$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json) Hash identifier: d2aBJEUyQzLW9wouBsQqxvrUEAdZBkyoC+1c5d217NE= Subject key identifier: 2D:64:2F:EF:54:1E:55:0A:AD:BC:EE:D7:66:50:F9:FF:B6:B9:A9:A8 Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft Manifest number: 02CF Signing time: Wed 05 Nov 2025 01:27:17 +0000 Manifest this update: Wed 05 Nov 2025 01:27:17 +0000 Manifest next update: Wed 12 Nov 2025 01:27:17 +0000 Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: +E+88wuXy5NUEdI0sNWJfOpNIu+AED3VAk+z7sQh8FU=) 2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: llGHaeZeNwyGtBSSkhkdbPBkxPf6MV+xeeQondsSA8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178ACB, serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Validity Not Before: Nov 5 01:27:17 2025 GMT Not After : Nov 12 01:27:17 2025 GMT Subject: CN=690aa7f5-862a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:60:da:07:44:5f:8a:38:8a:bf:be:f4:3f: 82:0d:93:9a:f9:ff:03:e0:81:0c:98:97:66:f3:37: 6c:c7:a5:5b:65:2c:bd:f8:77:6a:d4:b0:9c:c8:ed: b3:2f:a6:3a:9f:02:1b:66:15:ce:7a:c1:e9:47:7d: ce:b4:dd:f5:65:1b:72:70:e6:2c:35:8f:c5:98:32: a8:9d:e1:29:2c:f7:c7:41:58:24:48:07:80:3c:91: 75:3a:b6:3f:2b:fb:51:82:06:cb:73:a2:22:54:f4: 31:26:ef:c2:55:c1:29:e3:96:ae:60:72:a1:a9:a8: 3d:91:f5:1a:27:40:9d:b6:db:6a:2b:7a:d3:49:fa: 79:ed:02:ea:91:74:d1:40:de:06:bd:f0:7a:e3:34: 6c:05:e4:87:09:4a:d4:ea:ba:2e:10:16:f0:02:f0: 1c:f9:10:66:dc:57:8d:70:9d:b4:ad:b2:b7:b9:1c: a3:46:05:ff:ee:72:bf:3f:74:e2:be:ec:e3:89:c9: 90:8b:6b:64:f9:b9:cb:a1:88:9c:de:b4:5d:a7:d5: 22:d6:11:08:30:aa:b3:f8:87:50:f7:eb:70:f5:11: bf:54:ef:f3:85:9a:45:b5:30:5f:ba:54:42:fb:e4: fc:42:e9:6e:00:2c:5b:28:c1:74:3e:0e:87:57:ba: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:64:2F:EF:54:1E:55:0A:AD:BC:EE:D7:66:50:F9:FF:B6:B9:A9:A8 X509v3 Authority Key Identifier: keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:0e:45:a4:1d:b3:36:68:cd:30:0f:a7:b2:05:f0:cb:c4:66: bf:6d:88:2d:3b:90:34:8e:37:61:db:af:06:a0:c8:a3:71:9e: 13:58:be:d5:a3:11:77:cd:ef:db:f6:7f:64:5b:83:e9:76:09: 81:7c:e3:2d:8a:55:7e:75:e0:11:df:64:92:1c:33:45:25:20: 19:6e:c7:87:dc:83:2e:21:16:31:0d:72:10:7a:ef:c3:ad:77: 5c:b1:4e:28:e2:8c:18:2d:d2:58:85:9e:a5:2f:54:84:11:40: 3c:01:99:a9:49:5b:19:cd:1e:aa:7f:e2:e4:47:48:6a:2f:c7: 60:f4:c2:d5:0b:de:48:a6:6f:32:69:82:f0:54:b7:57:9c:c7: a4:a0:25:47:1e:ef:d0:ea:43:e8:22:8d:75:23:cd:0f:27:ba: 0c:8d:26:55:38:bc:42:2b:cf:11:ad:dd:10:9e:5d:e9:34:33: a3:91:e7:84:11:47:bf:58:e7:62:3a:3d:b2:8e:58:4d:2e:72: 47:cf:34:e5:97:73:f7:d2:c2:59:0b:68:b9:ff:ec:6b:76:23: f2:0b:39:8c:8b:87:06:3f:b6:ac:ed:e5:ea:35:f6:16:c9:ab: 35:de:3f:be:02:8c:05:5d:f6:ce:2a:32:be:01:62:f1:00:3c: ad:9c:fd:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBQ0IxMTAvBgNVBAUTKDVDMjdENTNEMEYyMzgxM0M4RUExNjM4QUYwNkM4RDM0 RDhGMkRGRjEwHhcNMjUxMTA1MDEyNzE3WhcNMjUxMTEyMDEyNzE3WjAYMRYwFAYD VQQDEw02OTBhYTdmNS04NjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1l5g2gdEX4o4ir++9D+CDZOa+f8D4IEMmJdm8zdsx6VbZSy9+Hdq1LCcyO2z L6Y6nwIbZhXOesHpR33OtN31ZRtycOYsNY/FmDKoneEpLPfHQVgkSAeAPJF1OrY/ K/tRggbLc6IiVPQxJu/CVcEp45auYHKhqag9kfUaJ0CdtttqK3rTSfp57QLqkXTR QN4GvfB64zRsBeSHCUrU6rouEBbwAvAc+RBm3FeNcJ20rbK3uRyjRgX/7nK/P3Ti vuzjicmQi2tk+bnLoYic3rRdp9Ui1hEIMKqz+IdQ9+tw9RG/VO/zhZpFtTBfulRC ++T8QuluACxbKMF0Pg6HV7q51wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1kL+9U HlUKrbzu12ZQ+f+2uamoMB8GA1UdIwQYMBaAFFwn1T0PI4E8jqFjivBsjTTY8t/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFDQi81MjNBOEY1NjBC QTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdUeU9vV09LOEd5Tk5Oankz X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDZlZQUThqZ1R5T29XT0s4R3lOTk5qeTNfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFDQi81MjNBOEY1NjBCQTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdU eU9vV09LOEd5Tk5OankzX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWDkWkHbM2aM0wD6eyBfDLxGa/bYgtO5A0jjdh268GoMijcZ4TWL7V oxF3ze/b9n9kW4PpdgmBfOMtilV+deAR32SSHDNFJSAZbseH3IMuIRYxDXIQeu/D rXdcsU4o4owYLdJYhZ6lL1SEEUA8AZmpSVsZzR6qf+LkR0hqL8dg9MLVC95Ipm8y aYLwVLdXnMekoCVHHu/Q6kPoIo11I80PJ7oMjSZVOLxCK88Rrd0Qnl3pNDOjkeeE EUe/WOdiOj2yjlhNLnJHzzTll3P30sJZC2i5/+xrdiPyCzmMi4cGP7as7eXqNfYW yas13j++AowFXfbOKjK+AWLxADytnP1P -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:30 2025 by rpki-client