$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft File: xoquBsigaPIiEjEzLc1N8a8vB5Q.mft (raw, json) Hash identifier: xIlmQpqgN63FJENjAkyNd5bdJdodkcvggPxzF/LPKWI= Subject key identifier: 18:91:4F:B4:B4:E8:9B:88:B7:53:1B:A2:57:48:43:9C:09:44:36:4F Authority key identifier: C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94 Certificate issuer: /CN=A915CC16/serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft Manifest number: 0855 Signing time: Tue 04 Nov 2025 20:53:29 +0000 Manifest this update: Tue 04 Nov 2025 20:53:29 +0000 Manifest next update: Tue 11 Nov 2025 20:53:29 +0000 Files and hashes: 1: xoquBsigaPIiEjEzLc1N8a8vB5Q.crl (hash: gHjP57BXzr/yTSZmYPJx4i3FU8ojoLpVUfjRo7WLIo0=) 2: 38A2CBB88DEE11F0B9918D1FC4F9AE02.roa (hash: z3byFN5IfEv+WZ84P4Hf1mQWrRSXQ5bot07gaZA1QjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CC16, serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794 Validity Not Before: Nov 4 20:53:29 2025 GMT Not After : Nov 11 20:53:29 2025 GMT Subject: CN=690a67c9-9fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:cc:2d:b2:0e:16:9a:a8:fa:b9:1e:96:73: 0a:1f:a8:f8:4c:1b:47:4d:6c:a9:b5:ee:ea:d6:2d: c5:b4:42:07:22:c7:fe:52:1e:55:e0:d9:84:6e:23: 2d:c4:29:16:6b:71:48:46:b1:ac:7b:bf:90:a6:3b: 38:8b:f5:63:c6:2d:71:c6:30:02:03:83:c9:51:ad: f2:a3:39:1c:52:1f:7c:b1:8a:e8:ca:b6:2c:9b:00: fe:ce:53:8a:c8:59:b1:b2:dd:0e:85:f6:aa:50:4e: 73:de:aa:d0:30:0b:02:a5:be:8b:bd:00:27:5f:31: b6:a1:fa:56:4a:b8:7e:4b:fe:26:bd:e2:86:a5:0a: ba:3b:d7:f5:38:c8:53:4a:56:4f:31:4b:05:a7:96: 9d:33:fd:77:80:0c:f5:f5:8c:8a:6c:0d:11:de:29: 21:38:85:f9:6d:54:43:76:b5:63:c0:24:90:d8:86: 68:28:92:0c:5e:3b:29:2d:4f:2a:b7:ff:13:46:ea: f1:cf:d7:13:c0:02:28:a2:5b:96:b7:63:13:0a:da: 29:f1:a8:d4:af:e9:35:ec:44:db:9c:7b:23:40:c7: 52:f8:57:95:ae:b5:05:06:aa:13:de:43:d4:02:ba: 67:f5:8c:86:75:65:1d:ca:6a:2f:59:90:f8:26:ce: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:4F:B4:B4:E8:9B:88:B7:53:1B:A2:57:48:43:9C:09:44:36:4F X509v3 Authority Key Identifier: keyid:C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:98:d9:fa:60:50:14:82:57:70:07:ab:c1:53:bd:cc:80:2f: a9:e3:6a:fe:a8:fd:6a:16:8e:6c:dc:2c:34:68:22:43:d8:74: 38:ad:cb:db:8e:0b:7f:e9:ca:60:ea:50:a3:92:cf:de:6f:a7: a6:48:46:97:db:15:cd:7a:54:04:d5:df:10:e4:8d:b5:06:64: 3d:1d:5d:f9:06:aa:63:f0:ca:b4:22:31:5c:bb:ab:76:af:78: a6:75:89:8a:64:43:4b:ae:30:c0:10:05:f9:db:00:4a:0d:ce: 3a:91:13:54:76:d2:82:a3:02:36:4b:bb:70:5f:de:a5:0b:87: 99:bf:e2:2d:c9:9d:96:e1:63:1e:d1:cd:9f:dd:e0:67:c1:39: 6c:e9:a6:8c:75:a1:2b:7d:76:e9:d8:db:f3:48:29:e9:d5:59: d1:b4:77:b1:e0:d8:7d:d0:98:08:a4:ef:2e:a6:e5:65:ab:5f: 19:e2:fa:7b:20:da:31:c1:d1:c8:d1:0e:ab:65:e8:08:cd:32: 8f:a5:fc:10:aa:da:e5:ef:91:fd:99:95:00:dc:a9:82:3a:0e: f4:45:ae:ea:1b:5b:8d:67:48:6a:db:a5:fa:b5:57:53:d8:84: 5d:2b:4a:b9:2e:67:ef:4c:f6:1c:db:b0:ae:06:6b:51:97:7d: 9a:7d:c2:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0MxNjExMC8GA1UEBRMoQzY4QUFFMDZDOEEwNjhGMjIyMTIzMTMzMkRDRDRERjFB RjJGMDc5NDAeFw0yNTExMDQyMDUzMjlaFw0yNTExMTEyMDUzMjlaMBgxFjAUBgNV BAMTDTY5MGE2N2M5LTlmYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFqswtsg4Wmqj6uR6WcwofqPhMG0dNbKm17urWLcW0Qgcix/5SHlXg2YRuIy3E KRZrcUhGsax7v5CmOziL9WPGLXHGMAIDg8lRrfKjORxSH3yxiujKtiybAP7OU4rI WbGy3Q6F9qpQTnPeqtAwCwKlvou9ACdfMbah+lZKuH5L/ia94oalCro71/U4yFNK Vk8xSwWnlp0z/XeADPX1jIpsDRHeKSE4hfltVEN2tWPAJJDYhmgokgxeOyktTyq3 /xNG6vHP1xPAAiiiW5a3YxMK2inxqNSv6TXsRNuceyNAx1L4V5WutQUGqhPeQ9QC umf1jIZ1ZR3Kai9ZkPgmzlK1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGJFPtLTo m4i3UxuiV0hDnAlENk8wHwYDVR0jBBgwFoAUxoquBsigaPIiEjEzLc1N8a8vB5Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDQzE2LzI0RDM5RDYyRjA4 MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJaUVqRXpMYzFOOGE4dkI1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveG9xdUJzaWdhUElpRWpFekxjMU44YTh2QjVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD QzE2LzI0RDM5RDYyRjA4MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJ aUVqRXpMYzFOOGE4dkI1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWY2fpgUBSCV3AHq8FTvcyAL6njav6o/WoWjmzcLDRoIkPYdDity9uO C3/pymDqUKOSz95vp6ZIRpfbFc16VATV3xDkjbUGZD0dXfkGqmPwyrQiMVy7q3av eKZ1iYpkQ0uuMMAQBfnbAEoNzjqRE1R20oKjAjZLu3Bf3qULh5m/4i3JnZbhYx7R zZ/d4GfBOWzppox1oSt9dunY2/NIKenVWdG0d7Hg2H3QmAik7y6m5WWrXxni+nsg 2jHB0cjRDqtl6AjNMo+l/BCq2uXvkf2ZlQDcqYI6DvRFruobW41nSGrbpfq1V1PY hF0rSrkuZ+9M9hzbsK4Ga1GXfZp9wls= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:25 2025 by rpki-client