$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: QO7qSCgaOqmiE2jP3GH/OKuYIW0xtPpr8kYN3LWRZjg= Subject key identifier: 74:33:20:83:C2:48:8D:19:96:5F:06:15:2A:82:A8:02:1B:7B:34:AD Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 0802 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 07FC Signing time: Sat 18 Oct 2025 22:12:53 +0000 Manifest this update: Sat 18 Oct 2025 22:12:53 +0000 Manifest next update: Sat 25 Oct 2025 22:12:53 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: KVcCA4DNjtk1J093eaS4wDtfTZYdQ9rQZEXK33U11rc=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: d9YDBLOSLP/FYANr6D5ENZatQDGA2KDEhAgJYQsuAaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2050 (0x802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Oct 18 22:12:53 2025 GMT Not After : Oct 25 22:12:53 2025 GMT Subject: CN=68f410e5-4baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c9:e7:46:09:c9:15:19:da:f9:51:3c:c2:f9: 7b:0b:1e:62:04:77:06:d8:7f:cb:a8:31:96:6a:89: 54:a7:59:dc:de:4c:9b:f2:c7:c0:0f:98:e7:33:bc: 3d:94:14:fb:c0:fb:75:bc:d0:7a:68:ac:12:04:65: 02:ff:6f:f0:bb:8d:d9:ff:e2:6f:d3:1a:41:d1:5d: a6:e2:65:01:5c:10:bd:12:da:2e:dc:55:02:93:00: 9f:9b:ad:24:00:b0:f5:c9:5d:d1:fe:f9:04:2b:0c: 55:d1:01:af:79:a4:75:4a:f5:e4:2a:04:f6:f4:4e: dc:d2:32:36:e1:ad:fa:50:75:dc:95:e5:52:8d:02: ec:98:c9:17:a8:58:16:27:12:b4:de:5c:44:fe:04: c3:58:ba:92:39:d2:63:a9:28:e8:e3:e9:5e:8f:8c: 60:29:e6:ba:24:eb:e8:47:2e:e1:04:05:3f:4d:c0: f4:4a:1f:73:7e:11:d7:6c:30:13:d2:37:ee:c6:e3: bc:5f:11:68:e0:67:02:5a:81:a4:c7:71:a6:d7:dc: 65:c9:b1:ab:1b:b6:de:7f:1f:b0:74:c5:33:ec:be: 0b:20:97:2e:84:34:f0:1d:f5:27:20:f2:e1:77:f1: ab:52:19:db:de:4f:70:fc:ef:08:ee:2e:5a:8f:0a: be:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:33:20:83:C2:48:8D:19:96:5F:06:15:2A:82:A8:02:1B:7B:34:AD X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:00:4e:68:a4:db:2d:ea:cb:20:5a:5d:bb:8f:4b:a4:e0:1f: f8:12:7f:f7:c8:ef:29:ca:00:a2:d4:ea:89:de:85:08:f2:47: d5:f8:92:ce:0b:76:83:0f:9f:ff:ef:82:48:aa:95:2c:c9:f1: 74:ac:7e:04:44:75:eb:6d:09:54:75:e1:3f:19:8c:2d:2b:cc: df:d4:4c:fe:48:02:47:af:8e:a1:07:33:46:ba:0d:4a:20:48: c2:88:fa:cc:a1:6f:47:71:e2:31:6b:77:47:56:17:e4:f2:5c: 45:1d:c6:39:e1:e9:59:60:a6:ed:c3:48:0f:93:19:a9:c8:ca: 55:33:ed:ca:ec:9f:a7:d6:cd:df:a9:d2:a9:7f:1f:c2:66:a9: f5:c7:6e:22:eb:9a:59:72:a9:aa:e4:c9:e5:e5:12:7e:fe:77: 30:06:6a:68:fb:4f:ea:cd:75:4d:4e:78:e5:04:87:bd:ea:4a: 9e:00:ad:fd:91:07:7d:9b:c6:6c:2c:d2:d0:f0:af:bf:de:17: 88:86:c6:14:76:30:cd:bb:e0:e9:4b:24:69:ac:dc:6d:ec:8a: 0c:15:96:fd:77:54:b5:23:f9:ec:c6:c0:f5:d3:44:62:82:78: c9:e5:18:03:fb:96:69:71:42:35:ce:fe:7b:a7:62:92:5b:48: 64:3d:70:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUxMDE4MjIxMjUzWhcNMjUxMDI1MjIxMjUzWjAYMRYwFAYD VQQDEw02OGY0MTBlNS00YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsnnRgnJFRna+VE8wvl7Cx5iBHcG2H/LqDGWaolUp1nc3kyb8sfAD5jnM7w9 lBT7wPt1vNB6aKwSBGUC/2/wu43Z/+Jv0xpB0V2m4mUBXBC9Etou3FUCkwCfm60k ALD1yV3R/vkEKwxV0QGveaR1SvXkKgT29E7c0jI24a36UHXcleVSjQLsmMkXqFgW JxK03lxE/gTDWLqSOdJjqSjo4+lej4xgKea6JOvoRy7hBAU/TcD0Sh9zfhHXbDAT 0jfuxuO8XxFo4GcCWoGkx3Gm19xlybGrG7befx+wdMUz7L4LIJcuhDTwHfUnIPLh d/GrUhnb3k9w/O8I7i5ajwq+gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQzIIPC SI0Zll8GFSqCqAIbezStMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8AE5opNst6ssgWl27j0uk4B/4En/3yO8pygCi1OqJ3oUI8kfV+JLO C3aDD5//74JIqpUsyfF0rH4ERHXrbQlUdeE/GYwtK8zf1Ez+SAJHr46hBzNGug1K IEjCiPrMoW9HceIxa3dHVhfk8lxFHcY54elZYKbtw0gPkxmpyMpVM+3K7J+n1s3f qdKpfx/CZqn1x24i65pZcqmq5Mnl5RJ+/ncwBmpo+0/qzXVNTnjlBIe96kqeAK39 kQd9m8ZsLNLQ8K+/3heIhsYUdjDNu+DpSyRprNxt7IoMFZb9d1S1I/nsxsD100Ri gnjJ5RgD+5ZpcUI1zv57p2KSW0hkPXD0 -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:48 2025 by rpki-client