$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json) Hash identifier: MV30sgOZDKXRyca60ipKtHdWJmfkTg6sMVwZ4DHKA/A= Subject key identifier: 58:DA:19:F0:6E:5E:05:5B:C8:7A:D4:F3:7B:5E:C6:65:6B:4A:B2:CE Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Certificate serial: 0840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft Manifest number: 0839 Signing time: Sun 02 Nov 2025 20:44:48 +0000 Manifest this update: Sun 02 Nov 2025 20:44:47 +0000 Manifest next update: Sun 09 Nov 2025 20:44:47 +0000 Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: QOIaP4uaIxnv/XCple+2m9FrNEuELgsUhOlCO3riwwE=) 2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: TEdKwP64TuQMUa2RFZqVEQD/HQzdAAlp9eIMPDVHh5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2112 (0x840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Validity Not Before: Nov 2 20:44:47 2025 GMT Not After : Nov 9 20:44:47 2025 GMT Subject: CN=6907c2c0-54d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:08:d0:1e:af:65:91:64:d8:ca:e5:93:9c: ff:15:e7:aa:66:83:32:a1:ae:fe:3d:34:80:2b:02: f5:b5:78:bf:c2:40:17:30:ad:bf:0c:f3:20:66:1e: 3d:80:01:81:ed:3d:64:0c:1d:75:c8:98:9f:ce:0e: 78:f6:97:9b:66:2f:bf:d1:a2:da:71:85:79:39:91: 4f:5e:2d:c6:7a:09:6c:f9:5f:32:03:fb:b3:b0:4d: c7:d0:03:dd:45:e2:c3:5a:10:83:c1:29:72:42:2c: 7f:24:24:c6:51:a2:8e:12:20:60:80:a6:59:00:96: c1:fb:b6:c3:f9:90:94:fd:28:4d:6a:c3:d2:8d:f4: 63:4b:3e:e6:fd:da:b9:1c:ed:83:b5:f6:b3:85:1e: f1:b6:d6:46:87:83:8a:c0:c8:53:d2:84:cc:09:1a: c9:d2:4e:7b:11:c1:79:29:50:44:7f:62:da:c2:3f: 6c:b3:fd:50:49:b3:7f:20:8d:ab:9a:4d:36:52:18: 35:04:8e:bf:45:75:2f:1d:b1:56:76:ca:77:f7:13: 1f:ff:91:f7:40:dd:5c:52:a5:86:69:4f:32:c7:48: 95:03:36:8e:d1:3c:51:8e:24:90:fa:b6:d5:c9:b8: 42:c1:08:8d:93:31:7f:26:7f:33:e0:ee:06:1b:cc: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DA:19:F0:6E:5E:05:5B:C8:7A:D4:F3:7B:5E:C6:65:6B:4A:B2:CE X509v3 Authority Key Identifier: keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:05:bf:ac:83:2a:37:55:bd:54:9d:39:e2:6f:1b:ac:e9:75: c1:46:27:ed:bc:3e:f9:24:9b:98:c1:75:26:ba:84:27:43:fb: 29:0e:47:49:43:2b:b5:6e:b1:c2:e8:3d:97:86:27:4c:c3:74: 10:23:bf:31:2e:a9:e9:96:be:dc:ad:99:7e:14:4d:7d:81:0f: d9:d7:b1:54:8d:3e:7b:5f:25:f2:e9:04:c5:0a:39:79:69:b6: 20:8f:9e:b3:b2:59:52:32:18:e6:04:bf:00:39:25:ae:fd:8f: 18:6e:4b:38:71:64:a1:c1:03:76:47:ff:cc:d5:df:b8:57:e3: 01:ae:d1:ca:c8:03:89:79:bd:3b:e2:f9:d0:89:55:b7:47:e5: 60:62:2f:0a:3a:6a:fc:e5:43:2a:db:a9:ce:c4:8a:e7:24:77: 8c:94:1b:c5:3b:20:2a:dd:6e:83:98:56:0e:55:7f:92:6f:93: 6f:c3:82:51:e8:84:13:25:d3:ce:8f:0c:e5:f0:4f:e1:3b:f6: 80:f1:41:03:f2:ad:2d:6f:ae:1a:77:1f:2e:f6:31:bf:b2:0a: 23:bc:a6:e7:e3:b6:77:6d:96:5f:89:1c:d0:ac:98:99:b0:b8: d9:fa:21:85:32:b6:43:9a:b2:8b:86:00:a3:88:73:c7:f8:01: 2b:d3:6f:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG QjA3NEE1OEUwHhcNMjUxMTAyMjA0NDQ3WhcNMjUxMTA5MjA0NDQ3WjAYMRYwFAYD VQQDEw02OTA3YzJjMC01NGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPYI0B6vZZFk2Mrlk5z/FeeqZoMyoa7+PTSAKwL1tXi/wkAXMK2/DPMgZh49 gAGB7T1kDB11yJifzg549pebZi+/0aLacYV5OZFPXi3Gegls+V8yA/uzsE3H0APd ReLDWhCDwSlyQix/JCTGUaKOEiBggKZZAJbB+7bD+ZCU/ShNasPSjfRjSz7m/dq5 HO2DtfazhR7xttZGh4OKwMhT0oTMCRrJ0k57EcF5KVBEf2Lawj9ss/1QSbN/II2r mk02Uhg1BI6/RXUvHbFWdsp39xMf/5H3QN1cUqWGaU8yx0iVAzaO0TxRjiSQ+rbV ybhCwQiNkzF/Jn8z4O4GG8yVlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjaGfBu XgVbyHrU83texmVrSrLOMB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VBRC9FOUI3MDY2NkVBMjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1RO M2ZMei1iNkM0eF83QjBwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJBb+sgyo3Vb1UnTnibxus6XXBRiftvD75JJuYwXUmuoQnQ/spDkdJ Qyu1brHC6D2XhidMw3QQI78xLqnplr7crZl+FE19gQ/Z17FUjT57XyXy6QTFCjl5 abYgj56zsllSMhjmBL8AOSWu/Y8Ybks4cWShwQN2R//M1d+4V+MBrtHKyAOJeb07 4vnQiVW3R+VgYi8KOmr85UMq26nOxIrnJHeMlBvFOyAq3W6DmFYOVX+Sb5Nvw4JR 6IQTJdPOjwzl8E/hO/aA8UED8q0tb64adx8u9jG/sgojvKbn47Z3bZZfiRzQrJiZ sLjZ+iGFMrZDmrKLhgCjiHPH+AEr02+c -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:33 2025 by rpki-client