$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json) Hash identifier: zri+vQGTiQ/4ryunM68MjbjLfelY4CWLNaCgyF8LS1k= Subject key identifier: 10:78:47:1A:EB:1F:CA:22:7F:40:38:3D:57:AF:D5:52:91:F0:B3:5E Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft Manifest number: B8 Signing time: Mon 27 Oct 2025 05:51:10 +0000 Manifest this update: Mon 27 Oct 2025 05:51:09 +0000 Manifest next update: Mon 03 Nov 2025 05:51:09 +0000 Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: xiz3xcIZxULsq67aPs6n/VQJioC8kVuds+Up7LYN2Jo=) 2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=) 3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 05:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Validity Not Before: Oct 27 05:51:09 2025 GMT Not After : Nov 3 05:51:09 2025 GMT Subject: CN=68ff084e-0139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b7:f7:3f:fc:a4:4d:08:5d:fd:4a:16:4a:b8: 2a:89:df:fe:c9:e5:6e:e6:ba:16:9e:81:cb:9c:8a: a4:a4:8c:a0:fe:b5:8b:84:64:14:8c:16:d3:28:33: 68:e8:c5:3a:78:84:ca:b6:41:05:b8:6d:b1:9f:02: 59:9f:60:d1:38:ee:ff:2b:fb:df:6e:44:d9:74:80: 5f:38:c7:e3:e6:58:87:16:09:4e:b7:73:f3:fc:25: 2a:39:a0:e6:f9:01:7b:64:d0:20:28:d3:e7:a7:41: 3c:96:9f:fc:32:b3:c8:7c:42:2f:28:a2:86:34:38: 5f:91:cd:c8:59:50:48:84:69:26:6a:d8:01:cd:73: fb:74:66:b0:53:61:b8:95:40:42:40:d3:cf:7c:d8: 15:0d:b1:01:61:03:63:86:0a:49:d0:db:4c:68:b2: fd:ab:d4:84:b9:59:d4:55:6b:06:7f:de:d8:f5:03: 79:59:7b:f7:49:12:2f:84:9c:ea:f0:0a:5c:b4:d2: d4:55:a2:c4:ca:18:32:7c:c4:67:c3:22:b8:33:44: 16:64:2e:27:f1:f1:ab:b4:90:5d:7e:b6:40:19:66: 99:5d:91:d0:8b:1f:1f:65:b6:54:b4:4a:be:24:8c: fb:7b:5a:3e:db:0d:cf:b5:f5:cd:71:ca:d3:46:dd: 20:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:78:47:1A:EB:1F:CA:22:7F:40:38:3D:57:AF:D5:52:91:F0:B3:5E X509v3 Authority Key Identifier: keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f0:ea:cf:30:04:f8:48:c3:43:10:f0:5e:ec:8b:23:2b:6c: 88:bd:cc:77:c4:c5:91:87:ac:6c:cd:2d:3e:c3:78:f1:50:85: d2:23:a2:5b:e9:c8:05:27:fd:e8:85:04:fd:2c:85:54:40:0c: 7a:54:ed:bd:87:dc:e7:fe:74:c5:4c:3e:dd:44:06:6d:fa:27: 1e:87:d8:a1:d7:51:62:46:5f:19:aa:9e:b9:bd:f6:e7:6f:77: 66:37:04:ef:97:19:dd:81:0f:32:54:3f:5c:71:70:49:42:a9: c9:7b:a2:9f:88:b7:b9:de:bd:c9:b6:a2:80:57:8e:77:7b:6e: 76:2f:12:17:00:07:f6:62:f9:28:06:81:3e:46:dd:be:f2:97: 64:54:07:30:49:1f:27:7c:f1:83:a5:d4:bf:5b:32:b3:ba:96: e5:3e:a4:71:ef:ae:91:b6:ff:f9:20:74:5e:91:a3:83:16:10: 1e:72:85:c4:63:41:c6:3e:f0:94:eb:84:e9:72:a9:3f:62:f5: dc:fd:b0:8a:8e:b0:9f:42:60:c1:0b:f0:b6:b3:2a:91:e3:a6: 6b:ab:ae:32:5f:c2:dd:5c:86:32:6f:54:ce:bf:fc:39:de:61: 1d:49:30:f8:97:da:89:af:fc:7f:83:c7:13:98:86:f2:fd:40: 0c:82:cc:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCODUxMTAvBgNVBAUTKEM1NTY0REVDMTAxNjYzQkY0M0QzRjJFMzQwMzk0QzAw NzY2QTYzRTMwHhcNMjUxMDI3MDU1MTA5WhcNMjUxMTAzMDU1MTA5WjAYMRYwFAYD VQQDEw02OGZmMDg0ZS0wMTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9rf3P/ykTQhd/UoWSrgqid/+yeVu5roWnoHLnIqkpIyg/rWLhGQUjBbTKDNo 6MU6eITKtkEFuG2xnwJZn2DROO7/K/vfbkTZdIBfOMfj5liHFglOt3Pz/CUqOaDm +QF7ZNAgKNPnp0E8lp/8MrPIfEIvKKKGNDhfkc3IWVBIhGkmatgBzXP7dGawU2G4 lUBCQNPPfNgVDbEBYQNjhgpJ0NtMaLL9q9SEuVnUVWsGf97Y9QN5WXv3SRIvhJzq 8ApctNLUVaLEyhgyfMRnwyK4M0QWZC4n8fGrtJBdfrZAGWaZXZHQix8fZbZUtEq+ JIz7e1o+2w3PtfXNccrTRt0gQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB4Rxrr H8oif0A4PVev1VKR8LNeMB8GA1UdIwQYMBaAFMVWTewQFmO/Q9Py40A5TAB2amPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS9DQ0JCQUJFQTlG NjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3OUQwX0xqUURsTUFIWnFZ LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkI4NS9DQ0JCQUJFQTlGNjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3 OUQwX0xqUURsTUFIWnFZLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC38OrPMAT4SMNDEPBe7IsjK2yIvcx3xMWRh6xszS0+w3jxUIXSI6Jb 6cgFJ/3ohQT9LIVUQAx6VO29h9zn/nTFTD7dRAZt+iceh9ih11FiRl8Zqp65vfbn b3dmNwTvlxndgQ8yVD9ccXBJQqnJe6KfiLe53r3JtqKAV453e252LxIXAAf2Yvko BoE+Rt2+8pdkVAcwSR8nfPGDpdS/WzKzupblPqRx766Rtv/5IHRekaODFhAecoXE Y0HGPvCU64Tpcqk/YvXc/bCKjrCfQmDBC/C2syqR46Zrq64yX8LdXIYyb1TOv/w5 3mEdSTD4l9qJr/x/g8cTmIby/UAMgszK -----END CERTIFICATE-----Generated at Mon Oct 27 15:09:00 2025 by rpki-client