$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json) Hash identifier: 3cNwiSJd/whY+h5IZtc5H60A9O3YuO+8312aao15NJs= Subject key identifier: 33:39:D1:31:A8:DF:81:48:F4:48:84:A5:7F:62:1F:0B:95:17:DC:1F Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft Manifest number: 01C0 Signing time: Mon 03 Nov 2025 02:56:33 +0000 Manifest this update: Mon 03 Nov 2025 02:56:32 +0000 Manifest next update: Mon 10 Nov 2025 02:56:32 +0000 Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: VaQp3s7SQ1275Kq2Jgm/qzkgaGVvrf61/mqyueN9H1I=) 2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: eGRq+1XhrILN9pC7Bu29wtZG2xTxwIWpAe96/Tzv+yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Validity Not Before: Nov 3 02:56:32 2025 GMT Not After : Nov 10 02:56:32 2025 GMT Subject: CN=690819e0-12a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:22:b9:56:16:f9:c8:a7:ca:be:89:2a:61: 9e:91:53:2f:bd:56:3a:10:f8:d9:3e:05:fa:09:54: 02:50:de:d2:50:b8:8a:4c:a4:5a:7f:2c:2d:81:07: 0d:b8:01:b7:5b:22:c4:7e:07:09:ad:34:26:15:a4: 93:06:8e:66:9e:03:27:bb:25:fd:87:09:eb:56:9b: db:2e:a7:19:43:3c:0f:ac:ef:52:aa:e7:18:ef:bb: aa:85:a0:2c:74:e3:2a:9a:88:20:9a:b7:c9:fb:6c: 94:7b:82:7d:57:03:fc:66:d9:ac:e8:c3:c1:f5:34: 26:50:67:57:69:62:0c:cc:9a:e0:f5:cf:25:b8:9c: fd:a5:d4:26:5d:45:af:ed:8d:ba:0d:03:96:bc:25: 62:8e:c8:c6:01:a5:88:c0:ff:84:dd:c3:c3:05:cc: 78:c5:69:04:c7:24:7b:8c:2b:4b:56:19:80:a0:ec: 9d:37:c8:9e:4e:55:72:15:51:bd:a8:2e:8a:cb:93: d6:d3:7c:0f:81:98:5e:ef:94:de:56:bb:7a:7b:7a: 23:d8:8f:09:66:f9:69:17:b9:9c:09:79:b8:ec:77: c0:ef:2a:f4:51:25:3b:1a:6f:95:a8:1e:41:13:58: 99:82:d2:5e:cd:10:5a:ee:92:a2:bd:15:f9:e3:61: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:39:D1:31:A8:DF:81:48:F4:48:84:A5:7F:62:1F:0B:95:17:DC:1F X509v3 Authority Key Identifier: keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ee:cd:fb:90:47:80:7e:64:c8:ec:50:02:a5:2c:e4:1f:93: c0:ef:5f:57:19:91:50:37:5e:fe:6c:7c:47:55:25:bb:93:8a: e5:a4:05:c6:3e:c1:78:c6:b5:35:96:e9:09:5e:b1:8f:7b:f1: c0:7e:09:e1:d9:d5:71:33:cc:cf:28:21:91:5a:00:6e:e9:b1: 3a:47:07:b4:5c:21:11:1b:ba:0d:54:98:9e:49:5d:7c:26:10: bc:32:95:0d:6f:cc:79:64:5e:26:3d:28:ca:db:73:01:5a:b5: f5:9f:71:0d:90:e0:86:68:58:d8:1a:40:89:c3:0c:a0:eb:ec: 10:31:6b:30:bd:ba:d7:7c:e1:d1:ab:09:94:c4:74:af:5e:84: 43:13:23:44:7a:10:44:25:8f:01:bb:ea:00:a9:41:9c:b5:42: d7:5b:c6:13:78:19:55:2f:11:c0:05:c7:ef:10:21:4f:4b:2f: 66:00:91:ba:4d:1c:04:cd:5d:ba:e0:84:9f:45:ac:7c:15:39: c9:66:b4:f4:51:6e:3f:35:f7:2a:82:bb:28:2f:b2:5e:cb:48: a1:09:8c:bf:f7:0e:c0:37:27:4d:3a:f4:24:1f:e5:25:2b:1d: 97:ed:4b:45:e5:bf:ac:17:4b:25:ff:61:c4:bb:bd:69:10:3f: 36:5d:59:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcwREFFOTEwNDIz NjExQTMxOTIwHhcNMjUxMTAzMDI1NjMyWhcNMjUxMTEwMDI1NjMyWjAYMRYwFAYD VQQDEw02OTA4MTllMC0xMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEIiuVYW+cinyr6JKmGekVMvvVY6EPjZPgX6CVQCUN7SULiKTKRafywtgQcN uAG3WyLEfgcJrTQmFaSTBo5mngMnuyX9hwnrVpvbLqcZQzwPrO9SqucY77uqhaAs dOMqmoggmrfJ+2yUe4J9VwP8Ztms6MPB9TQmUGdXaWIMzJrg9c8luJz9pdQmXUWv 7Y26DQOWvCVijsjGAaWIwP+E3cPDBcx4xWkExyR7jCtLVhmAoOydN8ieTlVyFVG9 qC6Ky5PW03wPgZhe75TeVrt6e3oj2I8JZvlpF7mcCXm47HfA7yr0USU7Gm+VqB5B E1iZgtJezRBa7pKivRX542FONQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDM50TGo 34FI9EiEpX9iHwuVF9wfMB8GA1UdIwQYMBaAFMZU/Eds3y4wa+J3Da6RBCNhGjGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTc1MC80NTFENkE2QTA2 QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6ZkxqQnI0bmNOcnBFRUkyRWFN WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsVDhSMnpmTGpCcjRuY05ycEVFSTJFYU1aSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6Zkxq QnI0bmNOcnBFRUkyRWFNWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk7s37kEeAfmTI7FACpSzkH5PA719XGZFQN17+bHxHVSW7k4rlpAXG PsF4xrU1lukJXrGPe/HAfgnh2dVxM8zPKCGRWgBu6bE6Rwe0XCERG7oNVJieSV18 JhC8MpUNb8x5ZF4mPSjK23MBWrX1n3ENkOCGaFjYGkCJwwyg6+wQMWswvbrXfOHR qwmUxHSvXoRDEyNEehBEJY8Bu+oAqUGctULXW8YTeBlVLxHABcfvECFPSy9mAJG6 TRwEzV264ISfRax8FTnJZrT0UW4/NfcqgrsoL7Jey0ihCYy/9w7ANydNOvQkH+Ul Kx2X7UtF5b+sF0sl/2HEu71pED82XVl7 -----END CERTIFICATE-----Generated at Tue Nov 4 07:23:43 2025 by rpki-client