$ rpki-client -vvf rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft File: xctXefg2BxxSgISGkWfLwa4IuRc.mft (raw, json) Hash identifier: /zjk6dA8WySzUUj8L/xFrAQRwhEj5+wV87TDW1sxz7Q= Subject key identifier: 35:F6:1F:2D:72:2B:9F:9F:1D:A1:94:A0:E9:22:BE:A0:E5:52:FD:17 Authority key identifier: C5:CB:57:79:F8:36:07:1C:52:80:84:86:91:67:CB:C1:AE:08:B9:17 Certificate issuer: /CN=A913F927/serialNumber=C5CB5779F836071C528084869167CBC1AE08B917 Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft Manifest number: 0CA7 Signing time: Sun 02 Nov 2025 18:14:20 +0000 Manifest this update: Sun 02 Nov 2025 18:14:19 +0000 Manifest next update: Sun 09 Nov 2025 18:14:19 +0000 Files and hashes: 1: xctXefg2BxxSgISGkWfLwa4IuRc.crl (hash: RPY6cMKuH++ND6LeJaaF8kC3VaBxHX1ct46cBwSPQ8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.crl rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F927, serialNumber=C5CB5779F836071C528084869167CBC1AE08B917 Validity Not Before: Nov 2 18:14:19 2025 GMT Not After : Nov 9 18:14:19 2025 GMT Subject: CN=69079f7b-9f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:ab:c8:26:00:5a:5d:69:6b:e0:95:1c:0a: b9:2b:86:6d:74:5f:22:e4:c6:90:48:fe:c7:1d:69: 21:37:5a:3e:43:4b:ef:7b:1f:b4:55:1b:50:ff:fe: 44:13:e5:8b:15:0d:95:9c:96:01:ff:07:51:79:d2: 92:19:7c:7e:32:22:fd:7e:16:53:a6:a8:38:4d:80: 86:28:74:56:1e:f5:51:03:37:e1:7b:6c:94:ed:50: c5:37:02:a3:59:31:35:f0:bb:1e:85:ce:c6:b5:56: bd:44:aa:16:e6:03:f5:c3:4c:89:34:77:63:e7:e1: c3:36:78:01:a0:b5:8f:5d:2c:e0:c9:8d:e1:cf:5e: ff:49:e9:a1:b8:33:c5:88:cb:d1:3e:43:5a:46:71: 4e:8c:10:84:00:f9:b6:b8:57:f1:e2:e2:da:7d:ef: c9:f0:98:c5:a7:82:3d:75:1d:d6:fd:71:ea:4d:28: 2a:d6:15:cb:2f:09:3c:1f:f8:14:9f:d3:ad:9b:89: 7a:8f:67:6b:5c:e2:9a:34:3b:a9:51:d3:81:bf:cf: 49:f5:27:00:e1:5e:1f:43:f6:c8:17:d4:cd:73:75: 3d:63:31:74:a8:19:de:26:86:e5:61:e9:11:3c:d1: b4:7b:a1:bb:77:e1:18:6e:ea:ee:b7:33:3d:43:ec: b5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F6:1F:2D:72:2B:9F:9F:1D:A1:94:A0:E9:22:BE:A0:E5:52:FD:17 X509v3 Authority Key Identifier: keyid:C5:CB:57:79:F8:36:07:1C:52:80:84:86:91:67:CB:C1:AE:08:B9:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5c:41:31:c0:c0:5f:d1:fc:3d:06:12:ae:12:31:70:1d:07: 5e:f7:56:e5:bd:c5:3e:00:96:05:a5:53:d0:52:28:7a:84:a5: 58:37:58:92:9f:b9:c3:e8:7c:9f:70:7e:24:e1:ba:1e:a1:97: 6c:84:f8:22:4b:84:fc:d3:e2:9d:40:f1:61:42:f3:2d:e8:6d: b1:ae:6f:29:2d:58:3d:d9:54:a7:a8:ce:c9:ec:33:b8:cc:5f: da:de:a3:4c:0c:d3:34:20:1d:7e:42:e2:3a:a5:ee:da:52:cf: b0:81:f9:53:0d:2e:47:1b:31:93:d7:28:cf:76:38:b3:58:a6: 36:07:3a:9c:40:f1:44:8c:79:7d:bc:e4:b4:84:1e:90:f1:70: f4:e7:31:b9:3c:23:dd:51:32:f4:be:ee:30:3d:3a:41:71:5c: 92:f1:cc:d3:d4:be:87:77:48:25:5a:47:03:b2:f4:55:80:e9: 55:25:21:b0:2b:67:44:20:b9:6e:ba:85:f0:2c:ad:9e:fc:aa: 73:b9:f6:46:9e:c7:8c:aa:a4:47:58:5f:1f:62:20:d3:31:7a: f9:96:ea:e5:40:49:ac:a4:c9:70:12:9a:70:dd:85:cd:39:a3: 0b:23:19:44:f5:c4:56:c2:2b:c9:39:34:6c:b7:cc:85:1e:6d: 15:2b:25:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y5MjcxMTAvBgNVBAUTKEM1Q0I1Nzc5RjgzNjA3MUM1MjgwODQ4NjkxNjdDQkMx QUUwOEI5MTcwHhcNMjUxMTAyMTgxNDE5WhcNMjUxMTA5MTgxNDE5WjAYMRYwFAYD VQQDEw02OTA3OWY3Yi05ZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobmryCYAWl1pa+CVHAq5K4ZtdF8i5MaQSP7HHWkhN1o+Q0vvex+0VRtQ//5E E+WLFQ2VnJYB/wdRedKSGXx+MiL9fhZTpqg4TYCGKHRWHvVRAzfhe2yU7VDFNwKj WTE18Lsehc7GtVa9RKoW5gP1w0yJNHdj5+HDNngBoLWPXSzgyY3hz17/SemhuDPF iMvRPkNaRnFOjBCEAPm2uFfx4uLafe/J8JjFp4I9dR3W/XHqTSgq1hXLLwk8H/gU n9Otm4l6j2drXOKaNDupUdOBv89J9ScA4V4fQ/bIF9TNc3U9YzF0qBneJoblYekR PNG0e6G7d+EYburutzM9Q+y1hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDX2Hy1y K5+fHaGUoOkivqDlUv0XMB8GA1UdIwQYMBaAFMXLV3n4NgccUoCEhpFny8GuCLkX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjkyNy9BRjUyMTFGRTAw QTIxMUVBOUE0RThBODdDNEY5QUUwMi94Y3RYZWZnMkJ4eFNnSVNHa1dmTHdhNEl1 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hjdFhlZmcyQnh4U2dJU0drV2ZMd2E0SXVSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjkyNy9BRjUyMTFGRTAwQTIxMUVBOUE0RThBODdDNEY5QUUwMi94Y3RYZWZnMkJ4 eFNnSVNHa1dmTHdhNEl1UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbXEExwMBf0fw9BhKuEjFwHQde91blvcU+AJYFpVPQUih6hKVYN1iS n7nD6HyfcH4k4boeoZdshPgiS4T80+KdQPFhQvMt6G2xrm8pLVg92VSnqM7J7DO4 zF/a3qNMDNM0IB1+QuI6pe7aUs+wgflTDS5HGzGT1yjPdjizWKY2BzqcQPFEjHl9 vOS0hB6Q8XD05zG5PCPdUTL0vu4wPTpBcVyS8czT1L6Hd0glWkcDsvRVgOlVJSGw K2dEILluuoXwLK2e/KpzufZGnseMqqRHWF8fYiDTMXr5lurlQEmspMlwEppw3YXN OaMLIxlE9cRWwivJOTRst8yFHm0VKyUG -----END CERTIFICATE-----Generated at Tue Nov 4 01:05:58 2025 by rpki-client