$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json) Hash identifier: igfELXZG3g3Mv9SnWjy0ljDjuq78y+mXtCz2CT2bTkc= Subject key identifier: BD:D6:5E:09:9F:1E:50:FD:2E:33:59:34:E4:65:B4:5D:81:46:E7:C8 Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft Manifest number: 17F4 Signing time: Sun 02 Nov 2025 17:35:32 +0000 Manifest this update: Sun 02 Nov 2025 17:35:31 +0000 Manifest next update: Sun 09 Nov 2025 17:35:31 +0000 Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: RQlON298pBcox5lWmVh9++TU79Mghj+HtcYQpWpOoQA=) 2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: t2aB2zeGB7GLVJUFKuYwNrlRUrrBiilMq9C3DO3eLYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Validity Not Before: Nov 2 17:35:31 2025 GMT Not After : Nov 9 17:35:31 2025 GMT Subject: CN=69079663-7010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:d0:79:e9:e2:83:a4:5f:db:1c:6e:85:9c: b0:5a:89:c2:39:b9:d4:8a:25:28:fa:e6:d4:01:60: 42:5d:d0:5c:3a:ff:79:7f:85:13:29:b6:7a:64:29: 43:93:1a:a1:d7:9c:b3:d0:8a:db:7d:9d:4f:d6:0f: 91:0e:ed:24:fa:22:c4:e9:34:64:59:71:07:26:25: 5b:cc:ad:f2:90:38:3e:96:7b:79:76:9b:80:d2:1e: 65:2e:28:a6:1c:97:82:95:0f:23:dc:aa:87:2d:35: dd:4c:29:20:e7:e7:36:fa:28:14:de:d6:1b:fc:85: ec:ac:d8:23:6d:ba:a7:df:cc:b0:1f:ba:24:46:52: 34:8a:e6:41:31:58:44:23:63:91:61:be:e8:9f:72: 03:eb:12:27:78:f8:1d:c8:f1:40:85:58:2d:dd:a8: 7b:18:0f:57:a5:80:16:d0:0b:83:4e:51:b3:7f:53: 1d:5c:e1:93:c3:18:9c:cf:87:98:a2:ea:be:4d:ec: a2:1e:24:41:9b:9c:73:5c:9f:9d:f6:dd:53:05:00: ed:29:03:ca:d0:30:bd:5d:c3:f3:f1:c0:7f:33:2a: 34:67:f4:1f:5f:de:f5:0d:3c:b4:7a:1d:49:e8:aa: 0a:f4:ff:eb:ac:d8:a9:e7:20:06:78:a7:13:69:d6: 20:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D6:5E:09:9F:1E:50:FD:2E:33:59:34:E4:65:B4:5D:81:46:E7:C8 X509v3 Authority Key Identifier: keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f7:42:c9:74:b1:e4:89:60:3e:4a:20:63:6b:4d:c2:81:16: 2f:03:16:16:bc:dd:f8:1d:fd:3c:28:15:40:0a:fb:19:f7:12: 9a:41:65:75:4d:17:c2:34:f6:a4:be:40:f7:1d:70:e4:c8:df: 91:22:e2:14:ff:c4:98:b9:b2:93:f6:b8:a7:48:62:40:f0:ba: 8f:7d:a7:93:c8:45:eb:0c:69:db:ca:a3:ab:e3:3d:51:ac:c3: 04:57:2a:df:d5:5d:83:a0:4f:ff:6a:3e:32:f7:4e:3a:c8:c0: 74:a1:dc:3f:f9:d7:47:7c:22:b5:bd:5d:82:50:9a:af:f1:5b: 42:f5:4a:0f:fb:2d:d8:ac:be:68:94:bd:04:b4:b5:c2:8b:b6: de:f1:43:f3:47:d0:61:7f:4d:3f:2c:6b:b3:cc:b2:b1:1e:fb: a4:0a:2c:f0:56:20:8c:c0:7e:47:57:26:70:c3:58:50:10:34: 2f:59:5e:bb:26:9d:bf:94:4e:5c:86:1e:0d:07:91:8d:db:bd: b9:45:d1:27:89:71:2c:d7:99:f5:76:47:f8:d5:67:da:bb:61: c2:bb:ee:66:ca:72:47:d7:2e:5c:57:3d:2e:b7:12:f4:5f:dc: 2b:36:50:4d:4c:a0:e9:3d:7f:e3:64:26:6b:2d:89:3e:1d:5f: c7:54:cf:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKDVDRTU5QkVBNDA0OTNGQ0M1NzQ2NzE2OTIyRjE5ODhE OTYyOTFGQkUwHhcNMjUxMTAyMTczNTMxWhcNMjUxMTA5MTczNTMxWjAYMRYwFAYD VQQDEw02OTA3OTY2My03MDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21HQeenig6Rf2xxuhZywWonCObnUiiUo+ubUAWBCXdBcOv95f4UTKbZ6ZClD kxqh15yz0IrbfZ1P1g+RDu0k+iLE6TRkWXEHJiVbzK3ykDg+lnt5dpuA0h5lLiim HJeClQ8j3KqHLTXdTCkg5+c2+igU3tYb/IXsrNgjbbqn38ywH7okRlI0iuZBMVhE I2ORYb7on3ID6xInePgdyPFAhVgt3ah7GA9XpYAW0AuDTlGzf1MdXOGTwxicz4eY ouq+TeyiHiRBm5xzXJ+d9t1TBQDtKQPK0DC9XcPz8cB/Myo0Z/QfX971DTy0eh1J 6KoK9P/rrNip5yAGeKcTadYgewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3WXgmf HlD9LjNZNORltF2BRufIMB8GA1UdIwQYMBaAFFzlm+pAST/MV0ZxaSLxmI2WKR++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4eFhSbkZwSXZHWWpaWXBI NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPV2I2a0JKUDh4WFJuRnBJdkdZalpZcEg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4 eFhSbkZwSXZHWWpaWXBINzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP90LJdLHkiWA+SiBja03CgRYvAxYWvN34Hf08KBVACvsZ9xKaQWV1 TRfCNPakvkD3HXDkyN+RIuIU/8SYubKT9rinSGJA8LqPfaeTyEXrDGnbyqOr4z1R rMMEVyrf1V2DoE//aj4y9046yMB0odw/+ddHfCK1vV2CUJqv8VtC9UoP+y3YrL5o lL0EtLXCi7be8UPzR9Bhf00/LGuzzLKxHvukCizwViCMwH5HVyZww1hQEDQvWV67 Jp2/lE5chh4NB5GN2725RdEniXEs15n1dkf41Wfau2HCu+5mynJH1y5cVz0utxL0 X9wrNlBNTKDpPX/jZCZrLYk+HV/HVM9F -----END CERTIFICATE-----Generated at Tue Nov 4 01:08:23 2025 by rpki-client