$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json) Hash identifier: 8i0iPtH89NhgW8MclDJL5xGFSO6R6xmnaSLH1fYGYlo= Subject key identifier: 69:9F:D3:0D:63:57:28:E2:DF:04:17:10:15:85:F8:16:55:38:AF:3A Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Certificate serial: 350E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft Manifest number: 34F5 Signing time: Tue 04 Nov 2025 14:19:40 +0000 Manifest this update: Tue 04 Nov 2025 14:19:40 +0000 Manifest next update: Tue 11 Nov 2025 14:19:40 +0000 Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: 4sZ9vDaJ1SQAdK9MPD/ExipM/39UnpeaQPylbIR8INM=) 2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: yi83MC4bGsYsYYIO3cLCV7chmo/rO1rwAJjntq4bNoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13582 (0x350e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Validity Not Before: Nov 4 14:19:40 2025 GMT Not After : Nov 11 14:19:40 2025 GMT Subject: CN=690a0b7c-5749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:c7:00:3c:95:16:3e:8b:5a:e6:be:30:67: 39:19:bd:c7:10:75:e7:58:f8:f7:f5:94:e7:cc:f8: 9c:c7:79:ed:7b:9d:2a:61:40:f4:f6:ab:3c:13:0b: 84:35:94:4e:3f:77:40:9c:2f:17:6a:d4:b7:f5:a2: ed:24:5e:c0:a1:5a:1a:f1:fa:32:bc:36:3d:3d:04: 15:73:48:25:70:c4:58:7d:ee:57:9c:3c:ee:a6:a6: 3a:a8:56:6a:ea:41:13:78:14:ac:36:a0:0b:bd:a5: c6:ec:42:45:1e:6f:0d:cd:76:8f:f8:38:dd:7f:e8: 85:68:4a:b8:40:9b:3f:27:90:4b:c6:ea:69:75:a7: d7:2d:11:7e:16:e0:19:6d:fd:75:69:2c:9e:c6:89: 1d:30:4a:d8:02:a5:9d:23:31:31:cf:91:ae:8a:b6: 7f:bc:77:6f:07:62:cc:a2:97:65:84:8a:be:19:e8: 03:aa:03:5d:1e:8b:a5:7f:3e:aa:ba:f4:7f:d5:9a: b3:bd:d3:63:f2:97:5b:14:8a:b6:f5:bc:ff:f7:3e: 88:39:5d:83:7a:c7:c5:1d:71:2e:ef:33:ca:14:c4: 8b:ae:65:20:31:b0:e3:f9:e8:dd:8a:60:2b:11:b2: 69:8d:4b:45:ac:d5:77:04:55:a4:44:50:e8:f1:b8: d9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9F:D3:0D:63:57:28:E2:DF:04:17:10:15:85:F8:16:55:38:AF:3A X509v3 Authority Key Identifier: keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:e1:3d:9e:90:ed:c5:87:89:fa:bb:82:c3:ea:78:fc:e2:75: 60:c5:0d:76:3a:a7:31:30:2d:56:ad:f9:81:fc:e3:93:9d:d6: fa:d6:b9:e8:e7:d6:1a:1c:e5:ab:b4:29:0c:64:39:cd:ad:ec: e4:97:1b:37:7a:24:03:88:c6:4c:f1:4e:29:31:ca:11:5b:c4: a0:5e:f9:0f:57:7d:11:c1:08:b2:a4:5f:08:07:74:8a:c5:31: ea:1e:91:0e:b9:b5:43:4b:7d:dc:d9:e4:a4:12:6c:a3:23:c5: fd:53:5c:34:c6:9a:df:c7:9c:78:2d:60:de:e7:a4:b7:ce:21: 78:7a:34:5c:54:9c:bf:22:7c:69:c6:70:b1:a8:e1:86:a8:cb: 45:83:33:7b:39:ad:d3:c8:71:80:cf:b8:91:d0:61:d4:dd:8a: 64:72:f3:89:49:0d:02:6f:c5:13:33:7e:46:1c:ae:41:b1:93: c7:1e:01:63:37:16:3c:f4:03:6a:d1:cc:ee:f1:3f:2a:39:ba: df:2f:ee:27:b0:29:80:c1:b8:4f:3c:ee:4d:84:14:e4:b0:94: 29:56:94:c6:15:a4:c1:d5:5f:60:b7:ab:bd:03:2c:dd:d1:09: dd:ae:dd:41:f9:63:28:5a:0a:6c:90:b8:8d:17:6e:53:ec:03: 7d:32:a3:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3 N0RGQjIxQTMwHhcNMjUxMTA0MTQxOTQwWhcNMjUxMTExMTQxOTQwWjAYMRYwFAYD VQQDEw02OTBhMGI3Yy01NzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7rHADyVFj6LWua+MGc5Gb3HEHXnWPj39ZTnzPicx3nte50qYUD09qs8EwuE NZROP3dAnC8XatS39aLtJF7AoVoa8foyvDY9PQQVc0glcMRYfe5XnDzupqY6qFZq 6kETeBSsNqALvaXG7EJFHm8NzXaP+Djdf+iFaEq4QJs/J5BLxuppdafXLRF+FuAZ bf11aSyexokdMErYAqWdIzExz5GuirZ/vHdvB2LMopdlhIq+GegDqgNdHoulfz6q uvR/1ZqzvdNj8pdbFIq29bz/9z6IOV2DesfFHXEu7zPKFMSLrmUgMbDj+ejdimAr EbJpjUtFrNV3BFWkRFDo8bjZSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmf0w1j Vyji3wQXEBWF+BZVOK86MB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx U0cybVFfajVOaHQzMzdJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh4T2ekO3Fh4n6u4LD6nj84nVgxQ12OqcxMC1WrfmB/OOTndb61rno 59YaHOWrtCkMZDnNrezklxs3eiQDiMZM8U4pMcoRW8SgXvkPV30RwQiypF8IB3SK xTHqHpEOubVDS33c2eSkEmyjI8X9U1w0xprfx5x4LWDe56S3ziF4ejRcVJy/Inxp xnCxqOGGqMtFgzN7Oa3TyHGAz7iR0GHU3YpkcvOJSQ0Cb8UTM35GHK5BsZPHHgFj NxY89ANq0czu8T8qObrfL+4nsCmAwbhPPO5NhBTksJQpVpTGFaTB1V9gt6u9Ayzd 0Qndrt1B+WMoWgpskLiNF25T7AN9MqO6 -----END CERTIFICATE-----Generated at Wed Nov 5 17:59:56 2025 by rpki-client