$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json) Hash identifier: xipYHgWLt6j7w6wOXIDzepMJOpvdC0upKi/BqQAMxdA= Subject key identifier: AB:CC:38:B7:BE:6E:03:B7:97:0C:BC:4F:81:CD:E1:61:9B:5A:BA:0B Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft Manifest number: 02CC Signing time: Wed 05 Nov 2025 01:28:49 +0000 Manifest this update: Wed 05 Nov 2025 01:28:48 +0000 Manifest next update: Wed 12 Nov 2025 01:28:48 +0000 Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: flSmXnrTQrUzR2+yLFkadEAeqluvAFwZgPZkh43XsyQ=) 2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: yP2d46I6eQAvhpe/ALVhIcW2d8YQgRGFzGAw4LWLaPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Validity Not Before: Nov 5 01:28:48 2025 GMT Not After : Nov 12 01:28:48 2025 GMT Subject: CN=690aa851-1fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:05:ee:5f:8c:5a:49:01:e1:a0:77:69:dc: 28:5f:d1:09:89:dd:2a:64:8d:b3:8e:64:f5:61:54: 47:73:03:48:b0:cf:68:ae:cf:ad:bd:71:7d:d4:9e: 10:d3:7b:70:da:e5:dd:b6:f7:c5:5e:2e:89:56:af: 60:06:50:01:9e:c8:ea:e5:64:43:70:fb:82:09:f9: 4d:f0:1e:eb:c2:ff:fb:32:0a:46:86:1a:76:73:84: 10:3a:63:a6:7f:76:12:1f:ad:2f:38:f0:25:1e:04: 60:55:8f:c0:8b:93:92:e0:8b:46:44:be:5b:0c:e5: 41:9c:17:b8:53:27:a4:96:f8:e3:3f:10:f3:48:6e: e3:41:eb:a6:28:57:bc:3b:5e:76:de:a2:6d:ce:cd: 0c:75:d2:7d:59:31:f9:30:53:3d:49:9e:c2:12:45: ef:b3:a5:ea:48:85:42:e0:62:91:8c:fb:5c:1a:b8: 9e:73:70:45:a9:24:23:7c:e2:20:94:38:78:f8:78: 91:95:1a:f1:14:27:f8:5b:2a:ee:07:42:46:44:20: 3f:ff:2e:0e:54:a0:66:c6:e1:04:7c:29:06:33:14: 5f:8a:b4:a8:07:23:92:ed:60:18:ac:d1:14:54:10: ba:13:9d:6d:3e:30:07:eb:88:c8:23:1f:6b:05:8d: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CC:38:B7:BE:6E:03:B7:97:0C:BC:4F:81:CD:E1:61:9B:5A:BA:0B X509v3 Authority Key Identifier: keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:54:c7:5f:75:be:e4:d9:95:e2:09:64:3e:7b:c6:0b:98:cb: be:d8:df:18:bc:d1:6d:8d:39:05:3b:c1:42:22:31:7e:30:f6: ee:c7:d2:eb:d7:bf:4c:3d:2c:8e:54:44:ea:14:05:dd:2f:b4: 82:56:74:ae:cc:6b:82:96:60:b6:7e:cb:b1:db:fa:0a:9c:45: ff:e5:e3:72:1f:7b:86:75:85:e4:3c:b4:e7:1e:c3:59:49:ca: 3e:aa:62:fe:96:bc:96:38:a3:38:df:74:a5:e3:12:f8:4b:33: 47:d3:18:9c:50:46:25:20:7c:fa:77:0e:88:f7:aa:87:8e:c2: 0d:b2:b2:ca:a1:33:98:a5:71:9b:fc:85:f1:1b:1d:42:4b:8a: 08:7a:9c:8e:63:bd:e0:e5:94:64:18:16:5d:58:06:34:c6:2c: e9:0a:9e:e9:1f:f7:6a:ff:97:02:cf:24:ba:5c:43:e1:e9:89: d3:0a:19:6e:f3:20:ca:73:63:d4:7b:24:f7:0d:62:9a:54:b4: de:f9:e0:e0:06:87:d9:fb:73:ef:b4:ec:e9:76:a5:5d:7e:89: cf:a6:cf:78:86:be:cc:28:9d:b6:29:c0:30:d5:88:bd:97:b1: 3e:c6:8f:a1:26:27:cb:c8:49:13:8b:99:97:7e:1f:6a:fb:d6: b5:96:3e:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1OUUxMTAvBgNVBAUTKDVFNzNFREQ5NkZGMjdBODg1RjYxMzU2RUE3N0IxRjU0 MzVDODRGQ0MwHhcNMjUxMTA1MDEyODQ4WhcNMjUxMTEyMDEyODQ4WjAYMRYwFAYD VQQDEw02OTBhYTg1MS0xZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZsF7l+MWkkB4aB3adwoX9EJid0qZI2zjmT1YVRHcwNIsM9ors+tvXF91J4Q 03tw2uXdtvfFXi6JVq9gBlABnsjq5WRDcPuCCflN8B7rwv/7MgpGhhp2c4QQOmOm f3YSH60vOPAlHgRgVY/Ai5OS4ItGRL5bDOVBnBe4UyeklvjjPxDzSG7jQeumKFe8 O1523qJtzs0MddJ9WTH5MFM9SZ7CEkXvs6XqSIVC4GKRjPtcGriec3BFqSQjfOIg lDh4+HiRlRrxFCf4WyruB0JGRCA//y4OVKBmxuEEfCkGMxRfirSoByOS7WAYrNEU VBC6E51tPjAH64jIIx9rBY1IDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvMOLe+ bgO3lwy8T4HN4WGbWroLMB8GA1UdIwQYMBaAFF5z7dlv8nqIX2E1bqd7H1Q1yE/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU5RS9DQjBFQTc3NjBD Q0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVvaGZZVFZ1cDNzZlZEWElU OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huUHQyV195ZW9oZllUVnVwM3NmVkRYSVQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU5RS9DQjBFQTc3NjBDQ0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVv aGZZVFZ1cDNzZlZEWElUOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBVMdfdb7k2ZXiCWQ+e8YLmMu+2N8YvNFtjTkFO8FCIjF+MPbux9Lr 179MPSyOVETqFAXdL7SCVnSuzGuClmC2fsux2/oKnEX/5eNyH3uGdYXkPLTnHsNZ Sco+qmL+lryWOKM433Sl4xL4SzNH0xicUEYlIHz6dw6I96qHjsINsrLKoTOYpXGb /IXxGx1CS4oIepyOY73g5ZRkGBZdWAY0xizpCp7pH/dq/5cCzyS6XEPh6YnTChlu 8yDKc2PUeyT3DWKaVLTe+eDgBofZ+3PvtOzpdqVdfonPps94hr7MKJ22KcAw1Yi9 l7E+xo+hJifLyEkTi5mXfh9q+9a1lj6F -----END CERTIFICATE-----Generated at Wed Nov 5 18:49:53 2025 by rpki-client