$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft File: XoJBeVOzWp-LWaQuyUb00CTYd2s.mft (raw, json) Hash identifier: pmU9DZoGJsTmvaivaqn5bzn0kLtjSljHZ2ZHe8YCBcg= Subject key identifier: 66:36:CF:72:D8:3F:F6:B0:69:89:AD:28:8F:5D:45:9C:92:4A:D4:C7 Authority key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B Certificate issuer: /CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft Manifest number: 0692 Signing time: Sun 02 Nov 2025 22:21:13 +0000 Manifest this update: Sun 02 Nov 2025 22:21:12 +0000 Manifest next update: Sun 09 Nov 2025 22:21:12 +0000 Files and hashes: 1: XoJBeVOzWp-LWaQuyUb00CTYd2s.crl (hash: qk3U5E1q3e/fbkIGCNfGk869qrv+2EzQBhLrPmcJVtw=) 2: 9378220A8DF211EBADEDD212C4F9AE02.roa (hash: VBf2KoYNobofH3/9baJ/IEUrVzYCh2sv0jk4TufySgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2F1, serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Validity Not Before: Nov 2 22:21:12 2025 GMT Not After : Nov 9 22:21:12 2025 GMT Subject: CN=6907d959-22c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:55:b1:89:7f:d9:56:3d:8a:60:d7:b2:30: 66:ea:55:aa:79:87:4b:f2:3a:5c:02:0c:06:13:55: 70:31:30:4e:f8:f4:bb:c0:43:16:45:b7:fa:c6:0a: 0b:d4:28:25:bb:55:5b:b4:79:51:3f:ba:e0:ef:ed: 5e:20:08:36:11:03:0c:07:7e:7f:35:64:71:69:14: 55:0f:75:da:5c:85:71:e6:6a:ef:3c:06:e2:1b:45: b0:dd:53:19:30:26:37:74:45:93:13:bc:39:ca:1f: 19:dd:02:d9:a9:43:a4:22:0a:3c:c3:ba:97:f7:53: b8:d1:d5:84:5f:b3:93:bd:59:1d:75:b7:ad:f6:e8: 01:f1:5a:cc:ea:13:7f:ce:64:2a:d7:91:71:94:f0: ad:bb:bd:b1:82:e9:64:d4:35:99:03:48:2c:8a:c0: 5b:dc:c3:ee:8b:0d:7f:80:b9:50:51:f1:91:83:23: 77:96:31:08:3c:93:ef:ce:95:b2:c0:8c:25:c8:ce: 23:1e:f8:83:ae:47:60:94:54:6e:16:6a:68:e8:f8: 39:4f:b7:3e:31:d4:e7:dc:f2:97:91:0c:fe:2d:ee: 56:e3:fa:d4:5f:98:da:74:44:f0:1c:4b:10:01:92: f8:37:aa:fa:81:3d:ab:10:54:01:bf:46:22:97:03: a4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:36:CF:72:D8:3F:F6:B0:69:89:AD:28:8F:5D:45:9C:92:4A:D4:C7 X509v3 Authority Key Identifier: keyid:5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:89:e7:ab:32:93:10:1f:86:3f:1e:7f:d2:40:64:5e:30:dc: 12:c3:70:61:81:f0:27:23:93:c1:47:e8:65:fd:bd:fd:46:68: ea:6b:28:e1:dc:43:18:a6:0a:9a:21:da:4b:be:f5:8a:a3:5b: b1:00:2f:71:50:c2:3e:f1:38:f3:ad:bd:22:e5:6a:a6:6c:9d: c9:8e:45:d0:81:e9:9f:12:41:84:79:ce:60:d7:2e:fc:c3:8d: d5:f9:9c:c9:f9:81:0a:0a:43:f0:dd:e0:e1:30:a4:f7:b1:1b: dd:44:88:00:31:19:83:d3:71:5d:82:89:7c:f1:28:7f:7f:dd: 55:b7:fa:45:51:6b:06:32:9d:52:b9:b8:f7:23:b5:44:91:92: c2:b2:9d:77:c6:81:ce:e6:06:10:2d:a6:bc:0a:1c:ba:a1:0e: 44:c4:df:91:61:08:7a:1b:fd:f2:b0:93:2f:83:9d:63:d9:cf: 38:a7:dd:2a:3b:96:7a:47:e5:74:34:a2:e0:18:fe:95:fb:27: 54:98:6a:e2:0a:af:e4:f1:b1:8a:41:10:21:1e:b6:9c:a4:e7: 0b:ff:f1:31:25:72:f9:f8:b7:6f:e6:53:2b:c1:a9:6d:75:e4: aa:83:10:c8:15:38:fe:2e:00:40:c8:d9:09:11:b8:ed:bd:1d: 84:85:3e:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRjExMTAvBgNVBAUTKDVFODI0MTc5NTNCMzVBOUY4QjU5QTQyRUM5NDZGNEQw MjREODc3NkIwHhcNMjUxMTAyMjIyMTEyWhcNMjUxMTA5MjIyMTEyWjAYMRYwFAYD VQQDEw02OTA3ZDk1OS0yMmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbdVsYl/2VY9imDXsjBm6lWqeYdL8jpcAgwGE1VwMTBO+PS7wEMWRbf6xgoL 1Cglu1VbtHlRP7rg7+1eIAg2EQMMB35/NWRxaRRVD3XaXIVx5mrvPAbiG0Ww3VMZ MCY3dEWTE7w5yh8Z3QLZqUOkIgo8w7qX91O40dWEX7OTvVkddbet9ugB8VrM6hN/ zmQq15FxlPCtu72xgulk1DWZA0gsisBb3MPuiw1/gLlQUfGRgyN3ljEIPJPvzpWy wIwlyM4jHviDrkdglFRuFmpo6Pg5T7c+MdTn3PKXkQz+Le5W4/rUX5jadETwHEsQ AZL4N6r6gT2rEFQBv0YilwOkcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGY2z3LY P/awaYmtKI9dRZySStTHMB8GA1UdIwQYMBaAFF6CQXlTs1qfi1mkLslG9NAk2Hdr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJGMS8yNjAwN0ZCNjhE RjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldwLUxXYVF1eVViMDBDVFlk MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvSkJlVk96V3AtTFdhUXV5VWIwMENUWWQycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjJGMS8yNjAwN0ZCNjhERjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldw LUxXYVF1eVViMDBDVFlkMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGieerMpMQH4Y/Hn/SQGReMNwSw3BhgfAnI5PBR+hl/b39Rmjqayjh 3EMYpgqaIdpLvvWKo1uxAC9xUMI+8Tjzrb0i5WqmbJ3JjkXQgemfEkGEec5g1y78 w43V+ZzJ+YEKCkPw3eDhMKT3sRvdRIgAMRmD03Fdgol88Sh/f91Vt/pFUWsGMp1S ubj3I7VEkZLCsp13xoHO5gYQLaa8Chy6oQ5ExN+RYQh6G/3ysJMvg51j2c84p90q O5Z6R+V0NKLgGP6V+ydUmGriCq/k8bGKQRAhHracpOcL//ExJXL5+Ldv5lMrwalt deSqgxDIFTj+LgBAyNkJEbjtvR2EhT44 -----END CERTIFICATE-----Generated at Tue Nov 4 19:08:54 2025 by rpki-client