$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft File: xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json) Hash identifier: BlF0chBUOLLyVHRHRkPf85jQbOUsENBf1hxSLpGXduE= Subject key identifier: 73:33:95:1C:40:46:8A:58:26:79:A9:64:BB:B0:6D:61:94:07:9D:73 Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Certificate serial: 1E81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft Manifest number: 1E62 Signing time: Tue 04 Nov 2025 16:10:56 +0000 Manifest this update: Tue 04 Nov 2025 16:10:56 +0000 Manifest next update: Tue 11 Nov 2025 16:10:55 +0000 Files and hashes: 1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: v7B1tKMsj0VW5g46TLVJ09G5TISKRJLq1yveUBdsW5c=) 2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: gPUSFmbihFfUmrLnrNcUaLZQc5vn//4bgSoy5gzJdZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7809 (0x1e81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Validity Not Before: Nov 4 16:10:56 2025 GMT Not After : Nov 11 16:10:55 2025 GMT Subject: CN=690a2590-e617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:b4:e3:b8:68:bf:30:e6:20:42:e3:4f:4f: 4f:9a:4a:34:fc:ab:58:be:0d:1e:a3:f0:e5:1c:e0: a2:95:85:ce:ba:97:d2:1b:c8:7d:78:de:d4:4e:9e: 64:2c:99:dc:0f:e2:b1:08:7b:f5:d9:05:47:51:cd: 94:24:25:25:e6:25:0f:a6:8f:c4:06:7e:a7:ff:00: b0:8d:81:fb:da:a5:00:9e:c0:98:c4:17:c8:91:ef: 9f:62:59:c6:3f:bc:13:47:64:bb:28:b4:c7:82:19: ff:17:c5:0c:d6:66:06:e3:0e:e1:b1:97:b1:c1:e0: 41:ee:90:e6:1d:5b:90:1a:6e:78:bc:e3:18:1e:4d: 5b:14:fd:0e:13:9b:2c:55:f7:54:b5:ae:b0:e2:05: 15:e0:31:48:9a:d4:07:10:77:9a:d9:8d:fb:ff:d4: 6d:c2:b9:0f:19:10:e2:bd:c1:92:3b:17:85:fb:86: 5c:3a:ab:5b:12:2e:ee:bd:bf:54:48:ac:81:c5:1c: 45:4c:f8:55:45:c1:bb:50:b6:33:cc:08:e9:66:60: e1:7f:11:93:ec:cf:2e:0e:96:42:cc:2e:d3:53:7b: 12:bc:ca:cd:f8:11:4f:82:a8:56:d8:db:f4:5c:52: 7d:5f:52:a6:66:69:34:70:71:93:3c:34:55:e0:c2: d4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:33:95:1C:40:46:8A:58:26:79:A9:64:BB:B0:6D:61:94:07:9D:73 X509v3 Authority Key Identifier: keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a8:de:12:c1:bb:d9:c2:a9:57:60:a2:e3:6a:18:91:9d:11: ce:2d:6c:0f:f0:2a:bf:53:ec:4a:59:fd:d7:9c:64:86:1b:27: dd:a4:81:7a:47:13:ab:41:66:0e:d3:9c:00:33:0e:f5:3d:83: 29:1a:71:3a:8f:0b:8c:8a:3c:9c:57:0a:a0:8b:78:23:d8:f7: 42:b8:38:de:ad:53:26:3a:23:32:a7:af:de:00:42:61:c5:bf: 5a:60:7c:d6:55:34:cb:f2:3a:c4:bd:2d:89:3f:25:b1:ad:2c: 75:2a:19:61:45:de:d0:51:b9:8c:b3:0e:3b:21:a6:df:c3:c5: 53:09:69:dd:09:8b:e3:8e:1c:27:07:ea:d4:78:5e:08:c8:b3: 23:a6:c2:f0:0f:9b:7b:c5:6d:2f:28:d2:7d:b7:cb:fb:76:01: 4d:9a:ee:4c:85:52:4c:0a:78:24:32:2d:e9:cf:c5:53:f6:78: 95:97:f7:98:db:31:1e:cd:c1:8f:1b:94:e6:0e:ed:ea:40:e2: 27:aa:9d:b4:6d:06:67:dc:20:4f:a6:a4:d2:32:28:55:c5:c2: 2c:b0:3d:5e:a3:a2:99:86:e5:00:40:bb:5f:52:9b:96:1e:1d: e0:6b:2f:80:4e:85:61:04:c3:64:2e:97:20:b7:c4:43:a7:7f: 5d:78:39:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKEM0RkI5MTgxM0U3QkEwOTlEOTFFOUM0ODE3MjA5NEI5 OTA1QzBGMTEwHhcNMjUxMTA0MTYxMDU2WhcNMjUxMTExMTYxMDU1WjAYMRYwFAYD VQQDEw02OTBhMjU5MC1lNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxu047hovzDmIELjT09Pmko0/KtYvg0eo/DlHOCilYXOupfSG8h9eN7UTp5k LJncD+KxCHv12QVHUc2UJCUl5iUPpo/EBn6n/wCwjYH72qUAnsCYxBfIke+fYlnG P7wTR2S7KLTHghn/F8UM1mYG4w7hsZexweBB7pDmHVuQGm54vOMYHk1bFP0OE5ss VfdUta6w4gUV4DFImtQHEHea2Y37/9RtwrkPGRDivcGSOxeF+4ZcOqtbEi7uvb9U SKyBxRxFTPhVRcG7ULYzzAjpZmDhfxGT7M8uDpZCzC7TU3sSvMrN+BFPgqhW2Nv0 XFJ9X1KmZmk0cHGTPDRV4MLUeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMzlRxA RopYJnmpZLuwbWGUB51zMB8GA1UdIwQYMBaAFMT7kYE+e6CZ2R6cSBcglLmQXA8R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zODEyNDRGRThG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29KblpIcHhJRnlDVXVaQmNE eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQdVJnVDU3b0puWkhweElGeUNVdVpCY0R4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjNCQy8zODEyNDRGRThGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29K blpIcHhJRnlDVXVaQmNEeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArqN4SwbvZwqlXYKLjahiRnRHOLWwP8Cq/U+xKWf3XnGSGGyfdpIF6 RxOrQWYO05wAMw71PYMpGnE6jwuMijycVwqgi3gj2PdCuDjerVMmOiMyp6/eAEJh xb9aYHzWVTTL8jrEvS2JPyWxrSx1KhlhRd7QUbmMsw47Iabfw8VTCWndCYvjjhwn B+rUeF4IyLMjpsLwD5t7xW0vKNJ9t8v7dgFNmu5MhVJMCngkMi3pz8VT9niVl/eY 2zEezcGPG5TmDu3qQOInqp20bQZn3CBPpqTSMihVxcIssD1eo6KZhuUAQLtfUpuW Hh3gay+AToVhBMNkLpcgt8RDp39deDnA -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:47 2025 by rpki-client