$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft File: xpA79e8aQHD8mDw02cUDz0MT_Is.mft (raw, json) Hash identifier: qFH4MEfN2GdE/rUDn076bCclJXUKEIlwGGNiME0a934= Subject key identifier: CA:C1:FE:53:3F:F1:1A:96:B8:F1:F0:E0:62:B8:02:70:07:C7:63:55 Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B Certificate issuer: /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Certificate serial: 054D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft Manifest number: 0548 Signing time: Sun 19 Oct 2025 01:11:17 +0000 Manifest this update: Sun 19 Oct 2025 01:11:17 +0000 Manifest next update: Sun 26 Oct 2025 01:11:17 +0000 Files and hashes: 1: xpA79e8aQHD8mDw02cUDz0MT_Is.crl (hash: QwkMI7UUgbhwfn434i81JeCwAvIf70c6ZVZ9RfF28yE=) 2: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (hash: G0TJ9gg7YE7FaWREh61rcwclF21PHLQCA7qkRQvl9xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111A96, serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Validity Not Before: Oct 19 01:11:17 2025 GMT Not After : Oct 26 01:11:17 2025 GMT Subject: CN=68f43ab5-d785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:d0:2c:99:88:05:ae:00:0e:d6:17:76:65: 49:42:52:c6:ec:6e:74:7f:a5:d3:cf:89:33:da:d7: 19:53:b5:5c:91:bf:89:69:9b:eb:68:e0:58:d4:49: 6e:3f:c3:c8:7a:95:a8:52:08:25:64:86:1e:6c:e0: 22:88:30:2a:be:11:28:3f:ec:c7:3b:7f:95:0b:b4: 3d:78:57:2d:63:91:c2:89:cd:9f:6d:3a:74:f2:5b: 59:47:ac:9d:bc:0a:5d:aa:16:97:a1:d2:8f:f2:8a: 09:f9:72:92:38:26:ef:18:92:7c:95:9d:cf:5b:c0: 4f:de:64:a4:b0:9f:6a:bb:5a:89:0f:82:83:47:fe: 33:a9:4f:ad:e0:80:eb:bb:af:38:89:9b:51:ea:11: 7d:eb:0a:ac:d9:6b:28:42:6f:8c:77:43:cd:7b:3f: 8d:6e:2e:fd:3b:a6:f9:33:fd:25:e9:68:87:2d:33: 0d:2b:a6:fe:b9:db:4f:86:d4:23:a1:7f:96:bb:39: 66:e3:83:a9:a7:24:0f:83:98:12:42:07:e0:7f:cd: 1d:79:52:eb:68:ac:16:0a:36:50:a9:33:4c:47:84: 21:ec:d4:20:23:b4:33:ba:42:77:a9:d3:37:c0:22: 16:92:bf:88:39:aa:45:2b:05:f7:b5:42:09:8c:43: 8d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C1:FE:53:3F:F1:1A:96:B8:F1:F0:E0:62:B8:02:70:07:C7:63:55 X509v3 Authority Key Identifier: keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:3f:3a:8c:5b:e0:8f:57:bf:8d:ca:06:57:7c:a3:ce:b2:2d: fe:8e:c8:45:0b:78:be:3d:14:05:48:04:d9:bc:0c:26:97:a7: 78:4e:65:fe:06:ad:1b:68:a6:13:29:63:5e:21:53:24:d2:3d: 01:b6:1d:d7:39:c2:65:bb:66:fe:99:38:19:2b:37:56:9b:d8: 17:6d:1d:63:8d:93:23:47:53:1f:40:9d:13:c0:12:b5:37:f4: 32:4a:24:6a:52:05:a4:1a:06:ad:af:12:f2:97:f1:a0:bf:ae: 10:0d:b0:b3:84:9d:dd:d6:78:50:e3:ac:b6:e1:e4:6b:ba:d8: 47:56:de:60:93:4b:41:6d:c5:e8:a2:58:ee:6e:c6:81:f1:31: db:ba:bf:bf:e3:51:b3:39:e0:47:56:e3:8a:a1:2a:af:9c:fc: 7e:56:cd:d2:89:b3:19:58:8d:71:43:58:ca:93:f9:ac:11:ee: 17:20:1b:b1:17:6a:6d:18:64:89:6b:c2:31:ad:71:9e:6d:0f: e8:a2:66:dd:d8:ed:88:25:ec:fe:dc:31:a6:fc:3b:15:71:13: 52:44:eb:3f:38:75:0c:43:9f:f7:6a:ee:4c:7a:28:f2:1d:e1: 76:2f:80:61:30:4a:ca:41:71:64:e7:1f:34:71:a3:09:43:2b: 15:5c:f8:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFBOTYxMTAvBgNVBAUTKEM2OTAzQkY1RUYxQTQwNzBGQzk4M0MzNEQ5QzUwM0NG NDMxM0ZDOEIwHhcNMjUxMDE5MDExMTE3WhcNMjUxMDI2MDExMTE3WjAYMRYwFAYD VQQDEw02OGY0M2FiNS1kNzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AvQLJmIBa4ADtYXdmVJQlLG7G50f6XTz4kz2tcZU7Vckb+JaZvraOBY1Elu P8PIepWoUgglZIYebOAiiDAqvhEoP+zHO3+VC7Q9eFctY5HCic2fbTp08ltZR6yd vApdqhaXodKP8ooJ+XKSOCbvGJJ8lZ3PW8BP3mSksJ9qu1qJD4KDR/4zqU+t4IDr u684iZtR6hF96wqs2WsoQm+Md0PNez+Nbi79O6b5M/0l6WiHLTMNK6b+udtPhtQj oX+Wuzlm44OppyQPg5gSQgfgf80deVLraKwWCjZQqTNMR4Qh7NQgI7QzukJ3qdM3 wCIWkr+IOapFKwX3tUIJjEONXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrB/lM/ 8RqWuPHw4GK4AnAHx2NVMB8GA1UdIwQYMBaAFMaQO/XvGkBw/Jg8NNnFA89DE/yL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUE5Ni80NTg5QzYzODBF RUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFIRDhtRHcwMmNVRHowTVRf SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwQTc5ZThhUUhEOG1EdzAyY1VEejBNVF9Jcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUE5Ni80NTg5QzYzODBFRUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFI RDhtRHcwMmNVRHowTVRfSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUPzqMW+CPV7+NygZXfKPOsi3+jshFC3i+PRQFSATZvAwml6d4TmX+ Bq0baKYTKWNeIVMk0j0Bth3XOcJlu2b+mTgZKzdWm9gXbR1jjZMjR1MfQJ0TwBK1 N/QySiRqUgWkGgatrxLyl/Ggv64QDbCzhJ3d1nhQ46y24eRruthHVt5gk0tBbcXo oljubsaB8THbur+/41GzOeBHVuOKoSqvnPx+Vs3SibMZWI1xQ1jKk/msEe4XIBux F2ptGGSJa8IxrXGebQ/oombd2O2IJez+3DGm/DsVcRNSROs/OHUMQ5/3au5Meijy HeF2L4BhMErKQXFk5x80caMJQysVXPgr -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:26 2025 by rpki-client