$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json) Hash identifier: cGXFeTIHMg2BkKU3w8njTz18yfQsqN2pL+4VkfaPtvg= Subject key identifier: F0:26:F2:33:72:89:BA:5E:D4:13:78:6F:29:C3:86:97:A1:6B:60:1B Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Certificate serial: 0719 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft Manifest number: 0719 Signing time: Sat 18 Oct 2025 23:11:38 +0000 Manifest this update: Sat 18 Oct 2025 23:11:37 +0000 Manifest next update: Sat 25 Oct 2025 23:11:37 +0000 Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: hzGOFDdxMum0TMBAD9w4EUZrsC23mMft1T8axphCFBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1817 (0x719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Validity Not Before: Oct 18 23:11:37 2025 GMT Not After : Oct 25 23:11:37 2025 GMT Subject: CN=68f41ea9-348e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:4f:49:f3:40:6f:db:09:8c:ca:bb:6c:36: 6d:06:ca:49:f6:0a:90:bc:3b:dd:08:30:f6:2e:9c: 26:d5:87:c4:e3:92:6e:72:2f:dd:4e:c5:a1:12:22: 10:fa:5e:c3:25:e3:1f:e5:95:f2:3a:ae:89:f3:61: c0:b9:55:d9:19:a0:9d:6e:84:83:7f:97:4c:56:ca: c2:79:d9:cb:57:12:f1:84:b5:0b:d9:98:08:3a:9d: 03:f3:4f:b1:a5:f7:5d:b2:08:91:9d:73:3c:36:25: 54:62:0e:86:20:6f:e9:39:f9:0a:04:41:98:4d:c0: 26:b4:8a:22:d6:c6:22:22:ec:73:4d:c7:ee:69:ad: f8:72:57:78:45:2b:27:dc:22:c8:ed:e3:72:71:e6: 99:5d:33:22:ac:1b:f5:1c:9c:c3:14:82:02:0a:9b: f2:74:d9:14:f7:b2:04:b8:ac:3a:26:6d:d8:eb:9c: d2:bf:50:1f:59:20:2b:c8:20:e5:5c:68:0a:d3:27: fd:75:a0:4c:b5:66:db:1f:a9:ff:b1:95:8f:32:cd: c1:d3:bd:f4:a1:65:f9:dd:94:fc:19:e3:43:a3:9e: 5b:4d:61:eb:66:d7:ef:ac:4e:5c:c3:3c:6e:e1:1a: 55:a1:30:44:49:f5:ad:e4:86:6d:03:bf:57:90:9a: 82:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:26:F2:33:72:89:BA:5E:D4:13:78:6F:29:C3:86:97:A1:6B:60:1B X509v3 Authority Key Identifier: keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:34:09:6d:01:3f:40:e6:72:16:7b:26:e2:01:8e:65:93:8c: 73:0e:1c:90:15:38:29:4b:c9:c8:aa:87:0c:0a:0c:73:a6:b9: 44:d6:91:06:a5:b9:99:ae:80:2e:15:de:78:71:0e:01:1d:74: 71:1e:ee:99:9b:c7:e1:2b:ae:5c:09:b8:99:20:c2:fd:15:70: 72:1f:16:96:16:b8:04:0c:e8:21:c6:d0:d6:62:c7:b0:28:58: e0:00:0c:73:be:0d:26:94:c9:d5:f5:24:6f:8b:83:b4:59:af: 3e:7c:6a:41:4e:66:f8:60:bd:68:df:71:7f:71:df:8b:58:40: a8:2d:61:39:8b:86:a1:6a:e2:c2:1d:f3:da:12:8a:95:5a:ef: 91:b7:3a:e5:6a:b3:80:91:4a:58:d9:7a:8e:94:1c:bf:80:92: e5:75:78:39:41:f9:73:20:dc:e1:8b:9c:14:98:25:fb:4e:fb: 0b:28:0f:4d:62:90:b5:b6:fa:1c:d7:ef:70:a2:7a:08:48:51: 3a:1b:24:74:a3:6f:58:fc:95:b8:d9:40:10:fc:2c:61:4a:66: 75:f4:6c:a9:9c:2a:a0:fb:13:2c:a4:b1:e9:2a:2e:2c:7d:08: 0e:4c:e6:ee:58:81:8c:83:0a:ff:f8:70:51:6e:e4:28:93:cc: 8f:83:7f:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNGOUUxMTAvBgNVBAUTKDVDMkM1ODI3QzRFODk5QkMyQTUwMzQwNkM1Q0IwOUIx OEUxMzNGQzYwHhcNMjUxMDE4MjMxMTM3WhcNMjUxMDI1MjMxMTM3WjAYMRYwFAYD VQQDEw02OGY0MWVhOS0zNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVFPSfNAb9sJjMq7bDZtBspJ9gqQvDvdCDD2Lpwm1YfE45Juci/dTsWhEiIQ +l7DJeMf5ZXyOq6J82HAuVXZGaCdboSDf5dMVsrCednLVxLxhLUL2ZgIOp0D80+x pfddsgiRnXM8NiVUYg6GIG/pOfkKBEGYTcAmtIoi1sYiIuxzTcfuaa34cld4RSsn 3CLI7eNyceaZXTMirBv1HJzDFIICCpvydNkU97IEuKw6Jm3Y65zSv1AfWSAryCDl XGgK0yf9daBMtWbbH6n/sZWPMs3B0730oWX53ZT8GeNDo55bTWHrZtfvrE5cwzxu 4RpVoTBESfWt5IZtA79XkJqCFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAm8jNy ibpe1BN4bynDhpeha2AbMB8GA1UdIwQYMBaAFFwsWCfE6Jm8KlA0BsXLCbGOEz/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Y5RS8wMEQ4Qzg4QzUz QUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21id3FVRFFHeGNzSnNZNFRQ OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDeFlKOFRvbWJ3cVVEUUd4Y3NKc1k0VFA4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5RS8wMEQ4Qzg4QzUzQUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21i d3FVRFFHeGNzSnNZNFRQOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDNAltAT9A5nIWeybiAY5lk4xzDhyQFTgpS8nIqocMCgxzprlE1pEG pbmZroAuFd54cQ4BHXRxHu6Zm8fhK65cCbiZIML9FXByHxaWFrgEDOghxtDWYsew KFjgAAxzvg0mlMnV9SRvi4O0Wa8+fGpBTmb4YL1o33F/cd+LWECoLWE5i4ahauLC HfPaEoqVWu+RtzrlarOAkUpY2XqOlBy/gJLldXg5QflzINzhi5wUmCX7TvsLKA9N YpC1tvoc1+9wonoISFE6GyR0o29Y/JW42UAQ/CxhSmZ19GypnCqg+xMspLHpKi4s fQgOTObuWIGMgwr/+HBRbuQok8yPg3/V -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:47 2025 by rpki-client