$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft File: 75-XzrKSdlHWT6oC452-DaO3H5U.mft (raw, json) Hash identifier: 3o9bwsjmOrIYpfgG+FXvNqPmueWqlEaZAIoHiKFgz1I= Subject key identifier: C6:1E:2E:CB:99:4E:E0:D7:FF:A0:F4:0D:B6:9E:A0:A9:12:5E:84:DE Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 Certificate issuer: /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft Manifest number: 84 Signing time: Mon 03 Nov 2025 06:44:45 +0000 Manifest this update: Mon 03 Nov 2025 06:44:44 +0000 Manifest next update: Mon 10 Nov 2025 06:44:44 +0000 Files and hashes: 1: 75-XzrKSdlHWT6oC452-DaO3H5U.crl (hash: JnI/RCEcUzO1bZFlah3nC5oC5X+23+EjikYJUvUFaPA=) 2: 2701A0D8769611F09C8ABC22C4F9AE02.roa (hash: UltTcVIqPHEDuUriQr1xUBBRJ1pBDqVcDmFzpS+wHEA=) 3: C405E494FCBF11EF8E586B7AC4F9AE02.roa (hash: 8p+dYc7w4P5cdTWL4po8oK48UBPSJ7b6JBGkywZrPZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Validity Not Before: Nov 3 06:44:44 2025 GMT Not After : Nov 10 06:44:44 2025 GMT Subject: CN=69084f5c-1b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d0:12:15:0d:bb:c8:b6:33:68:94:b0:1d:84: 82:77:7d:0d:d7:85:6e:74:39:2a:d1:7a:e2:15:b9: 9a:ee:49:01:8e:93:ff:24:73:0c:30:5a:65:32:0f: 0f:d4:74:96:54:ea:ae:e3:0b:5e:9f:74:49:b2:e4: d4:70:58:b8:21:f9:ad:8a:6f:3b:73:1e:44:a7:98: e4:84:cd:84:12:82:44:46:31:49:df:94:26:6b:65: 68:4e:af:c6:bf:71:a3:70:05:f2:71:1f:cf:49:3a: e0:e5:c8:d4:02:e6:d6:cf:2e:3c:98:c7:80:48:7a: 97:63:17:e9:27:d4:ee:91:56:c2:22:6f:13:9f:7f: 87:2c:ec:41:fa:75:13:43:d1:60:1b:93:b2:7c:a7: 15:14:ef:b7:b5:81:21:e4:b9:18:17:09:c2:18:66: ba:0c:6d:6e:df:cd:45:fa:1f:c5:95:29:f5:2c:de: c5:2c:1c:59:db:d7:80:f2:58:be:a5:80:ca:81:31: 7e:41:15:7d:79:70:a4:0d:7d:89:81:f2:12:0f:fd: 18:fe:3e:ee:3a:23:bf:09:0a:e0:a1:10:93:f5:e8: 41:57:33:06:de:71:94:aa:51:8a:fe:0f:a6:e3:5d: 67:ea:98:77:d5:63:ae:20:b7:4e:2c:9a:98:ac:fc: be:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1E:2E:CB:99:4E:E0:D7:FF:A0:F4:0D:B6:9E:A0:A9:12:5E:84:DE X509v3 Authority Key Identifier: keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3d:f9:2b:ff:56:bc:c2:76:0f:b0:e6:53:c3:5a:7a:66:d5: f3:cd:d7:80:0c:3c:a9:cd:0a:f4:9e:41:8b:51:40:c4:b9:1b: a6:a9:e7:90:b7:75:3e:9a:f7:ed:7c:6b:1e:d4:c7:b1:e3:e4: fd:13:b1:06:fb:f3:ff:a7:2f:2d:61:39:5a:0a:6e:6d:ed:0a: 8a:48:b1:50:3f:35:1f:b1:f5:b6:bc:f8:ed:6b:29:9a:69:ad: 58:b8:36:e0:f8:5f:06:41:3d:62:73:ea:9d:fe:0d:12:49:f0: 81:86:39:3d:1d:24:6b:79:64:2b:10:b5:a2:ce:86:55:a5:6c: 02:34:ef:59:a2:78:c6:ad:e5:35:6d:26:14:d7:7c:02:4c:d0: b2:52:d0:ab:b7:ef:25:20:69:5d:00:e7:96:1c:93:a4:0d:f4: 6d:19:e4:4c:8f:0f:21:29:9d:e8:c4:ea:2e:42:d5:54:9b:b5: f3:71:f8:5a:36:4a:09:38:52:69:47:fa:8f:0b:37:ca:0a:9c: f8:f5:c8:5d:04:99:38:cb:76:b7:0d:97:b6:e6:1b:02:ae:ec: 4e:91:b0:43:c6:68:49:f1:69:79:fd:85:16:f5:86:bd:e6:a5: 6f:9f:4e:d6:36:75:ae:df:01:6a:3a:27:08:6c:be:e6:24:48: 70:9a:40:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1ODgxMTAvBgNVBAUTKEVGOUY5N0NFQjI5Mjc2NTFENjRGQUEwMkUzOURCRTBE QTNCNzFGOTUwHhcNMjUxMTAzMDY0NDQ0WhcNMjUxMTEwMDY0NDQ0WjAYMRYwFAYD VQQDEw02OTA4NGY1Yy0xYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dASFQ27yLYzaJSwHYSCd30N14VudDkq0XriFbma7kkBjpP/JHMMMFplMg8P 1HSWVOqu4wten3RJsuTUcFi4Ifmtim87cx5Ep5jkhM2EEoJERjFJ35Qma2VoTq/G v3GjcAXycR/PSTrg5cjUAubWzy48mMeASHqXYxfpJ9TukVbCIm8Tn3+HLOxB+nUT Q9FgG5OyfKcVFO+3tYEh5LkYFwnCGGa6DG1u381F+h/FlSn1LN7FLBxZ29eA8li+ pYDKgTF+QRV9eXCkDX2JgfISD/0Y/j7uOiO/CQrgoRCT9ehBVzMG3nGUqlGK/g+m 411n6ph31WOuILdOLJqYrPy+IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYeLsuZ TuDX/6D0DbaeoKkSXoTeMB8GA1UdIwQYMBaAFO+fl86yknZR1k+qAuOdvg2jtx+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU4OC82OTQ1MzFGMkZB ODcxMUVGODNFREVDMkRDNEY5QUUwMi83NS1YenJLU2RsSFdUNm9DNDUyLURhTzNI NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1LVh6cktTZGxIV1Q2b0M0NTItRGFPM0g1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU4OC82OTQ1MzFGMkZBODcxMUVGODNFREVDMkRDNEY5QUUwMi83NS1YenJLU2Rs SFdUNm9DNDUyLURhTzNINVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Pfkr/1a8wnYPsOZTw1p6ZtXzzdeADDypzQr0nkGLUUDEuRumqeeQ t3U+mvftfGse1Mex4+T9E7EG+/P/py8tYTlaCm5t7QqKSLFQPzUfsfW2vPjtayma aa1YuDbg+F8GQT1ic+qd/g0SSfCBhjk9HSRreWQrELWizoZVpWwCNO9ZonjGreU1 bSYU13wCTNCyUtCrt+8lIGldAOeWHJOkDfRtGeRMjw8hKZ3oxOouQtVUm7Xzcfha NkoJOFJpR/qPCzfKCpz49chdBJk4y3a3DZe25hsCruxOkbBDxmhJ8Wl5/YUW9Ya9 5qVvn07WNnWu3wFqOicIbL7mJEhwmkA2 -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:25 2025 by rpki-client