$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: 6dGOKYy767ZrD5NU28RvG5kReDC4YkQtLYMrstJLvts= Subject key identifier: AB:5C:99:52:94:B7:C0:32:4E:B0:0C:23:FC:4E:01:0E:19:20:6F:86 Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 02C5 Signing time: Mon 03 Nov 2025 01:23:11 +0000 Manifest this update: Mon 03 Nov 2025 01:23:10 +0000 Manifest next update: Mon 10 Nov 2025 01:23:10 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: AFftxH198iCXcYdHD1yQ8JPuqb/t8Yg+G5vr8pAB8+c=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: ipAHoMEeSi68f+rJDCwmxc6LIwQCY1InwnKCCeoYyk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: Nov 3 01:23:10 2025 GMT Not After : Nov 10 01:23:10 2025 GMT Subject: CN=690803fe-6675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:5b:07:8a:17:61:08:60:91:d9:14:fd:cc: 52:c9:19:3e:aa:c6:b5:19:dd:c5:2d:40:79:f8:de: 02:1b:45:28:c6:50:e7:2d:49:94:e4:65:bd:90:53: ec:87:f4:74:97:10:09:40:9c:7d:31:24:b9:2d:7f: 6b:a2:55:26:1c:3b:64:90:a9:93:49:e5:79:83:85: 27:9e:28:90:a8:e3:dd:08:34:d4:43:da:8e:90:22: 8b:b9:36:3d:f5:54:26:23:e7:1f:83:9e:6f:99:98: 73:73:19:f7:bd:91:bd:cf:70:d7:2e:0f:fb:f5:8b: e4:27:30:82:69:7b:9f:fe:fc:ea:90:2d:a2:e0:fe: 7a:07:1d:5a:fe:0c:c3:c1:e5:ad:42:72:50:e4:6b: a3:f6:98:77:87:66:a4:c3:4f:c8:19:40:91:dc:52: c3:bd:d3:00:a1:8e:03:9d:7c:e4:cb:33:79:bb:26: 5d:48:e9:a0:91:c0:25:2d:2c:51:9d:d1:42:46:ed: d4:17:30:ff:a7:db:11:26:78:f7:f6:5b:a1:06:79: c6:37:5e:28:2d:94:31:70:88:a9:f5:05:08:35:b2: 89:05:1a:b9:94:37:a1:7d:d6:bb:30:53:43:b4:ea: 24:33:79:68:f0:bd:d1:ad:75:6c:25:2a:f1:ce:04: 2b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5C:99:52:94:B7:C0:32:4E:B0:0C:23:FC:4E:01:0E:19:20:6F:86 X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5d:e6:4c:6b:da:f3:30:f8:9c:e1:62:88:51:07:39:e0:44: 2e:6b:d4:d2:96:f9:8b:db:6f:3f:7f:e9:6d:0f:7e:ca:c0:f8: f3:55:76:e4:84:a8:4b:6a:44:fd:6f:71:6e:c5:1c:99:04:18: dd:57:6b:6a:56:e3:c2:dd:47:eb:d5:bf:95:78:3b:e2:00:18: 4a:97:cf:a1:a7:1c:40:6d:35:76:2c:db:6c:cc:fd:6c:05:9c: 04:9d:c2:d7:77:39:dc:dc:42:06:e9:5c:5e:b5:5b:7f:9e:cf: 28:4d:fb:6c:72:f7:5b:98:5b:a3:f0:11:ad:43:94:64:e2:ef: 77:9c:72:4c:35:5b:0d:8b:f0:ca:20:49:1f:e7:28:db:37:b3: 96:b9:cc:21:b9:3c:7c:b6:b2:90:ad:83:3d:b7:b6:49:a6:f6: 15:f8:b4:f5:f8:33:17:e4:d9:1c:cc:0b:fb:6e:3d:78:58:00: bf:93:12:1d:ab:50:17:79:3e:fd:fc:5b:51:a4:b2:ae:6f:9b: f6:99:e7:8a:a0:17:f9:43:d9:19:b4:21:03:4f:dd:f5:4f:27: 5e:13:c4:18:31:a2:c9:68:82:21:1b:49:a0:d5:fb:54:51:53: f5:bb:67:15:32:bb:44:5a:45:e3:00:9f:58:72:69:c2:12:b1: 7d:b1:a6:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjUxMTAzMDEyMzEwWhcNMjUxMTEwMDEyMzEwWjAYMRYwFAYD VQQDEw02OTA4MDNmZS02Njc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwlbB4oXYQhgkdkU/cxSyRk+qsa1Gd3FLUB5+N4CG0UoxlDnLUmU5GW9kFPs h/R0lxAJQJx9MSS5LX9rolUmHDtkkKmTSeV5g4UnniiQqOPdCDTUQ9qOkCKLuTY9 9VQmI+cfg55vmZhzcxn3vZG9z3DXLg/79YvkJzCCaXuf/vzqkC2i4P56Bx1a/gzD weWtQnJQ5Guj9ph3h2akw0/IGUCR3FLDvdMAoY4DnXzkyzN5uyZdSOmgkcAlLSxR ndFCRu3UFzD/p9sRJnj39luhBnnGN14oLZQxcIip9QUINbKJBRq5lDehfda7MFND tOokM3lo8L3RrXVsJSrxzgQrjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtcmVKU t8AyTrAMI/xOAQ4ZIG+GMB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvXeZMa9rzMPic4WKIUQc54EQua9TSlvmL228/f+ltD37KwPjzVXbk hKhLakT9b3FuxRyZBBjdV2tqVuPC3Ufr1b+VeDviABhKl8+hpxxAbTV2LNtszP1s BZwEncLXdznc3EIG6VxetVt/ns8oTftscvdbmFuj8BGtQ5Rk4u93nHJMNVsNi/DK IEkf5yjbN7OWucwhuTx8trKQrYM9t7ZJpvYV+LT1+DMX5NkczAv7bj14WAC/kxId q1AXeT79/FtRpLKub5v2meeKoBf5Q9kZtCEDT931TydeE8QYMaLJaIIhG0mg1ftU UVP1u2cVMrtEWkXjAJ9YcmnCErF9sabZ -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:35 2025 by rpki-client