$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: E2zU8FmCNUo/BSqJSY2K/xwVKs4lxrhNxzNK4EH4I7g= Subject key identifier: 4B:9E:C0:E1:4B:B5:1A:93:4A:53:40:66:CA:84:9A:B1:29:C7:98:77 Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 0210 Signing time: Wed 05 Nov 2025 02:20:54 +0000 Manifest this update: Wed 05 Nov 2025 02:20:54 +0000 Manifest next update: Wed 12 Nov 2025 02:20:54 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: zOku2uWHwPO4ZIfa8Gk764C+ONJcymeTO4yEQXx/S8Y=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: Nov 5 02:20:54 2025 GMT Not After : Nov 12 02:20:54 2025 GMT Subject: CN=690ab486-e346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:ce:be:52:16:f1:f9:86:3b:85:f8:a7:cc: aa:fb:40:e8:47:cc:c3:e4:73:42:50:94:ee:1d:c0: a8:0c:e2:bb:ab:b0:d3:3f:86:8c:ca:c3:6a:db:1e: d4:0c:bb:af:b7:3b:cb:bb:08:d9:a9:a6:58:45:a3: 61:63:13:d2:99:22:02:c3:5d:b5:28:bf:1b:a6:15: bb:f8:f5:68:1b:cb:58:fb:cd:ca:f4:09:fb:02:1c: 35:28:ab:0b:2e:bf:e5:dd:eb:f3:f1:53:5f:49:52: 70:9f:ca:ea:f1:52:27:15:ed:90:04:5d:cc:9f:35: cb:7d:0a:32:ec:fd:03:cf:cf:ed:69:b6:a1:d1:de: 2c:60:07:1f:ae:39:97:24:ba:3b:42:fc:13:ad:05: 39:9d:7b:a4:6d:2c:22:3a:31:46:70:5b:26:a7:ef: 47:a0:5f:d9:1c:b7:a9:c0:db:53:98:d1:44:0a:1f: de:86:ff:30:a6:e0:8f:fa:ad:75:57:b1:ad:e1:e5: 5e:14:b6:9a:e3:cd:8f:b2:a7:b6:22:bc:f4:3a:6c: c7:c5:d9:4d:a7:0a:77:72:ac:2d:03:04:dd:6b:43: c3:14:ca:21:c9:5b:9b:8f:37:9e:6a:6f:76:02:08: 64:15:b9:b4:f1:27:fc:6d:dc:73:d2:bd:fa:77:c6: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9E:C0:E1:4B:B5:1A:93:4A:53:40:66:CA:84:9A:B1:29:C7:98:77 X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8f:7b:e6:93:06:c3:12:e9:c7:7b:3e:60:cf:3e:a0:8e:9c: c9:08:14:68:3b:e9:e0:99:51:da:5b:31:2a:2e:e3:6e:45:e0: 2e:65:8c:34:a5:0e:22:b6:d1:f9:6c:53:80:a3:f5:0d:be:e6: 6f:e2:75:4b:86:2c:14:da:f8:e5:4f:f5:2c:b3:1b:1c:88:7f: 81:18:11:d4:56:b4:72:51:d5:c9:ba:35:0e:39:b7:d6:f8:14: f8:40:b4:78:f1:38:f8:3e:6b:52:36:c8:c5:67:38:f1:c1:c9: 3e:95:65:df:5d:35:ec:2d:7e:2f:c4:d7:42:c5:79:3e:6d:32: a8:fd:03:b6:38:69:53:04:f4:db:35:f9:58:25:ed:da:19:ad: 2d:82:9b:b9:ee:f4:10:1a:71:05:85:47:47:ce:84:7a:d4:cb: f7:f4:44:6b:a7:11:4e:81:b2:73:c7:23:cc:c2:76:0f:79:67: 86:28:cf:37:67:74:e8:ed:e6:76:a8:b2:0e:47:91:7b:18:de: 23:7d:86:19:db:e6:11:c5:22:be:01:e0:6f:c0:a3:71:41:fa: c1:b6:11:64:b6:1f:81:51:0a:4c:06:3d:b7:eb:db:81:e3:e9: 06:45:66:1a:79:b5:0d:85:e8:55:b4:cc:1e:f9:8e:75:69:08: 9e:6e:d8:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjUxMTA1MDIyMDU0WhcNMjUxMTEyMDIyMDU0WjAYMRYwFAYD VQQDEw02OTBhYjQ4Ni1lMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4fOvlIW8fmGO4X4p8yq+0DoR8zD5HNCUJTuHcCoDOK7q7DTP4aMysNq2x7U DLuvtzvLuwjZqaZYRaNhYxPSmSICw121KL8bphW7+PVoG8tY+83K9An7Ahw1KKsL Lr/l3evz8VNfSVJwn8rq8VInFe2QBF3MnzXLfQoy7P0Dz8/tabah0d4sYAcfrjmX JLo7QvwTrQU5nXukbSwiOjFGcFsmp+9HoF/ZHLepwNtTmNFECh/ehv8wpuCP+q11 V7Gt4eVeFLaa482Psqe2Irz0OmzHxdlNpwp3cqwtAwTda0PDFMohyVubjzeeam92 AghkFbm08Sf8bdxz0r36d8ZWFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuewOFL tRqTSlNAZsqEmrEpx5h3MB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVj3vmkwbDEunHez5gzz6gjpzJCBRoO+ngmVHaWzEqLuNuReAuZYw0 pQ4ittH5bFOAo/UNvuZv4nVLhiwU2vjlT/UssxsciH+BGBHUVrRyUdXJujUOObfW +BT4QLR48Tj4PmtSNsjFZzjxwck+lWXfXTXsLX4vxNdCxXk+bTKo/QO2OGlTBPTb NflYJe3aGa0tgpu57vQQGnEFhUdHzoR61Mv39ERrpxFOgbJzxyPMwnYPeWeGKM83 Z3To7eZ2qLIOR5F7GN4jfYYZ2+YRxSK+AeBvwKNxQfrBthFkth+BUQpMBj2369uB 4+kGRWYaebUNhehVtMwe+Y51aQiebti+ -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:52 2025 by rpki-client