$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: yVI3xQ2ZpTXNAFycLGTbKt1h48x2RwkD4J8iKcgLLS8= Subject key identifier: DF:7A:1B:A0:7B:79:82:2F:29:C2:C9:C0:6B:F3:31:D5:3E:11:A4:07 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 07DA Signing time: Sun 02 Nov 2025 21:10:32 +0000 Manifest this update: Sun 02 Nov 2025 21:10:32 +0000 Manifest next update: Sun 09 Nov 2025 21:10:32 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: N4SiEg/xtSvzNMgP+VLh+KvnD2rHJxBIbxGb3QEu8xQ=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: Z1uRbBBo1ykDesKGyzNhoAS+Q0kH4ecEfYyBIro/My0=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: RDAuo0ukbkiW2gxiKwesJ3g1zTBr8ESAl1lXLcl6ncU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Nov 2 21:10:32 2025 GMT Not After : Nov 9 21:10:32 2025 GMT Subject: CN=6907c8c8-898d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:32:91:6b:d4:5e:b5:9a:08:2c:64:c0:83: d6:50:87:e9:6c:7f:dc:cf:68:bf:15:52:48:90:db: d4:71:cb:77:34:a8:7c:39:70:be:66:30:cb:80:93: 52:f6:ce:5e:3f:da:34:97:cb:75:70:ec:00:48:d1: b7:25:13:28:07:92:b5:ff:78:dc:cd:94:20:6b:3e: 6e:c1:27:3b:81:a1:32:79:3c:ec:3b:65:27:93:bf: 12:29:dd:06:a1:08:f3:24:d6:14:11:0e:4a:6b:50: ed:1e:b9:af:c6:1b:a2:ce:55:cc:59:cc:f7:3e:3f: a6:4c:fa:55:78:0f:d2:c5:13:f2:ec:e6:ee:bc:46: 81:d5:c4:f7:3d:d9:4a:9b:3b:a1:10:74:98:d1:28: 69:69:aa:0d:7e:38:62:ba:26:50:4e:5a:da:f6:27: 03:58:10:08:f3:72:1b:18:9e:9f:a4:c7:25:8f:44: a0:1e:d5:f8:4a:f5:1b:9b:0c:9a:de:ab:df:c5:6a: 62:e9:af:06:89:cb:2d:9c:b5:de:1f:ef:60:cc:5a: af:45:7b:8c:8e:46:89:ec:ce:2a:a7:44:f8:a0:22: 01:38:0b:23:b1:03:53:e9:f9:10:e3:78:d2:04:af: 80:1c:48:58:8f:1e:ab:d1:62:55:6b:07:13:c5:d0: be:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7A:1B:A0:7B:79:82:2F:29:C2:C9:C0:6B:F3:31:D5:3E:11:A4:07 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ba:f7:40:67:70:04:ab:b7:3a:8b:3e:f8:e7:5c:95:f3:ae: 78:34:0c:36:34:c5:b6:b4:ce:bd:87:2a:60:33:55:90:59:c9: 37:89:65:26:fb:21:32:9a:8d:a2:40:5e:ba:ac:6b:c5:85:5e: ed:d9:1b:2f:a9:77:39:86:a0:31:18:81:43:a8:98:96:4a:b8: 29:52:18:e0:1f:7c:d8:f4:76:86:31:5a:c6:bb:3a:7a:7d:73: 5d:94:25:20:83:52:9f:35:76:96:cc:5e:f5:d7:fd:5d:55:3e: d9:72:77:e0:19:63:69:d7:73:10:f0:94:0b:6b:55:b6:f9:93: fc:a5:b3:f0:15:54:a1:73:9d:c0:cc:5d:68:71:9b:c2:84:3d: 96:af:21:44:79:27:5a:f9:9a:30:b5:cb:14:63:33:f8:ad:9e: fd:61:34:39:fb:38:3e:04:36:7d:c5:1b:48:b7:08:81:60:9e: 97:96:7c:0d:1c:73:0b:b4:45:20:b9:11:e3:08:dc:dc:9e:b1: e3:63:55:44:2a:54:f2:45:7f:8a:c8:81:44:7b:8c:30:26:e6: 5a:cb:02:02:c5:c1:a4:13:81:1b:81:e3:f8:05:36:20:a2:6d: 2c:7b:73:56:05:7e:61:11:89:9b:78:53:da:5e:6e:5d:e8:1d: 66:f2:fa:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUxMTAyMjExMDMyWhcNMjUxMTA5MjExMDMyWjAYMRYwFAYD VQQDEw02OTA3YzhjOC04OThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDMykWvUXrWaCCxkwIPWUIfpbH/cz2i/FVJIkNvUcct3NKh8OXC+ZjDLgJNS 9s5eP9o0l8t1cOwASNG3JRMoB5K1/3jczZQgaz5uwSc7gaEyeTzsO2Unk78SKd0G oQjzJNYUEQ5Ka1DtHrmvxhuizlXMWcz3Pj+mTPpVeA/SxRPy7ObuvEaB1cT3PdlK mzuhEHSY0ShpaaoNfjhiuiZQTlra9icDWBAI83IbGJ6fpMclj0SgHtX4SvUbmwya 3qvfxWpi6a8GicstnLXeH+9gzFqvRXuMjkaJ7M4qp0T4oCIBOAsjsQNT6fkQ43jS BK+AHEhYjx6r0WJVawcTxdC+KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN96G6B7 eYIvKcLJwGvzMdU+EaQHMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1uvdAZ3AEq7c6iz7451yV8654NAw2NMW2tM69hypgM1WQWck3iWUm +yEymo2iQF66rGvFhV7t2RsvqXc5hqAxGIFDqJiWSrgpUhjgH3zY9HaGMVrGuzp6 fXNdlCUgg1KfNXaWzF711/1dVT7ZcnfgGWNp13MQ8JQLa1W2+ZP8pbPwFVShc53A zF1ocZvChD2WryFEeSda+ZowtcsUYzP4rZ79YTQ5+zg+BDZ9xRtItwiBYJ6XlnwN HHMLtEUguRHjCNzcnrHjY1VEKlTyRX+KyIFEe4wwJuZaywICxcGkE4EbgeP4BTYg om0se3NWBX5hEYmbeFPaXm5d6B1m8voV -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:48 2025 by rpki-client