$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: skX/eE004qOBTQY6xdmkuXVR7txqePC8E4QwJ9Z47oE= Subject key identifier: C4:05:79:69:DA:12:7E:53:AF:90:70:10:BD:16:C6:75:05:99:12:AA Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 07FF Signing time: Sat 18 Oct 2025 22:10:36 +0000 Manifest this update: Sat 18 Oct 2025 22:10:35 +0000 Manifest next update: Sat 25 Oct 2025 22:10:35 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: +w8MpRfcS/kLjw84S6tABVzVJ52x8lldWuInMgXOmZA=) 2: 799C6AD8149711EFB0CB9E0AC4F9AE02.roa (hash: Z6c5AlKVKf/klPMN7KddRfh49KHTtioUb3aQg5mvfg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Oct 18 22:10:35 2025 GMT Not After : Oct 25 22:10:35 2025 GMT Subject: CN=68f4105b-f065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:4e:4d:cf:72:05:b0:b9:f6:1f:a0:06:77: a9:55:69:01:a5:9a:4a:dd:30:54:e9:61:ea:97:0e: 5d:09:f9:36:ae:6b:57:48:9f:d2:a5:00:84:5c:bb: d6:ac:39:a1:cf:16:d0:b0:c5:2e:cb:9e:1b:83:5e: db:70:2a:b5:0e:68:80:2e:f9:1f:09:fd:5a:5b:bc: 03:6b:29:04:7f:fe:e9:bc:59:e2:84:2f:e1:65:ab: e4:37:df:96:fa:7e:64:1f:43:98:64:72:64:1e:4f: 98:cf:2e:14:97:e4:c8:8a:47:e4:de:77:78:80:f2: f5:23:24:a1:a3:f7:ef:df:f4:d9:08:a8:ab:ab:22: ab:95:b7:95:2e:36:9d:9a:37:cf:60:ca:fa:82:25: b2:82:26:51:eb:ae:4d:3c:c8:bc:1e:e1:68:cc:1b: e2:bb:2a:63:58:de:18:d8:62:dc:57:33:db:5d:6c: 40:cb:c5:b1:28:06:c3:7b:02:f2:4c:fa:ae:26:e0: 57:6a:36:3f:6c:7a:4c:cb:f4:d3:6b:b5:23:5b:a6: 91:65:0b:0a:8c:1b:5f:85:79:2a:f1:06:0f:c6:0b: d0:be:c3:8b:23:34:ff:32:5d:ae:15:8c:66:3b:36: 50:a8:4c:d7:ac:5b:ed:91:74:0e:9b:77:d9:7f:b8: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:05:79:69:DA:12:7E:53:AF:90:70:10:BD:16:C6:75:05:99:12:AA X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f8:0c:f5:26:68:59:86:b1:e2:47:58:e3:87:5d:9d:72:58: bc:e4:fc:34:c1:6f:7a:b1:30:a4:78:32:21:f3:b6:32:40:37: b9:fe:15:5f:26:6f:45:f4:de:b6:01:17:0a:8c:95:03:80:19: ed:30:14:b4:b1:88:15:87:ae:1d:d8:08:70:0c:6a:ed:64:a6: 98:bb:f5:01:28:34:32:9d:5d:f2:a5:b7:3e:d2:4c:33:c9:a1: c1:af:90:a8:2e:b3:10:1a:3f:f6:0c:36:21:3e:3a:9e:f2:28: 87:0b:fc:0f:a3:f1:f1:40:66:c9:59:f4:50:8b:a9:61:b8:ab: 6f:e2:f9:89:43:44:7a:41:16:6d:3c:ac:c4:e5:6a:cc:31:58: 9c:83:7d:06:8b:42:61:ec:2b:0f:98:d8:0f:1f:a4:3f:c8:a2: 59:4d:a7:36:86:f6:9e:3f:47:cc:6a:45:0b:a9:00:44:0e:25: e1:81:88:22:7f:99:de:78:2b:e7:e1:6f:89:c0:0a:3b:3f:3d: 68:e6:65:d8:5d:89:55:eb:fa:a0:ee:21:79:7c:67:2d:69:2f: f4:d9:78:72:d3:de:fe:73:03:aa:27:45:3d:f7:91:b2:de:e0: 6a:f6:f7:13:29:2c:2d:38:f3:fb:68:a7:60:50:4a:0e:e7:ec: fd:51:f4:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjUxMDE4MjIxMDM1WhcNMjUxMDI1MjIxMDM1WjAYMRYwFAYD VQQDEw02OGY0MTA1Yi1mMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAql1OTc9yBbC59h+gBnepVWkBpZpK3TBU6WHqlw5dCfk2rmtXSJ/SpQCEXLvW rDmhzxbQsMUuy54bg17bcCq1DmiALvkfCf1aW7wDaykEf/7pvFnihC/hZavkN9+W +n5kH0OYZHJkHk+Yzy4Ul+TIikfk3nd4gPL1IySho/fv3/TZCKirqyKrlbeVLjad mjfPYMr6giWygiZR665NPMi8HuFozBviuypjWN4Y2GLcVzPbXWxAy8WxKAbDewLy TPquJuBXajY/bHpMy/TTa7UjW6aRZQsKjBtfhXkq8QYPxgvQvsOLIzT/Ml2uFYxm OzZQqEzXrFvtkXQOm3fZf7ipswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQFeWna En5Tr5BwEL0WxnUFmRKqMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1+Az1JmhZhrHiR1jjh12dcli85Pw0wW96sTCkeDIh87YyQDe5/hVf Jm9F9N62ARcKjJUDgBntMBS0sYgVh64d2AhwDGrtZKaYu/UBKDQynV3ypbc+0kwz yaHBr5CoLrMQGj/2DDYhPjqe8iiHC/wPo/HxQGbJWfRQi6lhuKtv4vmJQ0R6QRZt PKzE5WrMMVicg30Gi0Jh7CsPmNgPH6Q/yKJZTac2hvaeP0fMakULqQBEDiXhgYgi f5neeCvn4W+JwAo7Pz1o5mXYXYlV6/qg7iF5fGctaS/02Xhy097+cwOqJ0U995Gy 3uBq9vcTKSwtOPP7aKdgUEoO5+z9UfQ6 -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:10 2025 by rpki-client