$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft File: xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json) Hash identifier: 9GXqD8kyObp5b1WswYIL+hQzw+uql4E9w+wl8fEYYh0= Subject key identifier: 2D:EC:9F:D7:7D:FD:C1:02:4D:80:AD:4B:5B:BE:2F:3B:C5:35:0E:4B Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft Manifest number: 01F4 Signing time: Wed 05 Nov 2025 02:54:46 +0000 Manifest this update: Wed 05 Nov 2025 02:54:45 +0000 Manifest next update: Wed 12 Nov 2025 02:54:45 +0000 Files and hashes: 1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: OLovDKM7N/+fU7iOAjO9rG+ID0L3qHJ0hzihNuJ+IqY=) 2: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: NHs0+oLxPl8uuJffLMiSnsDVJyHvtsfXj9mt3FT2mqU=) 3: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: TUo7uv4rXTA0iRyimVV1a57fjFNt5Gy9xOb0XovcHoI=) 4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: AeF6+orX99LwnbHGZiB851tFWKGqrAIMqoROhOgxFpw=) 5: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: 7c9RXUhll7RjmfKdCACTxBkSEfUtF0muR2dkJbiSbMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Validity Not Before: Nov 5 02:54:45 2025 GMT Not After : Nov 12 02:54:45 2025 GMT Subject: CN=690abc75-98bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:d5:55:30:e9:5c:71:1d:4e:09:9e:cf:00: d7:cf:d9:ce:db:5a:f3:fb:51:5c:84:d0:ff:4a:db: f2:ae:3f:5e:ad:7a:c7:cd:c2:90:e5:f5:2c:89:e7: a2:58:1b:b7:a3:f5:7e:ac:f4:d0:07:8c:ee:2f:32: 61:5f:ab:de:e8:ea:26:c9:2a:35:df:61:55:9f:4c: 6b:a3:ee:fb:5b:f8:85:f0:2e:f5:ac:a8:a6:2b:a0: 38:18:e7:b4:93:c2:8d:53:3b:7b:e3:6d:b2:70:a7: a7:e1:74:18:b6:0c:ef:48:4a:70:78:1a:53:63:ef: 96:13:78:a9:c3:1c:35:bd:ab:c0:36:d8:13:fc:03: 82:1f:30:36:62:50:0f:ac:1b:1b:65:62:28:eb:5b: 1c:9e:a3:9c:64:c6:dc:de:58:32:6f:23:ba:34:04: 3a:20:1c:1d:58:a7:e8:81:e7:37:93:74:0b:c5:47: d8:34:1e:21:cb:29:82:d2:70:d7:ba:da:e5:bb:b0: 43:90:fd:2e:0f:cd:df:2c:f8:5b:39:fc:1b:2b:1a: da:00:6f:55:4b:c9:3f:db:c2:65:93:6c:31:28:64: 05:a9:d9:1f:76:bf:30:37:02:8b:34:d9:89:5e:28: 82:05:e8:15:36:be:a9:2c:b0:07:18:a9:cc:83:21: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EC:9F:D7:7D:FD:C1:02:4D:80:AD:4B:5B:BE:2F:3B:C5:35:0E:4B X509v3 Authority Key Identifier: keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:00:d1:07:67:60:ef:88:c9:40:be:1e:7a:f3:56:43:be:eb: f6:48:1c:34:fe:ed:16:9f:d5:2c:c0:1e:ad:a9:ae:21:59:cf: 59:f9:40:58:f5:9a:d3:a8:5a:83:97:59:0a:d3:2d:a9:33:ba: ea:c7:5c:c0:0b:31:9c:3e:2b:25:ef:26:a3:ef:50:ff:b7:1d: 28:b4:4c:40:18:14:41:e3:b9:6e:46:7a:cc:93:d9:92:9d:a7: dc:1e:22:c0:e6:8c:9e:0d:a0:df:49:3a:a5:45:d5:90:54:c8: 0b:eb:cb:00:17:6c:d6:a5:49:e7:34:e6:48:e1:03:4d:b2:89: b5:b8:96:10:46:62:92:3a:cc:17:4e:47:e1:ed:a9:3e:53:5f: 07:47:3f:fa:6e:d8:14:64:bb:9b:02:5f:cd:bc:dc:8c:2e:7d: ab:2d:8f:47:7b:8b:2a:c0:04:b0:72:94:76:92:eb:32:ed:65: ab:bc:ae:59:0d:b2:59:d8:6d:8f:d0:77:44:dd:b3:5b:59:0e: 10:d4:6c:0f:5e:3b:b7:78:c5:01:9e:61:95:86:d2:41:0b:72: aa:cd:71:40:1b:f8:ec:2d:3b:d2:fd:92:c4:95:d9:08:49:7f: ca:70:06:f5:1f:61:36:f6:55:9f:bb:c5:d5:c0:94:90:28:b2: ed:15:98:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKEM2MjE4NDgxNTFGNzk3QkY3MjMxMDdGMTRENjJDNjdB MjEzQTUzRTMwHhcNMjUxMTA1MDI1NDQ1WhcNMjUxMTEyMDI1NDQ1WjAYMRYwFAYD VQQDEw02OTBhYmM3NS05OGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCfVVTDpXHEdTgmezwDXz9nO21rz+1FchND/Stvyrj9erXrHzcKQ5fUsieei WBu3o/V+rPTQB4zuLzJhX6ve6OomySo132FVn0xro+77W/iF8C71rKimK6A4GOe0 k8KNUzt7422ycKen4XQYtgzvSEpweBpTY++WE3ipwxw1vavANtgT/AOCHzA2YlAP rBsbZWIo61scnqOcZMbc3lgybyO6NAQ6IBwdWKfogec3k3QLxUfYNB4hyymC0nDX utrlu7BDkP0uD83fLPhbOfwbKxraAG9VS8k/28Jlk2wxKGQFqdkfdr8wNwKLNNmJ XiiCBegVNr6pLLAHGKnMgyGe8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3sn9d9 /cECTYCtS1u+LzvFNQ5LMB8GA1UdIwQYMBaAFMYhhIFR95e/cjEH8U1ixnohOlPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC81ODk4MjBDMkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3OXlNUWZ4VFdMR2VpRTZV LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hpR0VnVkgzbDc5eU1RZnhUV0xHZWlFNlUtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJDOC81ODk4MjBDMkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3 OXlNUWZ4VFdMR2VpRTZVLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiANEHZ2DviMlAvh5681ZDvuv2SBw0/u0Wn9UswB6tqa4hWc9Z+UBY 9ZrTqFqDl1kK0y2pM7rqx1zACzGcPisl7yaj71D/tx0otExAGBRB47luRnrMk9mS nafcHiLA5oyeDaDfSTqlRdWQVMgL68sAF2zWpUnnNOZI4QNNsom1uJYQRmKSOswX Tkfh7ak+U18HRz/6btgUZLubAl/NvNyMLn2rLY9He4sqwASwcpR2kusy7WWrvK5Z DbJZ2G2P0HdE3bNbWQ4Q1GwPXju3eMUBnmGVhtJBC3KqzXFAG/jsLTvS/ZLEldkI SX/KcAb1H2E29lWfu8XVwJSQKLLtFZgv -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:31 2025 by rpki-client