$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft File: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json) Hash identifier: ZWKdYwvhO0O6AudN7GkkVFQ5iHm6/jSmP4Wxkzu1XZk= Subject key identifier: 67:0B:C4:E3:C0:6F:06:78:05:5C:BB:E7:46:F5:03:C2:09:96:5C:E0 Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft Manifest number: 016B Signing time: Wed 05 Nov 2025 04:09:26 +0000 Manifest this update: Wed 05 Nov 2025 04:09:25 +0000 Manifest next update: Wed 12 Nov 2025 04:09:25 +0000 Files and hashes: 1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: Gkswm8Ovyl5xFT+xpMQopOUyUx+Jru5ffqq3kUb/5q8=) 2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Validity Not Before: Nov 5 04:09:25 2025 GMT Not After : Nov 12 04:09:25 2025 GMT Subject: CN=690acdf6-5664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:c0:05:e2:64:56:78:22:8c:ba:e4:27:a6: 37:cc:79:07:de:fc:36:e4:73:77:e0:f2:c4:6c:cc: b7:ba:b4:7e:42:ba:a4:64:93:5f:b7:90:2b:57:ee: 82:f7:ca:74:94:76:f3:6b:b6:86:4a:4a:ef:58:45: d0:a0:60:d9:d2:a1:f1:bc:e2:37:ab:ee:d9:da:f5: b9:ff:4c:b4:8d:ad:8d:27:40:8e:0a:3a:97:55:2d: 7b:0c:cf:7d:63:fe:d2:f7:2c:af:55:79:3d:02:17: f0:9b:82:c1:d7:b8:9d:55:65:06:fb:9d:56:b1:07: 20:85:ba:7d:95:89:7e:15:50:92:54:99:91:1a:ef: bb:f2:6e:77:69:5c:50:63:14:56:33:88:ad:7f:5e: 82:f8:2e:75:fb:b0:08:6c:fa:15:f3:4f:4f:d2:88: 88:6c:93:ea:70:56:cd:c0:6c:de:eb:f6:87:3b:3f: 6c:f5:95:67:a9:87:df:19:a5:e4:d1:8e:fb:88:b5: 17:f2:a4:96:f6:71:9c:bd:b7:b7:ff:09:22:c7:a1: f5:f5:c0:96:09:c1:d0:6f:ae:a5:7b:39:a1:13:a5: 40:2a:53:6f:8c:59:b3:db:c2:92:56:a1:35:8c:45: 43:fb:64:f0:00:eb:bc:19:63:7b:68:2c:dd:92:12: a0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0B:C4:E3:C0:6F:06:78:05:5C:BB:E7:46:F5:03:C2:09:96:5C:E0 X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:4a:0b:5e:59:62:94:cd:e3:91:de:0f:32:e9:47:32:73:ab: ad:f5:ad:be:d7:6d:b7:44:58:4c:05:4c:10:dc:ff:b7:34:5f: f0:86:fd:be:22:01:b9:52:b8:20:0e:b8:ca:c2:59:13:33:c2: ce:d5:4a:1f:9f:e0:b3:68:f5:2c:e8:7e:f2:d8:db:92:dc:dc: dd:fc:55:f2:12:8c:0f:b6:78:23:3d:73:93:86:82:c4:b0:7f: e5:5e:44:57:09:20:ef:86:a2:c8:e4:7a:66:4c:2b:68:8e:2e: 23:6f:66:1d:e5:2a:87:92:10:67:37:e3:09:9f:8d:8d:e0:7a: 74:7b:88:da:67:d4:fc:16:b3:5c:84:9f:a3:67:e3:68:93:07: 0e:3f:fb:d9:1a:f1:a0:8e:b0:c9:3f:c9:37:a6:6c:d1:75:f1: 81:9c:99:bf:76:c0:e9:83:91:d9:e7:f5:d6:c7:f1:9a:16:15: e3:3d:8b:ee:6d:e5:4c:53:37:f6:5e:36:c5:32:2e:f9:f4:06: 5a:47:8b:6a:81:2c:8d:0d:02:ba:e3:5f:e4:2d:df:b4:cc:26: a2:1f:cb:a2:83:00:c7:4f:0c:6b:a3:7b:71:c0:88:c1:c9:20: 44:38:01:13:a9:4d:c6:ce:dd:ee:bf:98:37:84:d5:f6:74:8b: 2a:02:e8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF NzMxMjFGOTcwHhcNMjUxMTA1MDQwOTI1WhcNMjUxMTEyMDQwOTI1WjAYMRYwFAYD VQQDEw02OTBhY2RmNi01NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysHABeJkVngijLrkJ6Y3zHkH3vw25HN34PLEbMy3urR+QrqkZJNft5ArV+6C 98p0lHbza7aGSkrvWEXQoGDZ0qHxvOI3q+7Z2vW5/0y0ja2NJ0COCjqXVS17DM99 Y/7S9yyvVXk9Ahfwm4LB17idVWUG+51WsQcghbp9lYl+FVCSVJmRGu+78m53aVxQ YxRWM4itf16C+C51+7AIbPoV809P0oiIbJPqcFbNwGze6/aHOz9s9ZVnqYffGaXk 0Y77iLUX8qSW9nGcvbe3/wkix6H19cCWCcHQb66lezmhE6VAKlNvjFmz28KSVqE1 jEVD+2TwAOu8GWN7aCzdkhKg8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcLxOPA bwZ4BVy750b1A8IJllzgMB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3 RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4t Mk1VSjloR0o5RWpuTVNINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1SgteWWKUzeOR3g8y6Ucyc6ut9a2+1223RFhMBUwQ3P+3NF/whv2+ IgG5UrggDrjKwlkTM8LO1Uofn+CzaPUs6H7y2NuS3Nzd/FXyEowPtngjPXOThoLE sH/lXkRXCSDvhqLI5HpmTCtoji4jb2Yd5SqHkhBnN+MJn42N4Hp0e4jaZ9T8FrNc hJ+jZ+NokwcOP/vZGvGgjrDJP8k3pmzRdfGBnJm/dsDpg5HZ5/XWx/GaFhXjPYvu beVMUzf2XjbFMi759AZaR4tqgSyNDQK641/kLd+0zCaiH8uigwDHTwxro3txwIjB ySBEOAETqU3Gzt3uv5g3hNX2dIsqAujo -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:46 2025 by rpki-client