$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft File: xpA79e8aQHD8mDw02cUDz0MT_Is.mft (raw, json) Hash identifier: dlbbxEtsmlUqYgTfSHLjPr74XKlGmNRiar27+U7XLA4= Subject key identifier: 5C:C5:86:EB:C1:36:AA:E2:5E:6A:8C:04:3D:F1:1A:ED:86:1E:DB:6C Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B Certificate issuer: /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Certificate serial: 0555 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft Manifest number: 0550 Signing time: Tue 04 Nov 2025 23:30:16 +0000 Manifest this update: Tue 04 Nov 2025 23:30:16 +0000 Manifest next update: Tue 11 Nov 2025 23:30:16 +0000 Files and hashes: 1: xpA79e8aQHD8mDw02cUDz0MT_Is.crl (hash: GgMYs5GgfVbCfmKfZyXBSkgq8wFR3XjhTLTqo8sHPSI=) 2: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (hash: G0TJ9gg7YE7FaWREh61rcwclF21PHLQCA7qkRQvl9xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1365 (0x555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111A96, serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Validity Not Before: Nov 4 23:30:16 2025 GMT Not After : Nov 11 23:30:16 2025 GMT Subject: CN=690a8c88-e7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ca:52:81:87:1c:4a:ea:1a:4d:ea:52:59:76: e3:35:f1:8e:16:d3:10:85:b0:9a:eb:16:e2:57:77: 09:f9:b2:ef:b7:ce:40:79:08:49:e1:fc:be:80:2b: 94:70:29:27:1b:33:65:df:66:eb:63:ab:71:4a:40: db:ab:c3:80:bc:5a:f2:ae:63:57:5e:3b:3c:17:8e: ae:5e:18:c7:af:0a:33:5b:9b:45:65:57:e9:25:34: ab:9e:66:21:1f:96:87:d9:9d:f5:72:f7:e0:0d:d7: 60:6d:65:ea:66:d5:53:e2:e2:a0:4a:aa:18:36:c4: 46:cc:da:8c:f5:dd:fd:da:90:28:0c:43:c0:c5:a6: 00:69:44:97:81:1b:aa:ba:ec:90:83:d9:f5:01:65: be:2e:e0:c3:29:3e:19:6d:2c:2f:4a:b2:12:64:97: 43:a0:47:cc:e6:e7:f0:b9:33:15:69:44:22:e0:fd: 90:f4:64:80:f7:64:6e:cd:d5:a1:19:d0:a1:3b:50: 01:d8:ca:c6:f1:02:f8:52:eb:f6:3a:f7:41:d8:67: d8:00:68:2e:6f:2d:4c:53:26:6e:e9:ac:86:e5:fd: e4:eb:e0:81:c0:bd:80:d8:64:d5:6f:1a:2f:1a:71: 5b:8a:1e:92:85:73:c1:f1:4d:70:1a:85:42:ec:cb: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C5:86:EB:C1:36:AA:E2:5E:6A:8C:04:3D:F1:1A:ED:86:1E:DB:6C X509v3 Authority Key Identifier: keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a8:96:c4:34:1f:ed:3a:7f:0e:ef:a2:94:aa:3b:9e:5a:be: e9:1d:79:aa:91:68:95:5d:21:f8:1e:c1:56:65:fc:48:86:20: dc:3f:a1:a1:3c:a4:48:ad:d9:97:f5:e2:a8:ea:c5:f7:4d:a7: 1b:06:b8:1f:28:95:69:03:73:1b:89:64:5b:59:98:80:f6:41: c2:93:2e:85:e3:2c:f7:7f:1d:7c:98:9e:6b:9f:7a:6e:c2:ce: 86:63:12:e7:58:17:44:6f:9c:d4:94:d9:ce:7e:96:f6:9f:d7: 67:07:7c:d8:fb:72:c4:ae:33:11:4e:e3:fd:9d:9e:cd:b2:09: 30:60:f5:5a:4e:87:dd:8f:28:4e:38:ce:f1:6e:64:6e:d7:2e: 16:a3:e6:a4:8c:d5:d4:3a:ad:33:7a:0a:8a:07:d2:eb:a8:d3: 94:0f:22:97:d7:e0:2e:70:c7:51:66:b3:04:2e:53:2b:b3:38: a9:59:ec:3a:2b:d9:9b:e4:0c:f5:f8:59:79:19:09:77:9f:b6: 55:3e:8c:bd:6b:0d:8e:de:ee:92:bc:52:0c:03:5c:5f:1f:ef: 42:31:b0:5d:bf:ea:92:4c:98:15:fa:58:c4:27:f2:9e:23:f4: ce:1c:d5:8b:9e:12:4f:f7:59:98:0a:35:8a:88:fd:76:ed:2f: ce:9c:6b:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFBOTYxMTAvBgNVBAUTKEM2OTAzQkY1RUYxQTQwNzBGQzk4M0MzNEQ5QzUwM0NG NDMxM0ZDOEIwHhcNMjUxMTA0MjMzMDE2WhcNMjUxMTExMjMzMDE2WjAYMRYwFAYD VQQDEw02OTBhOGM4OC1lN2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08pSgYccSuoaTepSWXbjNfGOFtMQhbCa6xbiV3cJ+bLvt85AeQhJ4fy+gCuU cCknGzNl32brY6txSkDbq8OAvFryrmNXXjs8F46uXhjHrwozW5tFZVfpJTSrnmYh H5aH2Z31cvfgDddgbWXqZtVT4uKgSqoYNsRGzNqM9d392pAoDEPAxaYAaUSXgRuq uuyQg9n1AWW+LuDDKT4ZbSwvSrISZJdDoEfM5ufwuTMVaUQi4P2Q9GSA92RuzdWh GdChO1AB2MrG8QL4Uuv2OvdB2GfYAGguby1MUyZu6ayG5f3k6+CBwL2A2GTVbxov GnFbih6ShXPB8U1wGoVC7MsKWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzFhuvB NqriXmqMBD3xGu2GHttsMB8GA1UdIwQYMBaAFMaQO/XvGkBw/Jg8NNnFA89DE/yL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUE5Ni80NTg5QzYzODBF RUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFIRDhtRHcwMmNVRHowTVRf SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwQTc5ZThhUUhEOG1EdzAyY1VEejBNVF9Jcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUE5Ni80NTg5QzYzODBFRUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFI RDhtRHcwMmNVRHowTVRfSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxqJbENB/tOn8O76KUqjueWr7pHXmqkWiVXSH4HsFWZfxIhiDcP6Gh PKRIrdmX9eKo6sX3TacbBrgfKJVpA3MbiWRbWZiA9kHCky6F4yz3fx18mJ5rn3pu ws6GYxLnWBdEb5zUlNnOfpb2n9dnB3zY+3LErjMRTuP9nZ7NsgkwYPVaTofdjyhO OM7xbmRu1y4Wo+akjNXUOq0zegqKB9LrqNOUDyKX1+AucMdRZrMELlMrszipWew6 K9mb5Az1+Fl5GQl3n7ZVPoy9aw2O3u6SvFIMA1xfH+9CMbBdv+qSTJgV+ljEJ/Ke I/TOHNWLnhJP91mYCjWKiP127S/OnGtt -----END CERTIFICATE-----Generated at Wed Nov 5 03:16:30 2025 by rpki-client