$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: 1Qr2Fa6uXBZ/fxpvXaS4pZzzHuRbZjvc6m7/nVOzzAg= Subject key identifier: 11:BA:F6:EA:5D:13:35:EB:D4:B4:54:EA:6D:F7:E1:3F:E5:3F:04:0B Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 54 Signing time: Mon 03 Nov 2025 07:15:04 +0000 Manifest this update: Mon 03 Nov 2025 07:15:03 +0000 Manifest next update: Mon 10 Nov 2025 07:15:03 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: za0MqfNCUREubzRJxfFkgZ7btJZGMryWhNy4sJMSAKc=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: rIKd0p3e0QLGiCh3oOuC0PziP82slPgSfQtsZGWJI0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Nov 3 07:15:03 2025 GMT Not After : Nov 10 07:15:03 2025 GMT Subject: CN=69085677-a16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:6e:a7:a8:03:06:00:d2:7d:2f:ec:f8:83: ca:71:9e:83:8d:45:32:02:f6:10:e0:9a:9e:aa:84: b5:53:2c:40:1c:5f:1a:65:10:51:7c:3d:88:14:55: 62:0f:9f:d5:31:e5:6e:0e:fe:7f:fb:f7:ea:9a:81: 5c:ba:7b:89:c3:68:41:88:69:a6:54:f6:ee:60:d8: dd:a7:24:25:be:a7:3e:68:e5:93:3b:1b:fa:d4:67: 48:3c:df:62:53:20:54:22:50:9e:72:16:a5:b7:ff: a2:3e:a7:8d:31:15:75:0f:76:b9:86:2c:f3:ac:97: 8d:7b:0b:52:58:a0:ea:12:b3:62:b8:ba:04:96:bd: 92:56:ea:e6:62:44:31:ec:49:e2:c5:c7:3b:0f:35: 41:1a:60:29:d4:69:89:0a:94:e3:f4:8e:1c:de:63: 92:9d:b5:b4:4b:67:ec:5e:75:8c:7a:59:8c:cf:e8: fb:5f:2f:9d:8b:a9:87:a1:a6:be:2c:75:66:e4:00: d0:c4:31:56:df:82:95:1d:41:f5:4f:7d:f5:20:29: fd:46:38:49:83:6b:eb:4a:e1:05:ad:2d:c3:34:53: 04:88:72:15:8b:5c:83:cd:47:91:9a:bc:9c:19:01: 60:63:57:61:b8:4e:b2:59:73:f1:04:8e:b3:cd:ba: d4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BA:F6:EA:5D:13:35:EB:D4:B4:54:EA:6D:F7:E1:3F:E5:3F:04:0B X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:12:bc:e5:26:36:63:21:74:2d:0d:cc:5a:59:6a:ec:93:99: c3:d4:8d:6b:d8:5d:34:84:35:df:be:49:95:40:1b:5f:8e:91: e2:66:da:d7:8d:b4:ea:63:34:7c:5b:e5:7d:d3:49:83:ee:ff: 10:37:ca:a3:ed:fe:30:3d:b0:1c:eb:56:1b:d9:fc:d4:31:a3: a6:93:09:14:9a:86:47:0a:ae:51:98:85:0f:15:09:97:d0:30: 82:c7:c1:53:2d:ac:f6:60:03:bc:21:7f:29:da:1f:04:e1:25: a2:f9:2c:e9:3e:b6:4a:81:c1:90:07:37:f8:d4:8b:6c:e4:dc: 7f:e1:12:e0:be:25:88:9d:69:a2:46:3c:f8:5f:bd:a0:26:1e: 4f:51:0a:a9:7b:77:85:bc:f0:07:25:a3:f3:68:3c:6f:c3:fd: 90:a8:4b:2e:83:d2:25:75:b0:41:dc:52:53:d8:ce:93:7b:22: 96:48:69:05:3d:2c:34:51:6c:b6:f0:00:94:49:1b:7a:60:41: e2:c4:e0:b5:9b:ac:58:ce:75:05:eb:58:71:bb:ab:07:63:01: a6:0c:f5:ae:5a:ce:f8:92:20:ae:49:d8:82:6d:11:57:9e:80: 4f:49:ce:e2:1b:4c:0a:a3:bb:e4:68:e2:a4:cb:79:d5:87:1f: 2f:0a:6d:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoQzQyNkQ0MjY0MDA2NzY1NTU5NzNERkVERTRFQjI2NDRC RUVEMjg3MzAeFw0yNTExMDMwNzE1MDNaFw0yNTExMTAwNzE1MDNaMBgxFjAUBgNV BAMTDTY5MDg1Njc3LWExNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClUG6nqAMGANJ9L+z4g8pxnoONRTIC9hDgmp6qhLVTLEAcXxplEFF8PYgUVWIP n9Ux5W4O/n/79+qagVy6e4nDaEGIaaZU9u5g2N2nJCW+pz5o5ZM7G/rUZ0g832JT IFQiUJ5yFqW3/6I+p40xFXUPdrmGLPOsl417C1JYoOoSs2K4ugSWvZJW6uZiRDHs SeLFxzsPNUEaYCnUaYkKlOP0jhzeY5KdtbRLZ+xedYx6WYzP6PtfL52LqYehpr4s dWbkANDEMVbfgpUdQfVPffUgKf1GOEmDa+tK4QWtLcM0UwSIchWLXIPNR5GavJwZ AWBjV2G4TrJZc/EEjrPNutSpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEbr26l0T NevUtFTqbffhP+U/BAswHwYDVR0jBBgwFoAUxCbUJkAGdlVZc9/t5OsmRL7tKHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0MxRjczMDcyM0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveENiVUprQUdkbFZaYzlfdDVPc21STDd0S0hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0MxRjczMDcyM0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxW WmM5X3Q1T3NtUkw3dEtITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMoSvOUmNmMhdC0NzFpZauyTmcPUjWvYXTSENd++SZVAG1+OkeJm2teN tOpjNHxb5X3TSYPu/xA3yqPt/jA9sBzrVhvZ/NQxo6aTCRSahkcKrlGYhQ8VCZfQ MILHwVMtrPZgA7whfynaHwThJaL5LOk+tkqBwZAHN/jUi2zk3H/hEuC+JYidaaJG PPhfvaAmHk9RCql7d4W88Aclo/NoPG/D/ZCoSy6D0iV1sEHcUlPYzpN7IpZIaQU9 LDRRbLbwAJRJG3pgQeLE4LWbrFjOdQXrWHG7qwdjAaYM9a5azviSIK5J2IJtEVee gE9JzuIbTAqju+Ro4qTLedWHHy8KbTo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:21:05 2025 by rpki-client