$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json) Hash identifier: PQ4JoKa9UVmZJ7m7xPXafwM/ErRqSCdhwNLqqrM9juc= Subject key identifier: 94:01:BD:8D:25:8A:E0:CE:36:D5:B6:D3:46:D4:B6:0A:44:CF:D7:04 Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft Manifest number: 01CE Signing time: Mon 03 Nov 2025 02:50:10 +0000 Manifest this update: Mon 03 Nov 2025 02:50:10 +0000 Manifest next update: Mon 10 Nov 2025 02:50:10 +0000 Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: ++p//3GSew/L8bf5cObOns9CsUfmw3wUdO1rbc8mHoE=) 2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: OpoKcUWUvi3vDF/Fc3mzC49yGPnaGFfP/+Z7YSKKLhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Validity Not Before: Nov 3 02:50:10 2025 GMT Not After : Nov 10 02:50:10 2025 GMT Subject: CN=69081862-a56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:57:8e:c2:c3:55:98:ce:cd:77:55:7a:0a: 0c:5a:fd:3a:a1:83:ec:96:00:ca:fd:f7:7d:d5:18: 26:97:b0:d7:fd:a8:16:bf:8d:9d:7c:7d:43:df:7a: 1c:0c:43:41:11:05:50:f5:90:90:49:38:4f:fd:15: 70:01:2f:29:92:97:1e:50:06:02:cc:43:b7:4d:87: ba:e8:a9:ef:8d:5c:94:0b:17:e5:aa:93:93:9d:fe: f5:00:5e:81:9d:40:5b:27:18:45:20:b5:6f:a2:9c: 4c:71:71:f2:29:62:78:4e:00:99:72:13:2c:47:78: ce:2f:e7:31:3d:c4:84:42:5e:34:a6:f7:1b:77:f4: 64:17:92:70:08:d5:22:f1:c1:2b:ea:ff:e8:00:b7: de:73:eb:71:26:aa:4c:b7:ef:c7:a4:f9:68:1c:c5: 1f:da:8f:a6:66:25:e5:8e:05:5d:2b:df:69:fb:53: 08:c4:66:50:dd:2b:87:2e:14:a3:aa:e6:be:ed:4a: 1f:f3:1c:fe:8c:f5:f8:ef:52:a7:fa:46:e8:a2:c3: ec:b1:ed:be:06:69:23:cc:c8:02:e0:9f:42:b7:4b: 0a:1f:c8:31:f4:0e:16:f4:7f:d4:5b:4a:99:a2:c8: 20:b5:68:8e:31:a3:a5:39:61:6e:30:8e:d8:fa:37: 4d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:01:BD:8D:25:8A:E0:CE:36:D5:B6:D3:46:D4:B6:0A:44:CF:D7:04 X509v3 Authority Key Identifier: keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b4:e8:a6:8f:2f:f6:3b:34:64:41:70:54:e3:27:12:d6:76: 57:6b:e6:18:60:0d:5f:b0:f0:62:97:72:c1:3b:d1:b6:36:0c: ef:7a:c9:f1:35:ce:0f:7d:59:3a:10:2f:4a:19:e6:8f:a2:ef: aa:0b:43:9a:5b:bc:c2:5e:ac:f8:16:f6:6c:75:90:86:7e:6e: 24:f9:99:0f:c8:d4:ba:ee:b5:60:87:a6:2f:f9:b3:11:c0:f6: 39:ee:02:a8:2a:8d:4c:9b:78:d1:ac:5e:35:46:73:b5:12:c8: 44:fe:07:24:b8:6f:c8:8c:44:d0:66:a8:24:ee:e6:d5:02:5d: e9:f4:1c:f4:6e:10:5c:d7:22:4a:6e:44:1c:77:fc:39:0a:b1: 8a:18:b4:16:90:32:d1:71:66:68:f3:d4:a2:aa:45:c2:54:52: a0:94:a6:13:d7:37:2b:b8:1d:d6:b2:86:70:2d:fd:c7:44:db: 34:d5:0e:58:1d:d9:a7:6b:c4:3f:f9:f7:e6:88:e7:33:77:a9: 59:12:06:09:ca:af:e7:71:52:b8:04:17:38:57:6a:7f:3f:b4: a9:25:24:55:a0:b0:c4:fd:48:a6:e2:c2:bd:48:d7:6b:86:69: 95:f1:ce:04:db:96:a4:1b:80:78:14:16:2e:14:27:1c:b4:c3: 3f:cf:5b:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1MzIxMTAvBgNVBAUTKEM0RkE2QkJBQkZEMTk5N0NDOEYxRDIwRkU2QTU1NzRE RUU5QjMyNTYwHhcNMjUxMTAzMDI1MDEwWhcNMjUxMTEwMDI1MDEwWjAYMRYwFAYD VQQDEw02OTA4MTg2Mi1hNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlBXjsLDVZjOzXdVegoMWv06oYPslgDK/fd91Rgml7DX/agWv42dfH1D33oc DENBEQVQ9ZCQSThP/RVwAS8pkpceUAYCzEO3TYe66KnvjVyUCxflqpOTnf71AF6B nUBbJxhFILVvopxMcXHyKWJ4TgCZchMsR3jOL+cxPcSEQl40pvcbd/RkF5JwCNUi 8cEr6v/oALfec+txJqpMt+/HpPloHMUf2o+mZiXljgVdK99p+1MIxGZQ3SuHLhSj qua+7Uof8xz+jPX471Kn+kboosPsse2+BmkjzMgC4J9Ct0sKH8gx9A4W9H/UW0qZ osggtWiOMaOlOWFuMI7Y+jdNZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQBvY0l iuDONtW200bUtgpEz9cEMB8GA1UdIwQYMBaAFMT6a7q/0Zl8yPHSD+alV03umzJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzMi85QTY2RUI5RUY2 NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Yekk4ZElQNXFWWFRlNmJN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQcHJ1cl9SbVh6SThkSVA1cVZYVGU2Yk1sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzMi85QTY2RUI5RUY2NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Y ekk4ZElQNXFWWFRlNmJNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8tOimjy/2OzRkQXBU4ycS1nZXa+YYYA1fsPBil3LBO9G2Ngzvesnx Nc4PfVk6EC9KGeaPou+qC0OaW7zCXqz4FvZsdZCGfm4k+ZkPyNS67rVgh6Yv+bMR wPY57gKoKo1Mm3jRrF41RnO1EshE/gckuG/IjETQZqgk7ubVAl3p9Bz0bhBc1yJK bkQcd/w5CrGKGLQWkDLRcWZo89SiqkXCVFKglKYT1zcruB3WsoZwLf3HRNs01Q5Y Hdmna8Q/+ffmiOczd6lZEgYJyq/ncVK4BBc4V2p/P7SpJSRVoLDE/Uim4sK9SNdr hmmV8c4E25akG4B4FBYuFCcctMM/z1sn -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:23 2025 by rpki-client