$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: K94CETNwgA9oETMx6pS23yygt4hy/e3lhWclEH9nmC0= Subject key identifier: 9B:12:53:4C:74:A8:00:AC:54:E6:D9:B3:0C:8C:8A:18:6F:68:9C:AD Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 235B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 2342 Signing time: Mon 20 Oct 2025 16:03:01 +0000 Manifest this update: Mon 20 Oct 2025 16:03:01 +0000 Manifest next update: Mon 27 Oct 2025 16:03:01 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: 5Ko+n3bWd4728tEKPeMghEvieGQxhy3Iv+GrNi4by7M=) 2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=) 3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9051 (0x235b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Oct 20 16:03:01 2025 GMT Not After : Oct 27 16:03:01 2025 GMT Subject: CN=68f65d35-e1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:67:d8:b9:49:2f:1d:ea:83:68:d1:04:ae: c9:6e:99:e2:e8:35:b3:0a:13:86:39:1a:47:69:20: 26:59:02:69:fb:34:ab:a7:6e:31:e7:85:6b:0e:5d: fe:77:b1:93:48:82:7f:c6:de:ad:93:b2:d7:2d:37: 8e:e4:42:23:a0:62:a2:93:75:ea:6c:8c:42:8a:41: fd:84:81:2e:c3:6b:04:dd:c2:0e:f4:34:15:ba:ea: 32:95:db:42:3a:c5:da:f3:83:e6:55:6b:df:5e:51: 28:59:e9:93:7b:34:c2:01:d0:d5:55:bf:94:2f:7b: b1:82:26:28:4e:0b:f9:6d:1a:f4:2c:6b:7e:ee:13: 9d:44:91:c9:77:41:aa:65:9c:ea:d7:a0:47:4b:88: b9:69:a4:70:b2:8e:8d:3d:ea:25:0a:77:06:06:c9: 6b:a8:08:ab:80:ae:c1:45:42:92:49:55:1e:28:cc: a3:de:43:7a:40:20:0c:78:12:52:43:27:0e:39:3b: cd:b4:d2:8c:89:0d:1d:b0:40:6f:52:62:98:b5:84: 83:34:c1:c2:14:6f:0d:44:1e:8a:11:7e:88:c8:74: fb:27:b2:ff:5e:bb:b7:2f:29:0e:3a:1b:c8:d4:1a: b0:fc:44:fe:ba:b8:17:70:ac:e8:54:84:39:b7:61: 14:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:12:53:4C:74:A8:00:AC:54:E6:D9:B3:0C:8C:8A:18:6F:68:9C:AD X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a4:7c:89:d6:96:07:a8:4a:50:6e:2b:97:ee:dd:14:9a:7f: 77:c7:d1:ed:91:d2:5a:77:79:2e:e0:31:d2:07:24:fb:e7:64: cd:5c:fa:d2:b1:23:aa:f5:43:7b:d7:2f:47:d6:0d:08:11:0f: 09:1d:e1:5f:51:9e:db:da:d5:11:b2:58:76:37:8c:f4:91:90: 5f:9e:a8:1f:11:a4:fe:8b:43:f7:15:f9:21:f3:36:d7:c9:84: d8:e2:94:1d:02:56:6f:9e:e1:6e:4d:a0:27:ff:55:ab:fa:a3: 50:46:21:cb:54:5b:5d:b0:30:96:8f:41:b3:06:a5:31:db:50: 1f:9d:09:97:0a:c3:65:a1:af:a1:bb:3c:7d:d6:2f:97:85:ae: 5d:77:63:d6:09:bf:0c:55:cf:1f:5e:21:44:a5:19:8a:15:99: 91:f5:0c:93:db:7b:5d:ef:89:f4:25:62:00:32:5e:16:f7:0d: 17:18:3d:3a:13:32:55:87:f0:3c:41:60:e4:e3:cf:33:50:8e: 31:c8:e1:c9:4b:b5:bf:56:23:4e:b5:6a:87:53:44:7e:1b:cf: 30:61:bb:22:da:f3:a5:30:2f:e4:12:cc:c4:20:06:82:4a:cf: 96:0d:03:f4:0b:dc:8a:83:6a:6f:3b:e7:fb:f7:83:75:34:47: 0d:38:91:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjUxMDIwMTYwMzAxWhcNMjUxMDI3MTYwMzAxWjAYMRYwFAYD VQQDEw02OGY2NWQzNS1lMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQBn2LlJLx3qg2jRBK7Jbpni6DWzChOGORpHaSAmWQJp+zSrp24x54VrDl3+ d7GTSIJ/xt6tk7LXLTeO5EIjoGKik3XqbIxCikH9hIEuw2sE3cIO9DQVuuoyldtC OsXa84PmVWvfXlEoWemTezTCAdDVVb+UL3uxgiYoTgv5bRr0LGt+7hOdRJHJd0Gq ZZzq16BHS4i5aaRwso6NPeolCncGBslrqAirgK7BRUKSSVUeKMyj3kN6QCAMeBJS QycOOTvNtNKMiQ0dsEBvUmKYtYSDNMHCFG8NRB6KEX6IyHT7J7L/Xru3LykOOhvI 1Bqw/ET+urgXcKzoVIQ5t2EUmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsSU0x0 qACsVObZswyMihhvaJytMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+pHyJ1pYHqEpQbiuX7t0Umn93x9HtkdJad3ku4DHSByT752TNXPrS sSOq9UN71y9H1g0IEQ8JHeFfUZ7b2tURslh2N4z0kZBfnqgfEaT+i0P3Ffkh8zbX yYTY4pQdAlZvnuFuTaAn/1Wr+qNQRiHLVFtdsDCWj0GzBqUx21AfnQmXCsNloa+h uzx91i+Xha5dd2PWCb8MVc8fXiFEpRmKFZmR9QyT23td74n0JWIAMl4W9w0XGD06 EzJVh/A8QWDk488zUI4xyOHJS7W/ViNOtWqHU0R+G88wYbsi2vOlMC/kEszEIAaC Ss+WDQP0C9yKg2pvO+f794N1NEcNOJFb -----END CERTIFICATE-----Generated at Tue Oct 21 02:00:54 2025 by rpki-client