$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: NORzWdl5lBMWlM2VLriF4GeGnvb/TWUuRmsjhuJX2oA= Subject key identifier: 46:EB:CC:00:86:4F:18:6A:BA:A4:8A:2C:8C:81:08:63:B5:D8:FD:9F Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 0804 Signing time: Tue 04 Nov 2025 21:02:32 +0000 Manifest this update: Tue 04 Nov 2025 21:02:31 +0000 Manifest next update: Tue 11 Nov 2025 21:02:31 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: KcAEzdW1zv67hsu1hf445QmhfQjrUvQ0nzIMwoPCgb4=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: d9YDBLOSLP/FYANr6D5ENZatQDGA2KDEhAgJYQsuAaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Nov 4 21:02:31 2025 GMT Not After : Nov 11 21:02:31 2025 GMT Subject: CN=690a69e8-507c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:e2:ff:c6:9b:0f:a5:98:a7:6d:77:c7:0e: 57:fe:5c:04:cc:3f:a9:26:bd:64:45:2f:27:86:c4: f9:2f:2e:ae:62:df:ab:7a:3a:5d:6a:8f:5e:57:e9: c0:4e:64:52:c8:55:68:16:f5:8b:0f:11:f4:2b:e2: 32:59:2a:dc:a1:5c:cc:3e:06:fa:75:75:b8:74:51: 4e:ac:6a:52:cb:8b:b0:53:63:5e:20:fe:76:30:56: 54:c5:79:aa:01:f9:fe:a2:0e:12:ce:65:fd:8a:20: 3b:de:24:fd:11:0a:3d:43:cf:36:ba:84:7b:65:dc: 61:2f:81:1e:7f:4f:00:63:4e:5e:76:23:5e:b7:31: 29:fd:26:3e:2c:dc:1d:ae:05:e4:98:5e:67:d8:e2: 28:9f:9d:2c:d6:8a:63:02:d2:31:b8:e5:9f:aa:52: a4:ac:73:05:b5:74:f0:aa:f4:c4:f7:a7:88:a8:d8: 81:10:f4:d6:ce:f1:a7:81:07:f0:9a:03:4e:5d:b3: 86:ca:c0:7b:33:44:db:aa:48:d2:a2:48:06:a6:e7: 85:c0:ee:a9:f3:69:f1:16:a0:a5:c7:86:4f:e0:be: 0a:70:bc:96:2e:ea:cf:c5:03:bc:88:fe:51:c3:4b: d5:2b:92:38:c9:b0:40:dd:0c:3c:27:56:f1:3d:75: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EB:CC:00:86:4F:18:6A:BA:A4:8A:2C:8C:81:08:63:B5:D8:FD:9F X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:16:76:5a:45:b6:1a:59:97:1c:e8:00:00:fb:79:c9:6e:03: 70:de:03:dc:3d:0b:03:8a:ac:e0:f8:fb:51:97:48:fc:48:f2: 2d:d9:53:1b:60:37:a6:63:77:84:99:b7:ca:52:4d:5d:4c:8b: 20:fc:bd:93:a4:10:a1:52:4c:ed:74:82:da:4d:30:d4:b6:03: 41:71:82:ed:52:b3:af:f8:76:ce:bf:c5:d8:8e:b1:00:25:d5: 2f:77:26:87:2d:e1:ef:fb:c0:9f:2f:f0:96:f4:c5:cf:ad:ff: d8:f5:01:8a:fb:5e:a5:3a:e5:40:f1:f7:89:9d:ed:c4:ba:52: a0:ea:7d:24:fd:7c:99:f0:49:5e:1d:ca:78:44:9d:68:ba:c4: e5:c6:cf:a9:9f:49:be:81:49:0b:85:9f:8f:6f:a7:b8:93:9c: aa:26:a2:d2:35:01:b2:f9:ae:18:3d:19:b2:bd:c5:b4:8d:a4: 4b:c7:d7:80:63:c1:99:5d:6f:95:9f:52:71:32:fb:c4:75:37: 21:51:1d:67:19:f0:2e:aa:29:23:9a:aa:2b:7e:67:ae:e0:95: 32:18:81:ad:88:77:ea:02:be:9d:e5:65:30:a6:37:08:5d:08: 29:21:d6:c1:0e:b6:c6:7d:8d:c6:12:5d:62:69:96:06:75:b2: 8c:ec:c8:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUxMTA0MjEwMjMxWhcNMjUxMTExMjEwMjMxWjAYMRYwFAYD VQQDEw02OTBhNjllOC01MDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAld/i/8abD6WYp213xw5X/lwEzD+pJr1kRS8nhsT5Ly6uYt+rejpdao9eV+nA TmRSyFVoFvWLDxH0K+IyWSrcoVzMPgb6dXW4dFFOrGpSy4uwU2NeIP52MFZUxXmq Afn+og4SzmX9iiA73iT9EQo9Q882uoR7ZdxhL4Eef08AY05ediNetzEp/SY+LNwd rgXkmF5n2OIon50s1opjAtIxuOWfqlKkrHMFtXTwqvTE96eIqNiBEPTWzvGngQfw mgNOXbOGysB7M0TbqkjSokgGpueFwO6p82nxFqClx4ZP4L4KcLyWLurPxQO8iP5R w0vVK5I4ybBA3Qw8J1bxPXU/zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbrzACG TxhquqSKLIyBCGO12P2fMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0FnZaRbYaWZcc6AAA+3nJbgNw3gPcPQsDiqzg+PtRl0j8SPIt2VMb YDemY3eEmbfKUk1dTIsg/L2TpBChUkztdILaTTDUtgNBcYLtUrOv+HbOv8XYjrEA JdUvdyaHLeHv+8CfL/CW9MXPrf/Y9QGK+16lOuVA8feJne3EulKg6n0k/XyZ8Ele Hcp4RJ1ousTlxs+pn0m+gUkLhZ+Pb6e4k5yqJqLSNQGy+a4YPRmyvcW0jaRLx9eA Y8GZXW+Vn1JxMvvEdTchUR1nGfAuqikjmqorfmeu4JUyGIGtiHfqAr6d5WUwpjcI XQgpIdbBDrbGfY3GEl1iaZYGdbKM7Mgp -----END CERTIFICATE-----Generated at Thu Nov 6 00:57:58 2025 by rpki-client