$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json) Hash identifier: eekU+i8rM3YUsSiniPtdr4KXMPXHCvEmsWL8nnpACAw= Subject key identifier: EE:79:BE:31:D3:E4:7F:4C:C0:93:82:7F:D4:D9:31:3D:3E:57:8D:D8 Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Certificate serial: 195D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft Manifest number: 1952 Signing time: Tue 04 Nov 2025 16:30:45 +0000 Manifest this update: Tue 04 Nov 2025 16:30:45 +0000 Manifest next update: Tue 11 Nov 2025 16:30:45 +0000 Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: RxXJvI/wxU1QhnHqaeUwK43iAekp8xYZpkTO4j2Wbqw=) 2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: CF41fEpYfOio5+N+rdP4mHFE/1R/CEvPcYP/7UAC+WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6493 (0x195d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Validity Not Before: Nov 4 16:30:45 2025 GMT Not After : Nov 11 16:30:45 2025 GMT Subject: CN=690a2a35-c2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:06:77:8b:d9:3d:37:74:dd:a9:b0:f0:5c: cb:82:10:a9:f6:6e:a7:14:26:09:f2:bf:7e:28:58: 64:4a:a6:31:af:8d:5a:b7:18:1f:28:fb:f9:75:7a: f9:52:30:69:6f:f0:cb:79:f1:fc:c9:01:9a:b7:f3: f0:d8:65:fc:f5:39:0a:1f:a1:15:eb:c0:2e:f6:3e: 34:09:a7:65:42:56:b0:f4:b7:1a:9f:0f:1b:b7:c1: bd:17:6c:97:8a:30:df:85:5b:99:b8:a7:4e:56:95: fa:fa:b7:9a:91:c6:4d:92:01:a7:fa:5b:ca:03:ea: cc:fa:42:af:14:47:46:92:b2:18:a3:71:6b:23:a2: 1d:62:62:35:c8:e4:0a:be:ad:cb:34:8d:2b:c1:70: b2:de:07:83:5f:fd:ea:b1:a5:2e:79:1b:0d:eb:f5: b4:e3:af:cd:c8:58:a0:7d:99:75:8a:6f:af:82:e9: a6:60:0b:59:23:98:72:68:2a:e7:8d:ea:b8:c4:c1: e6:d0:0e:d8:d9:82:ac:dd:83:9d:92:21:71:15:70: 00:a3:32:0e:6e:e2:4f:62:4f:a3:84:ec:73:bb:59: ad:26:62:2e:a2:c0:54:5f:cd:51:ac:9f:40:18:1a: 0c:bd:91:40:ba:c5:9f:dc:8e:6c:65:b9:3d:4c:a0: 3a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:79:BE:31:D3:E4:7F:4C:C0:93:82:7F:D4:D9:31:3D:3E:57:8D:D8 X509v3 Authority Key Identifier: keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9c:d4:ea:84:ae:7f:b6:92:27:b2:a0:26:4a:5e:f0:7b:e9: 42:f0:ec:91:8e:d8:40:8d:d3:00:e2:5b:fe:3f:86:07:56:52: ff:7f:ef:d7:cf:ef:ea:f1:3b:ed:f1:72:11:79:b3:7e:9b:34: 8e:08:8b:3f:6c:e8:d2:ee:46:46:e7:91:ef:eb:74:15:e7:75: c0:d6:c5:49:61:12:51:c4:57:50:9f:31:22:90:f3:c3:65:24: e6:ca:c9:29:ce:e7:c4:b4:9c:a1:c8:97:cb:06:65:c7:29:2b: 90:3c:97:b9:42:bd:c2:ca:4b:ff:09:f1:c2:1d:8b:1b:c6:d2: 97:ee:d9:7d:86:6a:9d:8a:3c:ed:48:26:1b:54:e9:e3:01:4a: c2:62:b6:2c:01:a5:8e:8f:2d:ec:3b:05:dc:fa:e0:7f:e9:ec: e6:45:e6:16:de:de:ab:34:14:c0:1d:3a:94:c0:ab:d3:e3:c6: f4:3c:d9:c7:92:81:96:cc:67:2c:42:45:52:18:23:e6:0b:e9: 0f:2b:ed:1e:50:17:07:49:50:54:61:25:ea:03:a2:3e:3d:4d: 40:19:f8:66:2b:fb:7c:99:16:71:ca:47:4e:92:ae:87:f4:14: 81:b4:17:a8:b5:a6:5d:91:d6:a2:0a:e2:8e:a8:e0:c0:ed:cb: 77:88:9d:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNjExMTAvBgNVBAUTKEM0OEFBQ0VCNEREQUVFM0M2MDQyRTY2MjE2QUQ3OTE1 MDdCNDdDNkIwHhcNMjUxMTA0MTYzMDQ1WhcNMjUxMTExMTYzMDQ1WjAYMRYwFAYD VQQDEw02OTBhMmEzNS1jMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4UGd4vZPTd03amw8FzLghCp9m6nFCYJ8r9+KFhkSqYxr41atxgfKPv5dXr5 UjBpb/DLefH8yQGat/Pw2GX89TkKH6EV68Au9j40CadlQlaw9Lcanw8bt8G9F2yX ijDfhVuZuKdOVpX6+reakcZNkgGn+lvKA+rM+kKvFEdGkrIYo3FrI6IdYmI1yOQK vq3LNI0rwXCy3geDX/3qsaUueRsN6/W046/NyFigfZl1im+vgummYAtZI5hyaCrn jeq4xMHm0A7Y2YKs3YOdkiFxFXAAozIObuJPYk+jhOxzu1mtJmIuosBUX81RrJ9A GBoMvZFAusWf3I5sZbk9TKA6+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO55vjHT 5H9MwJOCf9TZMT0+V43YMB8GA1UdIwQYMBaAFMSKrOtN2u48YELmYhateRUHtHxr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY2MS8xNkE2REM2MDgz REExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdqeGdRdVppRnExNUZRZTBm R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJcXM2MDNhN2p4Z1F1WmlGcTE1RlFlMGZHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY2MS8xNkE2REM2MDgzREExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdq eGdRdVppRnExNUZRZTBmR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvnNTqhK5/tpInsqAmSl7we+lC8OyRjthAjdMA4lv+P4YHVlL/f+/X z+/q8Tvt8XIRebN+mzSOCIs/bOjS7kZG55Hv63QV53XA1sVJYRJRxFdQnzEikPPD ZSTmyskpzufEtJyhyJfLBmXHKSuQPJe5Qr3Cykv/CfHCHYsbxtKX7tl9hmqdijzt SCYbVOnjAUrCYrYsAaWOjy3sOwXc+uB/6ezmReYW3t6rNBTAHTqUwKvT48b0PNnH koGWzGcsQkVSGCPmC+kPK+0eUBcHSVBUYSXqA6I+PU1AGfhmK/t8mRZxykdOkq6H 9BSBtBeotaZdkdaiCuKOqODA7ct3iJ1C -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:02 2025 by rpki-client