$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: XVbB3ni64RRaI65EQS9ujatK56zeud3xTSRnsJ6YDes= Subject key identifier: 25:09:0B:CE:6A:47:36:EB:16:C5:05:51:68:0D:9E:75:33:0C:DE:82 Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0B4F Signing time: Tue 04 Nov 2025 19:21:02 +0000 Manifest this update: Tue 04 Nov 2025 19:21:01 +0000 Manifest next update: Tue 11 Nov 2025 19:21:01 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: htgKe34Z2vQLm86iWqLArkoGWqraMX7YENWwr5bZkOc=) 2: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: DPGURiy/ga59xiLR42DrUhd2krbJVgQk+C5+WjMHgzg=) 3: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: +YYg5jcS99lfynPlhAhxkr4lADd5koWQrubtajtUn1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Nov 4 19:21:01 2025 GMT Not After : Nov 11 19:21:01 2025 GMT Subject: CN=690a521d-7e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:f7:5c:d4:1b:49:82:f6:e7:05:d6:e2:50: 6d:e4:9b:52:1d:b9:0c:d8:a5:fd:7a:58:21:90:2e: e9:c8:b7:90:74:ab:48:e0:2d:9e:fd:e6:83:67:65: ca:cc:e6:87:20:d7:84:ff:45:6f:20:dc:84:d0:d5: 71:f0:04:a2:9c:72:6c:b8:f5:4a:b1:78:58:cb:42: d9:08:74:1a:54:02:5b:5d:4d:25:7d:3c:af:6d:51: 0a:d5:03:b1:08:18:e3:ef:8c:d0:f5:8e:d3:e3:44: 90:5d:e0:bd:df:3e:e7:ab:9b:60:1a:2c:ec:b0:e0: ee:2c:54:eb:6b:ec:57:9a:a6:99:1b:4f:5b:5a:3b: 52:a2:4b:9f:7c:5c:7e:a6:e5:27:3c:9d:38:b1:c8: ce:46:4d:67:62:7b:ff:b3:a7:92:05:b9:66:21:ca: cd:56:44:35:eb:fb:e8:ec:11:82:d5:4b:96:2a:a8: 27:8c:d1:fd:2c:24:7a:2a:f2:83:fc:31:5f:69:07: b6:82:53:56:84:b4:f2:13:64:47:b1:74:24:0f:10: f5:45:ae:e4:ee:8a:6a:76:43:a5:24:38:88:78:2e: 66:7d:e0:16:53:38:a3:71:0b:35:07:9c:23:46:bc: 0f:0a:ee:bb:77:c7:bd:a6:ad:14:f2:12:36:88:1b: 20:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:09:0B:CE:6A:47:36:EB:16:C5:05:51:68:0D:9E:75:33:0C:DE:82 X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b6:d1:09:59:84:95:ae:01:cd:b1:d7:a0:76:f3:4f:29:45: 35:ed:e6:48:ad:a3:08:86:e0:9e:7f:51:2f:87:e7:f5:12:b7: e0:c5:ba:e1:6e:b2:ac:6a:18:08:7d:3b:57:98:ff:75:69:ee: 7f:ac:f9:12:2b:f6:d5:da:1e:bf:f4:94:a0:87:39:53:21:d4: 5e:e6:4f:99:08:f5:b5:c4:4f:f3:eb:57:ec:0b:f7:11:52:55: 5e:bb:f1:fd:39:84:be:b6:8e:cd:d3:99:07:b7:9d:0a:5a:3a: 7b:f7:f1:5f:9a:ca:a4:22:e2:13:47:5c:ce:33:ca:c7:9b:0a: 1f:f0:2b:1f:a7:1e:0d:32:b3:de:28:97:bf:10:e3:8d:9f:4c: 44:17:1e:95:ef:1a:69:09:49:2f:d2:4c:e5:19:88:40:80:8a: e2:f0:1a:a7:40:87:f4:6c:f1:22:ce:03:80:98:15:5a:15:c2: 8c:6f:50:52:eb:2d:54:f1:4c:d7:01:92:56:1d:a1:d2:a2:b2: 1b:31:d0:f1:09:c0:45:3f:7c:6b:48:65:03:2e:9d:1c:68:7f: cf:15:fc:f4:e2:c9:23:b6:72:f8:b2:44:1b:50:73:ba:5a:62: d8:86:68:89:35:c8:3b:a2:94:29:da:cc:ac:70:61:8c:48:31: a2:23:6a:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjUxMTA0MTkyMTAxWhcNMjUxMTExMTkyMTAxWjAYMRYwFAYD VQQDEw02OTBhNTIxZC03ZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqj3XNQbSYL25wXW4lBt5JtSHbkM2KX9elghkC7pyLeQdKtI4C2e/eaDZ2XK zOaHINeE/0VvINyE0NVx8ASinHJsuPVKsXhYy0LZCHQaVAJbXU0lfTyvbVEK1QOx CBjj74zQ9Y7T40SQXeC93z7nq5tgGizssODuLFTra+xXmqaZG09bWjtSokuffFx+ puUnPJ04scjORk1nYnv/s6eSBblmIcrNVkQ16/vo7BGC1UuWKqgnjNH9LCR6KvKD /DFfaQe2glNWhLTyE2RHsXQkDxD1Ra7k7opqdkOlJDiIeC5mfeAWUzijcQs1B5wj RrwPCu67d8e9pq0U8hI2iBsg5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUJC85q RzbrFsUFUWgNnnUzDN6CMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsttEJWYSVrgHNsdegdvNPKUU17eZIraMIhuCef1Evh+f1Erfgxbrh brKsahgIfTtXmP91ae5/rPkSK/bV2h6/9JSghzlTIdRe5k+ZCPW1xE/z61fsC/cR UlVeu/H9OYS+to7N05kHt50KWjp79/FfmsqkIuITR1zOM8rHmwof8Csfpx4NMrPe KJe/EOONn0xEFx6V7xppCUkv0kzlGYhAgIri8BqnQIf0bPEizgOAmBVaFcKMb1BS 6y1U8UzXAZJWHaHSorIbMdDxCcBFP3xrSGUDLp0caH/PFfz04skjtnL4skQbUHO6 WmLYhmiJNcg7opQp2syscGGMSDGiI2rD -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:19 2025 by rpki-client