03ED Validity Not Before: Oct 19 20:55:23 2025 GMT Not After : Oct 20 23:21:23 2025 GMT Subject: CN=41B8792778696A9C5943DFE7341262398BBC3380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8a:4c:11:61:be:e4:3c:97:b9:ec:22:8c:82: 7a:70:0c:99:dd:0d:7b:76:07:44:50:29:3a:4d:c5: 9a:df:38:ad:8f:27:e0:41:40:7c:6b:77:e3:d3:25: fd:3f:45:c6:c0:f7:2d:0e:b1:ff:6a:92:00:0b:a6: a0:70:5a:cb:9f:0b:35:36:ac:32:5b:37:ad:f7:97: 14:2c:36:02:17:48:77:fc:b6:96:88:a5:4e:80:21: d7:ed:c5:9a:fb:5e:cd:ec:89:d5:b6:2b:54:50:a4: a5:17:9e:a1:f4:d2:51:d7:38:7f:66:1b:c9:2a:1a: 99:73:70:17:af:11:8f:8f:a8:fd:02:0c:e9:aa:f4: e1:9f:e1:56:be:c2:2b:72:c0:96:de:49:f8:c1:a4: 29:73:bc:43:3e:24:0b:37:a8:9c:85:26:44:2b:a0: 56:b8:f2:70:99:6c:e9:d4:28:c5:84:ed:34:a3:a0: 5d:07:4a:f5:b2:a2:4c:c3:17:01:4a:96:71:ad:4d: 01:3e:59:91:96:24:a0:47:8d:f4:05:64:69:4b:d9: bd:cd:5f:0a:8c:10:5f:80:80:54:a2:0c:50:aa:ed: 4a:df:cd:55:40:5c:0d:26:0e:cb:58:59:83:83:b4: b2:ce:ce:e1:86:fc:dc:71:c7:bf:26:64:78:2c:3d: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B8:79:27:78:69:6A:9C:59:43:DF:E7:34:12:62:39:8B:BC:33:80 X509v3 Authority Key Identifier: keyid:8D:E3:6D:E0:0A:D6:C5:8E:E6:3B:E8:70:85:33:D5:68:D5:9F:03:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/8DE36DE00AD6C58EE63BE8708533D568D59F03ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeNt4ArWxY7mO-hwhTPVaNWfA-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/8DE36DE00AD6C58EE63BE8708533D568D59F03ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:57:76:a7:cf:82:11:90:30:b8:37:e9:5a:69:0d:87:3a:dc: 59:55:ad:4e:89:b5:e0:ad:61:cd:8e:bd:f5:99:de:27:1f:e4: 21:5a:89:85:20:f2:79:89:56:58:b7:60:2d:99:38:c5:3e:60: 43:27:51:63:97:42:87:17:f3:dc:9b:de:ca:e3:eb:e1:76:c6: 5b:17:28:96:f1:a4:c2:4f:ef:ab:02:c1:1f:e2:76:6e:75:5e: ab:2a:1d:68:f9:56:aa:e9:af:16:97:c4:a6:6d:24:a0:25:b0: 7d:88:8b:80:5f:ee:83:c2:98:ec:d0:13:b4:7a:97:e2:dd:a3: 2c:88:1f:de:6a:b6:9d:47:f6:d4:d9:8d:6a:84:03:88:2c:3e: c4:53:be:3b:ef:7a:7f:b1:c8:a3:98:26:68:30:a8:f6:3b:1a: 1f:22:97:90:40:f4:4a:d0:ca:25:f9:93:78:db:3f:9e:4f:78: 84:cd:33:f6:a5:10:f7:47:a0:a7:f0:3e:58:fd:ff:03:07:6f: eb:41:67:28:d4:f4:e1:9f:53:29:55:00:64:c4:05:21:4a:8b: 31:5d:6e:10:17:4f:28:31:ac:ea:61:b1:31:40:62:19:78:6c: f4:6f:de:97:e8:b9:f6:bc:cf:b2:08:71:60:9c:bf:a0:27:69: 0d:8f:6b:00 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULWbTx19uJwOX2Il7SzWj6+0mElAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOEMyODcwMDAwMTEwLwYDVQQFEyg4REUzNkRFMDBB RDZDNThFRTYzQkU4NzA4NTMzRDU2OEQ1OUYwM0VEMB4XDTI1MTAxOTIwNTUyM1oX DTI1MTAyMDIzMjEyM1owMzExMC8GA1UEAxMoNDFCODc5Mjc3ODY5NkE5QzU5NDNE RkU3MzQxMjYyMzk4QkJDMzM4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPGKTBFhvuQ8l7nsIoyCenAMmd0Ne3YHRFApOk3Fmt84rY8n4EFAfGt349Ml /T9FxsD3LQ6x/2qSAAumoHBay58LNTasMls3rfeXFCw2AhdId/y2loilToAh1+3F mvtezeyJ1bYrVFCkpReeofTSUdc4f2YbySoamXNwF68Rj4+o/QIM6ar04Z/hVr7C K3LAlt5J+MGkKXO8Qz4kCzeonIUmRCugVrjycJls6dQoxYTtNKOgXQdK9bKiTMMX AUqWca1NAT5ZkZYkoEeN9AVkaUvZvc1fCowQX4CAVKIMUKrtSt/NVUBcDSYOy1hZ g4O0ss7O4Yb83HHHvyZkeCw9GvECAwEAAaOCAhswggIXMB0GA1UdDgQWBBRBuHkn eGlqnFlD3+c0EmI5i7wzgDAfBgNVHSMEGDAWgBSN423gCtbFjuY76HCFM9Vo1Z8D 7TAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4QzI4NzAwMDAvMC84REUzNkRF MDBBRDZDNThFRTYzQkU4NzA4NTMzRDU2OEQ1OUYwM0VELmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9qZU50NEFyV3hZ N21PLWh3aFRQVmFOV2ZBLTAuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4QzI4 NzAwMDAvMC84REUzNkRFMDBBRDZDNThFRTYzQkU4NzA4NTMzRDU2OEQ1OUYwM0VE Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAQVd2p8+CEZAwuDfpWmkNhzrcWVWtTom14K1hzY699ZneJx/k IVqJhSDyeYlWWLdgLZk4xT5gQydRY5dChxfz3JveyuPr4XbGWxcolvGkwk/vqwLB H+J2bnVeqyodaPlWqumvFpfEpm0koCWwfYiLgF/ug8KY7NATtHqX4t2jLIgf3mq2 nUf21NmNaoQDiCw+xFO+O+96f7HIo5gmaDCo9jsaHyKXkED0StDKJfmTeNs/nk94 hM0z9qUQ90egp/A+WP3/Awdv60FnKNT04Z9TKVUAZMQFIUqLMV1uEBdPKDGs6mGx MUBiGXhs9G/el+i59rzPsghxYJy/oCdpDY9rAA== -----END CERTIFICATE-----Generated at Mon Oct 20 13:14:06 2025 by rpki-client