$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: 3yS3TSs+D3FUdqB72MZYEBjHujh41YaFndyEQM7qdCE= Subject key identifier: 17:68:2C:E4:07:56:BE:E3:AC:52:72:59:AC:25:A3:15:E5:A8:75:16 Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0A54 Signing time: Sun 02 Nov 2025 19:38:37 +0000 Manifest this update: Sun 02 Nov 2025 19:38:37 +0000 Manifest next update: Sun 09 Nov 2025 19:38:37 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: 3s7wir4SovxRNiWmdA2N7U4zc17W6Q2MBdxntAqL2kI=) 2: 51D92BD25DD711F09B20C44DC4F9AE02.roa (hash: GSOu67thxVMGW+aBdpC8IU1FXpmsRcWLr3fcMku7g6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Nov 2 19:38:37 2025 GMT Not After : Nov 9 19:38:37 2025 GMT Subject: CN=6907b33d-74ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:da:dc:14:d8:d7:17:6a:f2:a8:e7:4d:46: 58:fe:a8:45:40:dd:32:eb:d1:d2:e6:80:61:b1:0f: 80:65:6d:e3:8a:33:12:48:30:70:bc:db:95:e9:18: 9b:4d:8d:07:4c:6b:0b:a1:e8:c8:55:fa:61:a8:16: df:f7:81:5a:44:42:15:c0:e5:e6:97:3e:e0:b4:3f: 68:c4:20:57:43:f8:4d:30:72:3b:5d:66:f3:70:0e: e3:93:b3:6a:50:35:20:84:d6:28:4a:7b:81:f7:90: 21:e7:da:9a:cf:d0:13:ed:38:ce:ae:f6:1e:3a:b7: 16:8b:0b:e6:9e:94:73:dc:80:8a:48:d1:59:c3:3e: a5:3d:5d:cd:c7:7f:37:09:b8:76:7e:cf:39:7b:8b: 08:af:04:e3:cb:d6:9e:20:35:c1:51:d4:3c:18:f3: 40:77:18:85:dc:7a:b0:c8:c7:ed:63:64:5a:d7:e4: 89:aa:17:bf:92:51:8f:b1:49:cf:45:41:9d:9c:90: 59:ee:3d:35:7c:f9:bb:77:a8:ec:82:6c:f4:70:f7: bf:a3:41:ed:97:75:a5:75:2c:fb:08:14:46:77:65: e2:e3:b8:8e:7d:a0:bd:96:31:f6:04:18:a4:b4:93: 82:e5:23:e9:f9:4d:19:42:5e:0e:2d:2b:b7:68:71: 2e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:68:2C:E4:07:56:BE:E3:AC:52:72:59:AC:25:A3:15:E5:A8:75:16 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:09:a2:8c:bc:1a:c7:14:fa:49:0e:f9:ee:9d:96:81:98:e5: eb:c0:15:c9:03:4f:89:d3:46:6e:a0:70:04:cf:87:bf:93:5a: 52:c1:0d:18:39:65:24:b5:79:56:59:5a:7b:9f:44:f5:f8:22: a3:a1:75:f7:35:4d:1d:2e:2e:29:0b:60:39:df:ca:f4:ad:01: a8:18:0b:dc:31:d3:45:25:b9:82:59:35:90:a7:76:9f:e6:39: 3a:0d:68:21:4f:d6:c8:02:8c:89:b8:b6:24:27:b2:83:83:92: ba:af:4f:d7:df:ea:e8:08:36:cb:99:24:27:65:61:df:da:d5: 92:e0:16:3f:d7:5a:5a:5c:67:c7:7c:1a:8d:53:8e:fd:5a:4c: 16:dd:88:42:bd:45:73:42:7f:52:14:85:2d:9c:41:e9:de:1e: 6d:eb:c2:12:0b:63:82:82:8a:f6:4c:7d:92:c1:9b:5c:4f:d1: 85:10:62:d5:81:ac:46:e1:e1:9e:7d:54:7c:cd:5f:39:18:91: 76:e5:5a:1e:4a:30:91:98:5a:ec:75:7c:5e:82:cc:a8:5b:4c: 65:be:b7:28:94:33:9f:2b:b8:0b:bb:0a:eb:73:6e:fa:a3:96: e5:2c:65:ef:e4:f8:b5:a0:b5:6f:42:f7:30:e4:7b:93:01:31: fb:53:d8:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUxMTAyMTkzODM3WhcNMjUxMTA5MTkzODM3WjAYMRYwFAYD VQQDEw02OTA3YjMzZC03NGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDza3BTY1xdq8qjnTUZY/qhFQN0y69HS5oBhsQ+AZW3jijMSSDBwvNuV6Rib TY0HTGsLoejIVfphqBbf94FaREIVwOXmlz7gtD9oxCBXQ/hNMHI7XWbzcA7jk7Nq UDUghNYoSnuB95Ah59qaz9AT7TjOrvYeOrcWiwvmnpRz3ICKSNFZwz6lPV3Nx383 Cbh2fs85e4sIrwTjy9aeIDXBUdQ8GPNAdxiF3HqwyMftY2Ra1+SJqhe/klGPsUnP RUGdnJBZ7j01fPm7d6jsgmz0cPe/o0Htl3WldSz7CBRGd2Xi47iOfaC9ljH2BBik tJOC5SPp+U0ZQl4OLSu3aHEucwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdoLOQH Vr7jrFJyWawloxXlqHUWMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAICaKMvBrHFPpJDvnunZaBmOXrwBXJA0+J00ZuoHAEz4e/k1pSwQ0Y OWUktXlWWVp7n0T1+CKjoXX3NU0dLi4pC2A538r0rQGoGAvcMdNFJbmCWTWQp3af 5jk6DWghT9bIAoyJuLYkJ7KDg5K6r0/X3+roCDbLmSQnZWHf2tWS4BY/11paXGfH fBqNU479WkwW3YhCvUVzQn9SFIUtnEHp3h5t68ISC2OCgor2TH2SwZtcT9GFEGLV gaxG4eGefVR8zV85GJF25VoeSjCRmFrsdXxegsyoW0xlvrcolDOfK7gLuwrrc276 o5blLGXv5Pi1oLVvQvcw5HuTATH7U9iw -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:14 2025 by rpki-client