$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft File: c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json) Hash identifier: Q5A8r4Cqp/jY67lR3ZxBX97w7rZFXO2rSlZ0aDhGyjE= Subject key identifier: 9B:E2:A9:4C:8F:01:8D:54:31:83:A2:5D:2D:7D:C8:22:61:91:CF:F2 Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E Certificate issuer: /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft Manifest number: F0 Signing time: Wed 05 Nov 2025 05:27:12 +0000 Manifest this update: Wed 05 Nov 2025 05:27:11 +0000 Manifest next update: Wed 12 Nov 2025 05:27:11 +0000 Files and hashes: 1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: EBgSHe96mnvCmDW5jH985TYnf2Km5oSOb5ovZbvrsa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E Validity Not Before: Nov 5 05:27:11 2025 GMT Not After : Nov 12 05:27:11 2025 GMT Subject: CN=690ae030-72d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fd:2c:b0:d0:b0:53:5e:a3:9b:72:34:0c:8b: c8:ee:fa:09:5d:6b:09:9c:d6:47:e3:4b:17:79:a2: cd:28:4e:00:39:99:90:ae:89:37:5b:1f:85:de:63: fc:53:56:c7:83:ec:94:ee:d2:a1:c1:9e:02:d3:d2: 95:89:7d:f3:cb:78:a7:8a:e5:a0:ff:47:25:b6:93: f9:af:35:23:f7:fd:37:b3:a9:b0:f6:2d:75:f6:03: f9:ff:71:b2:90:18:a2:85:21:c1:fd:c6:4e:86:b5: 22:08:8f:c3:30:06:de:dd:c2:13:38:bc:8a:28:cc: 22:89:59:13:85:26:b7:00:bb:17:c0:9c:7d:ce:78: 63:b0:80:85:7e:78:08:50:98:e9:24:ab:56:3a:28: d9:3f:ec:7c:49:48:65:33:32:24:06:ff:bc:e3:cc: 14:9d:47:fc:13:db:d8:c4:33:81:ef:f6:bf:e2:57: 6d:3a:00:5f:ca:63:7e:da:2f:58:38:ea:a1:ad:29: 8d:e8:64:e0:2a:fd:01:2d:2b:83:38:ac:a6:8a:3f: 8f:40:3b:fe:8a:99:dc:5e:80:ee:75:7b:2a:aa:77: 48:10:8d:3d:61:5d:8a:38:cc:73:ec:6e:9e:27:3f: 1d:cc:df:f6:9b:26:ad:ca:b0:74:18:e6:2b:7d:cb: 73:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E2:A9:4C:8F:01:8D:54:31:83:A2:5D:2D:7D:C8:22:61:91:CF:F2 X509v3 Authority Key Identifier: keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:40:15:65:ee:40:7d:77:3f:37:4b:32:02:1d:dd:8d:f4:94: 4b:64:4b:77:60:f5:aa:25:b6:53:36:19:7b:66:33:79:a8:1d: d9:63:bf:52:d6:43:81:3d:c1:51:db:37:4e:62:ad:7c:32:bc: b0:4e:ea:2e:a6:ae:93:16:4d:d4:7e:c1:6b:e6:64:c3:8a:e2: c2:06:13:be:86:61:b6:7e:b0:e3:a6:d1:63:aa:c3:ac:d6:16: db:48:28:cd:e0:ac:b5:82:ac:5d:ab:1e:f1:40:e1:9e:ed:42: af:79:4a:3e:90:5a:68:63:33:ce:05:55:6f:8d:21:09:b1:48: 6d:df:85:e0:36:7b:f1:55:f6:5d:7f:85:fc:15:8c:ea:9d:24: e7:89:11:2f:3c:11:0a:b3:c0:61:2c:ce:52:63:f8:d4:b8:cb: ee:47:2a:73:36:9d:52:da:bd:ff:b0:c3:0e:87:d9:eb:7a:e3: 35:6b:ea:a3:fc:6c:ad:55:84:97:d3:05:64:fc:36:ce:5f:6e: 1e:a7:26:00:44:f9:b0:e7:9f:2e:4e:6c:11:ea:59:70:17:f1: 83:4a:e3:c0:f6:95:7b:d1:31:27:a4:8d:b0:a2:45:92:4d:2c: b9:11:3d:6e:ee:83:80:c1:e8:9d:00:ac:b9:18:3e:55:da:e5: 10:b3:f1:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDczNDVEMzM4NTE5NTg5MDY4ODREODcxNjQwQTRCRUQy Qzg0NkQxNEUwHhcNMjUxMTA1MDUyNzExWhcNMjUxMTEyMDUyNzExWjAYMRYwFAYD VQQDEw02OTBhZTAzMC03MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8/0ssNCwU16jm3I0DIvI7voJXWsJnNZH40sXeaLNKE4AOZmQrok3Wx+F3mP8 U1bHg+yU7tKhwZ4C09KViX3zy3iniuWg/0cltpP5rzUj9/03s6mw9i119gP5/3Gy kBiihSHB/cZOhrUiCI/DMAbe3cITOLyKKMwiiVkThSa3ALsXwJx9znhjsICFfngI UJjpJKtWOijZP+x8SUhlMzIkBv+848wUnUf8E9vYxDOB7/a/4ldtOgBfymN+2i9Y OOqhrSmN6GTgKv0BLSuDOKymij+PQDv+ipncXoDudXsqqndIEI09YV2KOMxz7G6e Jz8dzN/2myatyrB0GOYrfctztwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJviqUyP AY1UMYOiXS19yCJhkc/yMB8GA1UdIwQYMBaAFHNF0zhRlYkGiE2HFkCkvtLIRtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81OUM0QUQ0QTQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlRYUlUWWNXUUtTLTBzaEcw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwWFRPRkdWaVFhSVRZY1dRS1MtMHNoRzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81OUM0QUQ0QTQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlR YUlUWWNXUUtTLTBzaEcwVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuQBVl7kB9dz83SzICHd2N9JRLZEt3YPWqJbZTNhl7ZjN5qB3ZY79S 1kOBPcFR2zdOYq18MrywTuoupq6TFk3UfsFr5mTDiuLCBhO+hmG2frDjptFjqsOs 1hbbSCjN4Ky1gqxdqx7xQOGe7UKveUo+kFpoYzPOBVVvjSEJsUht34XgNnvxVfZd f4X8FYzqnSTniREvPBEKs8BhLM5SY/jUuMvuRypzNp1S2r3/sMMOh9nreuM1a+qj /GytVYSX0wVk/DbOX24epyYARPmw558uTmwR6llwF/GDSuPA9pV70TEnpI2wokWS TSy5ET1u7oOAweidAKy5GD5V2uUQs/FJ -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:38 2025 by rpki-client