$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json) Hash identifier: +fq5ufYpk1jmTUapRYSAKpKycYkaBZNStytjckiB3Kw= Subject key identifier: A2:E9:AA:EB:36:3C:19:FA:42:05:92:B7:BC:DE:59:C2:8B:F7:DA:17 Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Certificate serial: 350D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft Manifest number: 34F4 Signing time: Sun 02 Nov 2025 14:19:26 +0000 Manifest this update: Sun 02 Nov 2025 14:19:25 +0000 Manifest next update: Sun 09 Nov 2025 14:19:25 +0000 Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: xNwIjSzPplch6doxWaZuTwMH40DODaT7KM4oID3xWok=) 2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: yi83MC4bGsYsYYIO3cLCV7chmo/rO1rwAJjntq4bNoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13581 (0x350d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Validity Not Before: Nov 2 14:19:25 2025 GMT Not After : Nov 9 14:19:25 2025 GMT Subject: CN=6907686e-38f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:54:f1:b1:f5:dc:dd:57:ff:2c:c6:89:98: a7:1b:c0:29:2b:d8:f0:a8:8d:73:14:99:39:f9:0c: 7a:65:ff:7a:5e:02:13:68:ce:f3:1c:58:27:d6:a8: 88:f0:b0:8b:a5:57:b1:db:98:20:ae:8c:20:c3:f6: 3d:90:92:65:19:49:67:8a:f4:e8:2f:c8:3a:04:1c: cc:dd:dc:de:be:6a:59:33:29:e8:72:02:2a:4c:69: a6:cf:98:8f:11:a2:2b:92:a5:5a:78:bb:e9:d7:a4: 9e:b6:9e:95:3a:86:4c:00:77:ad:97:80:13:f5:87: af:16:72:66:81:56:dd:7d:07:a6:4e:fc:de:99:05: 18:c4:af:c8:7d:85:5a:69:cc:36:fd:be:68:cf:7e: d8:54:da:49:83:4d:5f:77:fd:e1:20:3c:a5:8f:f9: 05:be:a4:a4:6d:e0:4c:aa:26:bf:4e:3c:39:59:5e: 89:7f:93:fd:dc:c8:b9:e2:0a:86:ef:d2:3b:05:51: e2:f2:47:23:e0:89:bf:8f:a1:da:b8:50:c2:0e:d3: d0:9f:0c:5b:49:f1:ad:5b:b4:3b:a9:f4:b4:bf:49: 29:b3:10:7d:e9:6e:4c:de:68:b4:54:c9:7c:88:a1: c3:55:28:0c:0b:80:53:4b:7b:b7:0d:1b:aa:9e:de: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E9:AA:EB:36:3C:19:FA:42:05:92:B7:BC:DE:59:C2:8B:F7:DA:17 X509v3 Authority Key Identifier: keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:be:3b:4e:77:1d:e3:4b:dd:f8:b0:22:60:23:cc:f1:3c:88: b2:f9:6e:99:c9:fa:19:5a:5b:05:da:dd:01:d4:6f:a1:93:c7: 4f:0d:2f:ef:37:a0:be:e5:ca:13:75:7a:fa:9f:72:7e:60:ff: 29:85:fb:77:58:a5:c7:f3:e5:c8:e0:12:30:07:33:fe:ac:2e: 03:b0:f3:67:19:df:43:48:f4:d5:0e:ac:27:20:3d:1e:74:5d: 66:85:a6:bf:de:be:f0:89:f9:31:79:d8:09:32:09:76:0a:cc: 10:e5:5d:75:e6:57:82:0f:18:59:dd:69:72:0b:b0:b8:45:4b: 65:d5:b6:52:10:d7:9a:8b:98:74:2d:56:a8:a2:99:c4:60:ee: 47:6f:c1:d4:e1:dc:5c:09:31:61:b2:80:f7:77:b6:5a:78:ae: ca:2e:87:42:79:3a:9c:d7:e4:19:f5:73:99:48:4e:4f:e5:b9: d4:45:27:8e:f0:49:8d:c9:00:d0:2c:78:ba:09:0f:33:a6:69: 87:33:ad:78:37:2f:63:3a:88:06:1e:b7:86:48:32:cb:3b:e2: e2:8a:ae:b6:fc:94:42:cd:b6:a1:76:4a:70:e8:a0:d8:2b:c2: 4c:a7:a7:d8:9f:a0:31:7f:a9:d4:6b:43:0c:50:04:81:e8:f5: 4e:86:62:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3 N0RGQjIxQTMwHhcNMjUxMTAyMTQxOTI1WhcNMjUxMTA5MTQxOTI1WjAYMRYwFAYD VQQDEw02OTA3Njg2ZS0zOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0VU8bH13N1X/yzGiZinG8ApK9jwqI1zFJk5+Qx6Zf96XgITaM7zHFgn1qiI 8LCLpVex25ggrowgw/Y9kJJlGUlnivToL8g6BBzM3dzevmpZMynocgIqTGmmz5iP EaIrkqVaeLvp16Setp6VOoZMAHetl4AT9YevFnJmgVbdfQemTvzemQUYxK/IfYVa acw2/b5oz37YVNpJg01fd/3hIDylj/kFvqSkbeBMqia/Tjw5WV6Jf5P93Mi54gqG 79I7BVHi8kcj4Im/j6HauFDCDtPQnwxbSfGtW7Q7qfS0v0kpsxB96W5M3mi0VMl8 iKHDVSgMC4BTS3u3DRuqnt7v7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLpqus2 PBn6QgWSt7zeWcKL99oXMB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx U0cybVFfajVOaHQzMzdJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7vjtOdx3jS934sCJgI8zxPIiy+W6ZyfoZWlsF2t0B1G+hk8dPDS/v N6C+5coTdXr6n3J+YP8phft3WKXH8+XI4BIwBzP+rC4DsPNnGd9DSPTVDqwnID0e dF1mhaa/3r7wifkxedgJMgl2CswQ5V115leCDxhZ3WlyC7C4RUtl1bZSENeai5h0 LVaoopnEYO5Hb8HU4dxcCTFhsoD3d7ZaeK7KLodCeTqc1+QZ9XOZSE5P5bnURSeO 8EmNyQDQLHi6CQ8zpmmHM614Ny9jOogGHreGSDLLO+Liiq62/JRCzbahdkpw6KDY K8JMp6fYn6Axf6nUa0MMUASB6PVOhmK+ -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:56 2025 by rpki-client