$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: ZH/pb2DBbmNG35RqOH5vK2yBxPNJuzlABWD12YjfvjA= Subject key identifier: A9:1C:C4:5B:A5:7F:6C:A0:33:B5:FA:AB:B4:EA:DC:53:84:E3:5D:75 Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 023A Signing time: Wed 05 Nov 2025 01:58:51 +0000 Manifest this update: Wed 05 Nov 2025 01:58:51 +0000 Manifest next update: Wed 12 Nov 2025 01:58:51 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: 19OWxzpCRt87Eqy9HsdCx+6hDoM1QaS/SOpkCOXS62M=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: /pTedztaSiCOyPS1HOnaWKUVCcU322igmimIyTxJJbg=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: HWKUOlRf26vXVLrvzxoCBARsK7RmPl1k0ABbjAs3vlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Nov 5 01:58:51 2025 GMT Not After : Nov 12 01:58:51 2025 GMT Subject: CN=690aaf5b-47d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:ca:d4:99:75:1b:ad:a3:eb:a0:20:0c:52: 06:4a:82:30:7c:a7:37:6b:2d:a8:b8:ce:4c:fa:44: a0:75:96:be:c6:25:e6:3f:de:c3:07:5b:b1:19:a1: 9d:08:1e:98:66:39:44:32:d4:6d:55:7e:00:25:91: 70:9a:d4:97:dc:81:b4:14:35:8f:c6:bf:1b:45:c6: 5c:94:ef:0b:9c:21:01:fa:29:03:ec:aa:03:44:ec: 47:bb:56:5c:4b:9a:9c:64:11:fd:d8:c8:94:06:c1: be:ac:97:90:10:ac:3e:4d:28:50:0e:ee:98:c9:d7: 55:68:90:df:99:0f:38:05:78:59:1e:26:18:6c:17: f6:f0:fc:c5:97:ec:88:1b:d2:c4:22:32:57:2f:f1: 3b:86:14:df:64:20:69:b1:94:93:e9:76:a0:5a:93: be:46:66:b5:04:a7:10:90:3a:87:52:74:a9:23:04: 50:6a:8f:a9:51:93:b2:9b:c0:73:e8:1b:63:5b:6b: 69:d0:98:b4:4d:11:93:84:3e:62:f0:c4:6e:e9:33: 28:82:2a:05:e9:5a:50:7e:a9:75:9c:34:91:05:28: 0f:7d:69:6c:ce:37:e9:a0:73:cf:47:06:ea:ad:a4: c1:32:2f:47:aa:d6:29:b2:52:12:9d:00:d0:92:85: 3c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1C:C4:5B:A5:7F:6C:A0:33:B5:FA:AB:B4:EA:DC:53:84:E3:5D:75 X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:6f:d8:d7:e7:9c:8b:e3:7b:30:70:26:f2:1c:1f:ee:f9:f9: a1:e8:e2:65:b9:88:3d:ca:c5:8b:ee:2e:8e:cc:d3:7f:19:ed: 40:23:9e:65:8f:16:1a:22:aa:82:e8:1a:d3:6e:0e:31:eb:65: 2c:85:5b:9d:91:17:12:d3:a7:45:4e:c9:05:c8:ac:57:da:70: 5e:8f:50:22:6e:3d:8d:8d:e5:a0:2c:78:22:09:dc:ba:d9:b7: 31:67:14:70:ea:d9:73:eb:4d:e6:50:ff:50:bd:13:36:0d:98: e0:e2:85:30:7a:fd:ed:f0:80:c9:d0:1d:4b:97:68:0a:4c:a3: da:47:28:08:48:11:57:6a:53:c9:be:27:51:9b:d2:a6:24:2e: bb:ab:5c:af:94:40:15:da:8e:ad:a8:0c:df:3b:21:a7:ab:91: cf:ca:fb:35:4b:dd:52:fc:7a:b6:6e:84:e7:d8:ed:7e:e9:96: 0e:fa:0e:b5:fa:4b:7e:37:41:10:de:69:63:8e:3e:13:2b:53: 1f:de:b9:14:c5:59:60:7c:c7:65:39:1a:34:d6:d4:fd:43:ad: 6e:06:0a:55:52:42:c3:19:0d:e1:3e:53:6b:80:4d:a9:c5:dd: f3:83:4d:1a:3a:70:79:e5:5d:11:e3:b9:58:de:e5:64:34:3d: b2:1b:37:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjUxMTA1MDE1ODUxWhcNMjUxMTEyMDE1ODUxWjAYMRYwFAYD VQQDEw02OTBhYWY1Yi00N2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3zK1Jl1G62j66AgDFIGSoIwfKc3ay2ouM5M+kSgdZa+xiXmP97DB1uxGaGd CB6YZjlEMtRtVX4AJZFwmtSX3IG0FDWPxr8bRcZclO8LnCEB+ikD7KoDROxHu1Zc S5qcZBH92MiUBsG+rJeQEKw+TShQDu6YyddVaJDfmQ84BXhZHiYYbBf28PzFl+yI G9LEIjJXL/E7hhTfZCBpsZST6XagWpO+Rma1BKcQkDqHUnSpIwRQao+pUZOym8Bz 6BtjW2tp0Ji0TRGThD5i8MRu6TMogioF6VpQfql1nDSRBSgPfWlszjfpoHPPRwbq raTBMi9HqtYpslISnQDQkoU8gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkcxFul f2ygM7X6q7Tq3FOE4111MB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYb9jX55yL43swcCbyHB/u+fmh6OJluYg9ysWL7i6OzNN/Ge1AI55l jxYaIqqC6BrTbg4x62UshVudkRcS06dFTskFyKxX2nBej1Aibj2NjeWgLHgiCdy6 2bcxZxRw6tlz603mUP9QvRM2DZjg4oUwev3t8IDJ0B1Ll2gKTKPaRygISBFXalPJ vidRm9KmJC67q1yvlEAV2o6tqAzfOyGnq5HPyvs1S91S/Hq2boTn2O1+6ZYO+g61 +kt+N0EQ3mljjj4TK1Mf3rkUxVlgfMdlORo01tT9Q61uBgpVUkLDGQ3hPlNrgE2p xd3zg00aOnB55V0R47lY3uVkND2yGzcU -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:35 2025 by rpki-client