$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft File: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft (raw, json) Hash identifier: ZoNTK01HgdKKtANvj69W7lJnnqoGN5lpN48xDgqhHvw= Subject key identifier: 5C:4B:23:E8:48:12:6B:83:60:EB:6C:5F:43:B9:14:1E:9F:2F:22:BD Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48 Certificate issuer: /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft Manifest number: 40 Signing time: Wed 05 Nov 2025 07:38:21 +0000 Manifest this update: Wed 05 Nov 2025 07:38:21 +0000 Manifest next update: Wed 12 Nov 2025 07:38:21 +0000 Files and hashes: 1: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl (hash: K+LkCjKwSwTZPFB9g4MsXEFhCKSK49Jdzkqu7FQJ/fk=) 2: BD71164A59A211F09EC86C38C4F9AE02.roa (hash: LzVxtpFkoDUrbmBrIAWx2A82oGmfgpKdIsb6/8/yXfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348 Validity Not Before: Nov 5 07:38:21 2025 GMT Not After : Nov 12 07:38:21 2025 GMT Subject: CN=690afeed-3ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:f4:cd:6c:ee:8a:6d:ac:23:7c:fc:3a:fa: 9c:eb:7c:19:57:fc:18:31:fe:0c:a5:2f:ab:ef:71: df:35:ce:42:57:ef:78:6a:ff:a7:b4:11:5e:29:d8: 69:0b:f5:40:fe:c3:0b:f2:7e:99:01:8f:00:96:02: 72:b9:7f:c9:02:fc:b3:44:4a:e4:c5:42:c3:17:04: 55:73:83:6b:b7:09:70:07:f3:9b:86:cb:b2:c2:a8: 3d:03:cb:cd:a8:33:17:17:17:12:6f:b1:8e:fe:ad: 0b:77:da:95:dc:d6:4d:10:b1:ef:fc:2f:b0:8b:45: 15:40:85:ae:12:40:17:62:d8:67:29:3d:f8:92:13: 82:e9:82:b4:5d:46:99:ea:e6:af:ee:f3:21:73:f4: d9:a2:f3:8f:06:fb:c6:3f:b2:f0:70:7f:91:77:1d: 8d:60:e8:2f:14:aa:6c:3a:01:82:d9:0a:25:18:56: f7:03:57:f6:f5:4d:bb:68:88:60:84:dc:1c:4e:c9: c4:60:bb:4f:f7:42:3c:ad:e2:6f:72:ba:9d:70:5e: c6:30:90:01:3c:4a:53:86:56:01:58:ad:d8:73:fb: 06:ab:72:7b:58:29:90:f6:35:50:ce:ce:f8:85:73: 3b:3a:9c:78:02:bf:79:b8:5e:58:0c:55:0c:8a:0a: c3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4B:23:E8:48:12:6B:83:60:EB:6C:5F:43:B9:14:1E:9F:2F:22:BD X509v3 Authority Key Identifier: keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:db:a9:32:83:2d:35:26:a7:a3:1d:0a:f9:ba:25:0c:95:32: 6d:e6:c2:a8:f3:36:f2:36:38:f7:bd:b0:4e:ab:b7:b0:8f:07: df:e7:9d:87:e9:fe:c1:cd:5e:de:3a:2b:b3:67:58:e5:20:a5: 9f:f5:a9:c9:f9:52:a8:fa:aa:f1:99:54:18:3b:68:70:77:e9: 46:b2:b3:10:4b:39:b4:16:96:8d:01:92:eb:a9:46:ab:61:81: e8:0a:0d:a7:1f:0c:d5:7d:d8:b3:73:42:5e:4f:3e:1d:35:4b: 8a:2a:88:3c:f9:56:ce:b3:d3:55:02:1e:02:8f:de:62:69:3b: 2f:0c:c9:99:cf:07:95:80:23:a1:a2:f5:bb:ec:bc:aa:93:3f: 01:89:2c:7d:a9:c2:77:d8:79:a3:ec:b0:0e:97:06:44:ac:44: b5:14:ae:63:51:7a:ae:3d:75:5d:82:c0:9f:17:ca:3b:6f:6c: 80:aa:bc:a7:56:72:11:e0:27:94:11:89:62:07:5f:13:e3:b6: d8:cd:27:c3:6c:a0:1f:8e:13:41:17:80:e8:46:41:41:53:a0: e6:75:7b:51:3d:8c:10:32:40:45:4c:58:35:9d:3e:e3:e6:d9: a9:92:7c:31:cb:b8:38:cb:01:17:58:c0:e2:08:93:2d:5c:25: 25:3d:a0:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjM3MjExMC8GA1UEBRMoNUU2MEI4NERCOTFCNkMwODY1MDIwQ0UwRjIwNkM1MzQ5 RTRCODM0ODAeFw0yNTExMDUwNzM4MjFaFw0yNTExMTIwNzM4MjFaMBgxFjAUBgNV BAMTDTY5MGFmZWVkLTNlZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAefTNbO6KbawjfPw6+pzrfBlX/Bgx/gylL6vvcd81zkJX73hq/6e0EV4p2GkL 9UD+wwvyfpkBjwCWAnK5f8kC/LNESuTFQsMXBFVzg2u3CXAH85uGy7LCqD0Dy82o MxcXFxJvsY7+rQt32pXc1k0Qse/8L7CLRRVAha4SQBdi2GcpPfiSE4LpgrRdRpnq 5q/u8yFz9Nmi848G+8Y/svBwf5F3HY1g6C8Uqmw6AYLZCiUYVvcDV/b1TbtoiGCE 3BxOycRgu0/3Qjyt4m9yup1wXsYwkAE8SlOGVgFYrdhz+warcntYKZD2NVDOzviF czs6nHgCv3m4XlgMVQyKCsN3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXEsj6EgS a4Ng62xfQ7kUHp8vIr0wHwYDVR0jBBgwFoAUXmC4TbkbbAhlAgzg8gbFNJ5Lg0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MzcyL0U2RDk1MjYwNTlB MDExRjA4Mjg2RDMzMkM0RjlBRTAyL1htQzRUYmtiYkFobEFnemc4Z2JGTko1TGcw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWG1DNFRia2JiQWhsQWd6ZzhnYkZOSjVMZzBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MzcyL0U2RDk1MjYwNTlBMDExRjA4Mjg2RDMzMkM0RjlBRTAyL1htQzRUYmtiYkFo bEFnemc4Z2JGTko1TGcwZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHbbqTKDLTUmp6MdCvm6JQyVMm3mwqjzNvI2OPe9sE6rt7CPB9/nnYfp /sHNXt46K7NnWOUgpZ/1qcn5Uqj6qvGZVBg7aHB36UaysxBLObQWlo0BkuupRqth gegKDacfDNV92LNzQl5PPh01S4oqiDz5Vs6z01UCHgKP3mJpOy8MyZnPB5WAI6Gi 9bvsvKqTPwGJLH2pwnfYeaPssA6XBkSsRLUUrmNReq49dV2CwJ8XyjtvbICqvKdW chHgJ5QRiWIHXxPjttjNJ8NsoB+OE0EXgOhGQUFToOZ1e1E9jBAyQEVMWDWdPuPm 2amSfDHLuDjLARdYwOIIky1cJSU9oD8= -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:36 2025 by rpki-client