$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft File: 75-XzrKSdlHWT6oC452-DaO3H5U.mft (raw, json) Hash identifier: cqHJQFXVbO0xjU8t0zbnJMWKZeKgiEvhtmx0RZnVPAc= Subject key identifier: 01:8D:BC:53:5D:57:86:0E:4F:C0:53:AB:76:EA:7D:D4:30:B1:4D:A6 Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 Certificate issuer: /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft Manifest number: 7F Signing time: Sat 25 Oct 2025 10:41:43 +0000 Manifest this update: Sat 25 Oct 2025 10:41:43 +0000 Manifest next update: Sat 01 Nov 2025 10:41:43 +0000 Files and hashes: 1: 75-XzrKSdlHWT6oC452-DaO3H5U.crl (hash: UDRMnMD9+khZoTmv3EP4DEn968Iz/XiEX/4yoL1LtYE=) 2: 2701A0D8769611F09C8ABC22C4F9AE02.roa (hash: UltTcVIqPHEDuUriQr1xUBBRJ1pBDqVcDmFzpS+wHEA=) 3: C405E494FCBF11EF8E586B7AC4F9AE02.roa (hash: 8p+dYc7w4P5cdTWL4po8oK48UBPSJ7b6JBGkywZrPZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 10:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Validity Not Before: Oct 25 10:41:43 2025 GMT Not After : Nov 1 10:41:43 2025 GMT Subject: CN=68fca967-fb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:44:f5:da:52:70:ae:d9:89:db:9d:76:62: 1a:32:8b:63:97:8a:4e:46:66:48:44:ae:4e:6d:3e: b8:c8:03:d1:79:7a:bb:75:c7:a4:1a:69:7f:93:93: f6:eb:14:b9:1b:c4:9a:36:0d:17:f0:6e:1f:7d:78: 7b:a8:63:c0:99:e0:6d:9a:1c:78:0b:7e:a9:56:f3: fa:66:d4:a5:c7:27:99:c0:1c:89:b4:5a:c7:16:7c: 07:9f:d1:80:77:21:cd:06:cc:e2:d3:85:96:63:fa: c8:d0:0c:66:53:3e:24:3e:e0:89:ed:b7:46:14:57: e3:7d:89:06:c5:e5:41:40:94:ad:cc:22:e2:7e:28: e2:0f:20:94:7b:3e:f9:ce:24:89:2c:88:c8:d4:26: ba:77:df:93:38:31:67:17:b1:f0:2b:80:5b:63:2f: 7c:78:dc:01:17:38:9b:9f:57:06:ac:bc:4b:1f:f3: b5:bb:c6:25:74:d4:21:3f:ae:b2:34:8c:18:e2:e8: e5:e4:6c:a0:c8:a9:70:71:ad:03:9c:e3:d8:97:18: 4d:74:1e:9d:4d:a4:44:7d:26:f2:57:1d:ac:0c:7a: 2e:eb:cd:2f:3d:8c:de:81:1a:0c:35:d5:a1:3c:ec: cc:3c:7a:5b:4e:b2:ab:02:7e:73:89:65:78:42:62: 05:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8D:BC:53:5D:57:86:0E:4F:C0:53:AB:76:EA:7D:D4:30:B1:4D:A6 X509v3 Authority Key Identifier: keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:db:02:ed:1c:0a:06:c9:8d:68:09:e2:bb:45:ce:e6:3c:d3: 56:7a:21:eb:4f:b1:c1:f6:aa:83:f3:5a:fe:f8:ac:f1:d2:f5: 77:f5:5f:ee:1a:0e:85:ef:d4:49:49:92:6f:ec:62:ec:f1:b8: e4:82:d7:77:62:41:b5:5a:6e:2b:5e:a1:ed:58:e7:b5:82:2a: 12:cf:84:6c:96:68:e3:dd:12:83:7c:04:d9:5d:3a:58:96:27: 9d:c5:52:1b:07:85:6b:e6:07:9a:80:a7:e4:10:5c:f9:dc:0a: 21:6e:fd:bc:dd:24:66:d9:76:a8:7f:ee:96:8d:d2:21:a0:65: 94:7a:d8:68:02:dc:d5:02:33:54:5a:05:a7:c4:b6:e4:52:66: 9c:36:9e:44:8e:60:91:7e:ed:af:00:95:ad:24:1b:33:92:ec: 6b:78:c1:95:2c:d4:b1:5c:74:98:55:eb:95:e0:7f:a1:80:29: 63:9c:6d:d8:26:e6:b3:5e:d2:34:cd:df:b5:37:96:b9:b6:2d: 54:fd:a5:d4:b7:ed:95:07:5e:1b:65:bc:c8:67:6e:25:d4:d8: f0:4a:c0:52:3d:31:3c:cd:5d:3e:3b:da:e4:f1:d0:37:c5:14: c2:3f:48:fb:dc:b2:b6:12:1b:9a:5b:da:d8:c0:b9:63:ce:fc: d9:81:bf:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1ODgxMTAvBgNVBAUTKEVGOUY5N0NFQjI5Mjc2NTFENjRGQUEwMkUzOURCRTBE QTNCNzFGOTUwHhcNMjUxMDI1MTA0MTQzWhcNMjUxMTAxMTA0MTQzWjAYMRYwFAYD VQQDEw02OGZjYTk2Ny1mYjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuctE9dpScK7ZiduddmIaMotjl4pORmZIRK5ObT64yAPReXq7dcekGml/k5P2 6xS5G8SaNg0X8G4ffXh7qGPAmeBtmhx4C36pVvP6ZtSlxyeZwByJtFrHFnwHn9GA dyHNBszi04WWY/rI0AxmUz4kPuCJ7bdGFFfjfYkGxeVBQJStzCLifijiDyCUez75 ziSJLIjI1Ca6d9+TODFnF7HwK4BbYy98eNwBFzibn1cGrLxLH/O1u8YldNQhP66y NIwY4ujl5GygyKlwca0DnOPYlxhNdB6dTaREfSbyVx2sDHou680vPYzegRoMNdWh POzMPHpbTrKrAn5ziWV4QmIFhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGNvFNd V4YOT8BTq3bqfdQwsU2mMB8GA1UdIwQYMBaAFO+fl86yknZR1k+qAuOdvg2jtx+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU4OC82OTQ1MzFGMkZB ODcxMUVGODNFREVDMkRDNEY5QUUwMi83NS1YenJLU2RsSFdUNm9DNDUyLURhTzNI NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1LVh6cktTZGxIV1Q2b0M0NTItRGFPM0g1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU4OC82OTQ1MzFGMkZBODcxMUVGODNFREVDMkRDNEY5QUUwMi83NS1YenJLU2Rs SFdUNm9DNDUyLURhTzNINVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH2wLtHAoGyY1oCeK7Rc7mPNNWeiHrT7HB9qqD81r++Kzx0vV39V/u Gg6F79RJSZJv7GLs8bjkgtd3YkG1Wm4rXqHtWOe1gioSz4Rslmjj3RKDfATZXTpY liedxVIbB4Vr5geagKfkEFz53Aohbv283SRm2Xaof+6WjdIhoGWUethoAtzVAjNU WgWnxLbkUmacNp5EjmCRfu2vAJWtJBszkuxreMGVLNSxXHSYVeuV4H+hgCljnG3Y JuazXtI0zd+1N5a5ti1U/aXUt+2VB14bZbzIZ24l1NjwSsBSPTE8zV0+O9rk8dA3 xRTCP0j73LK2EhuaW9rYwLljzvzZgb+R -----END CERTIFICATE-----Generated at Mon Oct 27 06:53:32 2025 by rpki-client