$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft File: xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json) Hash identifier: netrBI8vCLV9okhzueTOL3wq7BaKt2X9VeGLJD/CxLw= Subject key identifier: 93:14:89:5F:B6:8C:14:01:F8:A1:74:32:4D:2F:58:7E:70:FD:4F:B2 Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE Certificate issuer: /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Certificate serial: 1349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft Manifest number: 133F Signing time: Tue 04 Nov 2025 17:06:30 +0000 Manifest this update: Tue 04 Nov 2025 17:06:29 +0000 Manifest next update: Tue 11 Nov 2025 17:06:29 +0000 Files and hashes: 1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: 8ypq15l8f7meDDb8BxQb/h7tQ5sRs13N8c+PO1vc6IE=) 2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: 0tM/V7nX9hi4ETzuWiBmb9YtIWsrgFEIcg6fokAj5jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4937 (0x1349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161EA6, serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Validity Not Before: Nov 4 17:06:29 2025 GMT Not After : Nov 11 17:06:29 2025 GMT Subject: CN=690a3295-3034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:d8:37:98:9d:38:6b:b4:6d:7e:bd:0c:8c: 19:23:0a:54:88:6b:e2:86:24:d2:38:e6:8b:41:97: 33:0c:9c:86:48:d1:dd:64:6b:aa:46:d5:b1:96:da: f5:44:0e:19:0e:bf:64:e5:96:a1:e5:ab:24:46:93: 76:82:37:f5:fd:f0:87:1a:c2:0e:02:19:73:7c:99: 41:70:38:2b:ae:96:cd:77:ba:6d:08:1d:c5:4b:88: 4b:4c:1e:6c:3f:81:d0:d3:0f:78:13:d9:0b:fa:26: c5:96:78:9e:fc:1f:2e:3d:a9:19:9c:31:1f:a3:7c: 02:b5:83:7e:4a:e9:99:14:4f:f1:72:62:a8:13:5c: e1:57:a5:d4:b5:c3:b9:73:6f:47:20:26:b9:e1:8b: b1:5f:dc:8b:f4:b4:86:0a:26:d1:22:05:cc:02:10: 93:8c:4b:db:e0:ac:be:56:34:de:9d:d8:45:e4:5a: 6f:2c:03:3b:cc:c8:c7:fb:cd:77:ec:6e:fa:a3:a1: 06:d9:fb:b8:00:b5:2b:75:2e:d4:3d:66:41:4b:5a: 03:30:dd:9e:c3:0d:9d:f6:82:6c:5c:09:31:b0:e9: ae:f8:9a:79:8b:94:dd:8a:75:c5:2a:e3:b7:8c:d9: 20:c6:32:81:af:05:38:fa:a6:2c:53:41:0d:7a:ab: 3c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:14:89:5F:B6:8C:14:01:F8:A1:74:32:4D:2F:58:7E:70:FD:4F:B2 X509v3 Authority Key Identifier: keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:3a:0f:d8:a0:73:33:8f:bb:c4:eb:36:cc:1f:ac:eb:b6:ed: eb:c8:c4:dd:95:b1:32:43:f9:dd:60:d8:26:3c:6b:71:c9:52: 9a:3a:e4:0a:9e:7b:09:ca:5d:63:fd:06:e9:e8:2a:9e:4e:45: 63:dd:6f:8c:83:77:02:79:14:7f:34:0c:0c:3e:06:17:0c:88: f7:eb:1e:54:c5:ee:a7:c1:70:67:3e:be:ef:36:2c:43:bc:68: 9a:19:78:9c:cc:d1:44:be:f3:e8:e8:92:35:80:9a:b3:25:68: 10:1c:55:0a:0b:cd:31:76:9f:76:b9:db:f3:c3:8c:51:24:ce: bc:59:50:db:0f:ee:92:4c:3c:1d:c0:e1:4d:89:f6:ce:da:69: 35:3c:5d:23:21:ab:9e:8e:4f:2f:01:b9:58:d3:d6:9c:7b:39: 77:ed:90:b6:9d:6d:27:e2:92:19:47:52:d6:53:88:78:98:35: 7d:a1:af:d0:c3:99:41:00:3e:94:39:9a:46:cf:68:c8:63:39: 36:b4:54:5a:96:fa:1c:23:2c:3b:51:4e:32:a5:20:96:5a:5a: 76:9a:a4:35:93:92:7d:11:45:54:54:32:29:bf:65:cb:57:4d: 63:9c:d5:13:01:9a:b6:9c:fc:10:20:00:28:60:0b:d8:42:ef: 80:06:27:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFFQTYxMTAvBgNVBAUTKEM3M0VCRjRGMTVGQTI2MjkyQkY1QURCODhBODY1NzdF QzNBNzFDREUwHhcNMjUxMTA0MTcwNjI5WhcNMjUxMTExMTcwNjI5WjAYMRYwFAYD VQQDEw02OTBhMzI5NS0zMDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NvYN5idOGu0bX69DIwZIwpUiGvihiTSOOaLQZczDJyGSNHdZGuqRtWxltr1 RA4ZDr9k5Zah5askRpN2gjf1/fCHGsIOAhlzfJlBcDgrrpbNd7ptCB3FS4hLTB5s P4HQ0w94E9kL+ibFlnie/B8uPakZnDEfo3wCtYN+SumZFE/xcmKoE1zhV6XUtcO5 c29HICa54YuxX9yL9LSGCibRIgXMAhCTjEvb4Ky+VjTendhF5FpvLAM7zMjH+813 7G76o6EG2fu4ALUrdS7UPWZBS1oDMN2eww2d9oJsXAkxsOmu+Jp5i5TdinXFKuO3 jNkgxjKBrwU4+qYsU0ENeqs8JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMUiV+2 jBQB+KF0Mk0vWH5w/U+yMB8GA1UdIwQYMBaAFMc+v08V+iYpK/WtuIqGV37Dpxze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUVBNi8xQURFMkUyNkI2 MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkppa3I5YTI0aW9aWGZzT25I TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h6Nl9UeFg2SmlrcjlhMjRpb1pYZnNPbkhONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUVBNi8xQURFMkUyNkI2MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkpp a3I5YTI0aW9aWGZzT25ITjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnOg/YoHMzj7vE6zbMH6zrtu3ryMTdlbEyQ/ndYNgmPGtxyVKaOuQK nnsJyl1j/Qbp6CqeTkVj3W+Mg3cCeRR/NAwMPgYXDIj36x5Uxe6nwXBnPr7vNixD vGiaGXiczNFEvvPo6JI1gJqzJWgQHFUKC80xdp92udvzw4xRJM68WVDbD+6STDwd wOFNifbO2mk1PF0jIauejk8vAblY09acezl37ZC2nW0n4pIZR1LWU4h4mDV9oa/Q w5lBAD6UOZpGz2jIYzk2tFRalvocIyw7UU4ypSCWWlp2mqQ1k5J9EUVUVDIpv2XL V01jnNUTAZq2nPwQIAAoYAvYQu+ABifv -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:26 2025 by rpki-client