$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json) Hash identifier: QSGuyaFvs4jfQ1cuOEci+Aq+PS5/QqT1vOHIjmmuEG0= Subject key identifier: D1:D8:90:E4:81:14:2A:6B:56:56:69:C3:AB:A3:EE:4E:C5:45:B0:DD Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft Manifest number: 52 Signing time: Sun 19 Oct 2025 10:37:43 +0000 Manifest this update: Sun 19 Oct 2025 10:37:42 +0000 Manifest next update: Sun 26 Oct 2025 10:37:42 +0000 Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: +kqXfegudWhGmVKNJMHIb2T4SWem5QLhCcnRX0D9Mu0=) 2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Validity Not Before: Oct 19 10:37:42 2025 GMT Not After : Oct 26 10:37:42 2025 GMT Subject: CN=68f4bf77-5236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:ec:a7:84:b4:38:2a:9b:17:42:3d:8f:07: f1:09:bf:3a:05:a8:47:ca:5a:2c:88:01:88:77:39: 85:1c:9d:df:ab:a4:46:e7:98:fc:35:dc:f5:e8:59: ec:27:4d:97:82:b0:a6:e9:e2:7a:3f:dc:bb:c8:79: e9:82:e6:ff:d1:00:49:c3:43:59:fb:9f:9c:cd:8d: d0:ba:b4:89:75:d0:c5:be:53:c6:cc:f5:d6:1f:8b: d6:c5:fe:20:ae:80:d7:0e:12:46:df:bb:a1:c6:ad: 62:48:7e:58:1e:6b:ad:72:da:d9:08:d9:f0:79:58: 5c:62:1e:34:f6:6c:45:44:0f:0d:f8:2b:87:d6:28: d3:fc:34:0d:e2:7e:4d:35:54:fe:13:18:f7:4e:9a: 9a:a2:c0:10:81:98:69:65:5f:e3:c4:9f:27:58:43: 95:56:41:d5:6c:80:2e:af:98:20:78:b0:f9:8a:29: 8d:da:aa:f8:2b:69:43:56:ec:94:4e:b3:2e:d7:56: 33:a6:91:a5:f4:cd:34:f9:52:bb:a8:54:e7:3a:71: a2:4f:fc:cd:02:33:5a:6d:25:50:9a:44:92:89:b4: 5e:8b:21:eb:4b:ee:f7:f1:35:6b:f0:29:ba:08:6d: 48:c9:64:55:d3:76:02:8c:8d:5f:77:0b:0f:4a:2f: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D8:90:E4:81:14:2A:6B:56:56:69:C3:AB:A3:EE:4E:C5:45:B0:DD X509v3 Authority Key Identifier: keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c0:f1:3f:8e:8f:da:d5:f9:c9:4f:ea:73:b0:25:a7:cb:2e: 99:10:bd:37:90:93:eb:8a:d3:6e:b9:55:8a:29:73:55:ae:f9: a5:9c:f8:a4:75:70:d5:a7:5d:95:eb:08:20:a3:77:b3:e0:cc: dd:22:56:45:1d:c7:1c:bc:3c:f9:4e:fe:54:05:7b:59:06:f4: 40:89:18:25:9d:70:fd:21:b9:25:41:b5:71:b0:e7:75:c2:3b: 70:df:75:65:cf:b5:24:07:cd:2d:79:87:6f:91:50:4c:32:cb: b0:a6:91:3e:c1:59:40:43:1c:3d:fa:8e:d8:3d:48:68:e3:bb: ea:41:ad:c1:a6:39:fa:3f:73:6a:47:22:95:99:0e:f8:ca:e6: 76:bd:87:69:b6:e1:b2:f8:3d:1f:0c:be:a8:a4:60:80:66:b1: 9b:2e:68:1e:a1:5e:97:dc:20:01:95:40:34:8c:b0:ae:77:e9: 8e:39:17:c6:0d:69:38:e8:ab:87:94:f1:39:8c:b1:ee:61:da: ee:ac:ea:dc:aa:95:70:12:4c:c9:45:38:88:d9:ee:62:d2:d1: 8c:06:6e:36:fa:29:be:d7:ed:9d:98:2b:73:cc:d3:1f:ca:48: 57:52:76:f8:b9:fc:38:ac:94:7e:a4:b7:40:a1:4f:3b:dd:fd: b5:01:e1:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzMxMTExMC8GA1UEBRMoQzZERTM2QTRFNDVFN0E5OTFGQzQ0NEY4Q0IxQjQ1NUYx NzQ2MkM4RDAeFw0yNTEwMTkxMDM3NDJaFw0yNTEwMjYxMDM3NDJaMBgxFjAUBgNV BAMTDTY4ZjRiZjc3LTUyMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJcuynhLQ4KpsXQj2PB/EJvzoFqEfKWiyIAYh3OYUcnd+rpEbnmPw13PXoWewn TZeCsKbp4no/3LvIeemC5v/RAEnDQ1n7n5zNjdC6tIl10MW+U8bM9dYfi9bF/iCu gNcOEkbfu6HGrWJIflgea61y2tkI2fB5WFxiHjT2bEVEDw34K4fWKNP8NA3ifk01 VP4TGPdOmpqiwBCBmGllX+PEnydYQ5VWQdVsgC6vmCB4sPmKKY3aqvgraUNW7JRO sy7XVjOmkaX0zTT5UruoVOc6caJP/M0CM1ptJVCaRJKJtF6LIetL7vfxNWvwKboI bUjJZFXTdgKMjV93Cw9KLzURAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0diQ5IEU KmtWVmnDq6PuTsVFsN0wHwYDVR0jBBgwFoAUxt42pOReepkfxET4yxtFXxdGLI0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMzExL0YxRjdBRjI2MkZC RjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHQ0MnBPUmVlcGtmeEVUNHl4dEZYeGRHTEkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MzExL0YxRjdBRjI2MkZCRjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBr ZnhFVDR5eHRGWHhkR0xJMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABPA8T+Oj9rV+clP6nOwJafLLpkQvTeQk+uK0265VYopc1Wu+aWc+KR1 cNWnXZXrCCCjd7PgzN0iVkUdxxy8PPlO/lQFe1kG9ECJGCWdcP0huSVBtXGw53XC O3DfdWXPtSQHzS15h2+RUEwyy7CmkT7BWUBDHD36jtg9SGjju+pBrcGmOfo/c2pH IpWZDvjK5na9h2m24bL4PR8MvqikYIBmsZsuaB6hXpfcIAGVQDSMsK536Y45F8YN aTjoq4eU8TmMse5h2u6s6tyqlXASTMlFOIjZ7mLS0YwGbjb6Kb7X7Z2YK3PM0x/K SFdSdvi5/DislH6kt0ChTzvd/bUB4R0= -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:43 2025 by rpki-client