$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft File: xoquBsigaPIiEjEzLc1N8a8vB5Q.mft (raw, json) Hash identifier: Mdy46lqHX+2rT6R6VMC8sBayQb1mDuLJvLTX2NRkjYQ= Subject key identifier: 59:FC:D3:97:6E:0B:04:38:30:30:F4:2F:04:94:FC:E6:43:01:E7:2E Authority key identifier: C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94 Certificate issuer: /CN=A915CC16/serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft Manifest number: 0827 Signing time: Thu 18 Sep 2025 21:08:18 +0000 Manifest this update: Thu 18 Sep 2025 21:08:17 +0000 Manifest next update: Thu 25 Sep 2025 21:08:17 +0000 Files and hashes: 1: xoquBsigaPIiEjEzLc1N8a8vB5Q.crl (hash: xhk+1UUt9Sohzr2a2cLoX9FSNymxMvR90JeJ6bX4PIc=) 2: 38A2CBB88DEE11F0B9918D1FC4F9AE02.roa (hash: z3byFN5IfEv+WZ84P4Hf1mQWrRSXQ5bot07gaZA1QjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CC16, serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794 Validity Not Before: Sep 18 21:08:17 2025 GMT Not After : Sep 25 21:08:17 2025 GMT Subject: CN=68cc74c1-1cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:35:72:b8:74:b6:38:b3:17:24:c6:e6:d7: 6b:71:e3:6d:ca:d3:8f:95:6a:8a:02:2b:42:bd:f4: 82:bc:32:9a:17:c8:12:fe:a2:f6:0c:88:00:43:9e: 8d:fd:c3:a9:fb:44:ea:dd:57:96:31:65:ac:e8:94: 57:d7:e5:39:cf:14:77:b1:92:81:72:4d:a6:1c:21: 59:b4:0e:6b:97:75:f9:13:65:ba:22:79:ec:d6:83: 99:ff:95:24:e6:b6:82:83:fa:98:01:52:7c:e3:3c: ab:f5:be:7c:3f:ca:4b:f2:0d:77:7c:f4:4e:42:1b: 02:0e:7f:15:91:a5:66:c8:b8:50:c2:5c:50:7f:92: 19:91:6d:39:59:18:ab:9c:2a:4e:05:5d:47:3f:b6: e6:f6:6e:05:09:f0:c4:c5:70:a1:ec:2e:25:ae:d5: 53:21:ca:c3:cf:50:7d:88:51:e6:32:72:58:99:69: 5d:fb:6c:93:06:d2:07:d6:b8:77:ab:bc:0b:fd:fb: 02:86:90:45:98:ab:64:f3:10:a6:7f:f4:a7:f8:18: 67:5c:e8:01:a3:51:5a:99:0a:17:18:a8:ce:95:3b: 5a:94:37:47:68:64:b6:77:52:1a:80:f0:0e:1c:d7: b0:1a:f1:8a:38:74:df:6c:ee:cc:b2:1b:84:bc:41: 53:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FC:D3:97:6E:0B:04:38:30:30:F4:2F:04:94:FC:E6:43:01:E7:2E X509v3 Authority Key Identifier: keyid:C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:36:4a:5e:6f:6f:91:d8:61:1a:42:60:d4:c2:5b:0b:55:c3: 71:5a:b8:04:c3:2b:3d:98:48:30:b6:a5:f1:ff:1f:55:5e:4d: f6:59:1e:33:54:09:7e:be:f2:27:44:6b:32:92:92:ab:c2:9e: 1e:f1:70:33:23:0a:fc:53:02:05:fe:e4:8b:73:da:50:50:be: c2:66:a5:f3:59:b5:97:c2:ba:b0:c9:e6:ae:d5:6f:c2:36:ed: e3:60:fc:d4:d8:6d:89:29:54:e8:3c:57:23:e9:34:af:13:dd: 10:61:96:4c:9e:87:f9:72:15:0f:09:0f:f8:18:63:6b:ed:8c: 62:a7:74:fc:77:72:e3:ea:ba:80:6a:d7:52:76:91:cf:e2:e9: bc:13:d4:fe:71:9b:f5:8e:4c:c1:a6:fe:fb:a6:c0:cc:d0:85: 03:bd:72:37:4c:f4:d4:eb:bc:5d:91:c3:a6:05:b9:73:84:a4: 77:cf:9f:44:e5:85:ee:e0:33:d2:cb:b4:68:14:8b:57:b1:39: ff:5a:e8:4e:8a:67:33:a1:31:7a:9c:fb:74:ba:64:3f:4d:a6: d7:bd:eb:f3:a1:ee:9c:77:d4:f3:76:3f:30:9c:dc:c8:3f:60: 32:25:a7:96:a2:d1:34:2c:c4:1a:9b:87:ed:c5:3e:66:34:ff: b8:34:80:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0MxNjExMC8GA1UEBRMoQzY4QUFFMDZDOEEwNjhGMjIyMTIzMTMzMkRDRDRERjFB RjJGMDc5NDAeFw0yNTA5MTgyMTA4MTdaFw0yNTA5MjUyMTA4MTdaMBgxFjAUBgNV BAMTDTY4Y2M3NGMxLTFjZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVQDVyuHS2OLMXJMbm12tx423K04+VaooCK0K99IK8MpoXyBL+ovYMiABDno39 w6n7ROrdV5YxZazolFfX5TnPFHexkoFyTaYcIVm0DmuXdfkTZboieezWg5n/lSTm toKD+pgBUnzjPKv1vnw/ykvyDXd89E5CGwIOfxWRpWbIuFDCXFB/khmRbTlZGKuc Kk4FXUc/tub2bgUJ8MTFcKHsLiWu1VMhysPPUH2IUeYycliZaV37bJMG0gfWuHer vAv9+wKGkEWYq2TzEKZ/9Kf4GGdc6AGjUVqZChcYqM6VO1qUN0doZLZ3UhqA8A4c 17Aa8Yo4dN9s7syyG4S8QVNjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWfzTl24L BDgwMPQvBJT85kMB5y4wHwYDVR0jBBgwFoAUxoquBsigaPIiEjEzLc1N8a8vB5Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDQzE2LzI0RDM5RDYyRjA4 MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJaUVqRXpMYzFOOGE4dkI1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveG9xdUJzaWdhUElpRWpFekxjMU44YTh2QjVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD QzE2LzI0RDM5RDYyRjA4MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJ aUVqRXpMYzFOOGE4dkI1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACY2Sl5vb5HYYRpCYNTCWwtVw3FauATDKz2YSDC2pfH/H1VeTfZZHjNU CX6+8idEazKSkqvCnh7xcDMjCvxTAgX+5Itz2lBQvsJmpfNZtZfCurDJ5q7Vb8I2 7eNg/NTYbYkpVOg8VyPpNK8T3RBhlkyeh/lyFQ8JD/gYY2vtjGKndPx3cuPquoBq 11J2kc/i6bwT1P5xm/WOTMGm/vumwMzQhQO9cjdM9NTrvF2Rw6YFuXOEpHfPn0Tl he7gM9LLtGgUi1exOf9a6E6KZzOhMXqc+3S6ZD9Npte96/Oh7px31PN2PzCc3Mg/ YDIlp5ai0TQsxBqbh+3FPmY0/7g0gC4= -----END CERTIFICATE-----Generated at Fri Sep 19 08:50:18 2025 by rpki-client