$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json) Hash identifier: WQje/Er/wdUocT+4aHBBNmPzxnuZPZdeCzFEA/HcOnc= Subject key identifier: 99:BE:6C:C2:C0:C1:2D:E2:D3:AC:78:14:4D:07:84:4F:C8:61:52:33 Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft Manifest number: 0120 Signing time: Mon 03 Nov 2025 04:48:21 +0000 Manifest this update: Mon 03 Nov 2025 04:48:20 +0000 Manifest next update: Mon 10 Nov 2025 04:48:20 +0000 Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: gzP/8xhbuF4x0SRKVpCjV8TkAspSTuSxA5fsCS+JTcA=) 2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: LIBTOUx4sDoJqevaYZ7QQd1IJGw6R0nOR1Do32NIl0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: Nov 3 04:48:20 2025 GMT Not After : Nov 10 04:48:20 2025 GMT Subject: CN=69083414-da77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:b4:92:e7:d1:5d:9b:3f:f3:7d:7b:7a:0e: ab:06:6d:e4:0a:c9:98:3c:2c:94:2f:11:a5:e6:0d: f5:7a:cf:2d:83:0d:a3:68:0e:f3:ec:da:70:43:44: 16:2a:0f:b6:c4:15:22:11:0c:7a:34:a7:1d:8a:e2: 11:96:e6:ba:a5:d3:4f:7f:c5:44:86:4c:b7:ac:78: 16:4d:dd:be:be:58:1d:5d:73:93:1f:93:64:d4:21: 4f:f5:ac:38:ab:04:32:28:9b:c9:cc:dd:82:9a:b2: f7:c1:1a:6b:df:a8:26:d7:9f:c1:c7:f6:93:85:84: 81:bf:cc:70:2a:a3:b5:23:4e:fd:0f:c7:b4:ac:fb: 37:f0:a1:5f:8e:5d:58:ba:7f:b9:22:fb:d4:e8:4d: 87:f7:67:e8:2d:90:ad:a2:1b:9f:fc:42:8c:cf:68: 70:f1:72:8c:53:21:32:d8:f3:73:a6:9f:43:e6:a2: fb:f9:98:0e:f6:87:1f:a3:d4:cb:2a:5d:d5:bf:09: 36:5c:70:0b:dc:25:27:e6:c3:26:db:23:0f:ac:17: 90:26:5a:7d:da:bf:57:4f:fa:1b:dc:50:3f:e4:05: cc:f1:3d:af:4b:53:2c:e6:0f:38:8c:b0:00:55:7d: b7:7e:aa:ee:ca:d6:07:dc:e2:5f:1c:fb:dd:23:9f: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BE:6C:C2:C0:C1:2D:E2:D3:AC:78:14:4D:07:84:4F:C8:61:52:33 X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f1:0d:8f:79:59:12:13:14:c3:48:f8:e9:a6:9b:5e:aa:78: bf:32:43:06:d2:85:e7:a8:65:54:4e:39:a6:a9:19:c6:b0:f3: f2:54:43:51:0d:26:12:c5:62:55:03:0f:71:14:85:0e:5c:aa: b8:fb:da:d7:b7:ff:f1:8d:26:ad:2d:3e:d6:7d:9f:74:3d:a7: 1c:eb:bb:ae:9c:22:1a:a6:16:59:75:12:da:7f:f7:ff:a5:95: 78:f8:b1:4c:10:9f:09:ac:2a:df:e6:2a:ae:05:55:ad:24:c4: 8c:ec:0c:ec:1b:32:1c:94:9e:6d:b5:a9:6e:8b:05:46:c4:7e: 65:7f:e5:8e:1e:25:ce:bb:17:9a:16:98:a6:f5:9d:b9:10:ab: 76:f3:22:56:9f:aa:10:7e:a0:21:68:4f:23:23:a2:f0:b6:f5: 2d:ed:7d:23:a2:6f:de:fe:1a:0c:5f:2e:d4:98:7c:13:69:f6: fb:9e:d8:1f:41:29:88:dc:17:c6:e9:00:39:4a:bd:d4:43:2b: bc:5f:59:18:45:5a:df:67:f0:a8:2d:53:84:af:bf:f6:9e:93: 17:81:ee:56:c6:b1:b5:6c:f3:67:98:a0:be:a5:05:45:af:89: d9:69:1f:ec:20:b5:99:27:68:65:94:a3:d0:b9:c3:87:5e:86: 4f:0a:e5:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC QUUxMkVDMEEwHhcNMjUxMTAzMDQ0ODIwWhcNMjUxMTEwMDQ0ODIwWjAYMRYwFAYD VQQDEw02OTA4MzQxNC1kYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywW0kufRXZs/8317eg6rBm3kCsmYPCyULxGl5g31es8tgw2jaA7z7NpwQ0QW Kg+2xBUiEQx6NKcdiuIRlua6pdNPf8VEhky3rHgWTd2+vlgdXXOTH5Nk1CFP9aw4 qwQyKJvJzN2CmrL3wRpr36gm15/Bx/aThYSBv8xwKqO1I079D8e0rPs38KFfjl1Y un+5IvvU6E2H92foLZCtohuf/EKMz2hw8XKMUyEy2PNzpp9D5qL7+ZgO9ocfo9TL Kl3Vvwk2XHAL3CUn5sMm2yMPrBeQJlp92r9XT/ob3FA/5AXM8T2vS1Ms5g84jLAA VX23fqruytYH3OJfHPvdI58kiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJm+bMLA wS3i06x4FE0HhE/IYVIzMB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5 RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0 S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw8Q2PeVkSExTDSPjpppteqni/MkMG0oXnqGVUTjmmqRnGsPPyVENR DSYSxWJVAw9xFIUOXKq4+9rXt//xjSatLT7WfZ90Pacc67uunCIaphZZdRLaf/f/ pZV4+LFMEJ8JrCrf5iquBVWtJMSM7AzsGzIclJ5ttaluiwVGxH5lf+WOHiXOuxea Fpim9Z25EKt28yJWn6oQfqAhaE8jI6LwtvUt7X0jom/e/hoMXy7UmHwTafb7ntgf QSmI3BfG6QA5Sr3UQyu8X1kYRVrfZ/CoLVOEr7/2npMXge5WxrG1bPNnmKC+pQVF r4nZaR/sILWZJ2hllKPQucOHXoZPCuXS -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:57 2025 by rpki-client