$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft File: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json) Hash identifier: bxldqEeVZitVARAwDQTHxlbKKTpCb+RKyw1kCMk5UDY= Subject key identifier: 9A:64:13:02:6C:A1:82:78:BB:32:9C:D1:03:87:A8:34:A5:AC:40:06 Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft Manifest number: 016A Signing time: Mon 03 Nov 2025 04:01:01 +0000 Manifest this update: Mon 03 Nov 2025 04:01:00 +0000 Manifest next update: Mon 10 Nov 2025 04:01:00 +0000 Files and hashes: 1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: M4NK5Hyzl/Rl7Zi7wcZ0ZpQoTrEAB4nzSc1Y9ZX2PuA=) 2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Validity Not Before: Nov 3 04:01:00 2025 GMT Not After : Nov 10 04:01:00 2025 GMT Subject: CN=690828fd-4138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:8b:01:38:91:a5:ad:ba:6b:e7:ae:72:80: 4e:b0:c2:85:f3:a0:80:4a:a2:37:9e:d2:db:fc:34: 50:92:57:2a:7e:40:1b:d5:38:04:14:25:f9:1c:4e: 5b:9e:f6:bf:eb:7b:e6:77:90:c3:5f:13:15:5a:e3: 35:be:3e:46:26:6f:14:fa:57:12:cb:88:41:f9:a1: 82:94:c2:10:89:31:aa:1d:0c:f2:94:10:83:f8:fc: 0a:ec:68:89:48:0d:b1:d0:33:9c:71:97:40:fe:1c: c5:54:53:48:5f:1b:f0:54:79:8e:86:19:20:86:70: a8:8b:90:85:5f:fc:0e:98:7c:c9:e6:6a:8e:b3:a8: 05:8c:24:aa:d9:9f:40:bd:00:83:e2:f4:8c:04:d6: d5:f8:42:4c:b7:11:b0:c2:ae:24:ec:a6:26:2a:d6: 0c:8d:78:59:4e:1b:22:71:6c:ac:b0:5a:3d:47:5e: 1d:ec:14:e5:06:1c:ea:c2:90:17:5a:00:84:a7:97: 7f:d4:f7:9c:37:37:a5:a2:83:87:8f:e3:16:04:7c: 1f:55:a4:69:2c:48:6d:ce:2e:5a:67:ac:92:45:05: 65:b6:77:9d:ec:63:dc:c5:4e:3f:fe:24:af:af:bf: 46:96:45:2c:2b:d7:c3:bc:58:92:91:b9:52:51:48: 2e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:64:13:02:6C:A1:82:78:BB:32:9C:D1:03:87:A8:34:A5:AC:40:06 X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:94:cc:c5:f4:db:81:10:2a:be:98:2d:6a:5b:66:81:93:f1: 13:5c:62:46:5e:38:8e:c6:d1:c6:c8:c0:51:4e:3b:db:6d:05: c4:e2:86:8e:60:a0:f5:5f:a6:14:48:13:af:01:f9:fc:99:ec: d8:a4:01:23:42:84:f1:6f:34:05:bc:da:38:e8:c4:e4:e3:12: e5:07:55:d6:84:ee:4c:6c:be:9c:73:32:44:d6:f2:cf:53:53: 97:e3:d9:a5:f5:eb:17:56:83:0e:13:15:f0:d1:e9:27:ee:47: 62:3d:bb:61:1a:5e:ed:1c:3a:0d:a6:e7:86:84:4b:3e:85:37: 5f:e7:51:f3:79:18:fc:dd:01:7e:f3:10:bc:0b:3e:c9:39:8f: 93:3c:64:1e:db:52:3d:b7:1e:4e:6c:b7:66:3d:bf:4c:2e:1e: 78:be:31:d7:46:67:bc:ef:23:13:19:23:a7:79:c5:29:07:19: 2b:b2:e0:74:20:4f:12:62:21:16:a8:bf:e1:97:36:1a:e1:62: 5a:a4:6e:6a:f2:32:21:76:e3:43:9b:81:f6:02:23:b6:2e:da: 3c:9f:04:34:c2:66:5c:e7:5e:5f:cb:0c:3f:13:e2:f9:55:30: c4:81:f1:b3:c0:05:c4:88:b7:91:75:94:0b:61:5e:c1:8c:0a: f8:0d:c8:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF NzMxMjFGOTcwHhcNMjUxMTAzMDQwMTAwWhcNMjUxMTEwMDQwMTAwWjAYMRYwFAYD VQQDEw02OTA4MjhmZC00MTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQKLATiRpa26a+eucoBOsMKF86CASqI3ntLb/DRQklcqfkAb1TgEFCX5HE5b nva/63vmd5DDXxMVWuM1vj5GJm8U+lcSy4hB+aGClMIQiTGqHQzylBCD+PwK7GiJ SA2x0DOccZdA/hzFVFNIXxvwVHmOhhkghnCoi5CFX/wOmHzJ5mqOs6gFjCSq2Z9A vQCD4vSMBNbV+EJMtxGwwq4k7KYmKtYMjXhZThsicWyssFo9R14d7BTlBhzqwpAX WgCEp5d/1PecNzelooOHj+MWBHwfVaRpLEhtzi5aZ6ySRQVltned7GPcxU4//iSv r79GlkUsK9fDvFiSkblSUUguUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpkEwJs oYJ4uzKc0QOHqDSlrEAGMB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3 RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4t Mk1VSjloR0o5RWpuTVNINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFlMzF9NuBECq+mC1qW2aBk/ETXGJGXjiOxtHGyMBRTjvbbQXE4oaO YKD1X6YUSBOvAfn8mezYpAEjQoTxbzQFvNo46MTk4xLlB1XWhO5MbL6cczJE1vLP U1OX49ml9esXVoMOExXw0ekn7kdiPbthGl7tHDoNpueGhEs+hTdf51HzeRj83QF+ 8xC8Cz7JOY+TPGQe21I9tx5ObLdmPb9MLh54vjHXRme87yMTGSOnecUpBxkrsuB0 IE8SYiEWqL/hlzYa4WJapG5q8jIhduNDm4H2AiO2Lto8nwQ0wmZc515fyww/E+L5 VTDEgfGzwAXEiLeRdZQLYV7BjAr4DchP -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:50 2025 by rpki-client