$ rpki-client -vvf rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft File: _XRQsRgVCpshTxoL7t8-Oyb-0Es.mft (raw, json) Hash identifier: 8Ddz5e7lxSp2PVCtLC+OgPAz7N/GKXmbr3tH6qlVcl8= Subject key identifier: 9C:13:1A:37:D1:87:05:75:4C:17:97:C4:BF:74:AB:82:C6:F3:49:FE Authority key identifier: FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B Certificate issuer: /CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Certificate serial: 103A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft Manifest number: 1031 Signing time: Tue 04 Nov 2025 17:36:25 +0000 Manifest this update: Tue 04 Nov 2025 17:36:24 +0000 Manifest next update: Tue 11 Nov 2025 17:36:24 +0000 Files and hashes: 1: _XRQsRgVCpshTxoL7t8-Oyb-0Es.crl (hash: JAj2D/tk0SrFkRLa3y5ckWr7IpRSZiXsvfHajY5F1mk=) 2: 378459525C6511E989D03610C4F9AE02.roa (hash: UeTUI1DlYZHvBOxwqKa9VAajPRoI3BhfLzrzdSlATns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4154 (0x103a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144160, serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Validity Not Before: Nov 4 17:36:24 2025 GMT Not After : Nov 11 17:36:24 2025 GMT Subject: CN=690a3999-84c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:04:cc:48:b3:57:38:39:24:b7:1d:53:14:61: 32:69:9e:2f:79:f9:9f:3d:5a:78:c0:66:01:ab:69: 19:db:a1:00:66:fd:c7:f5:a7:6a:c9:b1:d8:74:df: ef:36:f8:b0:a1:34:7b:65:9b:e1:61:08:3e:01:20: e6:ae:76:c5:47:89:69:84:49:63:3d:0f:43:c6:72: ab:c8:96:e1:aa:e2:cb:66:af:87:e2:88:52:bc:c3: 83:dd:93:95:64:a0:e2:04:f3:f8:db:03:42:ec:24: 81:b4:1e:b1:63:fb:d8:b0:2e:ee:23:70:23:ec:bb: 42:ae:39:02:54:a0:5f:d0:55:1b:ad:0f:45:db:df: 9d:96:55:54:c4:3a:ad:4c:d1:82:c8:a1:8c:ef:99: 37:97:3f:13:db:d4:59:e3:cc:c5:b7:eb:ec:dc:2f: a6:33:3a:1c:2d:32:31:9c:48:a6:9f:9b:5b:db:47: 3b:fb:e1:2b:62:18:10:04:25:90:82:98:c5:74:c3: 6d:6b:67:c5:23:88:d0:89:b9:d7:0e:93:1e:ea:e7: 2d:d1:7a:44:f6:41:83:3e:1d:49:9f:7e:ff:71:65: d8:dd:9d:42:e2:bc:d2:29:90:51:e9:b9:01:87:a1: eb:fe:44:8a:7a:b4:34:d6:37:8d:ca:8a:9b:1a:44: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:13:1A:37:D1:87:05:75:4C:17:97:C4:BF:74:AB:82:C6:F3:49:FE X509v3 Authority Key Identifier: keyid:FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:9f:96:2c:3b:78:e4:40:c3:70:ac:64:7f:41:b8:a3:09:02: 58:f5:d8:d9:c5:27:b7:20:28:76:93:54:0c:7e:e6:d1:78:a6: db:e5:37:04:27:09:cd:c2:23:b2:7a:1f:7b:31:15:bf:46:8d: 99:9e:d9:ee:fd:51:28:d4:26:39:9a:37:ac:53:23:ec:1a:43: 46:50:06:4a:3d:5d:7f:bb:52:f6:84:4b:d0:95:27:52:ad:dc: 98:6b:de:89:ac:b8:65:96:12:99:bc:60:3e:58:da:6d:7e:9c: 5e:5e:63:34:37:8f:d6:2d:5c:e7:4b:2e:14:d7:de:37:59:69: 2d:50:cf:1f:40:79:3e:6d:99:c8:a0:b1:4b:fc:47:32:2a:49: 1d:66:5d:8f:0c:f9:c5:e7:6e:15:bd:08:18:0f:47:23:99:43: 9e:53:ac:c7:75:7e:77:9c:72:00:33:3a:a3:6c:19:7c:47:e3: b4:c6:d8:84:fb:f7:ed:32:44:f5:42:7b:73:24:fe:b5:e5:35: 1e:78:02:7c:1b:ae:7d:b3:8b:63:1c:d4:49:2a:77:26:0d:5f: 71:e6:fc:97:9c:81:80:01:b7:1f:1d:3e:38:ea:6e:63:e2:4b: 0d:b3:bc:e3:8b:e6:8a:bd:b0:e4:bc:c0:07:bb:58:6f:5b:53: fa:c1:55:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQxNjAxMTAvBgNVBAUTKEZENzQ1MEIxMTgxNTBBOUIyMTRGMUEwQkVFREYzRTNC MjZGRUQwNEIwHhcNMjUxMTA0MTczNjI0WhcNMjUxMTExMTczNjI0WjAYMRYwFAYD VQQDEw02OTBhMzk5OS04NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ATMSLNXODkktx1TFGEyaZ4vefmfPVp4wGYBq2kZ26EAZv3H9adqybHYdN/v NviwoTR7ZZvhYQg+ASDmrnbFR4lphEljPQ9DxnKryJbhquLLZq+H4ohSvMOD3ZOV ZKDiBPP42wNC7CSBtB6xY/vYsC7uI3Aj7LtCrjkCVKBf0FUbrQ9F29+dllVUxDqt TNGCyKGM75k3lz8T29RZ48zFt+vs3C+mMzocLTIxnEimn5tb20c7++ErYhgQBCWQ gpjFdMNta2fFI4jQibnXDpMe6uct0XpE9kGDPh1Jn37/cWXY3Z1C4rzSKZBR6bkB h6Hr/kSKerQ01jeNyoqbGkTsPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwTGjfR hwV1TBeXxL90q4LG80n+MB8GA1UdIwQYMBaAFP10ULEYFQqbIU8aC+7fPjsm/tBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDE2MC9ERDY1NzFBNjRG OTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNwc2hUeG9MN3Q4LU95Yi0w RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YUlFzUmdWQ3BzaFR4b0w3dDgtT3liLTBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDE2MC9ERDY1NzFBNjRGOTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNw c2hUeG9MN3Q4LU95Yi0wRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1n5YsO3jkQMNwrGR/QbijCQJY9djZxSe3ICh2k1QMfubReKbb5TcE JwnNwiOyeh97MRW/Ro2Zntnu/VEo1CY5mjesUyPsGkNGUAZKPV1/u1L2hEvQlSdS rdyYa96JrLhllhKZvGA+WNptfpxeXmM0N4/WLVznSy4U1943WWktUM8fQHk+bZnI oLFL/EcyKkkdZl2PDPnF524VvQgYD0cjmUOeU6zHdX53nHIAMzqjbBl8R+O0xtiE +/ftMkT1QntzJP615TUeeAJ8G659s4tjHNRJKncmDV9x5vyXnIGAAbcfHT446m5j 4ksNs7zji+aKvbDkvMAHu1hvW1P6wVXx -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:37 2025 by rpki-client