$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json) Hash identifier: Ml9asVn5whbjfP8EThB0G8UBjFqllqKKizLDlo+VSxA= Subject key identifier: 48:2C:C5:2E:43:A6:ED:A7:FF:56:B9:78:A6:0C:AD:94:99:3B:C3:BA Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft Manifest number: A8 Signing time: Sun 19 Oct 2025 09:24:18 +0000 Manifest this update: Sun 19 Oct 2025 09:24:18 +0000 Manifest next update: Sun 26 Oct 2025 09:24:18 +0000 Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: z+Out9afJk3YnhK3j4e6ivdzU4JhftRnuz7dZpFn34s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Validity Not Before: Oct 19 09:24:18 2025 GMT Not After : Oct 26 09:24:18 2025 GMT Subject: CN=68f4ae42-c2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:08:f6:7e:56:fa:44:bf:c5:b3:db:72:b2: a9:c0:15:79:da:65:76:e3:b7:6d:22:4f:52:1d:d0: 00:b8:98:e0:48:2d:57:96:97:79:a0:c2:82:2d:75: 2e:5f:c4:66:8a:8a:cb:21:9f:ad:a6:cb:a5:2e:4e: 7d:ec:16:53:38:bb:88:01:a5:10:ad:e9:20:24:22: 13:53:7a:fd:70:c5:c3:91:e3:d0:21:04:c8:10:2f: 32:05:7c:0c:e2:21:1c:1d:74:56:96:64:ed:40:7f: 52:de:03:86:fa:47:6c:ce:eb:b9:be:3e:63:0a:1c: 3d:40:eb:2c:54:ae:f8:e2:9f:4f:81:d0:dc:20:bd: 35:16:1b:68:d4:d1:c6:ab:4c:16:3e:68:b1:38:87: 72:59:85:ad:b9:ae:7c:2f:8f:63:87:8e:cc:fc:22: 17:01:3b:d6:20:2c:66:6e:a9:c8:51:01:9c:3a:6a: 39:8b:4f:69:f3:25:2f:e8:28:fd:31:db:0b:67:7f: 40:a0:07:b5:a9:29:78:de:46:f1:ec:ed:e6:4b:8f: 31:f7:af:95:47:58:2f:bc:c8:63:d0:0a:b5:07:45: 53:ec:f9:12:c6:44:5d:b4:dd:75:90:ed:a3:41:80: bb:dd:d5:d0:d2:3c:70:e3:f4:46:c3:56:34:c1:ba: af:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2C:C5:2E:43:A6:ED:A7:FF:56:B9:78:A6:0C:AD:94:99:3B:C3:BA X509v3 Authority Key Identifier: keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ff:57:45:06:ff:ac:fc:fb:4e:92:97:37:5c:9f:74:cb:ec: b3:4c:42:5a:f8:fe:9f:0d:fe:38:3c:43:fc:ac:33:b7:fd:0c: 5b:93:b3:36:c4:5c:15:3e:57:20:4a:ec:d1:0e:ab:c4:16:af: e1:45:05:14:84:11:eb:d6:b7:99:bb:11:e3:e5:bb:d4:dc:4e: 8d:5b:7c:6c:77:24:a2:f6:24:97:ff:0c:1a:3f:99:f4:30:60: 17:8e:1e:38:3a:fe:4f:03:36:6f:af:bc:36:7f:d9:b5:7c:a4: 5e:8e:82:a8:0f:12:4e:9a:ce:08:5f:4a:4f:3f:44:21:94:4a: 37:05:91:46:89:99:f4:90:6b:56:18:c0:21:53:0b:cb:e4:49: 2a:19:29:68:f5:f2:80:5a:36:5b:76:65:89:d9:37:c3:78:f8: a6:8d:ce:92:1a:50:1d:7d:84:2d:de:74:0c:a9:16:9f:41:51: ba:20:a1:e5:33:ed:ad:03:82:ca:72:57:aa:6d:1c:a9:fb:ff: e5:4c:04:50:30:ad:d0:f9:ac:da:63:17:ba:be:04:ce:a2:34: 3e:8e:e6:fa:cb:de:d2:6d:8a:7f:e8:cb:97:ef:45:3d:cf:3b: 52:52:a4:b0:c6:bd:c4:1c:dc:19:c6:34:fc:b0:0f:31:c6:74: e3:09:c4:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGQjYxMTAvBgNVBAUTKEM2QTIxNkU0MjMyNjhCMzkyNzdEQzEyMkYzRTFBQUQ4 NkM2RDlBNDMwHhcNMjUxMDE5MDkyNDE4WhcNMjUxMDI2MDkyNDE4WjAYMRYwFAYD VQQDEw02OGY0YWU0Mi1jMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ0I9n5W+kS/xbPbcrKpwBV52mV247dtIk9SHdAAuJjgSC1Xlpd5oMKCLXUu X8RmiorLIZ+tpsulLk597BZTOLuIAaUQrekgJCITU3r9cMXDkePQIQTIEC8yBXwM 4iEcHXRWlmTtQH9S3gOG+kdszuu5vj5jChw9QOssVK744p9PgdDcIL01Fhto1NHG q0wWPmixOIdyWYWtua58L49jh47M/CIXATvWICxmbqnIUQGcOmo5i09p8yUv6Cj9 MdsLZ39AoAe1qSl43kbx7O3mS48x96+VR1gvvMhj0Aq1B0VT7PkSxkRdtN11kO2j QYC73dXQ0jxw4/RGw1Y0wbqvoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgsxS5D pu2n/1a5eKYMrZSZO8O6MB8GA1UdIwQYMBaAFMaiFuQjJos5J33BIvPhqthsbZpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUZCNi84RUMzNURFNEFD NjQxMUVGQjY4NDI2N0JDNEY5QUUwMi94cUlXNUNNbWl6a25mY0VpOC1HcTJHeHRt a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxSVc1Q01taXprbmZjRWk4LUdxMkd4dG1rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUZCNi84RUMzNURFNEFDNjQxMUVGQjY4NDI2N0JDNEY5QUUwMi94cUlXNUNNbWl6 a25mY0VpOC1HcTJHeHRta00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj/1dFBv+s/PtOkpc3XJ90y+yzTEJa+P6fDf44PEP8rDO3/Qxbk7M2 xFwVPlcgSuzRDqvEFq/hRQUUhBHr1reZuxHj5bvU3E6NW3xsdySi9iSX/wwaP5n0 MGAXjh44Ov5PAzZvr7w2f9m1fKRejoKoDxJOms4IX0pPP0QhlEo3BZFGiZn0kGtW GMAhUwvL5EkqGSlo9fKAWjZbdmWJ2TfDePimjc6SGlAdfYQt3nQMqRafQVG6IKHl M+2tA4LKcleqbRyp+//lTARQMK3Q+azaYxe6vgTOojQ+jub6y97SbYp/6MuX70U9 zztSUqSwxr3EHNwZxjT8sA8xxnTjCcTi -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:36 2025 by rpki-client