$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json) Hash identifier: FJ/jK94mDAXMFq9sb67qL1cTczKWJOiJfkRM0+q5j9Y= Subject key identifier: FB:9D:54:92:16:9E:33:F5:98:6D:E4:43:87:13:A9:A0:2F:5F:EB:72 Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft Manifest number: 04B5 Signing time: Thu 23 Oct 2025 01:04:47 +0000 Manifest this update: Thu 23 Oct 2025 01:04:46 +0000 Manifest next update: Thu 30 Oct 2025 01:04:46 +0000 Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: DMVLuq2fG91DgNPPBLrjIGRlE7WYEJHUZ6dGCKMfwvI=) 2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: 9zlcNMp71CcrKhJ6RcgbQ3pW8nUmE/ShM6R3qPGEpIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Validity Not Before: Oct 23 01:04:46 2025 GMT Not After : Oct 30 01:04:46 2025 GMT Subject: CN=68f97f2f-85c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:c7:a6:ea:26:4e:00:1f:db:e9:03:78:36: 03:66:c1:02:d2:f7:83:b0:b9:b6:d5:76:0a:08:c6: af:80:83:3b:21:73:07:5b:bf:35:5c:95:96:fc:19: 8d:ea:62:7f:ab:50:8a:63:47:cf:c0:b2:e8:8c:3f: d8:9a:77:94:c9:b2:60:21:68:d5:15:70:fb:14:bb: 37:ea:a5:e6:0e:d3:e7:8d:34:4c:c3:fb:78:0b:43: 1f:cf:ea:5a:bc:c8:d1:a7:05:ba:f7:57:73:00:6a: f9:79:a0:7d:ee:57:63:29:b9:fb:03:23:d9:0a:81: 2b:ab:64:4c:c2:12:b9:20:50:bb:97:5e:75:9c:8a: ef:dd:79:ea:aa:8d:d0:b8:80:66:57:c9:99:0b:30: 6a:c2:00:09:51:6e:a5:70:3f:31:f1:61:24:3a:93: 9d:e6:bb:57:71:87:64:db:4a:b3:e3:44:c3:ce:3b: 4f:78:19:d2:f8:9e:72:19:cc:9f:7d:91:6d:2c:61: 96:f4:27:fc:e9:97:34:f4:35:81:79:a4:94:ed:9a: bb:0a:e1:6f:55:a2:52:03:a1:74:4a:6e:ce:64:88: 45:cb:cb:55:7b:ce:ae:56:1c:4f:50:59:f7:d3:36: cc:f4:59:80:8d:9f:0f:6d:8a:13:5a:39:a5:f2:01: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9D:54:92:16:9E:33:F5:98:6D:E4:43:87:13:A9:A0:2F:5F:EB:72 X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:9a:03:e4:a5:d3:47:f2:e2:ed:03:49:69:0d:df:8d:04:41: bf:29:da:6a:04:1e:be:ad:29:34:6b:aa:7b:0c:2f:c1:76:2f: ed:e9:1d:a4:2e:7d:77:11:7a:15:3f:7e:9d:c4:78:41:5b:5a: cd:84:cf:97:f4:18:83:75:d3:fb:a2:03:13:12:25:5f:cc:93: 23:62:da:a2:38:e7:47:d4:45:1d:e2:15:f5:3a:3f:e4:0e:1b: 2e:a3:05:de:5b:f3:2f:50:26:e6:73:7f:bf:c7:32:6a:d4:62: ad:be:ab:b4:22:b9:ce:e1:98:7e:1a:2e:00:ee:a6:33:ab:a0: d2:13:fc:33:b5:28:66:b5:a9:5f:86:db:00:4d:0e:13:c0:b9: 7a:c7:ed:df:2a:9d:c2:e6:ab:66:61:b3:cb:56:0f:7e:8c:09: c3:32:86:fd:9f:2c:60:fd:30:96:ad:2e:72:f9:92:e8:97:4a: f1:14:0b:2e:d5:3f:90:10:17:a2:24:69:ed:ca:26:9a:3e:f9: 79:66:a7:cf:dc:3e:ad:ca:a4:77:fb:e4:b3:54:7c:f7:98:7a: 83:7a:96:98:97:b8:08:04:e6:e0:2d:7a:7b:d4:41:4c:f7:92: b7:dd:8e:08:20:d4:86:22:83:a0:ba:8d:1b:77:3f:d8:3d:ee: 36:f3:c7:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjUxMDIzMDEwNDQ2WhcNMjUxMDMwMDEwNDQ2WjAYMRYwFAYD VQQDEw02OGY5N2YyZi04NWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NTHpuomTgAf2+kDeDYDZsEC0veDsLm21XYKCMavgIM7IXMHW781XJWW/BmN 6mJ/q1CKY0fPwLLojD/YmneUybJgIWjVFXD7FLs36qXmDtPnjTRMw/t4C0Mfz+pa vMjRpwW691dzAGr5eaB97ldjKbn7AyPZCoErq2RMwhK5IFC7l151nIrv3Xnqqo3Q uIBmV8mZCzBqwgAJUW6lcD8x8WEkOpOd5rtXcYdk20qz40TDzjtPeBnS+J5yGcyf fZFtLGGW9Cf86Zc09DWBeaSU7Zq7CuFvVaJSA6F0Sm7OZIhFy8tVe86uVhxPUFn3 0zbM9FmAjZ8PbYoTWjml8gGjAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPudVJIW njP1mG3kQ4cTqaAvX+tyMB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUI0My9FNUI4Mzk4MjRCM0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1O YVdwY0dwLW5ncDlsSnp5bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUmgPkpdNH8uLtA0lpDd+NBEG/KdpqBB6+rSk0a6p7DC/Bdi/t6R2k Ln13EXoVP36dxHhBW1rNhM+X9BiDddP7ogMTEiVfzJMjYtqiOOdH1EUd4hX1Oj/k DhsuowXeW/MvUCbmc3+/xzJq1GKtvqu0IrnO4Zh+Gi4A7qYzq6DSE/wztShmtalf htsATQ4TwLl6x+3fKp3C5qtmYbPLVg9+jAnDMob9nyxg/TCWrS5y+ZLol0rxFAsu 1T+QEBeiJGntyiaaPvl5ZqfP3D6tyqR3++SzVHz3mHqDepaYl7gIBObgLXp71EFM 95K33Y4IINSGIoOguo0bdz/YPe4288d0 -----END CERTIFICATE-----Generated at Fri Oct 24 06:01:56 2025 by rpki-client