$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: m7BwRIBbxjG5ZbkzaKBgTF0N9NgrL8B7XKEjHC4GX1Y= Subject key identifier: BE:9C:F0:4E:97:D9:29:8A:1A:DD:91:7F:17:EE:61:75:E3:22:09:D3 Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 34D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 34D6 Signing time: Tue 04 Nov 2025 15:15:03 +0000 Manifest this update: Tue 04 Nov 2025 15:15:02 +0000 Manifest next update: Tue 11 Nov 2025 15:15:02 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: 7dLqhVFBfqChMNToO1B3z9tfMwYQB7gtHciZ20mH06k=) 2: 504CB1588D3911F093856C71C4F9AE02.roa (hash: Q9ud5C2PueaEyRNijwK1h4U4bisaCbUXdttrkniJbss=) 3: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: owjQd/y0K+1QjQbktYj1tVC3ALtGMr1qBu3Du7tFJyA=) 4: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: J503cZhaiiJSxMHav6qZ788g7bhn3L0xd5BjwqEz4mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13529 (0x34d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Nov 4 15:15:02 2025 GMT Not After : Nov 11 15:15:02 2025 GMT Subject: CN=690a1877-bf4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:2f:3a:07:33:9f:b3:4b:46:a5:ca:04:d3: f2:46:c3:5d:8d:09:d0:d2:07:19:f9:0a:df:0f:0d: dd:2a:0d:4f:b7:20:07:0e:48:dc:ef:b9:aa:fa:26: 43:15:75:d4:7d:67:74:5b:3a:31:f5:e4:d5:41:ce: da:db:f7:94:b2:dc:04:6a:a8:8d:f6:73:a6:a8:46: 9f:3a:4a:95:2b:86:66:d1:c0:98:6f:7e:1c:4e:64: 58:d0:cc:dc:1c:c9:be:03:d1:41:69:70:35:f0:fa: bd:74:90:dc:d4:03:c3:b2:52:3f:3c:78:ab:f6:d4: fd:a4:b7:e0:f3:1c:61:3f:83:e1:32:1c:6b:8f:0d: 0a:bd:0e:7c:25:94:4e:a9:95:4b:d1:58:a3:c8:a7: 47:20:de:0f:18:93:ef:f0:e6:c7:63:af:2a:fb:4f: ac:d7:7d:5b:0d:b7:5b:2b:a9:e2:1d:2f:53:d0:fe: 5a:bd:ff:23:31:ae:23:fa:9d:b3:22:e4:cd:2c:16: 1d:fb:18:d8:e5:c3:4e:e6:6f:60:c3:38:ec:4b:3c: d6:20:b6:78:61:ec:a8:0a:f5:ad:b2:9b:37:ed:90: b8:24:2e:ca:d3:e2:36:f4:49:d6:2e:73:d4:a9:72: 52:bd:ad:08:d3:4e:85:25:85:e1:48:48:51:58:60: d1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9C:F0:4E:97:D9:29:8A:1A:DD:91:7F:17:EE:61:75:E3:22:09:D3 X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:5d:5c:33:ef:89:c5:80:36:ae:6f:05:26:a9:c7:62:16:0b: 1d:f6:93:a8:80:21:4b:c0:2d:33:92:14:bf:2d:71:4e:b3:65: 33:48:b8:66:1b:18:00:c0:f8:9e:c0:3a:c9:22:34:21:d7:39: f7:49:54:c7:d4:a4:e0:60:a3:c4:d7:f5:fc:e2:ce:f9:10:b8: e6:c2:90:cd:06:e8:ce:aa:a1:e2:cf:bc:3b:38:7b:86:61:cb: c0:2e:3f:2b:43:02:44:78:7b:71:29:ed:0e:51:14:d5:46:6e: 64:a7:66:d8:ff:df:02:d0:75:ae:46:8f:59:c9:c8:c8:98:18: 40:83:79:5b:2c:ae:17:7b:db:c5:b9:e4:4f:76:17:e0:73:f5: b9:19:80:1f:b6:e2:4c:29:2a:6e:e6:69:27:c7:33:2e:fa:b9: 18:76:7d:b0:68:7d:03:54:75:54:29:1e:97:fd:2d:7b:91:69: cf:c6:c2:d6:76:6f:1c:72:70:23:e6:9f:01:57:f5:b8:7d:29: ff:61:75:4c:7f:54:0d:1b:04:74:09:c3:09:d2:4c:47:5d:82: a3:5c:4f:29:a3:25:5e:d9:14:56:c5:76:1d:81:9a:f1:a6:99: 95:ef:f5:ed:9c:28:96:2e:c7:0b:64:30:da:ac:23:cf:88:3d: 59:80:88:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjUxMTA0MTUxNTAyWhcNMjUxMTExMTUxNTAyWjAYMRYwFAYD VQQDEw02OTBhMTg3Ny1iZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFsvOgczn7NLRqXKBNPyRsNdjQnQ0gcZ+QrfDw3dKg1PtyAHDkjc77mq+iZD FXXUfWd0Wzox9eTVQc7a2/eUstwEaqiN9nOmqEafOkqVK4Zm0cCYb34cTmRY0Mzc HMm+A9FBaXA18Pq9dJDc1APDslI/PHir9tT9pLfg8xxhP4PhMhxrjw0KvQ58JZRO qZVL0VijyKdHIN4PGJPv8ObHY68q+0+s131bDbdbK6niHS9T0P5avf8jMa4j+p2z IuTNLBYd+xjY5cNO5m9gwzjsSzzWILZ4YeyoCvWtsps37ZC4JC7K0+I29EnWLnPU qXJSva0I006FJYXhSEhRWGDR5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6c8E6X 2SmKGt2RfxfuYXXjIgnTMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8XVwz74nFgDaubwUmqcdiFgsd9pOogCFLwC0zkhS/LXFOs2UzSLhm GxgAwPiewDrJIjQh1zn3SVTH1KTgYKPE1/X84s75ELjmwpDNBujOqqHiz7w7OHuG YcvALj8rQwJEeHtxKe0OURTVRm5kp2bY/98C0HWuRo9ZycjImBhAg3lbLK4Xe9vF ueRPdhfgc/W5GYAftuJMKSpu5mknxzMu+rkYdn2waH0DVHVUKR6X/S17kWnPxsLW dm8ccnAj5p8BV/W4fSn/YXVMf1QNGwR0CcMJ0kxHXYKjXE8poyVe2RRWxXYdgZrx ppmV7/XtnCiWLscLZDDarCPPiD1ZgIip -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:24 2025 by rpki-client