$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json) Hash identifier: DdJ5qJukgl+BtguoTMTOvA5Orv81VA+sUzrKjijVc+w= Subject key identifier: E6:A2:36:FB:1B:EB:87:C0:15:CE:F9:3E:F7:C0:5F:4A:6B:32:70:C8 Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1D20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft Manifest number: 1CDE Signing time: Sun 02 Nov 2025 16:10:20 +0000 Manifest this update: Sun 02 Nov 2025 16:10:20 +0000 Manifest next update: Sun 09 Nov 2025 16:10:20 +0000 Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: q6qqrYUcZNbf4pgn1JyOHCuCg9gwwdwHl5KoqT2LhWc=) 2: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: 20AfF76B9+g4MK13JnUrRZPbIDu/TESDofczBLuYHu0=) 3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: 6/nHCLLC7n4HaWWUGKVmTxdYoQkDB8jaG5K5D54SivA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7456 (0x1d20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: Nov 2 16:10:20 2025 GMT Not After : Nov 9 16:10:20 2025 GMT Subject: CN=6907826c-de06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:84:7d:7f:b5:90:af:c9:21:d3:89:ed:98: fa:53:c9:f7:65:89:0e:50:33:0a:02:78:0c:31:5b: bc:a2:10:4a:49:41:99:30:0b:eb:8c:36:68:d8:e1: 2e:d1:52:13:21:0a:7a:19:b0:55:1c:02:f6:45:65: c7:68:d0:43:6a:5f:03:0a:95:86:d6:4f:22:3d:fa: be:90:2c:11:a6:3a:da:90:ce:1c:3e:cd:62:9a:0f: 25:d1:be:1d:7b:c7:3c:14:47:11:5c:6e:a8:a7:33: ba:7e:72:40:a6:3f:ee:94:7b:b9:3e:2c:fa:11:e0: 7e:b0:ec:d5:4b:a2:6f:90:c9:f0:f6:c9:ad:1e:56: 40:fe:15:90:5e:08:9a:45:30:65:a4:ef:2a:50:80: d1:49:a3:83:e7:79:df:42:d1:4f:12:12:da:56:11: 3b:ea:12:39:a5:cc:2a:77:c1:0b:0d:e6:18:66:60: ac:37:ef:15:03:bb:f7:1f:b4:bc:6f:76:dc:6f:9b: 62:6a:86:63:51:54:f2:3c:1e:17:01:88:ef:11:81: 14:e9:9b:47:91:53:d8:af:30:aa:45:5c:40:c0:45: 8f:9f:3f:04:b0:f4:a7:56:4e:2c:02:67:51:d5:ce: c2:4c:84:82:37:d0:c1:6f:ff:f6:43:cd:e1:61:a4: 53:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A2:36:FB:1B:EB:87:C0:15:CE:F9:3E:F7:C0:5F:4A:6B:32:70:C8 X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:6e:65:25:bf:d7:c2:6b:87:95:d7:bc:a8:c4:75:f5:23:d0: 0d:28:e9:9e:e7:c1:f0:4d:28:81:72:7f:3b:ac:2a:05:0b:03: 1e:c6:2b:44:56:a8:8c:7c:05:4e:56:a7:4d:e9:bb:a8:ba:5b: 7a:89:fb:02:69:89:ed:94:43:79:08:ed:04:95:d6:99:bb:4f: bf:dd:34:43:29:78:64:27:30:0a:ec:ae:a8:0d:c3:5d:66:a9: 10:1d:52:84:7a:78:b3:fe:83:89:5c:69:2b:e0:db:9d:6d:61: e5:dc:f1:e3:64:da:15:80:60:20:89:10:3d:e4:c7:0e:5d:9f: 17:eb:6c:e9:02:1f:a9:52:ca:f5:70:7d:7f:52:3c:f0:cb:3c: 26:38:ab:6f:45:2d:42:6e:70:7b:0e:8a:06:6b:72:9b:ee:c9: bc:ca:51:59:7b:84:20:bf:d4:18:74:a3:fb:46:40:55:83:c1: 97:e4:8b:23:b2:49:19:cd:af:2f:21:55:76:37:31:4a:fc:6f: 4f:a3:35:93:17:05:83:bb:16:12:4b:ff:02:e4:c6:03:4f:34: 09:34:88:90:14:3e:f7:7d:5a:ac:93:bb:f4:6c:6f:cc:76:d9: ba:72:ed:c8:50:3b:9b:0b:7f:18:4a:dc:2d:de:8e:1e:1d:49: f3:75:e5:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjUxMTAyMTYxMDIwWhcNMjUxMTA5MTYxMDIwWjAYMRYwFAYD VQQDEw02OTA3ODI2Yy1kZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoSEfX+1kK/JIdOJ7Zj6U8n3ZYkOUDMKAngMMVu8ohBKSUGZMAvrjDZo2OEu 0VITIQp6GbBVHAL2RWXHaNBDal8DCpWG1k8iPfq+kCwRpjrakM4cPs1img8l0b4d e8c8FEcRXG6opzO6fnJApj/ulHu5Piz6EeB+sOzVS6JvkMnw9smtHlZA/hWQXgia RTBlpO8qUIDRSaOD53nfQtFPEhLaVhE76hI5pcwqd8ELDeYYZmCsN+8VA7v3H7S8 b3bcb5tiaoZjUVTyPB4XAYjvEYEU6ZtHkVPYrzCqRVxAwEWPnz8EsPSnVk4sAmdR 1c7CTISCN9DBb//2Q83hYaRTOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOaiNvsb 64fAFc75PvfAX0prMnDIMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDM5MC8wRTkzNTRGQ0RDNUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJT QTFzd2ZvOTVZM1lJX3EyX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6bmUlv9fCa4eV17yoxHX1I9ANKOme58HwTSiBcn87rCoFCwMexitE VqiMfAVOVqdN6buoult6ifsCaYntlEN5CO0EldaZu0+/3TRDKXhkJzAK7K6oDcNd ZqkQHVKEeniz/oOJXGkr4NudbWHl3PHjZNoVgGAgiRA95McOXZ8X62zpAh+pUsr1 cH1/UjzwyzwmOKtvRS1CbnB7DooGa3Kb7sm8ylFZe4Qgv9QYdKP7RkBVg8GX5Isj skkZza8vIVV2NzFK/G9PozWTFwWDuxYSS/8C5MYDTzQJNIiQFD73fVqsk7v0bG/M dtm6cu3IUDubC38YStwt3o4eHUnzdeWt -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:56 2025 by rpki-client