$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft File: XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json) Hash identifier: rhEz9F/fhYgt7j0fJ4dqpGXNj6j6eo21SZI/3ovhlyY= Subject key identifier: B2:6A:88:BE:34:0A:95:1C:36:97:7F:9A:F9:2B:55:D2:01:A1:D9:13 Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C Certificate issuer: /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft Manifest number: FC Signing time: Mon 03 Nov 2025 04:44:45 +0000 Manifest this update: Mon 03 Nov 2025 04:44:44 +0000 Manifest next update: Mon 10 Nov 2025 04:44:44 +0000 Files and hashes: 1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: 8rUdB4DOqu3DjYrYUBeUa6yPrpu+Y2KLKf+EedvejNU=) 2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: m0j5NYjPTDIJfmWKHuHfMjMZ9FBAfzwy/hGv/R4OYCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C Validity Not Before: Nov 3 04:44:44 2025 GMT Not After : Nov 10 04:44:44 2025 GMT Subject: CN=6908333c-68ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1a:8b:6f:90:df:50:13:67:fb:3f:19:a9:09: 1c:86:3a:c8:5b:94:4a:58:53:9e:b7:0a:72:ad:ce: 6c:1d:7f:26:49:ce:54:12:4d:70:37:2f:73:39:16: 65:95:1a:55:3b:38:7c:f3:84:e7:09:13:80:31:b7: e5:b0:89:e8:72:97:a9:c4:bc:7a:fc:03:e6:91:fc: 96:11:e4:e4:b9:a1:c9:8e:8e:f5:03:a6:21:30:6b: 61:5d:82:19:cb:9b:b0:18:b6:ae:8b:67:a6:af:4d: 07:c7:0b:e6:bc:1b:89:ce:13:9f:d0:c7:cd:b5:6a: 0f:b9:36:31:e8:3b:16:22:cd:42:dc:2f:e2:d3:4b: 7a:26:14:1f:11:c6:fd:06:35:62:da:d5:24:d9:a1: 30:cf:ca:09:85:58:1e:e6:e9:86:3e:91:25:12:81: 4e:72:22:c7:64:65:dc:81:13:2b:47:65:d8:ed:0e: 55:1e:43:46:f4:37:59:21:8a:85:2d:8b:b3:72:76: f2:0a:75:53:6d:0d:f2:11:a0:44:fb:98:49:51:77: 21:1e:46:ff:93:6b:0e:35:ae:4f:40:cb:db:b0:1d: 4f:e4:5d:f3:70:b0:b5:10:3d:7e:09:ca:9f:a7:59: b1:38:eb:ae:32:8d:b4:2f:8a:15:07:d9:48:56:c7: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6A:88:BE:34:0A:95:1C:36:97:7F:9A:F9:2B:55:D2:01:A1:D9:13 X509v3 Authority Key Identifier: keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:48:df:c2:9a:7f:b6:ea:c2:d7:42:d6:51:9a:5a:21:32:ee: 52:50:04:21:ec:65:90:6f:c7:39:8e:8d:c8:89:5b:4c:73:c9: d0:78:a9:e3:79:6c:f7:5c:c6:52:37:18:b5:6e:2c:1a:3d:f3: 29:b1:4b:ff:79:bb:53:04:fc:e6:54:85:3d:d1:01:81:bb:5d: fc:bd:6c:64:5b:27:fd:b0:ce:15:fb:6e:ed:47:b7:79:bf:ae: 66:71:c0:1d:c9:25:e7:d0:05:f0:9e:12:96:32:25:3f:1e:27: e5:0f:37:02:b6:f1:ba:44:f7:9c:06:8b:9f:7d:65:a7:4f:05: 63:7d:3a:83:84:fa:3e:2a:ac:79:7b:69:e9:39:d7:bf:bf:08: 5d:39:49:8e:18:ac:07:d3:41:cb:74:d3:5f:48:77:ab:f4:e4: 6b:78:11:b9:fb:38:e8:2f:b5:23:ee:1d:d9:53:bf:74:a0:4a: 18:5c:dd:a2:7c:9e:12:c3:03:6c:4f:5d:0f:28:e2:26:48:93: e4:50:ad:0e:b3:71:12:15:0a:de:e2:43:d8:e7:76:2c:76:00: b2:ff:6c:a5:72:5a:ca:97:25:8f:c2:8f:cb:6e:69:ec:4a:fc: 99:9b:32:20:32:fd:2e:a9:2a:ca:c3:74:9f:63:23:80:0f:af: 21:03:b7:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRkIxMTAvBgNVBAUTKDVGMDRDMDA1RjI4QzI4NTZDN0JCRjQ3NkI5MUM2MkEw MkYyRkM1MUMwHhcNMjUxMTAzMDQ0NDQ0WhcNMjUxMTEwMDQ0NDQ0WjAYMRYwFAYD VQQDEw02OTA4MzMzYy02OGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBqLb5DfUBNn+z8ZqQkchjrIW5RKWFOetwpyrc5sHX8mSc5UEk1wNy9zORZl lRpVOzh884TnCROAMbflsInocpepxLx6/APmkfyWEeTkuaHJjo71A6YhMGthXYIZ y5uwGLaui2emr00HxwvmvBuJzhOf0MfNtWoPuTYx6DsWIs1C3C/i00t6JhQfEcb9 BjVi2tUk2aEwz8oJhVge5umGPpElEoFOciLHZGXcgRMrR2XY7Q5VHkNG9DdZIYqF LYuzcnbyCnVTbQ3yEaBE+5hJUXchHkb/k2sONa5PQMvbsB1P5F3zcLC1ED1+Ccqf p1mxOOuuMo20L4oVB9lIVsexNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJqiL40 CpUcNpd/mvkrVdIBodkTMB8GA1UdIwQYMBaAFF8EwAXyjChWx7v0drkcYqAvL8Uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi9FMTcxOTM2MjNE OEQxMUVGODcwNTNCMEZDNEY5QUUwMi9Yd1RBQmZLTUtGYkh1X1IydVJ4aW9DOHZ4 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h3VEFCZktNS0ZiSHVfUjJ1Unhpb0M4dnhSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGQi9FMTcxOTM2MjNEOEQxMUVGODcwNTNCMEZDNEY5QUUwMi9Yd1RBQmZLTUtG Ykh1X1IydVJ4aW9DOHZ4UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjSN/Cmn+26sLXQtZRmlohMu5SUAQh7GWQb8c5jo3IiVtMc8nQeKnj eWz3XMZSNxi1biwaPfMpsUv/ebtTBPzmVIU90QGBu138vWxkWyf9sM4V+27tR7d5 v65mccAdySXn0AXwnhKWMiU/HiflDzcCtvG6RPecBouffWWnTwVjfTqDhPo+Kqx5 e2npOde/vwhdOUmOGKwH00HLdNNfSHer9ORreBG5+zjoL7Uj7h3ZU790oEoYXN2i fJ4SwwNsT10PKOImSJPkUK0Os3ESFQre4kPY53YsdgCy/2ylclrKlyWPwo/Lbmns SvyZmzIgMv0uqSrKw3SfYyOAD68hA7dj -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:56 2025 by rpki-client