$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json) Hash identifier: rtEv+11WldnGnr3zTJQa4Jm+1sKoHRQD32FuR2F5HDM= Subject key identifier: 08:CC:A7:8D:C6:2E:2B:EC:A0:12:1B:D6:3F:F3:D4:5C:2E:EF:83:51 Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1D21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft Manifest number: 1CDF Signing time: Tue 04 Nov 2025 16:15:35 +0000 Manifest this update: Tue 04 Nov 2025 16:15:34 +0000 Manifest next update: Tue 11 Nov 2025 16:15:34 +0000 Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: Z0gktQpxGlaVJtnwe2+SGF13NSexi+eR0svJI58qgzI=) 2: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: 20AfF76B9+g4MK13JnUrRZPbIDu/TESDofczBLuYHu0=) 3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: 6/nHCLLC7n4HaWWUGKVmTxdYoQkDB8jaG5K5D54SivA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7457 (0x1d21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: Nov 4 16:15:34 2025 GMT Not After : Nov 11 16:15:34 2025 GMT Subject: CN=690a26a7-059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:61:54:42:2d:ca:80:d1:5e:38:d5:53:dd:2d: b3:39:20:80:eb:7e:ef:70:83:3f:b5:bd:06:61:1a: 50:8f:6f:4c:1c:62:52:ac:8e:6a:b0:2f:03:a7:71: b3:5e:d5:c7:df:c0:2d:32:1d:4a:f8:55:f0:25:d6: 36:90:a0:19:ef:a3:df:9c:96:be:e3:2d:42:c0:80: 37:ce:b2:05:3b:4c:4a:de:43:3d:12:2a:4a:d0:23: 04:d0:07:9e:22:31:59:63:f9:9b:b3:41:1f:d0:a9: c9:9c:10:c5:36:98:cd:33:af:87:fe:ca:12:2d:af: 64:1d:da:67:81:38:7d:01:dc:84:3b:e0:fb:14:fc: f5:d3:19:04:3d:64:b9:99:73:99:df:2f:05:33:67: a9:1b:62:d1:a4:3c:75:97:12:3c:1a:c0:8f:cb:9b: 3f:bd:b1:c4:15:de:78:0d:e5:b1:29:9d:3e:3a:fd: 9b:30:aa:c2:42:3d:0b:85:8b:6b:9a:49:20:15:88: a6:84:11:c3:34:4a:6a:b6:b8:7b:cd:e2:b5:09:94: 66:4c:92:9c:d7:47:bf:55:b5:37:7e:5e:a9:42:28: 92:35:0b:e4:dc:ee:06:16:92:11:c1:f4:49:65:1a: 4a:0b:46:b4:bb:8b:3b:1f:ba:96:8a:38:6b:9c:d0: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CC:A7:8D:C6:2E:2B:EC:A0:12:1B:D6:3F:F3:D4:5C:2E:EF:83:51 X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:7b:ae:9c:8b:10:6a:fe:e3:11:99:67:fd:3f:8f:77:7a:8b: b0:f2:b7:48:90:69:43:d0:72:dd:1f:e8:13:69:32:67:07:18: 39:93:9e:c5:b6:d7:c8:38:42:5e:40:93:4b:2c:4e:08:c9:47: 32:c4:34:53:b2:3d:77:37:54:9a:17:c5:dd:60:3a:8b:58:af: 28:c3:79:bb:2e:d3:97:5f:9e:01:f0:61:e8:4f:9f:c4:bd:2a: 1e:c5:f1:5d:f4:46:b0:40:a5:89:a1:b6:5f:2b:f6:a9:da:1e: 26:5f:1f:56:ee:03:df:33:11:1b:8b:72:9d:94:21:30:4c:29: f7:4f:02:80:5a:cf:29:95:22:10:1d:ab:e6:4d:8d:98:0a:e0: 3b:4d:6b:ee:1d:52:43:24:b0:67:b3:aa:b4:a7:ef:c8:cd:3e: 55:92:0d:ce:86:d8:98:26:2c:fc:8e:0f:83:84:85:3c:07:5a: b7:fe:68:88:4d:43:b3:53:da:d1:a6:0e:d6:ba:e1:db:9c:8c: 32:69:24:b3:d9:f1:d3:d9:3e:9a:ef:08:47:5e:3b:ba:88:9b: 05:91:dc:66:21:51:3f:d0:5b:bb:d8:37:95:0d:f4:55:bf:68: 5f:aa:6b:9a:37:8c:dd:7b:aa:3a:f7:5c:87:cd:77:a7:87:33: 2a:22:2e:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjUxMTA0MTYxNTM0WhcNMjUxMTExMTYxNTM0WjAYMRYwFAYD VQQDEw02OTBhMjZhNy0wNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mFUQi3KgNFeONVT3S2zOSCA637vcIM/tb0GYRpQj29MHGJSrI5qsC8Dp3Gz XtXH38AtMh1K+FXwJdY2kKAZ76PfnJa+4y1CwIA3zrIFO0xK3kM9EipK0CME0Aee IjFZY/mbs0Ef0KnJnBDFNpjNM6+H/soSLa9kHdpngTh9AdyEO+D7FPz10xkEPWS5 mXOZ3y8FM2epG2LRpDx1lxI8GsCPy5s/vbHEFd54DeWxKZ0+Ov2bMKrCQj0LhYtr mkkgFYimhBHDNEpqtrh7zeK1CZRmTJKc10e/VbU3fl6pQiiSNQvk3O4GFpIRwfRJ ZRpKC0a0u4s7H7qWijhrnNAyeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjMp43G LivsoBIb1j/z1Fwu74NRMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDM5MC8wRTkzNTRGQ0RDNUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJT QTFzd2ZvOTVZM1lJX3EyX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBke66cixBq/uMRmWf9P493eouw8rdIkGlD0HLdH+gTaTJnBxg5k57F ttfIOEJeQJNLLE4IyUcyxDRTsj13N1SaF8XdYDqLWK8ow3m7LtOXX54B8GHoT5/E vSoexfFd9EawQKWJobZfK/ap2h4mXx9W7gPfMxEbi3KdlCEwTCn3TwKAWs8plSIQ HavmTY2YCuA7TWvuHVJDJLBns6q0p+/IzT5Vkg3OhtiYJiz8jg+DhIU8B1q3/miI TUOzU9rRpg7WuuHbnIwyaSSz2fHT2T6a7whHXju6iJsFkdxmIVE/0Fu72DeVDfRV v2hfqmuaN4zde6o691yHzXenhzMqIi4f -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:43 2025 by rpki-client