$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: ZaLQWyYS5vSFfdk0SmQb1lpm/4gCFS+JBJPx3LrYl20= Subject key identifier: 90:F8:6C:D2:C7:21:02:60:CB:46:19:C6:59:95:31:75:07:B3:FD:28 Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0B47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0B35 Signing time: Thu 18 Sep 2025 19:30:30 +0000 Manifest this update: Thu 18 Sep 2025 19:30:29 +0000 Manifest next update: Thu 25 Sep 2025 19:30:29 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: 4xGaS/2yZ1S8Sifvfztw/1kVkWcUdu+t95MsL8ssUxM=) 2: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: 9BaWhzh+l6Hs0fob/wzScQhpU7PXO4VkUD7tRr97prg=) 3: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: XjB4kRy9tL8HjPAuoxnetVpAUd8foef1DiSnbt9EdB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2887 (0xb47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Sep 18 19:30:29 2025 GMT Not After : Sep 25 19:30:29 2025 GMT Subject: CN=68cc5dd6-0f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:bc:38:58:74:f5:e6:de:4f:e7:74:85:1e: d5:73:20:fc:b9:d9:54:21:8a:94:9e:3f:fe:75:4d: 57:5c:f4:d7:8c:22:35:97:96:ba:12:0f:52:50:cd: 15:54:ed:63:4e:14:3f:98:db:89:20:74:e6:50:03: d6:ba:7a:1e:8b:76:47:65:2b:27:57:5b:df:4e:07: 99:27:9a:a9:5d:c2:3e:59:c6:53:3f:c1:e2:a2:10: 52:b5:8e:04:84:3e:fa:3f:70:9f:ff:6d:dd:47:ed: 12:00:cc:cb:7e:9e:79:77:54:f3:75:7e:07:6d:60: ae:32:0c:b2:46:83:15:ab:98:21:65:1a:b3:ac:bd: a3:ec:de:f1:44:57:33:51:59:68:d5:4b:02:50:74: cb:25:c7:ce:02:ac:d6:b6:53:ba:7f:9d:cb:4a:f8: 2f:7a:52:07:15:0e:6c:52:eb:d8:f7:e5:39:5c:cf: b5:6e:4d:1f:20:07:25:d3:48:45:05:dc:72:21:95: b3:4c:72:5a:aa:79:1e:fb:44:8c:85:25:da:1b:e4: 02:ae:12:a8:8a:d2:f8:18:b6:d1:e9:a8:23:9f:9a: ac:68:e8:44:28:d8:b0:e7:f4:8c:09:e9:e4:d9:43: 52:ea:5a:e3:e1:80:56:57:a7:5a:96:3b:84:07:1c: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F8:6C:D2:C7:21:02:60:CB:46:19:C6:59:95:31:75:07:B3:FD:28 X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b9:b9:48:51:ff:83:23:53:e7:f8:d4:56:54:55:f2:6d:3b: 78:fa:87:1b:c4:bc:56:5f:91:16:cc:8c:2b:ec:f3:6a:f9:c5: b1:06:8a:cf:40:54:f0:6a:8f:4e:81:18:a4:4c:17:ec:c6:fd: a7:db:28:a3:91:87:7d:89:f7:d8:18:ba:de:11:7e:25:b2:b7: 32:e3:e9:fa:76:b5:34:6d:29:2a:8c:4d:36:cd:1d:03:cd:42: 50:88:23:48:ba:04:6c:db:5b:4b:48:c0:50:f2:02:86:3e:82: f8:ba:29:30:d7:98:4a:c7:bf:19:50:cc:75:60:f8:be:65:8f: 16:b6:20:eb:21:9d:9c:4d:ab:43:aa:22:1a:c3:03:66:13:ec: 5a:25:91:92:f6:4b:dd:30:56:00:9b:0c:58:57:5b:9e:3c:a0: 02:21:eb:b1:bb:b1:87:84:eb:d0:07:de:5a:c9:91:fe:32:42: 4e:7b:dc:99:5c:b0:e7:0f:7c:3d:74:5d:bc:cc:00:3a:db:ff: 81:aa:69:b9:82:55:55:bb:a8:22:7d:ec:1f:01:ac:50:40:ec: c6:a1:c1:33:26:93:5d:ce:4a:b2:66:07:48:1a:fd:df:9b:89: 5b:09:83:b7:d8:a4:85:2a:61:65:81:76:ab:e3:81:9f:b4:6b: 0f:b1:22:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjUwOTE4MTkzMDI5WhcNMjUwOTI1MTkzMDI5WjAYMRYwFAYD VQQDEw02OGNjNWRkNi0wZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7e8OFh09ebeT+d0hR7VcyD8udlUIYqUnj/+dU1XXPTXjCI1l5a6Eg9SUM0V VO1jThQ/mNuJIHTmUAPWunoei3ZHZSsnV1vfTgeZJ5qpXcI+WcZTP8HiohBStY4E hD76P3Cf/23dR+0SAMzLfp55d1TzdX4HbWCuMgyyRoMVq5ghZRqzrL2j7N7xRFcz UVlo1UsCUHTLJcfOAqzWtlO6f53LSvgvelIHFQ5sUuvY9+U5XM+1bk0fIAcl00hF BdxyIZWzTHJaqnke+0SMhSXaG+QCrhKoitL4GLbR6agjn5qsaOhEKNiw5/SMCenk 2UNS6lrj4YBWV6daljuEBxxo2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD4bNLH IQJgy0YZxlmVMXUHs/0oMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ublIUf+DI1Pn+NRWVFXybTt4+ocbxLxWX5EWzIwr7PNq+cWxBorP QFTwao9OgRikTBfsxv2n2yijkYd9iffYGLreEX4lsrcy4+n6drU0bSkqjE02zR0D zUJQiCNIugRs21tLSMBQ8gKGPoL4uikw15hKx78ZUMx1YPi+ZY8WtiDrIZ2cTatD qiIawwNmE+xaJZGS9kvdMFYAmwxYV1uePKACIeuxu7GHhOvQB95ayZH+MkJOe9yZ XLDnD3w9dF28zAA62/+Bqmm5glVVu6gifewfAaxQQOzGocEzJpNdzkqyZgdIGv3f m4lbCYO32KSFKmFlgXar44GftGsPsSJQ -----END CERTIFICATE-----Generated at Fri Sep 19 04:23:45 2025 by rpki-client