$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: VxudaB4U2sMOteVzpjP0wK00NSABwuCVi6NtNJbmf10= Subject key identifier: F2:9E:D2:15:B2:EE:91:40:D0:52:73:FC:2C:16:DB:CE:28:C3:93:68 Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1C26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1C21 Signing time: Tue 04 Nov 2025 16:18:06 +0000 Manifest this update: Tue 04 Nov 2025 16:18:05 +0000 Manifest next update: Tue 11 Nov 2025 16:18:05 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: ncdmY0vj1erkE2h2mrSIldluojeHnKQ2yBbnheR6+eE=) 2: 88E0DEC8507F11F09A42640CC4F9AE02.roa (hash: 60QYnNNnq4c71VtkBxPoIBcr2b6wcX5JfuteRubUSlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7206 (0x1c26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Nov 4 16:18:05 2025 GMT Not After : Nov 11 16:18:05 2025 GMT Subject: CN=690a273e-6210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:ec:03:9a:22:ed:f4:32:61:6f:ed:da:57: 14:d6:4b:63:1e:e4:45:e4:36:c1:56:aa:d3:60:c6: 45:44:ff:e6:53:fd:a2:e6:9c:86:62:de:2e:d7:95: a7:11:44:86:f8:ef:6a:26:ab:27:c0:12:ca:53:42: 1d:00:e1:9c:ad:61:1e:fc:9a:b2:a0:36:6e:f6:a6: 62:8e:cd:62:2c:6d:28:bd:95:d8:92:ba:25:9b:e0: be:df:0b:de:37:75:c1:e2:7f:0c:f1:60:93:9d:17: 3a:e5:67:53:96:f7:6d:9a:37:27:f4:86:13:96:9e: 08:5b:42:15:c6:14:5d:45:57:95:3b:b4:c9:09:ed: 1e:4d:a2:89:bf:a9:e4:fe:cb:fe:47:54:a3:25:ab: b8:ae:91:62:c4:1f:2a:dd:74:6e:17:0e:cf:73:3e: 63:67:82:46:4b:b7:ac:fa:7b:ba:16:d0:6e:56:62: 14:26:75:c7:eb:20:05:c9:7e:d0:36:90:8b:61:5b: f1:89:18:8b:06:01:7e:cb:0d:75:ce:c4:0e:1d:2a: ca:77:45:47:e7:ae:66:b2:9b:83:5c:3d:45:be:24: 7e:b4:cf:07:4d:f4:c2:a4:75:12:b0:c6:05:98:35: 7f:48:8d:d8:ef:d2:69:39:bf:24:a1:f9:e7:42:92: 19:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9E:D2:15:B2:EE:91:40:D0:52:73:FC:2C:16:DB:CE:28:C3:93:68 X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:2d:97:9c:9c:27:a0:8a:f5:05:f4:ee:b0:e9:39:5b:24:bf: b8:73:cb:f7:56:24:e4:17:f0:ca:1d:68:64:58:29:4d:68:14: e1:54:9f:78:b3:e0:41:b6:51:17:08:17:33:d5:31:7a:ee:15: eb:24:93:7a:f7:69:98:ed:80:27:55:9d:d6:94:b8:fb:f8:da: 74:fe:97:83:16:db:a9:74:7a:c2:84:75:e0:f1:2d:fe:1f:22: 50:38:5b:ac:fe:1b:3d:35:ee:81:a7:fd:0e:42:37:89:ca:a1: 34:d6:4b:7a:32:78:49:ed:b5:26:ca:fa:e1:da:12:e3:5d:3a: 58:a8:59:c2:c2:7a:5a:86:0d:96:67:4b:06:89:ae:e0:1f:95: 8d:74:1d:2c:a5:b9:ce:31:68:8a:40:9f:29:cb:03:54:6a:bb: 39:49:7a:01:f4:f4:b9:80:cf:23:4f:03:15:46:fd:e1:db:c8: 0b:be:f9:56:e4:2c:4d:08:bf:7e:2c:27:c0:a2:eb:a6:d2:00: 85:de:32:a8:a6:b6:30:76:11:d1:33:15:c7:cc:8c:5f:dd:45: 54:a2:d5:3f:d9:ad:fb:a8:a5:d8:48:1f:95:39:c4:45:7b:4a: cb:4b:b1:89:ab:d8:10:d0:e9:37:77:21:f8:80:3c:39:4f:cb: 00:20:ec:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjUxMTA0MTYxODA1WhcNMjUxMTExMTYxODA1WjAYMRYwFAYD VQQDEw02OTBhMjczZS02MjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3LsA5oi7fQyYW/t2lcU1ktjHuRF5DbBVqrTYMZFRP/mU/2i5pyGYt4u15Wn EUSG+O9qJqsnwBLKU0IdAOGcrWEe/JqyoDZu9qZijs1iLG0ovZXYkrolm+C+3wve N3XB4n8M8WCTnRc65WdTlvdtmjcn9IYTlp4IW0IVxhRdRVeVO7TJCe0eTaKJv6nk /sv+R1SjJau4rpFixB8q3XRuFw7Pcz5jZ4JGS7es+nu6FtBuVmIUJnXH6yAFyX7Q NpCLYVvxiRiLBgF+yw11zsQOHSrKd0VH565mspuDXD1FviR+tM8HTfTCpHUSsMYF mDV/SI3Y79JpOb8kofnnQpIZXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKe0hWy 7pFA0FJz/CwW284ow5NoMB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClLZecnCegivUF9O6w6TlbJL+4c8v3ViTkF/DKHWhkWClNaBThVJ94 s+BBtlEXCBcz1TF67hXrJJN692mY7YAnVZ3WlLj7+Np0/peDFtupdHrChHXg8S3+ HyJQOFus/hs9Ne6Bp/0OQjeJyqE01kt6MnhJ7bUmyvrh2hLjXTpYqFnCwnpahg2W Z0sGia7gH5WNdB0spbnOMWiKQJ8pywNUars5SXoB9PS5gM8jTwMVRv3h28gLvvlW 5CxNCL9+LCfAouum0gCF3jKoprYwdhHRMxXHzIxf3UVUotU/2a37qKXYSB+VOcRF e0rLS7GJq9gQ0Ok3dyH4gDw5T8sAIOxv -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:30 2025 by rpki-client