$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json) Hash identifier: U9U6nrGF+fGruZgfdrGDk9aybuga0iMH9VBiudkMX54= Subject key identifier: 26:6A:5A:A4:5E:74:6F:A7:BE:3F:0C:FA:DA:58:4C:0F:DE:A5:87:93 Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 061B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft Manifest number: 0615 Signing time: Tue 04 Nov 2025 22:55:30 +0000 Manifest this update: Tue 04 Nov 2025 22:55:29 +0000 Manifest next update: Tue 11 Nov 2025 22:55:29 +0000 Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: xHzW/9IpYYIo9chj/BsdLhrj8GEayjqMyd2iy86iqRE=) 2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: ydOAiWCM6NkM+mxAS7XZYLAQc/Fn5GEwebXDqOLlzZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1563 (0x61b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: Nov 4 22:55:29 2025 GMT Not After : Nov 11 22:55:29 2025 GMT Subject: CN=690a8461-1275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:28:f8:f5:34:da:c0:12:4c:d1:6e:76:64: a0:92:c6:ae:f5:23:b0:5b:a7:75:83:91:07:03:24: 50:f1:8e:ec:53:6d:18:4f:67:b5:2a:0a:6b:49:43: b3:26:3d:b3:e9:3b:a0:54:35:2c:db:a9:af:c9:2c: 44:d7:4b:ee:a6:79:35:92:b6:50:b5:70:88:80:b3: 5b:dd:c0:56:95:47:3f:5a:7f:ca:67:1d:89:3a:48: b8:ee:c7:1d:f5:62:27:68:90:3f:db:74:5f:e6:db: 33:a1:f9:2b:2a:f1:fb:8c:8e:32:55:2f:d2:96:c8: ff:fb:81:fb:d2:79:e5:a1:c9:34:bc:8f:b7:20:e7: 96:d0:e1:5b:0c:04:47:07:d9:d3:19:43:c6:71:f7: e9:7e:63:51:00:f8:f0:c6:43:31:3c:64:0e:61:7c: be:28:4b:06:41:5c:d9:06:40:be:d7:53:e5:46:70: f6:05:96:2e:a6:98:25:7b:4c:72:85:9d:7f:00:d6: fa:5b:9a:43:7c:21:de:be:f4:3a:8e:12:a1:e6:5a: 80:96:e5:9b:44:8f:e0:0d:67:bf:e7:69:80:de:62: 34:bf:3b:e1:cb:b5:c3:9b:62:a9:1b:98:19:fb:51: 57:71:87:dd:55:6c:0b:a1:83:b0:fc:d9:bb:43:ff: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6A:5A:A4:5E:74:6F:A7:BE:3F:0C:FA:DA:58:4C:0F:DE:A5:87:93 X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:00:cc:62:6d:8e:6c:c2:50:65:15:c6:31:cf:18:1b:11:8e: 8f:8e:ec:2f:39:95:b2:39:0e:57:0d:9d:10:55:f8:40:b9:6d: ca:b0:78:db:83:0d:f0:81:6f:33:77:7d:44:3a:09:05:37:3f: 9d:65:dd:c5:48:49:9e:3c:41:2f:ef:e3:e2:bc:2c:08:82:04: 1a:d2:5d:79:e3:78:60:9b:f5:a7:1d:f5:06:2e:90:4a:43:a6: b9:80:f5:08:35:2c:14:fa:a6:ed:0b:48:f7:f8:e1:af:3b:ba: c6:06:ea:8a:3c:11:11:19:3b:ac:14:2a:04:a5:f9:42:83:1c: 8c:f9:e1:7e:fb:f6:2c:78:e3:c8:dd:a3:41:89:e4:8d:4a:9c: 80:ba:bc:33:5a:f8:fc:63:57:fa:7e:4b:07:49:a1:d5:90:98: 2f:7f:7b:c3:0e:b7:64:85:b5:b6:0a:c0:71:65:44:fb:a5:24: b3:03:94:1a:72:43:7f:9a:3e:3c:22:18:29:a4:77:f4:d2:5b: 1e:35:ec:e3:8c:f0:29:56:86:9e:0d:67:76:da:d3:66:a2:26: 78:de:1c:ae:f2:24:7f:b2:6b:76:d2:7f:c7:d0:86:59:c4:29: 8b:ef:d5:a4:96:dd:f7:e5:c7:21:ca:7d:09:bd:45:e7:17:88: 2d:38:2f:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjUxMTA0MjI1NTI5WhcNMjUxMTExMjI1NTI5WjAYMRYwFAYD VQQDEw02OTBhODQ2MS0xMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5Eo+PU02sASTNFudmSgksau9SOwW6d1g5EHAyRQ8Y7sU20YT2e1KgprSUOz Jj2z6TugVDUs26mvySxE10vupnk1krZQtXCIgLNb3cBWlUc/Wn/KZx2JOki47scd 9WInaJA/23Rf5tszofkrKvH7jI4yVS/Slsj/+4H70nnlock0vI+3IOeW0OFbDARH B9nTGUPGcffpfmNRAPjwxkMxPGQOYXy+KEsGQVzZBkC+11PlRnD2BZYuppgle0xy hZ1/ANb6W5pDfCHevvQ6jhKh5lqAluWbRI/gDWe/52mA3mI0vzvhy7XDm2KpG5gZ +1FXcYfdVWwLoYOw/Nm7Q/8a3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZqWqRe dG+nvj8M+tpYTA/epYeTMB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU5QS8yRjhEQ0IwMkMxQ0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9Bckxr Vlg2SVdtd09xMTBOQncxNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0AMxibY5swlBlFcYxzxgbEY6PjuwvOZWyOQ5XDZ0QVfhAuW3KsHjb gw3wgW8zd31EOgkFNz+dZd3FSEmePEEv7+PivCwIggQa0l1543hgm/WnHfUGLpBK Q6a5gPUINSwU+qbtC0j3+OGvO7rGBuqKPBERGTusFCoEpflCgxyM+eF++/YseOPI 3aNBieSNSpyAurwzWvj8Y1f6fksHSaHVkJgvf3vDDrdkhbW2CsBxZUT7pSSzA5Qa ckN/mj48IhgppHf00lseNezjjPApVoaeDWd22tNmoiZ43hyu8iR/smt20n/H0IZZ xCmL79Wklt335cchyn0JvUXnF4gtOC8n -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:31 2025 by rpki-client