$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft File: xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json) Hash identifier: 8FQDn2xLWgurkjvfvlaxNkaayoOA+bU1DfWEiOtlV/I= Subject key identifier: 27:5F:DD:73:B3:D0:39:1D:88:CB:9E:ED:3A:2A:CA:3E:92:02:CA:13 Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D Certificate issuer: /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft Manifest number: BA Signing time: Sun 19 Oct 2025 09:09:39 +0000 Manifest this update: Sun 19 Oct 2025 09:09:38 +0000 Manifest next update: Sun 26 Oct 2025 09:09:38 +0000 Files and hashes: 1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: VjUNFZq5ItQbvcaGLPkWunENETA2ew4tWny49RHAIJQ=) 2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ijUv0+puTZ+N4j9fhEKBY9wHAWPDCsnAi/IUGHnumK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Validity Not Before: Oct 19 09:09:38 2025 GMT Not After : Oct 26 09:09:38 2025 GMT Subject: CN=68f4aad2-0fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:15:4d:9f:73:4b:87:f3:bc:2c:31:57:a4: cf:92:47:e6:02:ca:62:f1:ad:cb:bf:c8:5b:0d:24: 76:0c:a7:34:2e:e3:e5:bc:6a:d1:ac:7a:51:44:a9: 75:57:4f:0e:02:e2:cd:3f:d3:42:75:26:18:d0:f4: 40:cd:26:87:25:fd:45:0c:a2:fe:25:52:7e:22:a0: 6b:7f:c5:40:1f:fa:62:2b:f3:25:57:a9:f2:5d:05: 3f:80:4a:f0:f0:66:1a:fc:fb:3e:23:54:ae:3e:b3: 3d:42:a3:cd:c2:4e:3a:e0:4a:1b:63:42:be:83:e6: 85:7a:ad:c9:2e:3b:b8:82:b4:a2:aa:8f:12:69:86: 0f:be:11:1f:ad:87:9f:42:93:cf:48:84:7a:0d:9f: 7a:4d:fd:71:cd:a3:16:dc:fc:b8:0e:08:e2:95:e1: 8a:8c:2b:75:fb:4c:6c:35:08:53:6e:88:ae:a2:26: 74:04:28:e9:5f:52:e5:4d:c0:3c:0f:67:0c:45:ba: fd:2b:ca:da:ef:38:d8:fb:90:db:6f:1b:f9:3b:5e: ea:ac:a9:15:56:d2:aa:09:06:c9:5d:b4:b3:23:24: 5d:48:7c:81:2b:67:c9:a4:30:25:fe:42:2b:37:a3: a9:50:c2:c6:39:f5:34:b7:54:6f:c5:4a:b2:ea:ad: 64:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5F:DD:73:B3:D0:39:1D:88:CB:9E:ED:3A:2A:CA:3E:92:02:CA:13 X509v3 Authority Key Identifier: keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:43:8f:fe:f8:05:89:5c:18:94:cf:ec:b1:39:22:d6:b7:1c: c2:fa:10:51:59:2b:fb:6e:e8:1d:49:d1:9c:d2:5c:be:b9:3b: 7a:8c:ef:5a:ac:b8:8d:c3:c9:c7:39:e8:66:de:d3:64:7b:89: f4:4e:5d:55:e4:43:84:93:aa:77:c4:0a:39:1c:c1:47:43:e0: c5:a2:f7:3f:b9:8d:64:2a:ef:5a:22:cd:55:46:9a:fd:85:c5: 13:8c:04:ed:99:10:9b:f4:59:47:2a:d0:31:62:a4:6c:93:ce: 1d:f3:0d:61:17:78:04:c9:13:c9:d0:e1:9d:91:e8:a4:0f:a6: b1:e7:1f:91:f3:6c:39:ef:8f:e2:75:e3:16:67:a0:7b:ff:34: 2b:b7:e3:c6:50:33:57:12:0c:ad:d5:9a:01:da:f1:52:a6:25: 36:9b:7c:c0:82:ea:5b:20:56:12:c0:3a:94:d1:68:50:1d:5e: b0:f2:14:60:fe:98:05:d5:7e:fe:bd:8b:d8:79:cb:6e:16:2d: 1b:dd:d4:5a:7a:24:cc:74:36:65:60:87:95:e7:ad:f5:9c:4a: 6f:0e:5e:43:f9:e4:0d:96:00:7c:e4:f3:14:54:41:9a:e3:31: 61:96:94:33:07:3d:bd:93:1b:a2:2e:16:33:bd:0f:49:40:31: 7f:f7:3f:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzOEExMTAvBgNVBAUTKEM0NkM0M0JBMjc3RDJDMTBFRTdEMUVGRjNERjBFMkVG Qzg4NTFBMUQwHhcNMjUxMDE5MDkwOTM4WhcNMjUxMDI2MDkwOTM4WjAYMRYwFAYD VQQDEw02OGY0YWFkMi0wZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pEVTZ9zS4fzvCwxV6TPkkfmAspi8a3Lv8hbDSR2DKc0LuPlvGrRrHpRRKl1 V08OAuLNP9NCdSYY0PRAzSaHJf1FDKL+JVJ+IqBrf8VAH/piK/MlV6nyXQU/gErw 8GYa/Ps+I1SuPrM9QqPNwk464EobY0K+g+aFeq3JLju4grSiqo8SaYYPvhEfrYef QpPPSIR6DZ96Tf1xzaMW3Py4DgjileGKjCt1+0xsNQhTboiuoiZ0BCjpX1LlTcA8 D2cMRbr9K8ra7zjY+5Dbbxv5O17qrKkVVtKqCQbJXbSzIyRdSHyBK2fJpDAl/kIr N6OpUMLGOfU0t1RvxUqy6q1kEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdf3XOz 0DkdiMue7Toqyj6SAsoTMB8GA1UdIwQYMBaAFMRsQ7onfSwQ7n0e/z3w4u/IhRod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4QS81QkREMkNBRTk1 NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxCRHVmUjdfUGZEaTc4aUZH aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjM4QS81QkREMkNBRTk1NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxC RHVmUjdfUGZEaTc4aUZHaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNQ4/++AWJXBiUz+yxOSLWtxzC+hBRWSv7bugdSdGc0ly+uTt6jO9a rLiNw8nHOehm3tNke4n0Tl1V5EOEk6p3xAo5HMFHQ+DFovc/uY1kKu9aIs1VRpr9 hcUTjATtmRCb9FlHKtAxYqRsk84d8w1hF3gEyRPJ0OGdkeikD6ax5x+R82w574/i deMWZ6B7/zQrt+PGUDNXEgyt1ZoB2vFSpiU2m3zAgupbIFYSwDqU0WhQHV6w8hRg /pgF1X7+vYvYectuFi0b3dRaeiTMdDZlYIeV5631nEpvDl5D+eQNlgB85PMUVEGa 4zFhlpQzBz29kxuiLhYzvQ9JQDF/9z8X -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:39 2025 by rpki-client