$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: M2r4wqdMLrD6lw8QnDa+lkHE+dH1NHtQvxU9EgIvEgU= Subject key identifier: B2:46:7B:5C:EA:A9:42:7A:81:FD:8C:16:13:AD:AA:12:D2:17:0A:DA Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 020F Signing time: Mon 03 Nov 2025 02:12:53 +0000 Manifest this update: Mon 03 Nov 2025 02:12:53 +0000 Manifest next update: Mon 10 Nov 2025 02:12:53 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: NOaBnNIvwJGfvHHNE6wxVwf5yPnCV93R4SdqMwUOijo=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: Nov 3 02:12:53 2025 GMT Not After : Nov 10 02:12:53 2025 GMT Subject: CN=69080fa5-421e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1d:36:d9:81:c9:f8:f3:ad:41:a6:c9:49:2f: 37:e2:89:09:ef:36:8d:36:ea:16:6c:10:8d:69:d3: cc:ba:ce:cc:2d:4b:36:41:b4:f8:d1:ed:ef:f7:55: c1:17:fe:e6:36:26:cc:c9:ff:05:dd:6f:eb:fa:00: 04:da:76:19:12:8f:39:f0:b6:8b:b1:6e:8a:16:a0: e0:27:9c:ac:40:f0:ae:e3:5f:66:5d:dc:6b:42:a0: cc:21:c7:26:87:30:1f:1c:40:ea:a6:a2:d0:af:be: 7c:32:f4:bc:b1:fe:c5:aa:a4:63:ac:d5:4a:c2:b6: 65:39:a6:03:29:ba:74:25:7c:76:2b:ea:30:a6:82: 56:0e:50:d3:62:3f:4b:79:4e:e6:14:83:f6:99:65: 61:da:06:38:ae:20:28:b6:82:94:bc:57:fc:e9:bc: ea:ec:e9:7d:58:31:7a:cb:86:d4:0c:83:c7:38:26: 89:03:47:14:2e:4f:02:50:7e:dd:70:c9:cc:ce:cd: 9d:d3:a4:4c:14:a4:89:a0:36:d7:ac:8c:9d:22:fc: 35:d2:20:f8:eb:ab:4e:c5:8e:99:ad:19:d5:08:ce: 1e:16:82:69:1f:be:82:26:1f:42:d5:2a:fa:83:ae: c0:4f:59:a1:7a:cd:59:f0:c0:96:7c:b3:bc:b9:6f: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:46:7B:5C:EA:A9:42:7A:81:FD:8C:16:13:AD:AA:12:D2:17:0A:DA X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fe:c6:6b:4b:d4:82:e9:e3:88:c9:8d:d5:17:d4:86:06:7d: 0b:13:ca:d0:78:20:26:5a:98:ca:d7:f8:bd:28:0e:4f:b9:a2: b8:2e:fc:95:ce:dd:2b:7f:53:9d:94:75:3f:90:c3:31:dc:65: 86:2a:90:fe:c5:39:09:46:ac:31:f7:0d:48:04:c1:50:f0:9c: d9:6f:f7:fa:fd:69:47:36:07:d4:2c:ed:8b:3b:a7:19:4b:b2: 4d:62:07:5b:40:cb:5c:04:f8:8c:bd:3d:77:dd:be:21:0b:da: 07:55:20:63:67:58:ea:33:51:96:a9:28:76:04:02:81:8f:d5: 59:f3:ca:51:91:50:43:2d:09:67:ec:8d:61:34:d4:c0:c0:bc: c1:83:6c:e3:a7:d2:58:98:9f:11:4c:ae:31:b5:5c:13:60:e4: c5:ca:df:8d:54:16:ac:64:d9:e8:fa:ef:44:cc:01:9d:6b:da: 1a:08:5a:9e:79:0f:a8:ae:77:37:42:a2:dc:0c:a0:2e:38:b6: ff:be:94:1c:60:0f:1c:73:0f:51:a4:7a:da:8e:20:13:0c:da: e7:72:46:66:fe:10:54:c7:41:17:84:a9:a6:a4:16:22:21:25: 5b:c5:49:eb:9b:97:fa:87:6d:b8:d9:e2:ee:fd:49:50:5d:07: 11:7a:68:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjUxMTAzMDIxMjUzWhcNMjUxMTEwMDIxMjUzWjAYMRYwFAYD VQQDEw02OTA4MGZhNS00MjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoB022YHJ+POtQabJSS834okJ7zaNNuoWbBCNadPMus7MLUs2QbT40e3v91XB F/7mNibMyf8F3W/r+gAE2nYZEo858LaLsW6KFqDgJ5ysQPCu419mXdxrQqDMIccm hzAfHEDqpqLQr758MvS8sf7FqqRjrNVKwrZlOaYDKbp0JXx2K+owpoJWDlDTYj9L eU7mFIP2mWVh2gY4riAotoKUvFf86bzq7Ol9WDF6y4bUDIPHOCaJA0cULk8CUH7d cMnMzs2d06RMFKSJoDbXrIydIvw10iD466tOxY6ZrRnVCM4eFoJpH76CJh9C1Sr6 g67AT1mhes1Z8MCWfLO8uW9rWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJGe1zq qUJ6gf2MFhOtqhLSFwraMB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8/sZrS9SC6eOIyY3VF9SGBn0LE8rQeCAmWpjK1/i9KA5PuaK4LvyV zt0rf1OdlHU/kMMx3GWGKpD+xTkJRqwx9w1IBMFQ8JzZb/f6/WlHNgfULO2LO6cZ S7JNYgdbQMtcBPiMvT133b4hC9oHVSBjZ1jqM1GWqSh2BAKBj9VZ88pRkVBDLQln 7I1hNNTAwLzBg2zjp9JYmJ8RTK4xtVwTYOTFyt+NVBasZNno+u9EzAGda9oaCFqe eQ+ornc3QqLcDKAuOLb/vpQcYA8ccw9RpHrajiATDNrnckZm/hBUx0EXhKmmpBYi ISVbxUnrm5f6h2242eLu/UlQXQcRemhS -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:44 2025 by rpki-client