$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: e4q/Ru/pkFkV/DsYDnUoruV7HDDUkax9yVxMMEe2ecs= Subject key identifier: 86:E9:67:82:9B:4E:86:50:5A:8A:3C:8D:C2:16:A2:03:6B:7A:61:78 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 068D Signing time: Tue 04 Nov 2025 22:31:59 +0000 Manifest this update: Tue 04 Nov 2025 22:31:58 +0000 Manifest next update: Tue 11 Nov 2025 22:31:58 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: 9sOGsIeZgcBPqkw7Gs96YeOw3WikmcxOcYe1m532zFk=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xnj1+DqNRGp1sU91Z+zGlbx4vpo9U2+YWkznSk4BLXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Nov 4 22:31:58 2025 GMT Not After : Nov 11 22:31:58 2025 GMT Subject: CN=690a7ede-84a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:e5:4f:38:9a:6d:67:39:71:93:b8:ce:63: 63:08:38:40:b5:a2:9e:c9:ed:41:36:65:60:4a:d0: a8:88:41:16:f0:3f:57:7e:c9:fe:46:90:de:8c:9e: e6:d5:36:bc:f1:e2:99:8d:e7:47:9d:3d:7c:a2:ed: 27:67:7c:90:b0:30:ce:8f:5e:c6:86:08:d6:6f:85: 5d:da:d7:29:61:58:8c:46:e2:86:89:d4:58:be:ec: c0:ba:a4:43:21:50:2c:b4:e0:7e:aa:fc:09:be:0d: bc:89:6e:71:fe:2d:44:fa:6c:e5:18:38:5c:71:3a: 9a:0d:12:70:08:9f:5f:ff:30:b4:6f:79:83:1d:ce: 6a:f0:51:e3:85:0c:69:61:5a:b2:71:5d:61:84:ce: 23:03:9b:cf:31:f5:58:db:df:fe:24:47:c4:1c:48: b1:c2:fd:6f:a6:8e:b6:e7:89:e9:8b:7e:f9:36:fa: bc:5c:ce:c8:e9:2b:6c:27:11:34:4b:31:8d:35:65: 27:dc:1a:f4:74:57:09:58:ed:42:7a:54:58:c3:bb: 81:63:54:e3:46:d9:be:4f:04:ae:5c:23:e7:53:51: 26:e5:57:ac:16:8a:e7:d0:51:d4:1b:d0:04:94:62: 7d:c8:c8:ab:2c:65:f4:d0:08:d0:7d:a4:b4:a5:29: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E9:67:82:9B:4E:86:50:5A:8A:3C:8D:C2:16:A2:03:6B:7A:61:78 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:11:0b:e4:52:d9:0e:09:d7:99:ff:4f:ac:9c:87:05:f9:ae: 32:3c:a0:5c:84:5e:ab:67:d2:3d:e6:15:ce:ef:ac:ca:9e:4e: 8e:5f:fc:f2:31:a5:94:74:e3:ac:ec:a2:fc:ea:45:0a:47:11: 04:29:09:5d:e0:81:ed:5f:8e:9f:eb:28:48:9e:41:67:2e:f1: e9:de:b4:25:68:95:62:24:ec:7c:ba:06:a2:79:15:c0:44:b8: 49:2f:a4:7f:88:d7:9c:af:47:5d:2c:39:ce:33:97:aa:d3:57: b6:fc:ae:88:03:96:7d:bc:19:f8:6f:c7:79:ab:c8:bf:b9:e7: 13:a9:e6:d3:23:1a:9d:57:a6:42:2f:c1:76:14:05:32:8d:19: 5b:45:d3:d4:b5:13:cc:57:1d:db:48:74:c8:08:12:a6:91:5c: f9:9d:dd:9e:7a:d1:61:17:a9:99:bc:d5:5a:e4:21:fd:f3:84: bc:df:71:f7:2d:83:b5:5b:97:5b:3e:06:b3:aa:53:4c:b7:7b: 7d:16:a6:7e:8c:2c:2f:43:af:9f:d6:98:30:7f:a9:35:f4:08: 6a:c3:c8:53:fe:85:9f:df:d8:83:dc:d6:00:e4:16:74:24:2f: 73:fd:f8:94:37:e6:05:bc:95:10:96:d6:1c:43:ee:36:8a:e4: ba:ed:4a:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjUxMTA0MjIzMTU4WhcNMjUxMTExMjIzMTU4WjAYMRYwFAYD VQQDEw02OTBhN2VkZS04NGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsHlTziabWc5cZO4zmNjCDhAtaKeye1BNmVgStCoiEEW8D9Xfsn+RpDejJ7m 1Ta88eKZjedHnT18ou0nZ3yQsDDOj17GhgjWb4Vd2tcpYViMRuKGidRYvuzAuqRD IVAstOB+qvwJvg28iW5x/i1E+mzlGDhccTqaDRJwCJ9f/zC0b3mDHc5q8FHjhQxp YVqycV1hhM4jA5vPMfVY29/+JEfEHEixwv1vpo6254npi375Nvq8XM7I6StsJxE0 SzGNNWUn3Br0dFcJWO1CelRYw7uBY1TjRtm+TwSuXCPnU1Em5VesForn0FHUG9AE lGJ9yMirLGX00AjQfaS0pSmFOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbpZ4Kb ToZQWoo8jcIWogNremF4MB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3EQvkUtkOCdeZ/0+snIcF+a4yPKBchF6rZ9I95hXO76zKnk6OX/zy MaWUdOOs7KL86kUKRxEEKQld4IHtX46f6yhInkFnLvHp3rQlaJViJOx8ugaieRXA RLhJL6R/iNecr0ddLDnOM5eq01e2/K6IA5Z9vBn4b8d5q8i/uecTqebTIxqdV6ZC L8F2FAUyjRlbRdPUtRPMVx3bSHTICBKmkVz5nd2eetFhF6mZvNVa5CH984S833H3 LYO1W5dbPgazqlNMt3t9FqZ+jCwvQ6+f1pgwf6k19Ahqw8hT/oWf39iD3NYA5BZ0 JC9z/fiUN+YFvJUQltYcQ+42iuS67UpZ -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:14 2025 by rpki-client