$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: OmhiQVXTxLqReHoc2BZtH5j5Q1bT1XSXSNTtKURRQdE= Subject key identifier: 1E:B8:23:1C:74:F2:C4:00:D9:F2:F1:32:87:B7:26:06:C7:BC:19:9B Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 0519 Signing time: Sun 02 Nov 2025 23:33:09 +0000 Manifest this update: Sun 02 Nov 2025 23:33:08 +0000 Manifest next update: Sun 09 Nov 2025 23:33:08 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: Y3AHn+I+Cessit3AdWsl9wZQaTmCre9bu/S4RO4HrzI=) 2: 7A88B1FCB44311F09019B577C4F9AE02.roa (hash: iVlZdF400YE1svBZYfuYRDCRkAx2sa2lS4bS/VqGffg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: Nov 2 23:33:08 2025 GMT Not After : Nov 9 23:33:08 2025 GMT Subject: CN=6907ea35-eca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:f1:b6:95:7d:55:27:c3:6d:3b:48:88:17: 76:e1:60:14:e9:19:a3:53:4c:8e:e0:db:f3:bf:06: ae:60:3c:53:45:55:33:30:6e:de:f1:dc:95:68:5a: fe:68:e3:32:2b:53:2c:37:83:d2:32:72:54:90:6c: a5:ca:87:fb:5e:7b:5d:09:c5:1e:1f:ca:a6:e2:7f: ee:7d:e4:bf:fc:37:04:f5:9a:80:a4:dd:5a:8d:f6: ef:3a:b6:43:1e:65:58:ff:c6:46:0c:8c:8a:c1:e5: be:97:4e:cf:3c:3a:cf:d1:ab:fa:3c:eb:9e:a0:3d: 81:58:da:02:61:a1:b8:48:7a:d6:04:cb:0a:ab:61: 5d:94:5a:ab:85:0c:35:ce:59:8a:32:e2:b7:4e:7c: 71:0a:6a:e1:74:17:37:34:87:b1:5e:22:be:ed:b9: cb:d3:e7:ec:61:9e:34:d6:bf:32:98:6d:9f:b9:69: 0a:65:74:25:e6:47:ad:ca:64:50:6a:37:aa:51:6a: c5:dc:04:71:25:8d:68:49:cc:f3:06:aa:88:f1:90: 8c:5d:b8:a0:b7:0d:9a:bf:0a:9a:f8:1b:13:4c:3f: ea:f7:4a:07:74:e3:a0:7c:7b:ca:c8:4c:6d:e9:85: 18:1f:ea:3f:2d:ad:14:2d:f0:63:b4:54:e7:cd:4b: 4b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B8:23:1C:74:F2:C4:00:D9:F2:F1:32:87:B7:26:06:C7:BC:19:9B X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:82:5b:8d:37:9e:32:f0:4c:ee:d4:f9:3d:31:91:45:6f:36: cd:10:8f:d2:2f:cb:7f:a0:82:79:b1:be:3f:85:c9:9d:1e:c0: d9:b5:67:5d:6a:ff:a3:8b:ba:c0:2d:ba:99:5a:8b:07:f4:f9: ba:4f:48:3c:32:9d:85:b6:51:05:44:94:c9:eb:e1:f1:a2:99: 36:f5:6e:cd:47:dd:a7:c6:a1:2b:28:88:c6:23:69:c7:c2:25: a7:11:f6:7a:cb:64:6e:7c:88:58:ef:6c:a2:d3:11:8d:85:70: c3:c1:e9:4b:40:36:ee:09:53:64:7a:96:6c:59:2f:7d:33:fa: a9:d7:59:e0:a0:8c:e4:3d:2b:7c:e4:91:05:30:4b:0e:3c:0f: 4f:04:f6:14:bb:c1:8b:c2:b1:99:d4:bb:d5:7e:e5:4d:d9:93: 91:7b:69:44:2d:73:fa:b0:5c:5d:6d:74:90:d1:12:05:ec:b9: 96:6a:67:24:89:4e:58:df:c1:30:2c:4a:e0:97:3e:14:d4:15: b4:aa:05:ca:65:26:d7:84:0d:b5:fa:d8:21:8b:97:ae:d0:1b: b2:84:85:81:2d:5a:8b:34:43:af:b4:a8:bc:14:aa:ce:34:f1: 5d:43:e1:9e:e3:02:6b:fa:73:72:41:07:c9:89:33:34:7a:74: 49:55:03:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjUxMTAyMjMzMzA4WhcNMjUxMTA5MjMzMzA4WjAYMRYwFAYD VQQDEw02OTA3ZWEzNS1lY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/HxtpV9VSfDbTtIiBd24WAU6RmjU0yO4NvzvwauYDxTRVUzMG7e8dyVaFr+ aOMyK1MsN4PSMnJUkGylyof7XntdCcUeH8qm4n/ufeS//DcE9ZqApN1ajfbvOrZD HmVY/8ZGDIyKweW+l07PPDrP0av6POueoD2BWNoCYaG4SHrWBMsKq2FdlFqrhQw1 zlmKMuK3TnxxCmrhdBc3NIexXiK+7bnL0+fsYZ401r8ymG2fuWkKZXQl5ketymRQ ajeqUWrF3ARxJY1oSczzBqqI8ZCMXbigtw2avwqa+BsTTD/q90oHdOOgfHvKyExt 6YUYH+o/La0ULfBjtFTnzUtLqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB64Ixx0 8sQA2fLxMoe3JgbHvBmbMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZgluNN54y8Ezu1Pk9MZFFbzbNEI/SL8t/oIJ5sb4/hcmdHsDZtWdd av+ji7rALbqZWosH9Pm6T0g8Mp2FtlEFRJTJ6+Hxopk29W7NR92nxqErKIjGI2nH wiWnEfZ6y2RufIhY72yi0xGNhXDDwelLQDbuCVNkepZsWS99M/qp11ngoIzkPSt8 5JEFMEsOPA9PBPYUu8GLwrGZ1LvVfuVN2ZORe2lELXP6sFxdbXSQ0RIF7LmWamck iU5Y38EwLErglz4U1BW0qgXKZSbXhA21+tghi5eu0BuyhIWBLVqLNEOvtKi8FKrO NPFdQ+Ge4wJr+nNyQQfJiTM0enRJVQP7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:27 2025 by rpki-client