$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json) Hash identifier: NQ0H4C/XTFiA7h1H8WtKycDGTPkCQ7ouE4b7z/PcnyQ= Subject key identifier: 49:B7:B7:F3:41:76:F1:DF:A3:64:8A:B7:4F:1B:42:29:03:BE:64:29 Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft Manifest number: 0419 Signing time: Mon 03 Nov 2025 01:25:21 +0000 Manifest this update: Mon 03 Nov 2025 01:25:21 +0000 Manifest next update: Mon 10 Nov 2025 01:25:21 +0000 Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: DEmgzxdz8Kn6aynMaNHlzpLXTQtTRAKgnxqSnWsMZZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Validity Not Before: Nov 3 01:25:21 2025 GMT Not After : Nov 10 01:25:21 2025 GMT Subject: CN=69080481-8505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:7e:2c:2e:18:29:84:23:a3:15:87:8d:48: f6:88:4d:12:5d:2f:cc:1a:64:fb:4f:b0:13:8d:20: d9:d7:de:86:fc:b0:60:df:00:9f:38:cd:93:43:48: 83:27:fc:8e:05:4f:f3:8d:3b:ae:e1:26:5a:9d:48: 74:e2:d8:a1:c5:3c:08:08:e0:bd:28:db:b0:d1:77: 5d:62:f8:07:9a:11:86:64:3b:be:8b:06:d4:f7:ed: 87:1d:e6:9f:c9:af:07:b5:2e:6f:07:f3:40:cb:af: 7e:63:e7:51:68:a6:d8:8a:4b:0a:c0:ef:aa:67:55: 58:4c:1a:a5:3d:f3:ad:13:80:77:d7:ad:c3:96:91: e5:ae:f6:4f:d4:54:57:00:04:20:f7:63:8a:b7:5a: df:dc:5a:95:ff:cb:ee:ee:5b:64:b2:f1:5b:48:d2: 29:45:d5:6a:f9:de:63:0c:33:a3:b8:35:20:a8:3a: ca:be:9f:d5:b3:f6:1a:79:12:8e:e4:59:9c:34:3d: aa:bc:a9:1d:72:5f:55:36:a4:40:a9:ba:d7:9e:b8: e2:80:6c:d4:be:70:2f:08:99:b9:1c:5c:21:41:25: 05:09:74:c2:80:ee:cf:b8:ed:6b:b7:1f:ed:a0:6c: a5:25:fa:23:58:70:ff:d7:66:b7:50:3a:fa:e2:b1: 7f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B7:B7:F3:41:76:F1:DF:A3:64:8A:B7:4F:1B:42:29:03:BE:64:29 X509v3 Authority Key Identifier: keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:19:55:aa:29:a8:86:23:1c:fb:57:90:89:84:03:96:01:0f: d0:b0:3a:ed:e8:79:8f:c1:23:2f:fc:fe:6d:80:f9:67:03:f0: 55:72:7c:9e:1e:62:2c:a5:9c:28:74:aa:7b:03:17:f7:30:40: 76:49:30:e1:fc:cd:fc:04:c2:70:22:42:da:9c:20:25:07:d7: a5:6a:16:9f:84:5c:3b:bf:84:c5:70:ab:73:70:96:66:7e:89: 04:77:56:52:9f:a3:5c:34:10:cb:00:2d:dd:2e:c6:53:7e:b5: 4a:b1:13:99:8d:22:2b:4c:d1:b7:4b:5a:d2:5f:d9:24:9e:23: 4c:d0:8a:92:38:03:8e:ff:34:5e:b8:05:1e:d3:3d:28:ad:d1: f7:9a:61:3a:a4:3b:8a:55:d6:c1:05:e8:98:8f:5b:9f:fe:19: 4d:14:f3:f4:6b:64:34:be:ee:96:02:de:f2:14:f8:08:b2:7c: 69:7d:bf:68:25:7b:ba:67:9a:ca:31:05:fd:5e:3c:f4:0b:b0: e3:44:46:00:64:fc:2c:5d:13:72:be:57:f5:4c:e3:f8:f1:f9: e6:a7:25:45:01:49:1f:e6:78:e8:6f:f4:e0:48:27:21:3c:b4: cf:f9:94:d7:95:fb:15:b6:12:ac:c7:5f:68:0a:e2:4f:7a:47: 63:39:dc:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDVDRUJEODY4NUIxNzQ5NURCM0UxRTc0NTk5NzlGRTg0 RjA0MzgzRjIwHhcNMjUxMTAzMDEyNTIxWhcNMjUxMTEwMDEyNTIxWjAYMRYwFAYD VQQDEw02OTA4MDQ4MS04NTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuid+LC4YKYQjoxWHjUj2iE0SXS/MGmT7T7ATjSDZ196G/LBg3wCfOM2TQ0iD J/yOBU/zjTuu4SZanUh04tihxTwICOC9KNuw0XddYvgHmhGGZDu+iwbU9+2HHeaf ya8HtS5vB/NAy69+Y+dRaKbYiksKwO+qZ1VYTBqlPfOtE4B3163DlpHlrvZP1FRX AAQg92OKt1rf3FqV/8vu7ltksvFbSNIpRdVq+d5jDDOjuDUgqDrKvp/Vs/YaeRKO 5FmcND2qvKkdcl9VNqRAqbrXnrjigGzUvnAvCJm5HFwhQSUFCXTCgO7PuO1rtx/t oGylJfojWHD/12a3UDr64rF/8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm3t/NB dvHfo2SKt08bQikDvmQpMB8GA1UdIwQYMBaAFFzr2GhbF0lds+HnRZl5/oTwQ4Py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNWMno0ZWRGbVhuLWhQQkRn X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPdllhRnNYU1YyejRlZEZtWG4taFBCRGdfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNW Mno0ZWRGbVhuLWhQQkRnX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArGVWqKaiGIxz7V5CJhAOWAQ/QsDrt6HmPwSMv/P5tgPlnA/BVcnye HmIspZwodKp7Axf3MEB2STDh/M38BMJwIkLanCAlB9elahafhFw7v4TFcKtzcJZm fokEd1ZSn6NcNBDLAC3dLsZTfrVKsROZjSIrTNG3S1rSX9kkniNM0IqSOAOO/zRe uAUe0z0ordH3mmE6pDuKVdbBBeiYj1uf/hlNFPP0a2Q0vu6WAt7yFPgIsnxpfb9o JXu6Z5rKMQX9Xjz0C7DjREYAZPwsXRNyvlf1TOP48fnmpyVFAUkf5njob/TgSCch PLTP+ZTXlfsVthKsx19oCuJPekdjOdzA -----END CERTIFICATE-----Generated at Wed Nov 5 03:10:51 2025 by rpki-client