$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json) Hash identifier: bN2Q3/GAMW/tTmi0XWY5WYDOph00WLWWUvoFYj3E3y0= Subject key identifier: 7F:33:3E:97:BF:C8:5F:E0:F5:53:B7:B0:53:3F:E6:BD:BA:D8:57:2B Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft Manifest number: 0186 Signing time: Mon 03 Nov 2025 03:38:32 +0000 Manifest this update: Mon 03 Nov 2025 03:38:31 +0000 Manifest next update: Mon 10 Nov 2025 03:38:31 +0000 Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: 745A/c3szCgJTenuyNR7fs9hrh8hmj4G21k2LDDMQLc=) 2: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: 1ZszVXnu+oof2agkcsw2N+1e9S9zcssyc5TigB7H1/w=) 3: 6821BAB4450C11F0A7A54A80C4F9AE02.roa (hash: cK+N9izYWqB7nJ2gb9CD89n2r86dl3xekNBy66q5a0Q=) 4: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: e26WrvOpcLVtFLCEGQEyLqc/kWvK3maBfU7Yb9x41Mg=) 5: 6911C6C6450C11F0A7A54A80C4F9AE02.roa (hash: XM9Bx/2dvSebxGit5XsfhdOhtq9u4/gFe4PEE8p0hU0=) 6: 688DF576450C11F0A7A54A80C4F9AE02.roa (hash: 4F6WXMQnkc6O0hYawZzx3De82Qtz5srkx6WGHHAwdQk=) 7: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: ejDPctxuPr+08V8pahIdV3zpYnFneVGtkqcwrd8I5VM=) 8: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: NbEb3oWP2ceJtb7zrqoj41m3/pXeHDptDVhijrcSdOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Nov 3 03:38:31 2025 GMT Not After : Nov 10 03:38:31 2025 GMT Subject: CN=690823b8-6c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:ff:c9:c6:d7:93:98:1c:88:f3:d1:83:24: a5:ab:e6:e0:3c:43:1c:e9:1b:b1:9f:44:aa:3c:8a: 39:df:d9:b0:08:24:f3:a8:aa:a4:2f:30:fc:45:09: 10:cc:a3:9d:6a:cb:60:dd:29:9a:52:b1:22:bf:4f: ec:52:d0:9b:28:97:df:80:85:04:ce:1a:b3:df:6f: 5e:7a:20:0c:73:98:a3:bc:ed:f8:aa:99:e3:6a:24: 8d:c4:14:66:bd:31:d1:f5:13:c3:43:47:42:f7:66: ed:31:da:33:09:f8:83:24:31:f5:3d:ae:49:b5:75: 82:9f:80:8a:25:a2:69:4a:21:fe:1d:53:75:4b:a7: 54:a7:7c:aa:8b:b0:c2:9c:55:bf:a5:20:5b:b8:36: a5:d3:07:48:f1:c1:74:a0:c3:0c:ba:97:92:64:2f: 13:c9:75:d6:4a:36:c6:64:47:f5:88:d4:f0:74:b3: c1:1c:32:46:1f:f0:eb:27:fd:28:e3:0f:18:c3:68: 3c:f6:69:b5:53:f9:60:38:b8:2a:57:58:b5:eb:89: 8b:12:33:2b:f4:4a:c2:5a:7a:f0:17:87:3c:0e:da: 02:4a:56:be:e3:69:e7:22:f3:0f:4a:d0:e4:e7:4a: cb:9a:9e:bc:69:f6:21:3f:f1:8d:92:08:ef:0d:81: f8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:33:3E:97:BF:C8:5F:E0:F5:53:B7:B0:53:3F:E6:BD:BA:D8:57:2B X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:da:ca:43:43:d2:88:b7:b9:ea:fa:6d:20:aa:3c:55:c5:4e: 61:f2:87:17:a2:d0:8d:c1:2b:08:73:98:1e:ea:2c:da:80:97: e9:21:ac:06:85:25:18:79:76:a7:de:2d:2e:fa:99:2e:9b:cb: d8:d2:9b:ab:c6:81:86:c5:71:5c:f8:1f:c2:b8:ee:ad:ec:6d: 1c:87:59:db:ba:f4:63:18:65:49:a1:b9:fe:1a:0c:36:63:01: 32:7a:2e:78:05:cd:0d:aa:eb:f7:f8:87:89:83:69:77:7f:91: bb:1c:32:5b:b3:5c:48:50:07:b0:78:38:0d:35:3a:b7:ae:5d: 3c:89:b9:87:bc:88:fb:8a:1a:5b:04:28:b5:17:4c:7f:93:d7: 1c:9e:8b:7e:58:ca:ed:6c:ae:88:2b:20:40:7c:5e:5e:45:6d: 60:5f:36:ef:f8:e7:88:70:72:33:a4:ab:ce:78:be:74:e5:99: 51:44:85:84:9a:1c:53:31:e0:46:da:db:14:5e:94:e2:4d:fe: 48:a5:f9:6e:98:c2:fa:53:e6:72:81:75:f5:27:2b:65:3f:a3: 37:60:d9:ff:4f:d2:a4:05:ad:94:db:74:01:c5:b4:5e:de:62: 29:e5:7c:30:4e:84:13:f8:bf:39:59:6d:12:65:5e:a4:48:e0: aa:4f:2b:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjUxMTAzMDMzODMxWhcNMjUxMTEwMDMzODMxWjAYMRYwFAYD VQQDEw02OTA4MjNiOC02YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArB7/ycbXk5gciPPRgySlq+bgPEMc6Ruxn0SqPIo539mwCCTzqKqkLzD8RQkQ zKOdastg3SmaUrEiv0/sUtCbKJffgIUEzhqz329eeiAMc5ijvO34qpnjaiSNxBRm vTHR9RPDQ0dC92btMdozCfiDJDH1Pa5JtXWCn4CKJaJpSiH+HVN1S6dUp3yqi7DC nFW/pSBbuDal0wdI8cF0oMMMupeSZC8TyXXWSjbGZEf1iNTwdLPBHDJGH/DrJ/0o 4w8Yw2g89mm1U/lgOLgqV1i164mLEjMr9ErCWnrwF4c8DtoCSla+42nnIvMPStDk 50rLmp68afYhP/GNkgjvDYH4SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8zPpe/ yF/g9VO3sFM/5r262FcrMB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM3Qy8yQjVDQUFFODY5RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4 aHd5S0FMWm91XzZWbEYtTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/2spDQ9KIt7nq+m0gqjxVxU5h8ocXotCNwSsIc5ge6izagJfpIawG hSUYeXan3i0u+pkum8vY0purxoGGxXFc+B/CuO6t7G0ch1nbuvRjGGVJobn+Ggw2 YwEyei54Bc0Nquv3+IeJg2l3f5G7HDJbs1xIUAeweDgNNTq3rl08ibmHvIj7ihpb BCi1F0x/k9ccnot+WMrtbK6IKyBAfF5eRW1gXzbv+OeIcHIzpKvOeL505ZlRRIWE mhxTMeBG2tsUXpTiTf5IpflumML6U+ZygXX1JytlP6M3YNn/T9KkBa2U23QBxbRe 3mIp5XwwToQT+L85WW0SZV6kSOCqTytA -----END CERTIFICATE-----Generated at Tue Nov 4 20:33:11 2025 by rpki-client