$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft File: c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json) Hash identifier: BP/mTWVntbOnM7gYJ94vbRmwgseBSeEZvdM4p/9H3uI= Subject key identifier: C0:DD:59:94:C0:9C:76:AF:DD:2E:A6:EB:75:09:8B:B0:3B:6C:55:19 Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E Certificate issuer: /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft Manifest number: E8 Signing time: Sun 19 Oct 2025 08:22:10 +0000 Manifest this update: Sun 19 Oct 2025 08:22:09 +0000 Manifest next update: Sun 26 Oct 2025 08:22:09 +0000 Files and hashes: 1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: InaF6/WOxqMmif75dgxTUumYVgXauqKXM9jyLSo94pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E Validity Not Before: Oct 19 08:22:09 2025 GMT Not After : Oct 26 08:22:09 2025 GMT Subject: CN=68f49fb2-8d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:06:7a:63:fc:18:02:68:95:80:cf:3f:c3:d6: 66:0a:3b:3d:99:0a:26:ea:44:9b:50:77:5f:9b:c3: 30:11:a5:b2:ff:29:1d:3b:21:7b:39:99:d1:35:e9: e8:6a:d6:65:f6:7b:d4:d9:aa:53:fc:7a:e9:1e:f4: 19:ec:a2:e4:b4:8d:14:be:eb:b5:da:1c:5d:42:82: e2:42:21:06:79:43:06:68:09:dc:7d:ee:9b:1b:a6: 40:d0:41:a1:5a:43:04:52:86:a0:53:3e:5b:16:23: 21:85:ec:d6:24:c0:49:ea:3e:f2:b1:00:e4:24:87: 97:87:55:82:08:04:4b:00:be:8d:7c:de:bc:de:2a: 95:17:7d:ce:25:1b:e6:58:ed:e9:25:ad:15:12:53: cd:8d:e7:40:60:f5:ff:83:52:df:33:e1:b4:46:93: 45:42:38:3b:43:9a:58:1d:24:27:6c:49:68:b8:72: d9:97:41:71:e3:ed:25:c4:95:ce:35:51:d0:e8:16: 33:28:70:fa:b5:cd:6a:ec:8a:20:79:70:87:49:e2: aa:ec:f9:eb:89:89:bb:9d:f5:15:de:db:e4:60:22: bc:9a:8c:e5:b6:2b:3d:e9:01:bb:9a:3e:e4:df:48: 96:7f:b2:59:ff:47:34:62:47:56:ef:17:42:a8:a1: 8e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DD:59:94:C0:9C:76:AF:DD:2E:A6:EB:75:09:8B:B0:3B:6C:55:19 X509v3 Authority Key Identifier: keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:2e:6f:1a:02:01:47:c3:43:f9:c8:95:2b:b1:04:32:bc:32: f9:8a:7b:ca:f1:b6:35:c0:0b:86:be:c3:2f:8a:6d:a5:06:c2: d6:7d:75:43:97:12:6b:26:84:c8:ed:96:6d:61:62:7d:92:fa: 22:a5:db:14:74:e9:13:41:47:d9:61:d8:52:9c:d5:9e:90:38: b4:3c:d9:a3:e1:54:93:8f:83:aa:6e:f7:03:1a:88:9c:49:10: 2f:c3:df:27:68:eb:97:4b:03:a7:1b:d5:48:a6:09:25:2e:83: d1:b0:0f:dd:24:a6:a9:0d:08:e4:17:8c:e8:a2:83:a3:fd:a8: 69:fd:bc:ac:42:b3:cc:2f:bb:49:b9:cf:0f:0e:5f:08:c7:e3: 2c:d7:76:14:e5:e5:75:99:bf:f2:af:39:32:59:0b:03:50:62: 66:14:95:f3:0d:a9:c5:c8:1b:db:1c:44:ff:75:5b:f1:6f:0f: 45:6d:fd:62:b3:00:69:98:44:cf:af:96:56:a9:7a:ae:53:df: 6f:9d:44:9d:af:5a:e9:7e:06:05:4d:fb:85:d2:34:df:59:e7: d7:24:3d:3e:eb:da:b9:a0:c3:6a:ef:09:d2:cc:34:80:c8:4b: e3:76:50:05:c4:c2:5b:49:0d:85:fe:0d:14:bb:de:b9:e0:62: c0:d8:d3:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDczNDVEMzM4NTE5NTg5MDY4ODREODcxNjQwQTRCRUQy Qzg0NkQxNEUwHhcNMjUxMDE5MDgyMjA5WhcNMjUxMDI2MDgyMjA5WjAYMRYwFAYD VQQDEw02OGY0OWZiMi04ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wZ6Y/wYAmiVgM8/w9ZmCjs9mQom6kSbUHdfm8MwEaWy/ykdOyF7OZnRNeno atZl9nvU2apT/HrpHvQZ7KLktI0Uvuu12hxdQoLiQiEGeUMGaAncfe6bG6ZA0EGh WkMEUoagUz5bFiMhhezWJMBJ6j7ysQDkJIeXh1WCCARLAL6NfN683iqVF33OJRvm WO3pJa0VElPNjedAYPX/g1LfM+G0RpNFQjg7Q5pYHSQnbElouHLZl0Fx4+0lxJXO NVHQ6BYzKHD6tc1q7IogeXCHSeKq7PnriYm7nfUV3tvkYCK8mozltis96QG7mj7k 30iWf7JZ/0c0YkdW7xdCqKGO9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDdWZTA nHav3S6m63UJi7A7bFUZMB8GA1UdIwQYMBaAFHNF0zhRlYkGiE2HFkCkvtLIRtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81OUM0QUQ0QTQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlRYUlUWWNXUUtTLTBzaEcw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwWFRPRkdWaVFhSVRZY1dRS1MtMHNoRzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81OUM0QUQ0QTQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlR YUlUWWNXUUtTLTBzaEcwVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJLm8aAgFHw0P5yJUrsQQyvDL5invK8bY1wAuGvsMvim2lBsLWfXVD lxJrJoTI7ZZtYWJ9kvoipdsUdOkTQUfZYdhSnNWekDi0PNmj4VSTj4OqbvcDGoic SRAvw98naOuXSwOnG9VIpgklLoPRsA/dJKapDQjkF4zoooOj/ahp/bysQrPML7tJ uc8PDl8Ix+Ms13YU5eV1mb/yrzkyWQsDUGJmFJXzDanFyBvbHET/dVvxbw9Fbf1i swBpmETPr5ZWqXquU99vnUSdr1rpfgYFTfuF0jTfWefXJD0+69q5oMNq7wnSzDSA yEvjdlAFxMJbSQ2F/g0Uu9654GLA2NOY -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:56 2025 by rpki-client