$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: 8bahckBi1p0dD+LXFnPH2qPA22z/Al9MUMZTNYIca6I= Subject key identifier: 23:25:B9:F2:45:71:17:AB:65:21:0A:D1:AC:33:7D:E6:D2:13:7D:7B Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 0812 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 0807 Signing time: Fri 24 Oct 2025 21:49:09 +0000 Manifest this update: Fri 24 Oct 2025 21:49:09 +0000 Manifest next update: Fri 31 Oct 2025 21:49:09 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: HP2U8vQt3+brgI7f2tZCxeupjPEoKQogNz3FgvwSpmY=) 2: FC4EA8D8918511EDB3CBB378C4F9AE02.roa (hash: 4bMonkEILF31i3rwXcmiWVxlZY8L3ObeZ0NQ0u78bEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 21:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2066 (0x812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Oct 24 21:49:09 2025 GMT Not After : Oct 31 21:49:09 2025 GMT Subject: CN=68fbf455-04ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:5c:28:f8:dc:fc:c9:1b:c9:be:46:d1:0b: 3a:b8:22:44:e4:d3:63:28:69:2c:b8:00:38:dd:67: f5:b2:14:ed:c1:f9:66:09:d3:17:24:eb:c0:0a:bc: 63:55:65:ae:24:e0:65:f2:e5:6a:34:ca:9a:ad:05: 83:47:51:c0:56:38:45:37:aa:e9:cc:8b:6b:73:e1: bf:3b:29:5a:9d:a5:e2:97:75:90:45:aa:75:23:e5: 9f:09:bf:d2:47:8c:38:22:5b:0b:18:2a:07:fa:13: f1:63:3a:4f:05:a5:62:b0:24:2b:46:53:91:e9:d8: 81:d0:de:3f:6d:39:60:22:bc:07:d5:67:95:f2:ac: f0:f1:6f:bd:94:03:70:ca:d7:cd:9c:d0:5d:91:2b: e1:d8:92:23:85:4b:96:eb:92:46:74:84:58:0a:53: 29:53:fa:b4:41:6f:0c:3f:a8:3f:66:bb:95:3d:d1: 23:3a:2e:ec:46:55:0d:e1:0d:64:21:46:f5:0b:6c: 6f:3c:cb:91:c0:c3:11:03:ca:d9:66:1b:15:44:1b: e9:e4:79:36:5c:92:ed:31:3c:07:b4:b0:8b:ab:2f: f4:ac:32:45:11:5d:6c:da:90:ff:21:11:f1:30:28: 64:74:f8:f1:6e:68:5c:5f:23:ed:5f:b2:bc:4f:37: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:25:B9:F2:45:71:17:AB:65:21:0A:D1:AC:33:7D:E6:D2:13:7D:7B X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:43:f4:1d:18:25:6e:81:24:8a:8d:03:12:a0:a0:aa:9c:d3: 34:ff:73:77:89:59:cb:c1:59:20:cb:7e:8b:f6:3f:c9:d2:95: 53:35:c3:f4:3f:18:fc:2d:f9:0d:69:eb:48:cf:fd:ae:30:43: fc:93:67:a9:2f:3b:bb:5f:a6:5c:c3:10:d6:96:fa:e7:6f:21: 11:05:ad:87:3d:ab:1b:65:01:13:d8:6f:9b:01:6c:35:b1:6b: 2a:0a:b5:2c:d3:8f:98:e2:dc:0a:09:e1:c2:91:08:f9:ed:8d: c7:ef:66:d1:cf:ee:aa:cc:12:93:5a:14:a5:2d:0a:43:29:29: 70:aa:c0:b9:ff:e3:3d:a3:10:94:6e:47:9a:a7:5f:1d:30:ed: 51:90:02:8a:05:fa:42:49:f2:65:12:7d:c5:76:cd:72:19:8e: 6f:5a:5d:f1:df:c5:8d:e2:03:ae:70:fe:cc:84:b2:1a:11:c3: ab:f1:a5:eb:a9:68:02:3e:36:e5:8f:ff:ed:13:f7:56:f2:68: fb:45:52:2a:ac:a4:a0:8c:71:f4:aa:54:36:9c:b4:46:74:43: 09:0c:eb:80:8c:71:db:d5:b2:be:b5:22:74:9b:30:a5:d8:a4: b7:b7:4e:be:62:f6:4a:7a:6e:98:4b:6e:41:b7:c0:ca:0b:a3: f6:d8:fa:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjUxMDI0MjE0OTA5WhcNMjUxMDMxMjE0OTA5WjAYMRYwFAYD VQQDEw02OGZiZjQ1NS0wNGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo41cKPjc/Mkbyb5G0Qs6uCJE5NNjKGksuAA43Wf1shTtwflmCdMXJOvACrxj VWWuJOBl8uVqNMqarQWDR1HAVjhFN6rpzItrc+G/OylanaXil3WQRap1I+WfCb/S R4w4IlsLGCoH+hPxYzpPBaVisCQrRlOR6diB0N4/bTlgIrwH1WeV8qzw8W+9lANw ytfNnNBdkSvh2JIjhUuW65JGdIRYClMpU/q0QW8MP6g/ZruVPdEjOi7sRlUN4Q1k IUb1C2xvPMuRwMMRA8rZZhsVRBvp5Hk2XJLtMTwHtLCLqy/0rDJFEV1s2pD/IRHx MChkdPjxbmhcXyPtX7K8Tzdx2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMlufJF cRerZSEK0awzfebSE317MB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmQ/QdGCVugSSKjQMSoKCqnNM0/3N3iVnLwVkgy36L9j/J0pVTNcP0 Pxj8LfkNaetIz/2uMEP8k2epLzu7X6ZcwxDWlvrnbyERBa2HPasbZQET2G+bAWw1 sWsqCrUs04+Y4twKCeHCkQj57Y3H72bRz+6qzBKTWhSlLQpDKSlwqsC5/+M9oxCU bkeap18dMO1RkAKKBfpCSfJlEn3Fds1yGY5vWl3x38WN4gOucP7MhLIaEcOr8aXr qWgCPjblj//tE/dW8mj7RVIqrKSgjHH0qlQ2nLRGdEMJDOuAjHHb1bK+tSJ0mzCl 2KS3t06+YvZKem6YS25Bt8DKC6P22PoS -----END CERTIFICATE-----Generated at Sat Oct 25 11:27:23 2025 by rpki-client