$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json) Hash identifier: Gd66fhwKxQdO586skWeGGol0k0RSTYSAQG7dx5fYaqI= Subject key identifier: 58:4F:1B:DA:7B:54:6D:6C:15:77:AC:C7:9E:B4:86:B3:67:33:02:CD Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Certificate serial: 12FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft Manifest number: 12FA Signing time: Mon 20 Oct 2025 17:26:47 +0000 Manifest this update: Mon 20 Oct 2025 17:26:47 +0000 Manifest next update: Mon 27 Oct 2025 17:26:47 +0000 Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: LeKCc/SxTjpbWK2X5xLE4uJA7X2DOAkZAX/+Cwidml8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4860 (0x12fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Validity Not Before: Oct 20 17:26:47 2025 GMT Not After : Oct 27 17:26:47 2025 GMT Subject: CN=68f670d7-d864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d6:85:4f:f9:6f:1d:b9:f2:c3:e0:ec:f0:73: 7b:fb:53:03:63:c3:6f:0d:4c:4f:e2:e0:c6:1b:17: 82:9d:31:ee:57:dc:5c:d9:f4:e2:72:90:54:4b:a1: eb:96:f4:4b:ec:9a:ec:06:7e:d9:fe:8b:d0:37:ec: 3a:29:63:ed:0a:f8:d2:20:53:03:d7:6c:78:53:c7: 91:c6:3a:c2:df:10:f4:62:4f:af:27:d6:af:ea:13: f7:c5:8d:4e:f7:00:ff:6f:75:9a:9d:d6:85:64:10: 73:59:c8:fc:57:1f:3d:a5:9a:22:5b:58:dc:f0:28: 5f:e7:bd:55:75:80:78:ce:67:d7:4e:d7:da:04:e0: 5c:2a:ff:7b:cb:94:b2:82:0d:0f:9e:e0:54:af:9f: 43:18:04:90:32:0c:47:74:bb:28:6b:6f:e9:33:b7: d8:46:af:2f:a3:d0:f4:a4:22:ca:87:71:8e:87:77: b4:97:eb:9d:d8:48:7e:59:6a:d2:02:81:b0:19:01: 1c:40:9e:4a:d6:00:d4:fc:99:c1:f9:8c:32:8f:54: b4:68:2d:e3:93:49:1f:28:ff:e6:f2:74:5d:ab:9c: be:fb:98:18:a1:93:1f:d7:b7:8b:de:cd:9d:cd:66: a0:8e:cb:df:69:bd:a3:1f:0a:87:6b:8e:03:c7:f9: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4F:1B:DA:7B:54:6D:6C:15:77:AC:C7:9E:B4:86:B3:67:33:02:CD X509v3 Authority Key Identifier: keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:85:7f:9c:fc:fe:8b:34:a7:d0:27:3b:d2:3b:1c:1f:75:e8: a7:bb:26:9e:12:29:5e:f3:41:1c:0c:1a:20:0f:2f:46:66:87: bd:9f:80:0f:02:03:04:d5:30:f0:5d:e8:7b:40:a4:1e:49:83: e4:a0:95:15:80:13:2c:a1:42:0f:2a:6f:42:c0:3c:ee:3d:37: dc:94:84:5d:58:af:52:e3:29:cb:f6:ed:f1:5d:85:0c:06:27: 26:4f:a3:b4:d9:7c:63:f9:c9:f6:74:fd:0b:7b:ad:e3:e0:11: c6:9f:77:71:c3:78:98:18:b2:48:a5:49:78:ed:fb:52:7d:8f: 42:aa:2f:ac:8e:0c:f1:0a:2a:fa:f5:88:d6:43:08:97:05:fb: a4:f6:1d:1c:3e:79:e5:41:6b:93:c3:22:ba:98:04:71:a7:56: 78:8a:9c:62:92:e9:12:e3:53:50:2b:52:b9:80:59:47:f6:16: b3:4f:3a:2d:e4:2f:c1:73:fc:6a:4c:e5:24:28:e2:f2:61:03: 72:2f:87:62:b5:6c:3d:6c:44:ed:05:a9:46:12:4a:01:e7:59: b4:6b:52:fd:74:38:e4:83:2a:68:19:40:18:11:f5:d8:02:8e: 27:34:f8:f2:3e:74:81:39:db:f6:ae:42:50:ff:75:36:a9:67: 88:08:2d:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy RjdDREZBRUQwHhcNMjUxMDIwMTcyNjQ3WhcNMjUxMDI3MTcyNjQ3WjAYMRYwFAYD VQQDEw02OGY2NzBkNy1kODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NaFT/lvHbnyw+Ds8HN7+1MDY8NvDUxP4uDGGxeCnTHuV9xc2fTicpBUS6Hr lvRL7JrsBn7Z/ovQN+w6KWPtCvjSIFMD12x4U8eRxjrC3xD0Yk+vJ9av6hP3xY1O 9wD/b3WandaFZBBzWcj8Vx89pZoiW1jc8Chf571VdYB4zmfXTtfaBOBcKv97y5Sy gg0PnuBUr59DGASQMgxHdLsoa2/pM7fYRq8vo9D0pCLKh3GOh3e0l+ud2Eh+WWrS AoGwGQEcQJ5K1gDU/JnB+Ywyj1S0aC3jk0kfKP/m8nRdq5y++5gYoZMf17eL3s2d zWagjsvfab2jHwqHa44Dx/l3iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhPG9p7 VG1sFXesx560hrNnMwLNMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly RG5PUXN3endwV0l2Zk4tdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGhX+c/P6LNKfQJzvSOxwfdeinuyaeEile80EcDBogDy9GZoe9n4AP AgME1TDwXeh7QKQeSYPkoJUVgBMsoUIPKm9CwDzuPTfclIRdWK9S4ynL9u3xXYUM BicmT6O02Xxj+cn2dP0Le63j4BHGn3dxw3iYGLJIpUl47ftSfY9Cqi+sjgzxCir6 9YjWQwiXBfuk9h0cPnnlQWuTwyK6mARxp1Z4ipxikukS41NQK1K5gFlH9hazTzot 5C/Bc/xqTOUkKOLyYQNyL4ditWw9bETtBalGEkoB51m0a1L9dDjkgypoGUAYEfXY Ao4nNPjyPnSBOdv2rkJQ/3U2qWeICC1w -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:56 2025 by rpki-client