$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: J5PIUmfEP0sTSNMhCnIG+zNlwzVp9sLvbYBU/JDnrcY= Subject key identifier: 39:90:06:31:7D:26:B7:CC:DE:23:18:6E:38:45:AC:F7:D1:7A:F9:2D Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0C8A Signing time: Sun 02 Nov 2025 18:22:40 +0000 Manifest this update: Sun 02 Nov 2025 18:22:39 +0000 Manifest next update: Sun 09 Nov 2025 18:22:39 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: Ic8BcAhSICv32xxR7ZEXVfjmJ2rF0AkijgdHMRrzJxg=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Nov 2 18:22:39 2025 GMT Not After : Nov 9 18:22:39 2025 GMT Subject: CN=6907a16f-db21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:bc:16:17:ac:7d:78:78:6d:7e:26:a6:e0: 48:09:f9:b0:8a:b8:5d:1a:2e:45:39:ac:80:85:22: 6d:c4:52:1d:aa:20:d3:3b:de:bf:2a:17:b7:e5:f3: ed:e3:4e:a1:87:aa:9c:6b:91:ba:bf:88:93:a0:95: 68:7a:1b:ca:f9:5c:c6:51:64:f0:54:dd:a1:a6:eb: 9c:6c:8e:fc:e5:03:dc:1a:2e:c4:13:9f:4e:8d:2c: d6:be:27:0d:b9:1c:cf:2c:1b:ef:c5:c9:cf:fa:aa: 61:d6:2b:b9:96:7b:af:35:82:c3:54:ad:72:5d:65: 86:7a:50:86:22:ac:f1:fd:8b:61:93:b5:18:ac:6c: e7:e9:46:0f:2f:d3:5c:22:84:a5:61:da:47:ce:e1: d5:8f:89:b5:f3:8b:56:1e:0b:49:a3:ee:04:7e:fd: 58:de:12:d6:65:d5:9c:18:ab:fd:05:f1:98:74:ea: 2d:55:8c:ef:47:e9:6d:3a:68:19:19:3c:86:0b:2c: b5:91:13:ab:25:5c:88:b6:25:b5:ad:3b:6f:3a:43: b8:6a:e8:ff:71:f5:29:ff:9f:b1:37:90:b6:16:00: 3c:c1:29:8a:ff:dd:87:93:97:4b:3b:51:5a:7a:3a: 62:fe:78:ee:a8:4e:21:cf:1d:7f:6e:ee:ca:1e:af: 7b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:90:06:31:7D:26:B7:CC:DE:23:18:6E:38:45:AC:F7:D1:7A:F9:2D X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a6:32:82:18:28:20:80:24:c1:86:7d:ce:2e:62:c7:fc:3b: 3b:33:d5:6a:6f:0b:bb:f0:52:70:ac:ef:aa:b9:85:aa:c4:58: 97:e5:75:ec:79:34:0f:49:28:ae:3b:21:31:77:8b:a4:7a:28: c7:d8:d1:11:ee:4a:0e:13:85:2e:c5:f1:2c:af:0c:be:19:03: c5:62:13:70:40:b6:e6:08:32:f7:32:58:9a:5e:0f:bd:3d:06: f8:36:a8:dc:4d:11:d2:41:3f:5b:5f:a1:98:9b:52:c6:66:b8: 98:f9:8e:c2:c0:95:f5:3d:cb:9c:7a:7f:8d:84:ed:5b:0b:80: 41:20:13:0d:71:d7:af:84:fa:13:8c:4d:ad:fe:4d:b3:0e:dd: 6e:e7:be:11:13:06:62:4d:dd:ab:b0:81:f9:f4:ea:6b:56:73: 7a:5b:78:a1:6b:c5:17:5b:aa:43:b0:d9:31:97:89:61:43:d8: af:fb:18:38:1e:79:bc:42:ff:01:03:22:6a:1f:b8:a8:a7:8f: 18:6b:6b:63:6c:6f:b0:89:d4:e6:be:f2:da:53:e1:22:cb:bf: a7:23:53:68:f2:e8:b1:83:4c:6f:3b:1c:38:bd:fb:a9:53:ce: 32:04:44:40:74:07:fe:31:d9:d5:40:13:ce:0f:a9:d1:78:44: f5:03:a9:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUxMTAyMTgyMjM5WhcNMjUxMTA5MTgyMjM5WjAYMRYwFAYD VQQDEw02OTA3YTE2Zi1kYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lq8FhesfXh4bX4mpuBICfmwirhdGi5FOayAhSJtxFIdqiDTO96/Khe35fPt 406hh6qca5G6v4iToJVoehvK+VzGUWTwVN2hpuucbI785QPcGi7EE59OjSzWvicN uRzPLBvvxcnP+qph1iu5lnuvNYLDVK1yXWWGelCGIqzx/Ythk7UYrGzn6UYPL9Nc IoSlYdpHzuHVj4m184tWHgtJo+4Efv1Y3hLWZdWcGKv9BfGYdOotVYzvR+ltOmgZ GTyGCyy1kROrJVyItiW1rTtvOkO4auj/cfUp/5+xN5C2FgA8wSmK/92Hk5dLO1Fa ejpi/njuqE4hzx1/bu7KHq97rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmQBjF9 JrfM3iMYbjhFrPfRevktMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3pjKCGCgggCTBhn3OLmLH/Ds7M9Vqbwu78FJwrO+quYWqxFiX5XXs eTQPSSiuOyExd4ukeijH2NER7koOE4UuxfEsrwy+GQPFYhNwQLbmCDL3MliaXg+9 PQb4NqjcTRHSQT9bX6GYm1LGZriY+Y7CwJX1Pcucen+NhO1bC4BBIBMNcdevhPoT jE2t/k2zDt1u574REwZiTd2rsIH59OprVnN6W3iha8UXW6pDsNkxl4lhQ9iv+xg4 Hnm8Qv8BAyJqH7iop48Ya2tjbG+widTmvvLaU+Eiy7+nI1No8uixg0xvOxw4vfup U84yBERAdAf+MdnVQBPOD6nReET1A6ny -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:40 2025 by rpki-client