$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: uxxfO4YWSro9o8W0jCauIxE87TZT99931f+coGHdE2U= Subject key identifier: E3:C1:DA:A4:BB:6E:E1:36:7B:0C:D1:42:76:32:14:5D:F6:C1:22:7B Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 34D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 34CD Signing time: Sat 18 Oct 2025 15:21:40 +0000 Manifest this update: Sat 18 Oct 2025 15:21:40 +0000 Manifest next update: Sat 25 Oct 2025 15:21:40 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: SLgNWS0LFcr8UCsgFg/09zy846p1kmzBOkkAFrevOa8=) 2: 504CB1588D3911F093856C71C4F9AE02.roa (hash: Q9ud5C2PueaEyRNijwK1h4U4bisaCbUXdttrkniJbss=) 3: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: owjQd/y0K+1QjQbktYj1tVC3ALtGMr1qBu3Du7tFJyA=) 4: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: J503cZhaiiJSxMHav6qZ788g7bhn3L0xd5BjwqEz4mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13520 (0x34d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Oct 18 15:21:40 2025 GMT Not After : Oct 25 15:21:40 2025 GMT Subject: CN=68f3b084-35a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:0d:f6:67:f1:e8:77:43:3f:00:a5:fb:80: 39:9b:3b:b7:06:22:89:db:20:bb:43:fd:7e:fe:fe: 56:9f:6d:ef:d2:86:a1:85:b2:bb:e4:18:9d:98:e0: 79:bd:f6:ff:2f:95:87:a7:b3:75:68:bd:e3:c6:41: b6:bc:a0:52:72:4f:c6:1c:14:12:86:85:93:2c:96: dc:af:30:f3:b0:cc:dd:39:85:f6:6c:a7:ba:30:65: de:41:a2:e1:9a:a7:48:45:1c:a2:4b:e9:54:f2:05: 39:3f:0c:51:e9:3c:a0:ec:df:41:01:20:24:e6:ca: eb:b6:ba:61:d5:18:a7:e7:f0:fd:0a:af:6f:42:9c: 32:86:af:de:71:09:e6:2f:1f:70:7c:db:fa:32:41: 53:3e:0f:b8:f8:11:00:7e:62:2e:61:0b:67:d5:99: eb:6e:4a:d4:15:82:43:86:17:27:ad:40:cf:6e:83: 64:77:0e:29:a7:27:1f:f5:6b:9f:a1:f8:4e:dc:c9: 5c:25:35:69:27:ea:5b:84:a1:60:f6:c1:ed:fc:3b: 1b:43:db:3c:4a:40:62:a0:c7:c0:f0:38:59:f9:e3: 89:7d:92:0e:15:e9:53:ed:c0:07:d4:cf:c2:27:f0: 1b:60:91:1d:c2:37:3c:79:b3:64:d7:19:06:e3:8c: 89:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C1:DA:A4:BB:6E:E1:36:7B:0C:D1:42:76:32:14:5D:F6:C1:22:7B X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ee:9d:88:93:97:d3:6c:2a:9c:e4:82:16:2d:cc:60:b3:5b: 4c:f1:bf:f3:2a:de:75:0c:aa:8e:74:88:e8:3b:37:1f:84:ed: fa:71:85:9b:b4:1d:2d:22:3c:fe:47:a8:3d:b1:0d:8c:39:c6: 1d:cd:94:70:5d:b4:ed:80:9b:df:23:82:39:0c:54:2b:2c:b6: cf:54:c8:a4:c0:4d:f8:ea:59:25:28:d6:41:03:31:17:ba:ab: 4a:ae:72:98:c0:ca:c9:0e:fd:93:33:12:2a:75:40:28:53:92: 72:b8:7a:e4:f8:08:94:48:03:18:3b:b4:00:a6:6b:7e:58:6c: 15:08:a6:d5:df:28:1c:ff:dc:be:97:0c:88:f5:3a:5d:f6:5e: 32:cb:e9:dd:b3:66:cd:8f:df:cc:16:2e:ee:f5:a6:b0:66:e4: f6:d6:ae:5f:d6:ea:47:91:cd:8f:c8:c3:06:4e:d6:04:44:08: 2f:dc:1c:c8:a4:3d:19:ce:53:a2:ce:6d:f9:bb:93:17:07:cc: 99:2c:a3:84:37:05:5c:81:ec:63:d1:16:00:af:a7:29:86:7a: 34:b6:67:c0:51:d9:a4:f2:83:40:c8:0d:24:bc:84:09:15:cd: e3:3a:79:85:e0:5c:0a:b4:8c:34:cd:b3:e5:22:12:3f:2b:d6: 39:af:03:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjUxMDE4MTUyMTQwWhcNMjUxMDI1MTUyMTQwWjAYMRYwFAYD VQQDEw02OGYzYjA4NC0zNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDkN9mfx6HdDPwCl+4A5mzu3BiKJ2yC7Q/1+/v5Wn23v0oahhbK75BidmOB5 vfb/L5WHp7N1aL3jxkG2vKBSck/GHBQShoWTLJbcrzDzsMzdOYX2bKe6MGXeQaLh mqdIRRyiS+lU8gU5PwxR6Tyg7N9BASAk5srrtrph1Rin5/D9Cq9vQpwyhq/ecQnm Lx9wfNv6MkFTPg+4+BEAfmIuYQtn1ZnrbkrUFYJDhhcnrUDPboNkdw4ppycf9Wuf ofhO3MlcJTVpJ+pbhKFg9sHt/DsbQ9s8SkBioMfA8DhZ+eOJfZIOFelT7cAH1M/C J/AbYJEdwjc8ebNk1xkG44yJ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPB2qS7 buE2ewzRQnYyFF32wSJ7MB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl7p2Ik5fTbCqc5IIWLcxgs1tM8b/zKt51DKqOdIjoOzcfhO36cYWb tB0tIjz+R6g9sQ2MOcYdzZRwXbTtgJvfI4I5DFQrLLbPVMikwE346lklKNZBAzEX uqtKrnKYwMrJDv2TMxIqdUAoU5JyuHrk+AiUSAMYO7QApmt+WGwVCKbV3ygc/9y+ lwyI9Tpd9l4yy+nds2bNj9/MFi7u9aawZuT21q5f1upHkc2PyMMGTtYERAgv3BzI pD0ZzlOizm35u5MXB8yZLKOENwVcgexj0RYAr6cphno0tmfAUdmk8oNAyA0kvIQJ Fc3jOnmF4FwKtIw0zbPlIhI/K9Y5rwOG -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:09 2025 by rpki-client