$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: 23o8AdeAP2Z/dqDD5dz4v0ATwjkH902UhlptE6tDpxo= Subject key identifier: 41:64:C6:41:87:46:D8:DC:DF:63:E9:B6:FA:1B:5C:98:F4:10:F4:8B Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0E9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0E7F Signing time: Tue 04 Nov 2025 17:48:57 +0000 Manifest this update: Tue 04 Nov 2025 17:48:57 +0000 Manifest next update: Tue 11 Nov 2025 17:48:57 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: 1FK6F0sYsVSEi8nCyJl+Ihv8IMBB7IVzNkj1m4n9PWY=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=) 4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3741 (0xe9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Nov 4 17:48:57 2025 GMT Not After : Nov 11 17:48:57 2025 GMT Subject: CN=690a3c89-452c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:60:90:5f:d7:bf:b3:93:8f:0c:00:1f:91: 39:53:3f:9f:ba:e3:3e:3e:59:56:1f:22:a5:41:45: 7e:8d:56:f7:94:50:5d:98:15:3e:6e:b2:82:0d:db: 9c:84:f4:7b:55:bd:3d:4d:41:71:7c:fa:f7:24:3f: e2:e5:a2:a1:e3:9c:82:53:95:f4:3e:87:c0:09:26: 32:32:97:6e:11:bf:29:c2:95:f2:8a:7c:fe:a3:8f: a2:b0:da:44:62:5b:2f:ff:0c:08:04:3d:ce:94:fc: 64:f7:5e:05:a1:df:a6:93:47:80:d3:0f:c1:6a:03: b4:4b:15:65:bd:4f:24:f1:d4:94:c1:b4:31:fb:24: 81:6c:57:fb:c5:bf:13:3f:4b:28:2f:1d:50:a8:c8: c7:52:9b:55:24:74:a8:a4:08:ac:49:16:6d:25:d5: ee:f2:ca:34:f0:0c:85:d5:3e:d6:b1:02:e5:ba:cb: 07:f4:43:cc:84:ee:a7:77:87:37:27:cb:38:c8:8f: f4:c7:e7:33:d5:d5:fa:c4:7a:21:1d:a8:e1:50:e6: cd:45:41:1f:68:4b:8e:a7:a8:bd:50:94:78:c8:15: 99:fe:dc:cd:45:35:56:40:45:5c:dc:32:06:08:4c: 88:ef:d1:c4:96:aa:c1:6f:9f:61:dd:82:7c:e5:c1: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:64:C6:41:87:46:D8:DC:DF:63:E9:B6:FA:1B:5C:98:F4:10:F4:8B X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:55:86:77:50:c2:2d:91:69:a3:f0:5d:5f:ae:ed:bc:0b:9b: fa:51:88:da:ec:89:a3:78:46:b3:38:54:46:6c:e6:8e:82:61: 46:96:9a:b7:e9:22:81:b5:3a:70:5d:dc:6a:c6:83:9b:16:4e: 3b:73:d0:67:29:9e:2b:88:af:53:c4:23:b9:dd:1f:97:10:87: 76:af:9d:06:d4:8a:a7:8b:42:09:77:67:94:f7:22:20:3a:37: 85:0e:20:e5:90:6d:42:a4:ac:53:67:24:26:57:4c:e3:54:fa: 66:8a:f4:ad:29:67:d0:50:41:55:b6:4c:08:9d:51:12:46:28: 8c:1d:1b:98:98:8d:68:33:20:e3:eb:dc:04:a6:a0:c8:c5:93: 05:7d:ce:8f:2e:8e:b6:7d:bd:90:6d:da:e8:be:5f:cd:a6:f0: 2b:e2:0f:d9:43:75:bf:11:96:64:6e:73:4e:08:3e:1e:18:ec: 11:34:cb:ef:9e:a3:a6:3a:8a:08:15:f0:ee:fa:80:b2:aa:3b: 1b:c6:fc:39:52:9d:93:c2:35:ca:9f:78:3d:e7:e0:78:13:77: 02:59:4d:3c:a4:e0:67:36:a7:c5:b9:9b:4e:6f:3f:a4:95:53: 93:4c:95:e6:4b:80:58:54:4b:4a:9d:9d:24:cc:0b:35:1d:6d: 70:ec:ff:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjUxMTA0MTc0ODU3WhcNMjUxMTExMTc0ODU3WjAYMRYwFAYD VQQDEw02OTBhM2M4OS00NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxRgkF/Xv7OTjwwAH5E5Uz+fuuM+PllWHyKlQUV+jVb3lFBdmBU+brKCDduc hPR7Vb09TUFxfPr3JD/i5aKh45yCU5X0PofACSYyMpduEb8pwpXyinz+o4+isNpE Ylsv/wwIBD3OlPxk914Fod+mk0eA0w/BagO0SxVlvU8k8dSUwbQx+ySBbFf7xb8T P0soLx1QqMjHUptVJHSopAisSRZtJdXu8so08AyF1T7WsQLlussH9EPMhO6nd4c3 J8s4yI/0x+cz1dX6xHohHajhUObNRUEfaEuOp6i9UJR4yBWZ/tzNRTVWQEVc3DIG CEyI79HElqrBb59h3YJ85cFqFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFkxkGH Rtjc32PptvobXJj0EPSLMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcVYZ3UMItkWmj8F1fru28C5v6UYja7ImjeEazOFRGbOaOgmFGlpq3 6SKBtTpwXdxqxoObFk47c9BnKZ4riK9TxCO53R+XEId2r50G1Iqni0IJd2eU9yIg OjeFDiDlkG1CpKxTZyQmV0zjVPpmivStKWfQUEFVtkwInVESRiiMHRuYmI1oMyDj 69wEpqDIxZMFfc6PLo62fb2Qbdrovl/NpvAr4g/ZQ3W/EZZkbnNOCD4eGOwRNMvv nqOmOooIFfDu+oCyqjsbxvw5Up2TwjXKn3g95+B4E3cCWU08pOBnNqfFuZtObz+k lVOTTJXmS4BYVEtKnZ0kzAs1HW1w7P8b -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:51 2025 by rpki-client