$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json) Hash identifier: EPpiZd1W5EgpWJvaGkYr8RDOIhsBUZGdOdkCcOwzu7U= Subject key identifier: C5:B6:F9:5C:EE:23:EF:D4:EC:98:FD:0B:5B:6F:22:D3:4E:80:32:E2 Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft Manifest number: 24 Signing time: Sun 19 Oct 2025 11:18:27 +0000 Manifest this update: Sun 19 Oct 2025 11:18:26 +0000 Manifest next update: Sun 26 Oct 2025 11:18:26 +0000 Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: wHFzgfPdpqMfA1fx9EDeNntvPJLYd1TzaE4MRhzrGWw=) 2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: eUyFtijE7ulYYeR6FE4HWasF4D8cnPdrEPGMIUGgb2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA Validity Not Before: Oct 19 11:18:26 2025 GMT Not After : Oct 26 11:18:26 2025 GMT Subject: CN=68f4c902-7245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9f:83:1f:3a:32:df:0a:5a:f3:03:a8:9d:f7: e7:90:86:6c:fc:c8:89:ba:43:0b:0e:27:5f:f7:1d: d6:f6:da:85:86:c3:d6:fb:68:3b:43:b9:ec:4b:ca: 27:b1:c7:44:f3:7c:d0:9e:53:1c:b5:6a:52:41:0a: 01:86:97:a1:27:7e:b9:17:bd:a6:af:03:ce:b2:3e: b3:a5:4e:81:73:51:ba:cd:dc:6b:30:35:ed:d6:d7: 68:ab:37:fc:0c:99:61:4e:ef:0d:6a:b7:85:37:15: 38:73:39:b1:4b:80:a1:f1:04:b5:10:98:e0:2c:53: 5a:a5:ba:2c:97:de:f3:71:c4:de:f4:5f:c4:f8:e4: 80:03:2f:cd:98:8f:ea:bd:e3:85:76:27:e2:8f:f2: 58:df:d7:83:da:7e:f7:33:a0:4d:93:6c:dd:fd:20: 15:47:4c:cf:75:72:c0:2e:eb:c3:b0:f9:23:99:18: 19:c4:48:5e:8a:e5:24:ba:58:8b:78:47:f1:9e:b7: 87:ba:62:4d:03:66:7f:33:da:d0:fb:80:d5:30:87: bd:61:ea:67:68:5b:1e:7e:1d:a1:ac:90:1c:57:3c: 09:94:26:24:84:ee:69:96:0b:08:34:a1:b3:50:e8: f1:52:a0:e0:a5:68:d2:58:08:83:e2:66:8d:fa:b5: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B6:F9:5C:EE:23:EF:D4:EC:98:FD:0B:5B:6F:22:D3:4E:80:32:E2 X509v3 Authority Key Identifier: keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:60:13:b0:d4:13:c0:cd:22:3a:10:d5:af:d9:a2:3a:32:26: 0b:09:7a:e7:6f:14:b4:bd:2d:8e:12:a8:3f:5f:29:19:32:85: 4c:70:5f:7a:b6:fc:b2:dc:15:17:97:6a:0b:3a:a3:c4:e6:5d: fd:d0:d5:0d:c0:7c:3f:2b:0d:7d:8c:6c:31:76:7c:44:fb:2e: 59:6f:fa:ad:bd:4c:f7:75:f7:36:93:4b:c2:a8:ac:91:44:28: d1:78:d0:f9:c3:16:8d:22:5d:d9:b3:0a:1e:c0:92:e3:7e:cb: 49:30:5d:af:61:29:a5:4e:72:85:1e:c0:c7:c1:fe:6a:a0:e3: 7a:ef:78:c8:09:9b:e9:4b:fc:5b:f6:0b:17:53:c9:45:bd:74: 25:36:c8:c2:0e:f9:f9:bc:a0:e6:20:74:69:4a:83:08:d9:86: 05:55:a2:e0:82:20:19:b4:2a:3d:f6:32:78:d9:09:61:2b:80: cf:a0:13:8d:36:db:ff:f0:93:74:b0:87:be:ac:a5:2a:bb:4e: 00:9b:30:ce:ed:7a:82:16:4f:e4:25:39:50:36:5d:2c:fd:0e: d0:45:5e:35:23:bb:e9:9e:e7:eb:ef:76:ed:85:ac:34:18:07: b0:83:4e:d9:04:5b:ce:42:02:8c:1f:b4:81:b8:32:34:43:15: da:61:92:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNDk3QkI3MjcxODI3OURCQ0M5ODVEQkE2RDM5QjM2NTY3 RjQ0RTdBQTAeFw0yNTEwMTkxMTE4MjZaFw0yNTEwMjYxMTE4MjZaMBgxFjAUBgNV BAMTDTY4ZjRjOTAyLTcyNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQn4MfOjLfClrzA6id9+eQhmz8yIm6QwsOJ1/3Hdb22oWGw9b7aDtDuexLyiex x0TzfNCeUxy1alJBCgGGl6EnfrkXvaavA86yPrOlToFzUbrN3GswNe3W12irN/wM mWFO7w1qt4U3FThzObFLgKHxBLUQmOAsU1qluiyX3vNxxN70X8T45IADL82Yj+q9 44V2J+KP8ljf14PafvczoE2TbN39IBVHTM91csAu68Ow+SOZGBnESF6K5SS6WIt4 R/Get4e6Yk0DZn8z2tD7gNUwh71h6mdoWx5+HaGskBxXPAmUJiSE7mmWCwg0obNQ 6PFSoOClaNJYCIPiZo36tYS3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxbb5XO4j 79TsmP0LW28i006AMuIwHwYDVR0jBBgwFoAUSXu3JxgnnbzJhdum05s2Vn9E56ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0IyQ0VBN0Y2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1h1M0p4Z25uYnpKaGR1bTA1czJWbjlFNTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0IyQ0VBN0Y2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6 SmhkdW0wNXMyVm45RTU2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ9gE7DUE8DNIjoQ1a/ZojoyJgsJeudvFLS9LY4SqD9fKRkyhUxwX3q2 /LLcFReXags6o8TmXf3Q1Q3AfD8rDX2MbDF2fET7Lllv+q29TPd19zaTS8KorJFE KNF40PnDFo0iXdmzCh7AkuN+y0kwXa9hKaVOcoUewMfB/mqg43rveMgJm+lL/Fv2 CxdTyUW9dCU2yMIO+fm8oOYgdGlKgwjZhgVVouCCIBm0Kj32MnjZCWErgM+gE402 2//wk3Swh76spSq7TgCbMM7teoIWT+QlOVA2XSz9DtBFXjUju+me5+vvdu2FrDQY B7CDTtkEW85CAowftIG4MjRDFdphkig= -----END CERTIFICATE-----Generated at Mon Oct 20 21:23:44 2025 by rpki-client