$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: gSiisHb4iL0WvT1UdHjMJn77wlEjb9cxx/mtCSiJioo= Subject key identifier: 82:63:E9:1C:74:E2:AF:4A:8A:65:8B:C2:F9:00:F2:B5:B0:ED:2E:C0 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0C93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0C8B Signing time: Sat 18 Oct 2025 19:06:44 +0000 Manifest this update: Sat 18 Oct 2025 19:06:43 +0000 Manifest next update: Sat 25 Oct 2025 19:06:43 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: /5rcmPjv1V3Skre8YNkU10V6fVBvCRc1Y0WyotSeaYY=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3219 (0xc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Oct 18 19:06:43 2025 GMT Not After : Oct 25 19:06:43 2025 GMT Subject: CN=68f3e544-7c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:26:f4:54:15:e5:ae:9f:af:d6:ee:65:ee:69: 79:6f:bc:a7:d3:c5:82:d9:b0:f3:66:6b:98:da:17: a3:b2:fb:70:f0:9e:ad:fd:9e:94:3c:54:f8:2c:6e: 5a:8e:be:ab:cc:36:32:63:15:fc:f7:38:e0:8a:09: 7c:ef:50:d5:cb:e7:83:0b:ff:4c:8c:6c:83:4a:f0: 2b:f9:b5:52:e6:bf:08:3d:ff:2e:91:68:c3:6a:a7: 97:b1:d6:e6:21:f2:78:fb:63:6e:4d:7a:8b:be:6f: dd:0f:eb:39:4b:ac:4b:12:cd:a1:6b:ac:4d:7e:a5: 6d:4c:3f:b1:8a:10:92:33:ff:6e:f2:b4:02:19:e0: 4e:c3:36:0c:68:28:5e:65:ae:a5:3e:3c:50:a8:4b: 18:ca:8a:ea:bc:f7:0d:2f:88:ab:82:9f:db:93:ce: a7:5d:f9:79:be:64:38:35:ca:3a:55:3d:bc:19:7f: c2:ca:e8:ac:f2:9e:5f:58:5b:fa:06:9c:ae:ff:ff: c3:6a:0c:97:6a:72:e9:e7:97:14:0c:be:b4:9a:9b: a8:6d:fb:9c:a0:67:8a:fd:f0:1e:9c:f6:9c:f9:04: e4:43:ce:62:9f:ae:41:b4:cf:e7:0b:bb:09:ae:a4: aa:40:65:05:86:26:e4:0f:ed:72:c5:a3:6b:16:3a: 18:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:63:E9:1C:74:E2:AF:4A:8A:65:8B:C2:F9:00:F2:B5:B0:ED:2E:C0 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:da:c4:cc:d5:1a:b6:83:e4:39:1a:ed:5a:4f:72:04:5e:db: cb:3b:f3:46:2e:43:96:67:69:3e:73:7c:51:2f:06:29:b7:5c: 04:47:59:32:68:97:d2:1d:eb:82:8f:ee:36:13:f7:09:6c:24: cf:4b:e2:72:d5:2b:3a:2b:b5:7e:fa:77:cc:b6:27:a4:33:91: 39:94:24:46:8e:04:85:74:a3:f7:9d:cd:f0:80:29:08:de:6e: ad:dd:e4:87:df:e3:20:ef:a7:43:81:4f:36:bd:18:af:0f:75: 2d:ba:01:a1:a5:ef:2f:23:49:f6:8b:95:c4:aa:99:68:d3:cc: 5b:b6:d6:da:65:be:62:95:59:b2:9b:c1:c4:3b:3e:6e:01:58: 7d:7e:9b:43:c4:7e:d7:a6:ac:d9:8a:f2:15:57:6d:f0:c3:72: 1c:9e:53:fb:d5:f0:f5:10:c8:b9:6e:86:c1:1d:cb:26:05:96: 93:5e:3d:be:d5:3e:53:99:bf:4e:9b:86:a0:0b:4a:73:8b:a8: 9a:fe:64:b8:0c:cc:c5:3c:ff:5c:ef:28:d2:8a:35:c1:b7:82: 8c:73:ba:b0:56:e4:e5:f2:1d:d4:71:22:c4:6f:8f:a9:3e:68: 33:26:f3:0d:82:f8:7e:a7:28:b0:dd:b0:98:82:0d:d6:f3:b6: f2:58:f3:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjUxMDE4MTkwNjQzWhcNMjUxMDI1MTkwNjQzWjAYMRYwFAYD VQQDEw02OGYzZTU0NC03YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyb0VBXlrp+v1u5l7ml5b7yn08WC2bDzZmuY2hejsvtw8J6t/Z6UPFT4LG5a jr6rzDYyYxX89zjgigl871DVy+eDC/9MjGyDSvAr+bVS5r8IPf8ukWjDaqeXsdbm IfJ4+2NuTXqLvm/dD+s5S6xLEs2ha6xNfqVtTD+xihCSM/9u8rQCGeBOwzYMaChe Za6lPjxQqEsYyorqvPcNL4irgp/bk86nXfl5vmQ4Nco6VT28GX/Cyuis8p5fWFv6 Bpyu///DagyXanLp55cUDL60mpuobfucoGeK/fAenPac+QTkQ85in65BtM/nC7sJ rqSqQGUFhibkD+1yxaNrFjoYKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJj6Rx0 4q9KimWLwvkA8rWw7S7AMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR2sTM1Rq2g+Q5Gu1aT3IEXtvLO/NGLkOWZ2k+c3xRLwYpt1wER1ky aJfSHeuCj+42E/cJbCTPS+Jy1Ss6K7V++nfMtiekM5E5lCRGjgSFdKP3nc3wgCkI 3m6t3eSH3+Mg76dDgU82vRivD3UtugGhpe8vI0n2i5XEqplo08xbttbaZb5ilVmy m8HEOz5uAVh9fptDxH7XpqzZivIVV23ww3IcnlP71fD1EMi5bobBHcsmBZaTXj2+ 1T5Tmb9Om4agC0pzi6ia/mS4DMzFPP9c7yjSijXBt4KMc7qwVuTl8h3UcSLEb4+p PmgzJvMNgvh+pyiw3bCYgg3W87byWPNu -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:57 2025 by rpki-client