$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: vKEkn8W4cpwEHR/7/ctvU9qvlr1WGpZPnFpD4Mf7cWU= Subject key identifier: 19:77:9F:51:EB:22:39:E2:D1:FC:EC:FB:16:8C:4F:29:42:F2:20:5C Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 96 Signing time: Mon 03 Nov 2025 06:29:12 +0000 Manifest this update: Mon 03 Nov 2025 06:29:12 +0000 Manifest next update: Mon 10 Nov 2025 06:29:12 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: hYOuoManJHrtDTysOPUod8oOQJTmxTfyip5HaWRAPiM=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Nov 3 06:29:12 2025 GMT Not After : Nov 10 06:29:12 2025 GMT Subject: CN=69084bb8-314d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:ad:c8:25:d5:a2:01:2b:5e:f8:95:9b:cb: 8a:72:55:21:fe:2b:cb:57:ec:16:25:8d:07:85:81: 63:22:7c:99:bb:b1:e1:4e:f4:1a:d6:cb:19:3d:7f: c9:fe:b8:09:53:7d:24:52:b6:98:97:7c:f7:44:8f: 25:8d:88:72:7f:03:ff:a9:20:e8:05:c3:d1:71:81: 30:06:ed:8b:8b:fd:6b:c6:27:43:5b:2f:db:76:f6: d2:b2:b1:68:f1:64:f0:9b:39:71:dd:57:4e:de:de: ea:a4:88:cd:18:e2:15:b8:f6:9f:4d:ca:5d:ce:e1: 03:8e:83:8f:49:0b:1d:d9:3a:98:a9:7b:66:4f:b2: 67:50:8c:88:aa:d4:85:c9:37:99:7f:ff:ff:be:18: b8:cb:6a:e7:13:c0:0e:78:cc:5f:f9:c4:7b:d2:ac: ef:68:d0:e9:68:38:9e:8d:14:fd:19:85:4f:2c:1a: c0:2a:db:2c:99:a3:3b:5d:55:4f:25:dc:82:dc:6f: 4d:c9:ff:a8:34:43:d1:bd:16:d6:2f:8d:8d:e1:bc: ee:fa:5b:a9:02:b6:ac:c8:e6:ce:6e:6e:9b:64:8b: 89:ef:87:8e:5d:10:82:f8:1f:d1:dd:4f:d8:c0:83: 4b:8a:00:98:53:33:84:18:9f:be:9e:59:23:e2:d2: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:77:9F:51:EB:22:39:E2:D1:FC:EC:FB:16:8C:4F:29:42:F2:20:5C X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c1:96:9f:45:0f:7f:11:57:7b:56:f7:8d:af:c0:7f:0d:94: 51:33:ba:73:51:c9:53:45:ee:4d:6d:75:19:eb:40:0b:0b:d5: de:b3:ae:3e:1c:0b:dc:3f:e0:83:ac:a6:8f:2f:41:79:eb:36: 28:07:da:bd:7e:28:1b:80:d4:b9:e4:e4:85:f3:70:99:ec:3b: 1a:8d:97:23:8e:58:34:fe:44:44:94:2e:b6:38:3d:71:e6:d1: e0:fd:1d:99:96:ea:3e:76:eb:d8:a4:c6:c7:dc:28:19:60:07: 01:bd:f5:6b:76:8b:62:93:a4:8a:68:94:35:71:3f:d6:6f:c5: a4:1d:b1:37:5a:b8:3b:55:f8:57:4b:e0:e6:9f:e4:89:80:74: 11:cd:97:2d:ff:e6:ac:d1:12:f8:80:0c:d6:39:a7:2f:00:1c: 0b:ea:cf:37:e7:f8:58:a2:74:eb:f8:8e:cb:32:a8:b1:95:c0: 88:f5:c4:76:69:a0:1f:b0:e5:67:77:67:9f:06:78:cf:48:07: db:0f:bd:d8:a8:43:b5:f3:e6:32:82:60:ed:49:e3:f3:a6:56: 14:6c:67:20:93:d8:f7:d9:52:c6:f9:ba:21:5b:eb:2a:56:83: e2:23:7a:96:92:62:8a:bc:30:2d:5a:96:fd:71:d6:b5:17:fe: 91:83:2f:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRkYxMTAvBgNVBAUTKDVFRkRFOThDNEZCRjhEMTE4N0I2ODU4RUJDODFGMDYy NUIyOTMxNjAwHhcNMjUxMTAzMDYyOTEyWhcNMjUxMTEwMDYyOTEyWjAYMRYwFAYD VQQDEw02OTA4NGJiOC0zMTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzytyCXVogErXviVm8uKclUh/ivLV+wWJY0HhYFjInyZu7HhTvQa1ssZPX/J /rgJU30kUraYl3z3RI8ljYhyfwP/qSDoBcPRcYEwBu2Li/1rxidDWy/bdvbSsrFo 8WTwmzlx3VdO3t7qpIjNGOIVuPafTcpdzuEDjoOPSQsd2TqYqXtmT7JnUIyIqtSF yTeZf///vhi4y2rnE8AOeMxf+cR70qzvaNDpaDiejRT9GYVPLBrAKtssmaM7XVVP JdyC3G9Nyf+oNEPRvRbWL42N4bzu+lupArasyObObm6bZIuJ74eOXRCC+B/R3U/Y wINLigCYUzOEGJ++nlkj4tILlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl3n1Hr Ijni0fzs+xaMTylC8iBcMB8GA1UdIwQYMBaAFF796YxPv40Rh7aFjryB8GJbKTFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yMEJFMUEzMEQ3 RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pSR0h0b1dPdklId1lsc3BN V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1XQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNGRi8yMEJFMUEzMEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pS R0h0b1dPdklId1lsc3BNV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJwZafRQ9/EVd7VveNr8B/DZRRM7pzUclTRe5NbXUZ60ALC9Xes64+ HAvcP+CDrKaPL0F56zYoB9q9figbgNS55OSF83CZ7DsajZcjjlg0/kRElC62OD1x 5tHg/R2Zluo+duvYpMbH3CgZYAcBvfVrdotik6SKaJQ1cT/Wb8WkHbE3Wrg7VfhX S+Dmn+SJgHQRzZct/+as0RL4gAzWOacvABwL6s835/hYonTr+I7LMqixlcCI9cR2 aaAfsOVnd2efBnjPSAfbD73YqEO18+YygmDtSePzplYUbGcgk9j32VLG+bohW+sq VoPiI3qWkmKKvDAtWpb9cda1F/6Rgy+o -----END CERTIFICATE-----Generated at Tue Nov 4 09:15:53 2025 by rpki-client