$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft File: xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json) Hash identifier: q5vcDjfnnl8AIofNf7tRYR7GQlDsUU6v13UTfvm0vJg= Subject key identifier: 5A:E8:BD:7C:7B:21:10:2B:10:23:BA:6F:83:6F:84:49:CF:AA:29:A1 Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Certificate serial: 077F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft Manifest number: 0773 Signing time: Tue 04 Nov 2025 21:43:15 +0000 Manifest this update: Tue 04 Nov 2025 21:43:14 +0000 Manifest next update: Tue 11 Nov 2025 21:43:14 +0000 Files and hashes: 1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: bwXADgxR0lCcxn6g2g0HBJe+jm59p1sWr+ETki0AD2I=) 2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: Xmj6Hu3XamtN1TfoLFF4zTOGMT8EY6KW6APUipxbG/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1919 (0x77f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Validity Not Before: Nov 4 21:43:14 2025 GMT Not After : Nov 11 21:43:14 2025 GMT Subject: CN=690a7372-3fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:32:03:1e:23:aa:53:8b:95:0e:d5:09:ed: 7d:9a:43:e7:13:a5:d0:90:24:be:dd:1e:42:11:dd: bc:18:94:5e:b2:79:1d:8a:dc:66:1a:a4:53:1e:a3: 1c:03:99:37:6e:e8:14:bc:ee:58:6c:4d:d6:64:3f: df:26:43:7a:6b:d1:ce:26:ee:8c:0c:cb:96:f4:3f: 88:89:1b:09:ac:6f:13:22:04:25:53:d2:6a:9e:40: f0:59:eb:6d:bb:ac:a9:7c:15:fe:37:01:d0:07:55: 84:db:c7:f9:fa:61:33:5f:67:80:ec:97:e4:b2:8f: 05:84:e9:70:78:1a:39:64:c8:a4:6f:72:9b:28:90: a0:d0:ba:f0:3c:12:00:80:5f:e2:45:a4:1a:31:c5: fd:e1:b4:17:3d:e1:ee:52:bc:fd:ef:85:11:2c:49: fb:77:0c:15:64:f1:d0:6a:46:83:dc:b2:d8:bd:45: a4:4f:42:89:48:62:8b:31:9b:ca:83:ef:96:a1:12: 81:3f:b4:a3:8b:49:28:1f:da:90:f9:15:35:16:be: c5:cd:26:81:e5:ab:18:f2:0d:78:2d:67:10:db:77: 7b:59:26:f6:13:9f:b6:9f:04:b3:30:55:c2:6b:8b: 30:0d:9d:12:f3:7f:86:73:2b:f3:7d:55:52:5e:07: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:BD:7C:7B:21:10:2B:10:23:BA:6F:83:6F:84:49:CF:AA:29:A1 X509v3 Authority Key Identifier: keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:07:ea:d3:37:bc:f0:db:9f:71:26:b8:27:90:0c:e7:2d:20: 87:ee:42:98:44:77:9d:12:f9:93:d3:56:b6:55:d0:de:7b:46: f8:8e:67:82:05:f8:2e:ca:d6:18:b8:30:28:80:a4:6e:ab:87: 92:c9:b4:09:55:1b:8c:c1:15:b8:65:1e:5a:c8:2d:7c:90:b9: 0a:5e:77:4e:ce:41:2d:62:5b:a5:43:b5:64:a0:7c:09:bb:db: 82:9e:c8:38:02:88:32:f1:ee:fd:b4:f9:fd:b8:96:38:a5:29: 71:f5:cd:1e:48:35:24:13:16:3f:53:4d:6c:a2:76:af:90:77: 44:bc:6d:ca:65:00:e0:ef:c9:8f:6d:71:2d:db:fc:7d:0a:f5: b1:e9:59:e6:c0:a5:55:1e:e8:12:54:65:9e:c9:21:7d:71:9d: f0:a0:48:7f:38:b9:bf:98:2b:12:b6:ac:5b:91:79:27:57:41: e1:cc:b6:82:1a:1f:4f:dd:af:72:3d:74:f4:3b:15:3f:2a:fe: 5f:97:26:21:fe:98:b1:91:8d:a8:e3:06:2a:60:a8:0f:86:00: 94:3c:4c:18:23:01:65:61:77:07:92:6a:1f:ec:60:52:00:75: 93:1d:2f:78:2b:44:02:83:d4:98:b8:31:fc:ca:7f:8b:68:0e: 30:1b:59:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBREYxMTAvBgNVBAUTKEM3MEJGNzlFODhFMzExOUFFOTZCQjc2MUEyOTNCQjUx QTQ4NjE3M0MwHhcNMjUxMTA0MjE0MzE0WhcNMjUxMTExMjE0MzE0WjAYMRYwFAYD VQQDEw02OTBhNzM3Mi0zZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfcyAx4jqlOLlQ7VCe19mkPnE6XQkCS+3R5CEd28GJResnkditxmGqRTHqMc A5k3bugUvO5YbE3WZD/fJkN6a9HOJu6MDMuW9D+IiRsJrG8TIgQlU9JqnkDwWett u6ypfBX+NwHQB1WE28f5+mEzX2eA7Jfkso8FhOlweBo5ZMikb3KbKJCg0LrwPBIA gF/iRaQaMcX94bQXPeHuUrz974URLEn7dwwVZPHQakaD3LLYvUWkT0KJSGKLMZvK g++WoRKBP7Sji0koH9qQ+RU1Fr7FzSaB5asY8g14LWcQ23d7WSb2E5+2nwSzMFXC a4swDZ0S83+GcyvzfVVSXgdvTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrovXx7 IRArECO6b4NvhEnPqimhMB8GA1UdIwQYMBaAFMcL956I4xGa6Wu3YaKTu1Gkhhc8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFERi9CODVGMEU4QzNB Q0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVacnBhN2Rob3BPN1VhU0dG encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3djNub2pqRVpycGE3ZGhvcE83VWFTR0Z6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFERi9CODVGMEU4QzNBQ0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVa cnBhN2Rob3BPN1VhU0dGencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTB+rTN7zw259xJrgnkAznLSCH7kKYRHedEvmT01a2VdDee0b4jmeC BfguytYYuDAogKRuq4eSybQJVRuMwRW4ZR5ayC18kLkKXndOzkEtYlulQ7VkoHwJ u9uCnsg4Aogy8e79tPn9uJY4pSlx9c0eSDUkExY/U01sonavkHdEvG3KZQDg78mP bXEt2/x9CvWx6VnmwKVVHugSVGWeySF9cZ3woEh/OLm/mCsStqxbkXknV0HhzLaC Gh9P3a9yPXT0OxU/Kv5flyYh/pixkY2o4wYqYKgPhgCUPEwYIwFlYXcHkmof7GBS AHWTHS94K0QCg9SYuDH8yn+LaA4wG1ng -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:14 2025 by rpki-client