$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: cOMsD2wC8YR4hn8XmTHbK8njgh42nsYmr/KD/cmO1rQ= Subject key identifier: 50:DE:79:17:5A:B8:B0:3F:75:37:1E:7B:E6:6A:DA:FD:BC:FA:E6:BF Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: E4 Signing time: Sun 19 Oct 2025 08:24:56 +0000 Manifest this update: Sun 19 Oct 2025 08:24:55 +0000 Manifest next update: Sun 26 Oct 2025 08:24:55 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: pagTVAvNvjqWaXJgLiRopst7q3wB5par4tBi0GWFk6w=) 2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: bbIc0AasFC0EBwn4UjgSa63ViDg31XHR/SePlovtje4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Oct 19 08:24:55 2025 GMT Not After : Oct 26 08:24:55 2025 GMT Subject: CN=68f4a058-63f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:d8:a0:1e:b7:b9:e2:a6:64:c5:54:bd:21: ce:b7:70:78:b4:bc:a5:f8:80:d4:5e:90:ab:92:a2: 57:ee:a4:7c:0b:73:90:7c:be:89:45:e7:cc:1a:14: e2:80:0c:b8:a8:69:9c:3c:7b:4b:41:53:9c:b7:c9: 77:cf:26:8b:d8:4e:f6:a7:7a:fe:63:f5:38:31:50: e4:ac:05:4b:5f:63:b7:05:0a:b0:31:41:74:bb:ec: c1:22:54:64:9f:c1:02:8a:d8:2e:62:7c:e6:36:95: 9c:82:a7:ba:c9:8f:7f:9f:95:03:dc:b9:86:2c:33: 1d:62:68:f6:57:d9:fc:55:e9:df:9f:15:2b:b6:f3: d9:f2:40:b8:e7:99:e8:fe:ec:02:06:a4:1b:7a:7e: f5:e6:3f:41:85:0b:f7:df:60:4b:3d:a3:75:ce:03: 12:da:9d:3d:81:7a:5e:8f:d9:f6:77:98:06:a2:97: bf:d6:80:21:bf:55:9a:74:5a:dc:f6:e1:5e:59:2c: 62:77:a7:c3:0a:e3:7d:74:e9:68:7e:1b:d0:9e:c7: f2:a9:df:8b:c5:5b:d4:d2:89:a0:a8:52:f7:63:a3: bc:4e:10:9b:1a:7e:e1:75:ae:e1:0a:49:be:b3:1c: b5:e9:b6:39:c2:1d:46:69:29:de:e8:0a:3d:72:ca: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DE:79:17:5A:B8:B0:3F:75:37:1E:7B:E6:6A:DA:FD:BC:FA:E6:BF X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:14:ff:61:a9:cc:60:99:29:62:73:d9:c1:9b:c4:e8:83:1a: a4:3b:04:8b:89:6f:f3:9d:59:4c:7b:1e:ad:b8:f6:0b:4b:77: 6e:5e:3b:35:45:db:fa:2c:0a:e3:e7:31:57:56:75:2f:9a:37: ec:5b:7d:9e:fd:0d:b5:26:75:d0:92:f5:21:a2:7b:b8:e6:d8: 3e:16:8f:59:0f:2a:e8:39:6f:06:80:b7:52:91:6c:77:4e:d7: 9a:ed:77:50:58:0d:d5:f0:60:1a:36:fc:8e:c6:0b:84:df:a1: 20:ab:11:bb:5d:cd:c3:7d:82:27:87:91:64:5a:ca:c8:c2:67: 8b:c7:1e:d4:2f:ea:34:cf:9b:f5:bc:6d:cb:4e:03:46:4e:62: d2:94:bb:49:60:48:6d:4e:ac:42:f0:eb:2f:da:4c:b8:d8:66: 52:72:02:4c:27:48:3e:49:66:90:0f:f6:74:b7:64:b1:dc:4e: 6d:72:02:ba:48:df:18:41:26:7f:ca:e0:8d:21:07:50:ab:f7: 69:99:44:88:9b:0f:0c:92:e0:f0:3d:57:1c:ae:39:38:12:05: a8:69:0e:40:77:24:0e:4b:4a:5f:56:e0:0a:f6:8d:b1:92:76: 82:0c:27:0f:14:42:e2:8e:b6:45:1d:89:3b:3d:56:09:e7:6c: ab:f6:8d:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjUxMDE5MDgyNDU1WhcNMjUxMDI2MDgyNDU1WjAYMRYwFAYD VQQDEw02OGY0YTA1OC02M2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq3YoB63ueKmZMVUvSHOt3B4tLyl+IDUXpCrkqJX7qR8C3OQfL6JRefMGhTi gAy4qGmcPHtLQVOct8l3zyaL2E72p3r+Y/U4MVDkrAVLX2O3BQqwMUF0u+zBIlRk n8ECitguYnzmNpWcgqe6yY9/n5UD3LmGLDMdYmj2V9n8VenfnxUrtvPZ8kC455no /uwCBqQben715j9BhQv332BLPaN1zgMS2p09gXpej9n2d5gGope/1oAhv1WadFrc 9uFeWSxid6fDCuN9dOlofhvQnsfyqd+LxVvU0omgqFL3Y6O8ThCbGn7hda7hCkm+ sxy16bY5wh1GaSne6Ao9cspO2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDeeRda uLA/dTcee+Zq2v28+ua/MB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKFP9hqcxgmSlic9nBm8TogxqkOwSLiW/znVlMex6tuPYLS3duXjs1 Rdv6LArj5zFXVnUvmjfsW32e/Q21JnXQkvUhonu45tg+Fo9ZDyroOW8GgLdSkWx3 Ttea7XdQWA3V8GAaNvyOxguE36EgqxG7Xc3DfYInh5FkWsrIwmeLxx7UL+o0z5v1 vG3LTgNGTmLSlLtJYEhtTqxC8Osv2ky42GZScgJMJ0g+SWaQD/Z0t2Sx3E5tcgK6 SN8YQSZ/yuCNIQdQq/dpmUSImw8MkuDwPVccrjk4EgWoaQ5AdyQOS0pfVuAK9o2x knaCDCcPFELijrZFHYk7PVYJ52yr9o2k -----END CERTIFICATE-----Generated at Mon Oct 20 16:05:18 2025 by rpki-client