$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft File: XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json) Hash identifier: roQHx8Imc6AKsOX5DznQm5gSW9j2qPEtVtkFXPQD02g= Subject key identifier: 8A:1A:03:71:55:DE:E6:3D:94:51:A6:F8:C0:47:4F:5E:98:E6:9F:58 Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft Manifest number: 078E Signing time: Sat 18 Oct 2025 22:48:04 +0000 Manifest this update: Sat 18 Oct 2025 22:48:04 +0000 Manifest next update: Sat 25 Oct 2025 22:48:04 +0000 Files and hashes: 1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: vxqv7ImnPkpIxgm8zzxqn2QRuchpK6URnIM7mppr07A=) 2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: eaeoz8RqOSGEC4peCpxGpY2PbARdRPwT9kf9QvE/Y6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Validity Not Before: Oct 18 22:48:04 2025 GMT Not After : Oct 25 22:48:04 2025 GMT Subject: CN=68f41924-8eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:d6:9a:e4:67:b7:69:8a:00:ef:02:71:03: 2b:89:50:56:70:6b:fa:52:a5:f8:0d:03:ac:13:e7: 35:dd:1d:a4:1c:9b:50:28:09:99:9c:35:d6:b2:33: e6:ac:ac:b4:e1:b7:82:4f:e6:9a:fb:fa:e3:1b:9f: 11:c0:8d:ba:57:a9:3b:19:f0:e8:f2:6a:37:ba:b3: 3c:47:2a:f5:f0:7e:82:d1:73:e6:b3:f1:f3:cc:59: e5:e2:bc:a9:3a:75:17:f0:a6:23:2f:11:3b:62:ec: c1:2e:70:32:97:b4:5b:bb:12:4a:0e:ef:7c:2b:0f: 62:14:be:25:4d:49:3d:26:65:60:65:6b:6b:eb:58: 00:90:8f:95:7b:79:85:15:19:fc:0d:24:9d:7c:ee: e9:d4:70:5d:01:c9:cf:79:55:f9:13:67:11:76:e6: be:a0:c2:5b:10:72:ff:12:c5:88:88:dc:07:58:14: 96:d7:44:c2:80:14:d9:b9:e9:17:23:18:a1:23:38: 25:ff:a9:7c:21:9e:fb:f3:c4:b9:95:5a:8c:33:89: 8a:56:33:30:fc:95:67:05:d7:c8:4c:f9:48:7d:1f: b5:4b:27:7b:88:03:d9:58:93:97:ae:d9:fb:b1:03: 48:0e:36:ef:03:f5:65:d4:ac:86:a4:3c:14:d9:e8: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1A:03:71:55:DE:E6:3D:94:51:A6:F8:C0:47:4F:5E:98:E6:9F:58 X509v3 Authority Key Identifier: keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:25:1f:99:98:a3:c5:91:3d:56:14:19:74:9a:60:d3:b8:5e: 57:be:99:91:3f:06:42:09:57:84:06:d0:d5:b7:a5:7e:d7:f2: dc:90:5e:81:a6:e6:bd:53:1e:ec:bf:77:09:f1:33:03:d5:d8: 33:9b:14:a0:97:d6:b9:86:f9:7e:c5:3f:2e:2d:60:42:62:c4: 0d:14:3f:05:7a:34:76:a7:2e:3a:c7:b3:35:81:76:e3:47:a8: 1e:aa:4b:06:2c:e2:96:52:1a:86:e5:0d:4d:bd:6e:11:e6:24: 82:e7:50:ad:e9:17:d0:d8:94:48:e8:46:ae:38:2b:fb:8a:5c: 14:30:48:a7:bf:1e:1a:7d:71:d0:19:06:5e:d7:71:4c:44:c4: 16:7f:2b:00:91:ee:2e:39:60:47:1f:a1:fb:65:8e:83:5f:f6: f5:53:eb:a9:df:e8:6e:66:30:40:7e:c6:3c:a9:5c:cd:cc:b0: 6d:c6:d8:85:47:df:c8:2a:68:55:dc:a2:60:50:b7:77:97:86: 49:6d:04:b5:63:dd:83:ec:02:c6:6e:90:6b:e9:90:25:c4:1a: e7:72:16:51:82:5d:a8:11:53:de:fb:22:67:d4:a1:ba:f8:54: 16:b4:5e:2d:26:c2:2d:df:b0:a2:ef:fa:2e:a0:64:7b:05:7a: 57:01:10:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3 QzcyMDVBQTkwHhcNMjUxMDE4MjI0ODA0WhcNMjUxMDI1MjI0ODA0WjAYMRYwFAYD VQQDEw02OGY0MTkyNC04ZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznDWmuRnt2mKAO8CcQMriVBWcGv6UqX4DQOsE+c13R2kHJtQKAmZnDXWsjPm rKy04beCT+aa+/rjG58RwI26V6k7GfDo8mo3urM8Ryr18H6C0XPms/HzzFnl4ryp OnUX8KYjLxE7YuzBLnAyl7RbuxJKDu98Kw9iFL4lTUk9JmVgZWtr61gAkI+Ve3mF FRn8DSSdfO7p1HBdAcnPeVX5E2cRdua+oMJbEHL/EsWIiNwHWBSW10TCgBTZuekX IxihIzgl/6l8IZ7788S5lVqMM4mKVjMw/JVnBdfITPlIfR+1Syd7iAPZWJOXrtn7 sQNIDjbvA/Vl1KyGpDwU2ehcgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoaA3FV 3uY9lFGm+MBHT16Y5p9YMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5 MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3OC9GMUY0RDNDRTI5MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5 TXBncUxMVGVWUE44Y2dXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0JR+ZmKPFkT1WFBl0mmDTuF5XvpmRPwZCCVeEBtDVt6V+1/LckF6B pua9Ux7sv3cJ8TMD1dgzmxSgl9a5hvl+xT8uLWBCYsQNFD8FejR2py46x7M1gXbj R6geqksGLOKWUhqG5Q1NvW4R5iSC51Ct6RfQ2JRI6EauOCv7ilwUMEinvx4afXHQ GQZe13FMRMQWfysAke4uOWBHH6H7ZY6DX/b1U+up3+huZjBAfsY8qVzNzLBtxtiF R9/IKmhV3KJgULd3l4ZJbQS1Y92D7ALGbpBr6ZAlxBrnchZRgl2oEVPe+yJn1KG6 +FQWtF4tJsIt37Ci7/ouoGR7BXpXARB3 -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:44 2025 by rpki-client