$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft File: xoquBsigaPIiEjEzLc1N8a8vB5Q.mft (raw, json) Hash identifier: amIK7ra6J93rVI/TduTmZBsnHSwfYxCaAGt1uKQjD6g= Subject key identifier: B7:FE:6B:F7:8C:0F:34:54:3D:B1:F5:66:04:5C:E6:22:A6:D9:C0:4E Authority key identifier: C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94 Certificate issuer: /CN=A915CC16/serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft Manifest number: 0853 Signing time: Sun 02 Nov 2025 20:46:58 +0000 Manifest this update: Sun 02 Nov 2025 20:46:58 +0000 Manifest next update: Sun 09 Nov 2025 20:46:58 +0000 Files and hashes: 1: xoquBsigaPIiEjEzLc1N8a8vB5Q.crl (hash: VO3G/OCrT0iYnJfprom2YN9TcMBx1VMMyiR2apdqqEE=) 2: 38A2CBB88DEE11F0B9918D1FC4F9AE02.roa (hash: z3byFN5IfEv+WZ84P4Hf1mQWrRSXQ5bot07gaZA1QjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CC16, serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794 Validity Not Before: Nov 2 20:46:58 2025 GMT Not After : Nov 9 20:46:58 2025 GMT Subject: CN=6907c342-de52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:77:34:0e:20:0d:19:b2:54:19:0f:36:29:73: 25:1e:43:d0:ac:2e:e7:4a:bf:d2:6d:14:9d:a8:3a: 30:4e:36:7f:90:72:05:a2:35:75:aa:6b:55:23:f4: 4e:26:28:f4:2c:f7:32:29:b6:57:a4:9c:59:08:6e: 4a:9b:28:6a:62:b0:48:f7:61:f4:3c:27:f0:f5:80: d6:8c:02:40:51:84:7a:d5:51:18:7a:a1:bb:2d:cd: 40:f2:2f:18:a0:bd:7e:b6:25:8a:d1:db:e0:c2:3a: f4:37:03:81:fb:78:51:81:e2:86:79:7b:fd:14:82: 51:9d:90:26:3d:a5:ec:79:ff:47:2a:7e:28:f1:3b: b3:a2:c4:3e:ee:1e:e4:1a:f3:6f:4a:3e:7b:03:b9: 71:d7:e9:7b:74:47:cc:28:34:a4:7c:a5:35:82:7a: 72:63:53:b4:91:3a:e3:cc:80:f3:dc:41:84:0f:be: 63:c3:2d:73:da:c3:2e:81:1d:49:11:99:44:99:58: 22:08:53:81:30:82:a3:48:18:76:38:e1:72:87:d3: 01:34:39:39:b5:66:6b:39:57:44:02:2d:c4:41:fe: 09:f4:5f:39:4b:37:a0:db:30:9c:f6:9b:cd:ef:f5: db:af:d0:0d:9c:17:c3:c4:a1:23:dd:57:62:48:51: 28:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FE:6B:F7:8C:0F:34:54:3D:B1:F5:66:04:5C:E6:22:A6:D9:C0:4E X509v3 Authority Key Identifier: keyid:C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:16:44:2b:a0:cf:7a:7f:8c:bf:cb:65:0c:bf:af:a0:f9:78: ec:bc:28:65:bc:2e:83:61:5e:74:ac:9c:d2:88:ff:08:e1:03: 22:5e:d1:f4:d5:b7:bf:d8:2e:31:29:b7:ce:73:34:96:f3:f5: ff:a5:1d:9f:51:1a:10:1f:e8:01:49:c8:5e:76:af:c2:56:b4: db:b3:d5:2c:f0:62:c6:97:94:79:b6:89:cf:2e:90:fb:f2:4d: 59:00:f9:af:4b:fd:bc:9f:21:fe:9d:cc:d3:08:d8:3d:14:d2: 64:af:92:c3:eb:3f:06:95:5b:06:7f:27:f8:1e:9e:7d:10:24: d7:b7:9f:6f:45:55:4b:ef:86:80:ca:98:24:6b:61:80:8a:01: 0a:14:03:32:fa:1a:3c:4f:af:ea:6e:93:14:33:90:f7:95:84: 87:8c:29:51:c3:db:54:21:14:51:10:d2:69:cd:ff:d7:0a:4e: e6:68:2f:e6:d5:16:a5:60:73:74:1c:67:58:d0:e8:cb:9e:a5: 8e:bf:6e:c2:74:6e:96:13:3e:8a:c9:a6:d7:c2:84:7c:69:51: d5:ea:14:97:b1:83:ca:4f:86:c0:ee:94:50:e0:35:ba:bf:05: 54:4c:dd:0e:09:76:ad:50:71:6d:64:62:02:0e:cc:e0:3f:49: 87:04:65:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0MxNjExMC8GA1UEBRMoQzY4QUFFMDZDOEEwNjhGMjIyMTIzMTMzMkRDRDRERjFB RjJGMDc5NDAeFw0yNTExMDIyMDQ2NThaFw0yNTExMDkyMDQ2NThaMBgxFjAUBgNV BAMTDTY5MDdjMzQyLWRlNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpdzQOIA0ZslQZDzYpcyUeQ9CsLudKv9JtFJ2oOjBONn+QcgWiNXWqa1Uj9E4m KPQs9zIptleknFkIbkqbKGpisEj3YfQ8J/D1gNaMAkBRhHrVURh6obstzUDyLxig vX62JYrR2+DCOvQ3A4H7eFGB4oZ5e/0UglGdkCY9pex5/0cqfijxO7OixD7uHuQa 829KPnsDuXHX6Xt0R8woNKR8pTWCenJjU7SROuPMgPPcQYQPvmPDLXPawy6BHUkR mUSZWCIIU4EwgqNIGHY44XKH0wE0OTm1Zms5V0QCLcRB/gn0XzlLN6DbMJz2m83v 9duv0A2cF8PEoSPdV2JIUSjHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt/5r94wP NFQ9sfVmBFzmIqbZwE4wHwYDVR0jBBgwFoAUxoquBsigaPIiEjEzLc1N8a8vB5Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDQzE2LzI0RDM5RDYyRjA4 MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJaUVqRXpMYzFOOGE4dkI1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveG9xdUJzaWdhUElpRWpFekxjMU44YTh2QjVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD QzE2LzI0RDM5RDYyRjA4MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJ aUVqRXpMYzFOOGE4dkI1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMQWRCugz3p/jL/LZQy/r6D5eOy8KGW8LoNhXnSsnNKI/wjhAyJe0fTV t7/YLjEpt85zNJbz9f+lHZ9RGhAf6AFJyF52r8JWtNuz1SzwYsaXlHm2ic8ukPvy TVkA+a9L/byfIf6dzNMI2D0U0mSvksPrPwaVWwZ/J/genn0QJNe3n29FVUvvhoDK mCRrYYCKAQoUAzL6GjxPr+pukxQzkPeVhIeMKVHD21QhFFEQ0mnN/9cKTuZoL+bV FqVgc3QcZ1jQ6MuepY6/bsJ0bpYTPorJptfChHxpUdXqFJexg8pPhsDulFDgNbq/ BVRM3Q4Jdq1QcW1kYgIOzOA/SYcEZfU= -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:07 2025 by rpki-client