$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: 2gV3jArovB/+OLUthN9JLlLYZr+IWTWHsxS3ASj3z6A= Subject key identifier: 06:49:A3:8D:7E:A7:68:C8:32:A2:24:39:35:58:06:DA:BB:5A:85:3D Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 2362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 2349 Signing time: Sun 02 Nov 2025 15:50:52 +0000 Manifest this update: Sun 02 Nov 2025 15:50:51 +0000 Manifest next update: Sun 09 Nov 2025 15:50:51 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: K4+zUCel2P8wjKt2ofYeGhKcy3wEsz9j8dGoFWNYU0k=) 2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=) 3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9058 (0x2362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Nov 2 15:50:51 2025 GMT Not After : Nov 9 15:50:51 2025 GMT Subject: CN=69077ddb-8b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:e9:d9:b3:81:fe:d0:6e:ee:15:1b:a1:5a: c6:ca:db:08:6b:f1:e4:f7:94:b5:f9:59:0d:9c:5a: 31:69:cb:c7:6b:5a:e6:90:e9:75:47:e3:37:e8:63: 3d:5b:2c:d4:c2:6a:95:71:b2:8a:ad:0c:1a:62:95: 91:b8:e5:08:91:ff:d6:72:73:8d:8b:86:9b:ea:ea: e5:14:a9:fd:36:26:e9:36:50:13:43:2d:00:37:47: 8c:9b:75:a3:fa:2b:ba:31:bd:71:03:e9:f2:ed:66: a2:96:05:9f:1d:2d:3f:2b:c8:5c:cc:6c:77:0e:16: b3:15:2a:b6:28:aa:52:7a:c7:10:e4:e1:19:62:d8: b2:76:a7:03:61:74:c9:89:1b:2c:cf:e6:6e:a1:42: 4e:6d:ea:aa:d6:c0:64:39:78:f9:43:83:43:09:73: 09:83:82:59:8f:c9:d1:ac:bd:99:12:e9:28:75:26: dc:02:ae:75:c6:9c:0c:36:89:e5:fe:39:99:e4:e7: 05:61:5a:a0:31:6a:8d:d1:98:c6:17:61:1c:bb:69: 4f:36:12:69:f0:4f:56:a1:88:6d:0b:4d:85:c6:a0: 35:ad:3f:ee:49:1e:e1:2c:c5:2e:42:ad:41:b3:73: 37:ae:56:94:0c:3b:09:50:40:ce:59:11:cb:78:2e: 18:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:49:A3:8D:7E:A7:68:C8:32:A2:24:39:35:58:06:DA:BB:5A:85:3D X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c4:d9:e1:64:04:9a:8e:6c:7b:ce:4b:da:06:51:50:18:1f: 14:99:99:42:a6:8b:fb:eb:3a:40:4a:58:62:0a:d8:ad:d5:1f: 39:e3:01:90:b3:fe:80:5f:47:fd:97:53:23:78:ff:d9:b4:9e: 0f:7f:29:f2:57:ef:12:40:e6:87:ac:56:3a:f5:c7:36:30:52: c4:26:f0:6c:aa:3a:57:0f:5e:46:5f:8c:7c:e3:e4:d8:3e:6d: 0f:08:82:5e:69:95:2a:eb:dd:a8:9c:bc:fe:ae:49:fe:52:a2: 73:b4:41:cd:5f:4a:b0:4b:ff:4a:5c:0b:a1:d1:94:80:68:53: c9:4c:03:62:0e:b4:1e:62:d3:03:0e:0b:2c:ec:6e:a4:ad:ab: 9e:89:7e:73:6b:2f:8f:38:43:b8:b5:b0:8c:c9:ab:2e:fe:0a: 18:4f:1e:a7:ba:1c:e9:1e:d4:ee:e7:b4:88:d6:3c:92:0e:0b: a2:1b:59:ad:af:62:0e:8f:3f:f5:20:ed:0b:2a:28:73:c9:e3: f9:20:8f:f9:93:06:c5:bc:2e:91:02:02:56:65:ea:1f:40:8a: 29:7e:a8:a4:8f:e0:d3:98:00:10:fe:a5:83:46:fc:ec:26:0a: ad:2a:23:33:c7:ee:8e:b5:0f:a7:19:f4:22:21:4c:e0:2c:b7: d4:55:ab:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjUxMTAyMTU1MDUxWhcNMjUxMTA5MTU1MDUxWjAYMRYwFAYD VQQDEw02OTA3N2RkYi04YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Trp2bOB/tBu7hUboVrGytsIa/Hk95S1+VkNnFoxacvHa1rmkOl1R+M36GM9 WyzUwmqVcbKKrQwaYpWRuOUIkf/WcnONi4ab6urlFKn9NibpNlATQy0AN0eMm3Wj +iu6Mb1xA+ny7WailgWfHS0/K8hczGx3DhazFSq2KKpSescQ5OEZYtiydqcDYXTJ iRssz+ZuoUJObeqq1sBkOXj5Q4NDCXMJg4JZj8nRrL2ZEukodSbcAq51xpwMNonl /jmZ5OcFYVqgMWqN0ZjGF2Ecu2lPNhJp8E9WoYhtC02FxqA1rT/uSR7hLMUuQq1B s3M3rlaUDDsJUEDOWRHLeC4YuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZJo41+ p2jIMqIkOTVYBtq7WoU9MB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtxNnhZASajmx7zkvaBlFQGB8UmZlCpov76zpASlhiCtit1R854wGQ s/6AX0f9l1MjeP/ZtJ4PfynyV+8SQOaHrFY69cc2MFLEJvBsqjpXD15GX4x84+TY Pm0PCIJeaZUq692onLz+rkn+UqJztEHNX0qwS/9KXAuh0ZSAaFPJTANiDrQeYtMD Dgss7G6kraueiX5zay+POEO4tbCMyasu/goYTx6nuhzpHtTu57SI1jySDguiG1mt r2IOjz/1IO0LKihzyeP5II/5kwbFvC6RAgJWZeofQIopfqikj+DTmAAQ/qWDRvzs JgqtKiMzx+6OtQ+nGfQiIUzgLLfUVavA -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:24 2025 by rpki-client