$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json) Hash identifier: DvACYD4TmcKbWN2h5coUnxm/MQrgUMMAYx6xaUW+XPM= Subject key identifier: D4:DF:47:4E:F1:07:BC:6C:67:4F:89:C6:C4:5B:9C:67:F6:2D:2A:C5 Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Certificate serial: 1304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft Manifest number: 1302 Signing time: Tue 04 Nov 2025 17:07:10 +0000 Manifest this update: Tue 04 Nov 2025 17:07:10 +0000 Manifest next update: Tue 11 Nov 2025 17:07:10 +0000 Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: YMevOJHwuAAafdkPecHE+WTyPFGtJvG3XRnYxHwr3Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4868 (0x1304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Validity Not Before: Nov 4 17:07:10 2025 GMT Not After : Nov 11 17:07:10 2025 GMT Subject: CN=690a32be-fa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:cc:bf:e6:24:6f:69:0d:59:de:17:85:18: f3:cc:64:f2:ab:33:11:8d:df:28:f8:36:52:ca:94: f9:f7:bd:54:dc:39:01:81:5a:8e:36:62:a8:62:44: 5c:37:47:54:2f:8a:b2:71:13:55:ec:9c:e9:25:fb: 5c:9b:1d:3d:0b:f5:f7:06:fd:df:7c:28:21:5e:5f: ef:fa:53:aa:df:01:13:35:aa:b4:77:a9:d2:6f:9f: 6d:53:f8:1f:a5:18:9c:52:5a:e3:bc:3f:17:a7:9f: 59:c8:be:c4:eb:af:40:c6:33:5a:e4:09:66:43:92: 6a:61:d2:e5:c8:a3:d1:d5:20:d7:8d:58:42:03:25: 27:29:c1:5e:ec:67:27:68:af:ca:83:96:8d:f5:00: b7:4b:fd:ed:52:c1:70:8f:9f:c1:4d:a7:0f:d6:b9: 28:16:31:ff:8c:74:2b:0f:28:ae:1f:c2:f8:90:71: ed:32:ba:7c:64:f8:89:b1:5f:7e:d7:e3:ae:af:7a: 33:bf:8a:f0:71:c8:c2:86:7d:ac:67:1c:ed:26:e0: 38:06:34:e2:53:1e:e6:5f:b0:ae:50:10:8e:02:3d: ab:45:98:60:7e:ba:2b:71:7f:59:87:f2:e4:93:dd: 3e:80:bb:43:f3:a4:fb:bd:eb:36:14:90:92:b2:6a: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DF:47:4E:F1:07:BC:6C:67:4F:89:C6:C4:5B:9C:67:F6:2D:2A:C5 X509v3 Authority Key Identifier: keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:74:9e:e5:8d:35:bd:18:e4:36:f6:77:58:d0:45:97:37:2c: a1:a3:d9:d1:1d:6d:e7:e0:63:7b:a1:59:67:66:9a:6d:b1:c0: bf:a8:e5:97:b4:65:d1:b8:de:bb:7f:ad:8d:89:0c:1b:a7:03: 84:5b:87:8d:44:87:d3:69:c3:ad:9a:db:ca:02:e8:20:b1:b4: b0:8a:11:aa:d1:b1:69:88:13:35:d6:f0:36:98:a8:f0:d2:ca: f3:b3:67:89:fb:3b:1d:d4:b4:6f:31:2a:48:10:31:00:33:f5: d9:7e:fc:78:89:4d:a2:17:0f:83:e1:c4:18:0e:31:5e:6b:06: 19:c7:4d:f5:74:b5:19:cb:8d:f0:52:ef:ad:64:5d:ae:22:79: 18:5c:a1:c2:96:cf:18:ef:9a:8c:8c:bf:d0:ca:6e:58:89:02: aa:e5:c2:c0:aa:fa:3b:c6:ef:ae:91:96:4f:96:ef:8b:5f:bf: 3a:00:62:50:bc:21:57:4e:cd:b2:fc:6c:3b:e0:1d:9c:18:d5: e7:d2:43:bb:e2:3b:79:34:32:18:7f:c7:aa:91:8f:90:d2:f7: 73:68:19:63:d9:30:8a:31:32:93:7c:fa:d5:86:19:ae:bc:18: f6:06:5e:5c:85:6d:6a:a0:b4:c0:92:08:56:4d:cf:54:70:92: 36:ef:76:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy RjdDREZBRUQwHhcNMjUxMTA0MTcwNzEwWhcNMjUxMTExMTcwNzEwWjAYMRYwFAYD VQQDEw02OTBhMzJiZS1mYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25nMv+Ykb2kNWd4XhRjzzGTyqzMRjd8o+DZSypT5971U3DkBgVqONmKoYkRc N0dUL4qycRNV7JzpJftcmx09C/X3Bv3ffCghXl/v+lOq3wETNaq0d6nSb59tU/gf pRicUlrjvD8Xp59ZyL7E669AxjNa5AlmQ5JqYdLlyKPR1SDXjVhCAyUnKcFe7Gcn aK/Kg5aN9QC3S/3tUsFwj5/BTacP1rkoFjH/jHQrDyiuH8L4kHHtMrp8ZPiJsV9+ 1+Our3ozv4rwccjChn2sZxztJuA4BjTiUx7mX7CuUBCOAj2rRZhgfrorcX9Zh/Lk k90+gLtD86T7ves2FJCSsmolrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTfR07x B7xsZ0+JxsRbnGf2LSrFMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly RG5PUXN3endwV0l2Zk4tdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNdJ7ljTW9GOQ29ndY0EWXNyyho9nRHW3n4GN7oVlnZpptscC/qOWX tGXRuN67f62NiQwbpwOEW4eNRIfTacOtmtvKAuggsbSwihGq0bFpiBM11vA2mKjw 0srzs2eJ+zsd1LRvMSpIEDEAM/XZfvx4iU2iFw+D4cQYDjFeawYZx031dLUZy43w Uu+tZF2uInkYXKHCls8Y75qMjL/Qym5YiQKq5cLAqvo7xu+ukZZPlu+LX786AGJQ vCFXTs2y/Gw74B2cGNXn0kO74jt5NDIYf8eqkY+Q0vdzaBlj2TCKMTKTfPrVhhmu vBj2Bl5chW1qoLTAkghWTc9UcJI273bO -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:36 2025 by rpki-client