$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json) Hash identifier: 4bWkokjffZ8DmpT5zO1XE+U+GM+x2NVouFv2myJBUys= Subject key identifier: F6:4B:21:2F:CD:46:72:76:6F:11:33:70:4C:FB:79:FB:7D:1C:98:15 Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft Manifest number: 02CB Signing time: Mon 03 Nov 2025 01:21:05 +0000 Manifest this update: Mon 03 Nov 2025 01:21:05 +0000 Manifest next update: Mon 10 Nov 2025 01:21:05 +0000 Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: Sid/GWBR/hHVXr1TvqdN8mcCW7RniKZml2q1tQtNYAM=) 2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: yP2d46I6eQAvhpe/ALVhIcW2d8YQgRGFzGAw4LWLaPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Validity Not Before: Nov 3 01:21:05 2025 GMT Not After : Nov 10 01:21:05 2025 GMT Subject: CN=69080381-b000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8e:3a:69:59:71:d6:d8:0a:57:2e:6d:ad:76: 9c:a2:52:1a:8e:63:3c:bc:3b:81:4b:1e:cc:43:12: f1:f2:82:3f:0e:01:17:b4:1a:14:ea:d0:1b:98:79: fe:e1:25:17:22:f3:66:ff:e7:a8:f4:38:dd:33:e1: e7:bc:9b:26:d7:62:f6:57:63:0f:cc:2a:21:dd:92: 2c:e2:15:dc:2c:8d:87:fb:52:22:9c:61:1a:43:68: 1c:28:5b:bf:96:40:02:ca:d3:c2:ee:75:80:2e:fe: c4:97:63:47:5c:4f:ff:52:b2:12:87:0c:93:b1:3f: 47:2e:a5:60:bf:1e:0e:64:89:e1:ae:29:db:1c:63: 30:1b:a1:f7:b4:9a:0f:e0:98:b5:7c:fb:b6:5b:01: 9f:8d:ed:08:e4:54:b2:2a:df:de:91:25:8f:66:98: 12:44:96:64:26:81:17:82:d2:b7:f3:70:2d:ef:0f: ff:de:5a:8b:ca:f3:0c:06:9f:e0:c3:24:54:6d:58: 71:81:0f:b6:b4:69:ca:38:b5:5e:58:8c:15:64:c0: 1a:39:6f:d6:06:9a:20:78:ef:3e:84:2d:16:dd:c1: 70:14:63:60:a6:bf:d5:6e:b0:d0:4a:cb:80:6a:c1: 99:5c:3a:88:4c:c8:d4:96:75:15:fa:7a:00:38:25: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4B:21:2F:CD:46:72:76:6F:11:33:70:4C:FB:79:FB:7D:1C:98:15 X509v3 Authority Key Identifier: keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c5:a6:1d:7c:6d:bd:47:28:94:49:4a:cb:03:42:a1:6e:19: d1:83:51:02:2e:be:dd:ac:2a:48:7f:82:97:d7:98:51:0c:11: 18:d9:80:92:1c:6f:d2:75:0b:75:32:b1:9d:66:fa:55:19:dc: cc:c9:9b:ff:89:99:3c:83:0b:72:58:ca:29:da:1b:c0:9b:25: 1e:1e:88:2e:b9:48:1d:b3:d3:9e:7b:f3:8a:14:fc:8c:de:5f: df:9a:9a:5b:94:37:6e:da:35:7a:84:0e:ff:48:25:82:9c:48: ec:b2:79:5d:ff:eb:1f:67:cb:e4:dd:c4:c1:21:f2:4a:34:68: 65:1e:c0:09:2c:38:2c:68:55:43:91:e9:4b:89:47:c0:94:5a: 5d:8c:47:d0:03:8f:77:70:62:d3:59:b0:86:c8:46:4d:18:c0: d0:09:c1:34:8c:9e:70:50:3a:17:ef:0f:b8:42:8a:0f:20:fe: 7c:b8:60:8c:d1:f6:62:60:94:6f:71:84:51:d0:d0:a3:94:05: b0:9f:98:5d:72:bb:37:82:cc:7c:bf:7a:00:2e:0b:70:f9:28: b8:04:e0:78:10:ef:5c:51:76:09:57:2d:46:86:51:b0:6a:6d: 80:04:44:a8:0b:fb:2e:5f:4d:17:d5:be:a4:f7:d9:9b:92:e9: e2:6f:3b:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1OUUxMTAvBgNVBAUTKDVFNzNFREQ5NkZGMjdBODg1RjYxMzU2RUE3N0IxRjU0 MzVDODRGQ0MwHhcNMjUxMTAzMDEyMTA1WhcNMjUxMTEwMDEyMTA1WjAYMRYwFAYD VQQDEw02OTA4MDM4MS1iMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Y46aVlx1tgKVy5trXacolIajmM8vDuBSx7MQxLx8oI/DgEXtBoU6tAbmHn+ 4SUXIvNm/+eo9DjdM+HnvJsm12L2V2MPzCoh3ZIs4hXcLI2H+1IinGEaQ2gcKFu/ lkACytPC7nWALv7El2NHXE//UrIShwyTsT9HLqVgvx4OZInhrinbHGMwG6H3tJoP 4Ji1fPu2WwGfje0I5FSyKt/ekSWPZpgSRJZkJoEXgtK383At7w//3lqLyvMMBp/g wyRUbVhxgQ+2tGnKOLVeWIwVZMAaOW/WBpogeO8+hC0W3cFwFGNgpr/VbrDQSsuA asGZXDqITMjUlnUV+noAOCWMbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZLIS/N RnJ2bxEzcEz7eft9HJgVMB8GA1UdIwQYMBaAFF5z7dlv8nqIX2E1bqd7H1Q1yE/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU5RS9DQjBFQTc3NjBD Q0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVvaGZZVFZ1cDNzZlZEWElU OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huUHQyV195ZW9oZllUVnVwM3NmVkRYSVQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU5RS9DQjBFQTc3NjBDQ0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVv aGZZVFZ1cDNzZlZEWElUOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoxaYdfG29RyiUSUrLA0KhbhnRg1ECLr7drCpIf4KX15hRDBEY2YCS HG/SdQt1MrGdZvpVGdzMyZv/iZk8gwtyWMop2hvAmyUeHoguuUgds9Oee/OKFPyM 3l/fmppblDdu2jV6hA7/SCWCnEjssnld/+sfZ8vk3cTBIfJKNGhlHsAJLDgsaFVD kelLiUfAlFpdjEfQA493cGLTWbCGyEZNGMDQCcE0jJ5wUDoX7w+4QooPIP58uGCM 0fZiYJRvcYRR0NCjlAWwn5hdcrs3gsx8v3oALgtw+Si4BOB4EO9cUXYJVy1GhlGw am2ABESoC/suX00X1b6k99mbkunibzsi -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:55 2025 by rpki-client