$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json) Hash identifier: Ij6il2JHZT4mxTVXZzDMAXhlEoG/Lrgp7+6p6JPqlXQ= Subject key identifier: 32:6E:4B:2E:08:56:C4:5A:FE:59:11:08:38:C7:9E:20:43:26:40:89 Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft Manifest number: 59 Signing time: Mon 03 Nov 2025 07:08:18 +0000 Manifest this update: Mon 03 Nov 2025 07:08:18 +0000 Manifest next update: Mon 10 Nov 2025 07:08:18 +0000 Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: F2QWzMoyY1V8k4Gb24qdkeaTxoSoEkXqqkb0jr3JQVw=) 2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Validity Not Before: Nov 3 07:08:18 2025 GMT Not After : Nov 10 07:08:18 2025 GMT Subject: CN=690854e2-d1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4e:ea:17:90:46:39:d3:51:cd:0e:17:c1:21: a0:8f:a2:7c:83:5d:bf:45:0d:8b:db:a4:ea:fd:a0: 35:f7:fe:8b:c5:87:49:bb:30:40:01:86:b7:29:7d: 69:f3:1b:a0:1e:5c:d2:e2:ca:c5:9b:e0:f0:41:59: 73:e4:a8:37:3d:22:17:c7:d3:22:5c:f8:0d:d3:68: f0:19:a6:a8:51:e8:9a:42:33:ee:8f:a3:75:c1:1f: 8d:e2:9d:90:c5:35:87:d5:88:32:7e:9b:e9:7e:3b: 08:d3:fb:a7:bf:dd:e7:ca:38:9e:b7:71:80:3c:52: 67:d2:5d:e0:f5:74:01:39:0a:64:9d:39:76:30:c8: 5d:53:e9:55:54:3b:4c:3a:97:3c:70:a9:f0:28:83: 38:73:c0:94:df:99:35:38:ef:48:47:9e:d9:b3:02: 1d:76:a4:1a:0c:5f:d1:67:87:68:7d:f4:c8:1d:53: 20:a1:c9:e9:89:f6:87:99:58:04:b4:78:0e:bf:ac: 94:50:b6:31:63:94:a5:2c:84:1b:28:c4:90:3c:6f: 76:25:03:09:09:5d:8c:5d:d3:e2:9f:7d:92:8a:56: f9:12:10:1a:70:32:b4:88:4f:31:c5:1d:cb:d6:20: 47:0e:6a:35:c4:fd:89:d5:c6:cf:5c:89:ec:54:9a: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6E:4B:2E:08:56:C4:5A:FE:59:11:08:38:C7:9E:20:43:26:40:89 X509v3 Authority Key Identifier: keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e1:ec:ac:44:1f:40:87:3a:78:f7:22:d5:6c:5c:de:6c:51: 09:23:42:bf:a9:ce:90:e7:11:ff:45:cb:f3:20:b0:6a:8b:81: ef:65:3e:f8:70:a7:02:6e:1e:88:51:1b:27:50:47:2e:73:4c: 83:48:75:42:d0:44:79:30:e1:0d:7e:0c:6a:26:18:97:6f:ef: c0:21:ae:15:f5:61:e3:06:b1:42:7e:99:8b:1f:0f:a5:1a:78: 8c:67:37:f8:fe:c8:e2:2a:dd:51:cc:ab:09:d9:84:00:a4:ef: dd:08:a6:e0:39:3d:01:32:1e:b9:81:d7:aa:19:64:38:a7:bb: 0a:f2:ac:13:bd:e9:fa:ea:30:7e:c9:ea:a5:20:cd:57:d2:cf: dc:80:a3:ec:74:63:3c:20:2f:af:3e:94:70:74:5d:c8:4a:1c: 13:32:48:15:ac:90:cc:21:78:df:f0:00:6c:58:b8:ec:ff:cd: ce:fa:44:a9:cc:c7:7e:0d:72:19:69:ee:b6:32:0a:2e:2e:26: bc:39:32:48:19:09:d3:25:2e:c5:44:09:98:d0:e7:75:c8:8a: e5:9c:5a:88:b7:84:82:f1:15:b4:c2:56:4a:88:19:b1:ab:1c: 2d:2c:50:9d:15:12:10:12:4b:9b:6e:54:1d:4f:3a:02:f6:95: 1e:a9:29:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzMxMTExMC8GA1UEBRMoQzZERTM2QTRFNDVFN0E5OTFGQzQ0NEY4Q0IxQjQ1NUYx NzQ2MkM4RDAeFw0yNTExMDMwNzA4MThaFw0yNTExMTAwNzA4MThaMBgxFjAUBgNV BAMTDTY5MDg1NGUyLWQxYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYTuoXkEY501HNDhfBIaCPonyDXb9FDYvbpOr9oDX3/ovFh0m7MEABhrcpfWnz G6AeXNLiysWb4PBBWXPkqDc9IhfH0yJc+A3TaPAZpqhR6JpCM+6Po3XBH43inZDF NYfViDJ+m+l+OwjT+6e/3efKOJ63cYA8UmfSXeD1dAE5CmSdOXYwyF1T6VVUO0w6 lzxwqfAogzhzwJTfmTU470hHntmzAh12pBoMX9Fnh2h99MgdUyChyemJ9oeZWAS0 eA6/rJRQtjFjlKUshBsoxJA8b3YlAwkJXYxd0+KffZKKVvkSEBpwMrSITzHFHcvW IEcOajXE/YnVxs9ciexUmsSdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMm5LLghW xFr+WREIOMeeIEMmQIkwHwYDVR0jBBgwFoAUxt42pOReepkfxET4yxtFXxdGLI0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMzExL0YxRjdBRjI2MkZC RjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHQ0MnBPUmVlcGtmeEVUNHl4dEZYeGRHTEkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MzExL0YxRjdBRjI2MkZCRjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBr ZnhFVDR5eHRGWHhkR0xJMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFzh7KxEH0CHOnj3ItVsXN5sUQkjQr+pzpDnEf9Fy/MgsGqLge9lPvhw pwJuHohRGydQRy5zTINIdULQRHkw4Q1+DGomGJdv78AhrhX1YeMGsUJ+mYsfD6Ua eIxnN/j+yOIq3VHMqwnZhACk790IpuA5PQEyHrmB16oZZDinuwryrBO96frqMH7J 6qUgzVfSz9yAo+x0YzwgL68+lHB0XchKHBMySBWskMwheN/wAGxYuOz/zc76RKnM x34Nchlp7rYyCi4uJrw5MkgZCdMlLsVECZjQ53XIiuWcWoi3hILxFbTCVkqIGbGr HC0sUJ0VEhASS5tuVB1POgL2lR6pKaI= -----END CERTIFICATE-----Generated at Tue Nov 4 19:11:45 2025 by rpki-client