$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: CdwuPHHYtRHH7EQlcR/YgQBto8gE/shvTX2pm9bT8iQ= Subject key identifier: 6A:13:FB:B9:12:AC:73:1E:44:8E:2C:E6:A0:D1:FA:48:3C:74:75:8E Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: B1 Signing time: Sun 19 Oct 2025 09:14:26 +0000 Manifest this update: Sun 19 Oct 2025 09:14:25 +0000 Manifest next update: Sun 26 Oct 2025 09:14:25 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: Sf/HU9DM+U3eTbIrs0ka869EuXd4NHx5pqbXzwXjzjw=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: Oct 19 09:14:25 2025 GMT Not After : Oct 26 09:14:25 2025 GMT Subject: CN=68f4abf2-eaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:51:a3:37:96:5a:38:01:42:17:5e:a4:5f: 20:bf:f2:24:b8:5c:fc:04:46:41:a2:15:e6:31:a5: 72:40:50:86:94:14:94:52:9b:cf:13:05:21:d1:98: 80:4f:34:57:8e:4f:da:5f:12:7c:af:04:ed:76:a0: 90:ca:d4:98:44:07:d8:b5:af:cb:4c:44:a6:b0:fd: b8:9f:e4:9b:77:9f:ae:a8:06:d6:db:64:81:e9:e7: e4:01:e3:98:cd:ed:0c:ff:c0:6d:5b:03:20:9a:bc: e2:54:37:34:94:9c:76:83:4f:e6:3d:b9:69:0a:58: b4:f6:9c:08:a3:cf:8a:f2:9e:e0:91:7c:ef:92:8d: 29:28:3a:95:fe:48:30:82:3f:fa:af:a8:54:ac:d7: d0:7c:1a:4f:4e:96:60:94:63:57:ee:41:97:c2:c4: 58:14:09:94:fb:61:80:e8:f5:b1:bb:f8:ff:8d:be: c2:7b:14:c2:3f:0d:c1:0d:b4:13:20:a0:cb:4d:6c: cf:11:6d:a7:37:8e:33:49:ab:c8:83:52:4b:d4:60: ab:f3:39:56:4c:e9:0e:3c:42:14:12:91:a1:43:dd: 02:0f:44:e8:ef:19:9f:09:78:21:18:d1:2c:94:63: b6:dc:ea:2e:69:7e:a1:2c:4f:eb:f0:ac:51:64:cb: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:13:FB:B9:12:AC:73:1E:44:8E:2C:E6:A0:D1:FA:48:3C:74:75:8E X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:15:4f:b0:2b:57:9f:0f:f4:24:d2:21:6c:71:b3:03:63:87: 2c:00:d8:f4:89:3d:12:54:26:24:61:34:b4:e8:2d:d7:41:ac: 45:73:34:63:29:64:e0:d8:3e:62:92:f4:05:73:c3:2c:0c:94: c3:50:39:9f:2d:77:93:2c:70:06:6f:ea:8b:e6:a2:4d:a3:16: f9:a2:5a:5b:43:b0:f6:fc:88:05:79:60:e3:2d:d5:f2:43:ac: 6e:cf:de:a3:57:f1:22:2c:a6:e4:84:c4:c5:4f:c2:76:e0:1f: f7:03:ef:6e:50:ac:f7:3c:e2:a4:b0:37:6f:42:82:bd:ac:71: 30:a0:c7:a7:a4:28:bf:69:8d:aa:8f:4c:f1:72:81:83:c3:c0: bc:26:5e:77:8a:34:6b:ec:bb:4e:07:be:b4:77:d5:44:18:95: 12:c1:e1:4b:b3:9e:0c:46:a0:10:df:6f:5c:f8:b2:e7:dd:2b: 87:35:01:2e:72:6d:52:11:13:01:17:ed:82:a1:6c:2e:57:e6: f7:a2:54:b0:c9:11:6c:12:93:57:53:af:cf:5b:90:73:8e:84: 21:08:4c:22:fa:5a:ab:da:43:00:77:7f:88:9d:f3:a3:11:b2: bc:60:53:6e:9b:71:d9:67:66:f1:a0:bd:62:3f:cd:6c:c5:85: 36:38:3f:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG RjMwN0M4NkYwHhcNMjUxMDE5MDkxNDI1WhcNMjUxMDI2MDkxNDI1WjAYMRYwFAYD VQQDEw02OGY0YWJmMi1lYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygpRozeWWjgBQhdepF8gv/IkuFz8BEZBohXmMaVyQFCGlBSUUpvPEwUh0ZiA TzRXjk/aXxJ8rwTtdqCQytSYRAfYta/LTESmsP24n+Sbd5+uqAbW22SB6efkAeOY ze0M/8BtWwMgmrziVDc0lJx2g0/mPblpCli09pwIo8+K8p7gkXzvko0pKDqV/kgw gj/6r6hUrNfQfBpPTpZglGNX7kGXwsRYFAmU+2GA6PWxu/j/jb7CexTCPw3BDbQT IKDLTWzPEW2nN44zSavIg1JL1GCr8zlWTOkOPEIUEpGhQ90CD0To7xmfCXghGNEs lGO23OouaX6hLE/r8KxRZMu7wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoT+7kS rHMeRI4s5qDR+kg8dHWOMB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl enJHV0hST2dWLXpfTUh5RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8FU+wK1efD/Qk0iFscbMDY4csANj0iT0SVCYkYTS06C3XQaxFczRj KWTg2D5ikvQFc8MsDJTDUDmfLXeTLHAGb+qL5qJNoxb5olpbQ7D2/IgFeWDjLdXy Q6xuz96jV/EiLKbkhMTFT8J24B/3A+9uUKz3POKksDdvQoK9rHEwoMenpCi/aY2q j0zxcoGDw8C8Jl53ijRr7LtOB760d9VEGJUSweFLs54MRqAQ329c+LLn3SuHNQEu cm1SERMBF+2CoWwuV+b3olSwyRFsEpNXU6/PW5BzjoQhCEwi+lqr2kMAd3+InfOj EbK8YFNum3HZZ2bxoL1iP81sxYU2OD92 -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:14 2025 by rpki-client