$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: kraC6LU2q+RZov1QYHiy2ZY6SrHF3Mcn8rFsvrD9k6k= Subject key identifier: DB:54:50:8D:FE:CA:5D:E6:FB:08:CB:11:E9:60:87:08:F9:B5:86:9E Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 0223 Signing time: Mon 03 Nov 2025 02:06:59 +0000 Manifest this update: Mon 03 Nov 2025 02:06:59 +0000 Manifest next update: Mon 10 Nov 2025 02:06:59 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: 9WntBb84gXiU7zJMGIbTtsSitniIUdSqQD0k2LOfhYU=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: ziWoAY2hbvtxePvnZWAtSB5jp5zkw3S8bF9M6H2eX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: Nov 3 02:06:59 2025 GMT Not After : Nov 10 02:06:59 2025 GMT Subject: CN=69080e43-df45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:97:f9:86:62:73:cf:cd:fd:b0:e4:f0:a6: 3d:66:90:70:e1:88:2f:3d:57:41:b5:d6:b5:db:23: 47:ee:6d:6f:e9:6f:48:14:1d:ec:62:b2:46:0b:4c: 20:d8:fb:47:22:05:4c:18:d3:75:5f:51:a0:0a:80: 4e:0e:a8:63:ce:2c:ef:58:f4:d5:c2:30:3e:4f:9e: 1f:d3:c8:2f:27:de:ce:8d:32:00:8d:5a:50:94:18: 6a:32:82:32:8d:97:ea:a5:df:24:41:46:30:37:23: 0f:1f:2c:5a:ba:2d:30:5d:a3:a0:5b:44:03:e9:dc: f0:f7:ed:ad:fc:b0:f2:5b:60:36:34:06:5b:d2:ad: a7:ff:4d:c2:a0:ad:b5:09:f3:fa:ae:08:61:96:56: f9:47:ed:cb:df:e7:0d:a1:d3:61:6e:ba:61:9c:4a: 37:84:6a:eb:a5:02:8a:a1:4e:b5:3f:8d:d3:17:cc: b6:f1:23:ad:be:44:e7:3a:9b:8d:b8:37:81:39:3f: 4d:04:43:2b:81:c5:bd:4c:e6:f1:49:98:48:32:ba: 75:6f:1a:cd:05:01:af:04:fb:c9:f6:23:86:51:2d: 14:d0:6f:3d:aa:f7:69:8a:8e:b2:36:d2:12:90:eb: 50:9d:4d:88:b3:64:a9:f4:dc:88:bc:52:03:35:80: d1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:54:50:8D:FE:CA:5D:E6:FB:08:CB:11:E9:60:87:08:F9:B5:86:9E X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ab:fc:4f:88:9a:21:10:c2:1a:b3:0c:c1:96:01:89:e4:3c: 6b:37:1d:ee:52:b5:eb:f2:1e:1f:e7:39:8c:b0:90:8c:cd:62: c6:94:d7:17:e3:0d:bd:89:da:00:5c:9a:c4:be:f5:af:b5:4a: c5:69:57:4e:94:2d:f6:26:a0:df:a1:73:f8:6b:38:9c:b4:d6: 52:16:de:26:50:a2:87:84:b7:cf:0e:35:dd:b1:83:61:d6:24: 0b:15:f6:99:17:f1:71:5b:b7:ce:8b:de:1a:ea:a0:c5:6d:34: 69:76:86:f9:94:7e:0a:4a:d1:5e:b4:e6:bd:3e:94:36:50:4d: eb:07:e5:6a:c2:99:a5:6e:bc:0e:02:41:bc:47:07:b1:72:20: 70:18:85:ac:82:e9:b2:a1:5d:b3:fd:cf:55:f5:6c:12:3e:f2: 6c:79:18:29:8c:45:60:62:5e:7a:19:8f:56:84:a9:4d:55:88: 1a:27:5b:52:ea:d7:db:e1:6c:f1:27:0e:55:2d:46:94:40:a5: 5f:b0:7c:64:68:76:46:f7:44:6f:17:5c:74:fb:f4:aa:03:fa: c0:58:8f:8b:1d:35:6a:c1:28:ce:75:4c:cc:5f:16:49:29:49: 15:39:9b:5e:46:cf:1b:72:c9:cf:b8:39:bc:18:23:4f:f9:76: ec:c3:7f:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjUxMTAzMDIwNjU5WhcNMjUxMTEwMDIwNjU5WjAYMRYwFAYD VQQDEw02OTA4MGU0My1kZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKSX+YZic8/N/bDk8KY9ZpBw4YgvPVdBtda12yNH7m1v6W9IFB3sYrJGC0wg 2PtHIgVMGNN1X1GgCoBODqhjzizvWPTVwjA+T54f08gvJ97OjTIAjVpQlBhqMoIy jZfqpd8kQUYwNyMPHyxaui0wXaOgW0QD6dzw9+2t/LDyW2A2NAZb0q2n/03CoK21 CfP6rghhllb5R+3L3+cNodNhbrphnEo3hGrrpQKKoU61P43TF8y28SOtvkTnOpuN uDeBOT9NBEMrgcW9TObxSZhIMrp1bxrNBQGvBPvJ9iOGUS0U0G89qvdpio6yNtIS kOtQnU2Is2Sp9NyIvFIDNYDRJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtUUI3+ yl3m+wjLEelghwj5tYaeMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkq/xPiJohEMIaswzBlgGJ5DxrNx3uUrXr8h4f5zmMsJCMzWLGlNcX 4w29idoAXJrEvvWvtUrFaVdOlC32JqDfoXP4azictNZSFt4mUKKHhLfPDjXdsYNh 1iQLFfaZF/FxW7fOi94a6qDFbTRpdob5lH4KStFetOa9PpQ2UE3rB+VqwpmlbrwO AkG8RwexciBwGIWsgumyoV2z/c9V9WwSPvJseRgpjEVgYl56GY9WhKlNVYgaJ1tS 6tfb4WzxJw5VLUaUQKVfsHxkaHZG90RvF1x0+/SqA/rAWI+LHTVqwSjOdUzMXxZJ KUkVOZteRs8bcsnPuDm8GCNP+Xbsw3+f -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:08 2025 by rpki-client