$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: ih0CsKGu/oVOnrrWFAh4FDE2Iu/Aj0Oz35ADp2qEaoA= Subject key identifier: 5D:E2:47:75:77:0B:54:6D:23:0C:1D:A9:13:03:1D:91:F7:2C:26:83 Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: B8 Signing time: Mon 03 Nov 2025 05:59:24 +0000 Manifest this update: Mon 03 Nov 2025 05:59:24 +0000 Manifest next update: Mon 10 Nov 2025 05:59:24 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: FWCkQWYnVvom/VlewIX8HmaK4F9suw8t+opv2rr1j3A=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: Nov 3 05:59:24 2025 GMT Not After : Nov 10 05:59:24 2025 GMT Subject: CN=690844bc-9306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:53:ad:e7:3c:41:fa:24:a0:c8:69:c4:9a: e7:e7:a2:32:03:c9:1a:eb:59:12:d1:ad:13:30:88: 0f:a4:44:f7:f6:d4:93:f0:5b:b8:1f:b2:f7:da:f1: b4:6e:17:ea:d6:ac:cb:db:88:8f:75:f6:e0:5d:1d: a5:96:f3:f1:a1:d6:62:6a:c6:89:bf:d0:eb:45:65: c5:93:0f:d8:7c:3a:73:cb:d5:7f:c5:de:a4:24:15: 2f:99:69:f7:53:1c:a9:f2:84:0b:6c:ce:82:ad:76: 26:f5:96:38:c0:f8:ca:78:10:fc:19:0a:66:27:f1: b9:70:2f:da:30:10:05:29:46:c3:2a:13:de:6f:af: ca:57:ee:3e:12:2d:a9:5f:6f:0e:d6:74:fb:fc:b2: e1:b7:c2:11:6d:7a:98:a8:45:c2:47:1f:0d:57:12: fe:ce:1c:e1:52:65:57:81:db:23:19:3f:9d:40:c7: b0:60:6d:57:29:d9:f0:6f:d7:0a:63:ec:05:f5:49: d8:b8:f7:ab:c6:06:28:01:e9:ab:98:0b:0f:18:e5: 21:51:dc:13:55:36:7a:67:74:85:e7:58:96:77:fe: fa:bc:26:d3:2c:1c:59:60:dd:ca:86:6f:e3:06:20: 04:32:df:53:96:46:76:84:69:3d:07:0e:63:55:37: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E2:47:75:77:0B:54:6D:23:0C:1D:A9:13:03:1D:91:F7:2C:26:83 X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:44:f1:b6:66:6f:18:a2:ef:82:93:b9:06:75:ed:a9:e0:84: 37:a8:8a:1e:65:3d:3f:ec:27:35:92:93:87:a9:32:df:4c:b8: 02:2e:20:95:cb:c8:c2:49:64:fa:f6:38:f5:a3:5a:c4:a7:4f: d9:73:5e:31:0f:2a:91:60:7d:88:44:b2:82:b6:47:0b:94:93: d7:1c:92:82:60:1b:58:03:4c:78:2a:2b:66:85:72:ec:9f:c2: 61:9e:51:6a:b6:51:94:cc:50:dd:71:8c:95:9e:13:cb:31:a4: e6:49:f6:78:b0:ac:c0:66:39:03:79:23:d6:7d:f7:cf:ba:d8: 1a:72:2f:a6:3f:e7:fc:9f:ac:bf:89:83:3b:38:89:f4:0a:ef: 9b:33:b4:ba:a4:0b:5e:b4:83:c7:59:b0:8b:28:ee:01:00:92: 63:a6:5b:f1:d6:05:d1:14:de:9e:b2:b3:d2:27:c3:cb:00:60: 04:c2:02:c3:d6:d2:44:b4:09:aa:3f:ae:35:26:a8:b3:1d:89: ff:39:80:08:b3:22:ab:0b:50:53:83:d8:23:6c:b4:54:ed:11: b8:6e:30:b3:2e:3b:fc:54:94:df:85:43:02:f9:60:e1:8d:79: 84:42:e1:e2:e4:89:59:71:9e:54:2c:7a:4f:43:b3:a1:5a:c6: 55:01:42:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG RjMwN0M4NkYwHhcNMjUxMTAzMDU1OTI0WhcNMjUxMTEwMDU1OTI0WjAYMRYwFAYD VQQDEw02OTA4NDRiYy05MzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmFTrec8QfokoMhpxJrn56IyA8ka61kS0a0TMIgPpET39tST8Fu4H7L32vG0 bhfq1qzL24iPdfbgXR2llvPxodZiasaJv9DrRWXFkw/YfDpzy9V/xd6kJBUvmWn3 Uxyp8oQLbM6CrXYm9ZY4wPjKeBD8GQpmJ/G5cC/aMBAFKUbDKhPeb6/KV+4+Ei2p X28O1nT7/LLht8IRbXqYqEXCRx8NVxL+zhzhUmVXgdsjGT+dQMewYG1XKdnwb9cK Y+wF9UnYuPerxgYoAemrmAsPGOUhUdwTVTZ6Z3SF51iWd/76vCbTLBxZYN3Khm/j BiAEMt9TlkZ2hGk9Bw5jVTf75wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3iR3V3 C1RtIwwdqRMDHZH3LCaDMB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl enJHV0hST2dWLXpfTUh5RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzRPG2Zm8You+Ck7kGde2p4IQ3qIoeZT0/7Cc1kpOHqTLfTLgCLiCV y8jCSWT69jj1o1rEp0/Zc14xDyqRYH2IRLKCtkcLlJPXHJKCYBtYA0x4KitmhXLs n8JhnlFqtlGUzFDdcYyVnhPLMaTmSfZ4sKzAZjkDeSPWfffPutgaci+mP+f8n6y/ iYM7OIn0Cu+bM7S6pAtetIPHWbCLKO4BAJJjplvx1gXRFN6esrPSJ8PLAGAEwgLD 1tJEtAmqP641JqizHYn/OYAIsyKrC1BTg9gjbLRU7RG4bjCzLjv8VJTfhUMC+WDh jXmEQuHi5IlZcZ5ULHpPQ7OhWsZVAUKn -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:44 2025 by rpki-client