$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: Q+Zmw1O2CNJDT3asGJaYLf8aYA3S9il021fHPJN1cC0= Subject key identifier: FA:F4:34:51:75:73:12:4C:71:A3:02:1D:B3:D3:53:42:B6:CB:CF:8E Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: EB Signing time: Mon 03 Nov 2025 05:19:08 +0000 Manifest this update: Mon 03 Nov 2025 05:19:07 +0000 Manifest next update: Mon 10 Nov 2025 05:19:07 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: U5h3Na0Jng/Szd+P/nUC1w8OTirv6Nz4Oq+KqNJZcPk=) 2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: bbIc0AasFC0EBwn4UjgSa63ViDg31XHR/SePlovtje4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Nov 3 05:19:07 2025 GMT Not After : Nov 10 05:19:07 2025 GMT Subject: CN=69083b4c-3a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:1a:b9:8c:49:ee:da:51:71:a8:65:a9:bd: e6:05:2f:bf:74:7e:c0:fe:32:4b:b5:cf:0e:73:3c: 71:b8:27:2a:73:5e:5d:fb:7a:0b:c9:99:48:8f:58: 38:3f:10:f9:19:0a:44:92:58:ae:f8:c8:0c:2b:ed: 89:5f:24:ca:21:f2:3e:82:32:d3:40:1a:64:81:00: 94:9f:1e:8b:95:1d:ba:11:77:a7:dd:18:b5:c7:d7: 51:dd:44:39:85:1d:4e:d7:74:bf:84:e4:77:21:e5: c9:40:dc:0d:79:46:53:0a:a9:69:89:d6:de:f5:a0: ef:f3:e3:bc:37:f5:57:a9:e1:75:d1:e0:52:90:49: 4f:18:45:e9:84:61:95:d3:1b:d1:84:96:da:b6:98: 54:3b:c5:0a:f3:49:2b:70:5b:71:fe:70:61:22:9a: 0e:21:4a:3f:42:6f:d2:42:9c:ba:12:3f:48:a9:fa: 89:fc:fc:88:25:45:61:fe:e7:76:09:bf:dd:40:59: 08:3f:30:5a:65:d1:c5:96:bf:40:cb:78:45:58:d4: 1e:79:e1:35:b6:38:bd:27:79:e9:7c:ac:85:e1:6d: 39:02:b5:77:05:85:71:7b:b9:d4:0b:2b:f3:14:ad: 2d:af:c9:ca:03:43:40:c5:03:9d:15:fa:53:c7:4d: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F4:34:51:75:73:12:4C:71:A3:02:1D:B3:D3:53:42:B6:CB:CF:8E X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:39:8a:aa:82:9c:31:87:e0:85:3f:d0:23:a5:67:bf:d0:76: 0d:97:c3:b7:6a:d5:21:8b:ff:b2:af:f8:c7:05:d7:52:6e:eb: f2:5a:4f:dd:7b:ec:e5:49:84:fb:5c:ea:29:d2:f2:6a:a0:e5: c7:d7:50:ad:89:0f:6e:33:fb:72:08:da:75:6f:a5:6e:13:9b: f1:fa:68:43:bf:82:8a:2d:79:f2:45:8b:7d:15:00:a9:ec:06: ee:71:0e:e9:47:90:1f:bc:ea:c8:31:59:78:87:d9:7e:fb:b3: ce:3d:00:4d:2e:e0:f3:44:bd:97:79:89:97:60:b8:d7:6b:cd: 2b:49:62:ec:66:9d:f9:fb:88:a8:04:2c:4a:01:bd:a0:7d:26: e0:a1:59:9e:c2:67:cd:51:89:51:6a:2d:1b:52:7a:01:9a:25: c7:53:bb:06:0c:54:6d:b2:4a:97:fa:06:e8:5a:54:19:77:49: 94:5e:8a:d5:18:40:8e:93:6d:72:7d:f7:40:f7:43:10:13:61: c3:c1:ad:f3:ea:97:ef:ed:77:68:45:fd:6e:a5:70:7a:a5:74: 2a:ce:03:5c:60:7d:c7:60:0b:ff:ca:88:a5:b7:e2:3f:84:49: 59:6c:29:31:7f:54:a3:9d:54:ce:fb:b2:4a:94:c2:a1:71:d0: b1:5b:5b:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjUxMTAzMDUxOTA3WhcNMjUxMTEwMDUxOTA3WjAYMRYwFAYD VQQDEw02OTA4M2I0Yy0zYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6sauYxJ7tpRcahlqb3mBS+/dH7A/jJLtc8OczxxuCcqc15d+3oLyZlIj1g4 PxD5GQpEkliu+MgMK+2JXyTKIfI+gjLTQBpkgQCUnx6LlR26EXen3Ri1x9dR3UQ5 hR1O13S/hOR3IeXJQNwNeUZTCqlpidbe9aDv8+O8N/VXqeF10eBSkElPGEXphGGV 0xvRhJbatphUO8UK80krcFtx/nBhIpoOIUo/Qm/SQpy6Ej9IqfqJ/PyIJUVh/ud2 Cb/dQFkIPzBaZdHFlr9Ay3hFWNQeeeE1tji9J3npfKyF4W05ArV3BYVxe7nUCyvz FK0tr8nKA0NAxQOdFfpTx03eGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr0NFF1 cxJMcaMCHbPTU0K2y8+OMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCROYqqgpwxh+CFP9AjpWe/0HYNl8O3atUhi/+yr/jHBddSbuvyWk/d e+zlSYT7XOop0vJqoOXH11CtiQ9uM/tyCNp1b6VuE5vx+mhDv4KKLXnyRYt9FQCp 7AbucQ7pR5AfvOrIMVl4h9l++7POPQBNLuDzRL2XeYmXYLjXa80rSWLsZp35+4io BCxKAb2gfSbgoVmewmfNUYlRai0bUnoBmiXHU7sGDFRtskqX+gboWlQZd0mUXorV GECOk21yffdA90MQE2HDwa3z6pfv7XdoRf1upXB6pXQqzgNcYH3HYAv/yoilt+I/ hElZbCkxf1SjnVTO+7JKlMKhcdCxW1s6 -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:03 2025 by rpki-client