$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json) Hash identifier: H7a4RLZFv2PCNEUjvx/jxANRE3NxqOFMCcSjhB0ZYGQ= Subject key identifier: 27:3B:22:1B:0C:1B:BE:5E:6F:CF:88:A9:87:C4:24:50:61:33:BD:07 Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft Manifest number: 01C1 Signing time: Wed 05 Nov 2025 03:04:46 +0000 Manifest this update: Wed 05 Nov 2025 03:04:45 +0000 Manifest next update: Wed 12 Nov 2025 03:04:45 +0000 Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: kzQMxJmUMu+q1BFZvq7VHlWMzwNd0bSspcXjUfrk69Y=) 2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: eGRq+1XhrILN9pC7Bu29wtZG2xTxwIWpAe96/Tzv+yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Validity Not Before: Nov 5 03:04:45 2025 GMT Not After : Nov 12 03:04:45 2025 GMT Subject: CN=690abecd-41b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:78:ff:84:46:62:81:ad:42:c1:d5:6c:06: 98:4e:aa:86:1a:18:e7:35:c3:5b:53:e4:19:9d:91: a3:d0:b0:93:84:64:9d:73:57:64:ce:d5:f4:11:f4: 75:c1:33:89:78:9d:f5:3c:89:94:2c:98:a4:13:99: f2:5e:aa:10:39:18:11:1b:80:fd:b5:16:a9:89:f8: a6:2d:ec:4c:93:36:64:b7:c4:9a:e5:9e:a1:31:a6: 19:68:ab:3d:2c:0f:88:2f:22:89:95:4a:5f:30:de: 7c:bc:77:d5:d1:bd:d2:ef:e5:4b:cc:b2:e2:13:eb: eb:53:bd:bf:e7:74:59:97:fa:75:54:53:fb:56:5a: 76:35:d9:83:fc:22:41:31:e8:a4:7a:b7:3c:58:8a: ce:5c:b5:cb:fc:93:4c:6f:2d:ec:cd:83:f0:78:ef: 50:28:d0:2c:62:58:97:d8:70:38:08:4a:4c:e8:2e: 42:42:28:27:fd:a1:5d:3a:41:71:52:04:be:42:c6: 44:bf:8d:60:91:cf:f4:b8:17:67:f3:61:13:cd:6a: cd:0a:f9:33:b9:e4:50:21:89:ec:fc:81:c8:c3:a4: 3d:11:e9:b6:01:b1:ef:56:b9:6d:ef:7b:94:83:de: 6b:3f:96:34:30:4f:83:b5:11:c3:d1:8c:33:0a:37: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3B:22:1B:0C:1B:BE:5E:6F:CF:88:A9:87:C4:24:50:61:33:BD:07 X509v3 Authority Key Identifier: keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:fe:2f:44:aa:49:85:9e:1c:05:38:64:62:f7:d2:4e:08:18: c7:0b:c9:e3:a4:1d:e1:92:2d:f2:06:56:c3:60:3f:e7:ea:ab: 63:6c:e6:84:0b:f4:47:c5:7d:ef:37:23:74:74:7d:81:26:99: 6f:5a:9f:ea:f9:74:93:3b:a5:13:04:d2:89:48:13:54:1a:3c: f9:d2:64:35:de:ed:20:50:a2:1f:30:a1:ab:e2:e2:65:22:aa: 3f:b4:0e:fa:49:64:f8:9e:8c:cd:37:fd:24:04:10:8a:7b:f9: 77:40:46:01:8d:6c:f6:86:fe:e8:a9:06:8b:7f:a8:0b:d8:9f: c3:c6:7b:29:4a:2b:5e:d8:23:f9:ed:28:56:c3:0e:69:f1:e9: 1d:d8:c4:a3:0d:48:ec:e3:5d:e0:4e:cb:85:08:bb:c2:3b:66: 97:6d:26:56:b0:3c:98:b1:cc:0e:40:0f:d3:79:94:27:bc:79: f3:01:5b:1f:b0:0c:ba:46:3c:6e:99:32:45:d5:94:b3:72:5a: 6e:40:b5:ec:3e:3e:97:c8:55:47:c9:f4:a0:4a:d4:52:04:d3: d1:cb:89:9e:b9:06:34:9d:6d:d2:cf:a7:5f:e8:0e:08:b8:03: a9:cb:55:bb:e7:45:ef:31:4a:ce:d6:87:8f:74:f2:fa:54:39: fb:f0:eb:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcwREFFOTEwNDIz NjExQTMxOTIwHhcNMjUxMTA1MDMwNDQ1WhcNMjUxMTEyMDMwNDQ1WjAYMRYwFAYD VQQDEw02OTBhYmVjZC00MWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE54/4RGYoGtQsHVbAaYTqqGGhjnNcNbU+QZnZGj0LCThGSdc1dkztX0EfR1 wTOJeJ31PImULJikE5nyXqoQORgRG4D9tRapifimLexMkzZkt8Sa5Z6hMaYZaKs9 LA+ILyKJlUpfMN58vHfV0b3S7+VLzLLiE+vrU72/53RZl/p1VFP7Vlp2NdmD/CJB Meikerc8WIrOXLXL/JNMby3szYPweO9QKNAsYliX2HA4CEpM6C5CQign/aFdOkFx UgS+QsZEv41gkc/0uBdn82ETzWrNCvkzueRQIYns/IHIw6Q9Eem2AbHvVrlt73uU g95rP5Y0ME+DtRHD0YwzCjcg3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCc7IhsM G75eb8+IqYfEJFBhM70HMB8GA1UdIwQYMBaAFMZU/Eds3y4wa+J3Da6RBCNhGjGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTc1MC80NTFENkE2QTA2 QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6ZkxqQnI0bmNOcnBFRUkyRWFN WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsVDhSMnpmTGpCcjRuY05ycEVFSTJFYU1aSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6Zkxq QnI0bmNOcnBFRUkyRWFNWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy/i9EqkmFnhwFOGRi99JOCBjHC8njpB3hki3yBlbDYD/n6qtjbOaE C/RHxX3vNyN0dH2BJplvWp/q+XSTO6UTBNKJSBNUGjz50mQ13u0gUKIfMKGr4uJl Iqo/tA76SWT4nozNN/0kBBCKe/l3QEYBjWz2hv7oqQaLf6gL2J/DxnspSite2CP5 7ShWww5p8ekd2MSjDUjs413gTsuFCLvCO2aXbSZWsDyYscwOQA/TeZQnvHnzAVsf sAy6RjxumTJF1ZSzclpuQLXsPj6XyFVHyfSgStRSBNPRy4meuQY0nW3Sz6df6A4I uAOpy1W750XvMUrO1oePdPL6VDn78OsE -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:31 2025 by rpki-client