$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: QL9mZkt5lgdAlDKwizcZR/j1Q3j6G0HsSHxt2cMdCXk= Subject key identifier: 92:D3:0E:95:CC:B3:7B:78:AB:8F:8A:86:90:3C:4A:AA:9D:E0:2D:B9 Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 021C Signing time: Sun 19 Oct 2025 04:29:31 +0000 Manifest this update: Sun 19 Oct 2025 04:29:30 +0000 Manifest next update: Sun 26 Oct 2025 04:29:30 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: TuwSZzdzuw2GeQPxRsXJyqlVPzBWUknOlmhPn2M5z7c=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: ziWoAY2hbvtxePvnZWAtSB5jp5zkw3S8bF9M6H2eX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: Oct 19 04:29:30 2025 GMT Not After : Oct 26 04:29:30 2025 GMT Subject: CN=68f4692b-a04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:c3:02:17:e0:99:f2:47:b1:f6:e1:ab:7e: f4:ed:11:c6:ce:10:bc:62:ba:b2:ed:e3:ce:23:d5: c3:ae:49:33:73:ea:d2:0f:3f:fa:54:8f:d3:58:df: a4:94:2e:b9:b3:82:37:09:78:ad:55:28:cb:17:f8: 86:61:65:5c:0b:0e:08:19:dc:a3:7f:46:42:06:f2: 1f:25:1e:4c:27:63:f1:20:57:4d:48:f7:5f:d2:d8: 33:5a:c9:87:ee:c3:76:34:48:6e:db:98:52:89:2a: 13:c9:81:67:5f:6f:8b:63:33:e8:82:30:1a:e8:c4: 35:eb:e5:74:fe:53:32:d4:0b:82:38:6f:67:4d:b2: 81:ac:49:df:65:51:fb:c8:f1:af:2a:5f:8f:16:6c: eb:ca:87:46:31:44:08:db:f7:8a:0d:1f:29:5d:c5: dc:39:08:93:4a:38:17:c6:90:00:dc:6b:61:88:f8: c9:dc:80:9f:7c:e9:b9:ca:93:7a:01:53:d9:43:3b: c5:52:31:a3:8a:20:e7:60:3e:99:00:63:bd:05:f0: 62:ca:e6:c1:e9:a6:95:78:72:84:e3:e0:98:64:25: b8:8a:ab:c2:cc:82:e6:38:a2:0e:d8:89:3d:ec:fc: 46:6b:ae:67:98:a8:e7:9c:e7:4c:93:9b:73:98:60: 41:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D3:0E:95:CC:B3:7B:78:AB:8F:8A:86:90:3C:4A:AA:9D:E0:2D:B9 X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:97:73:22:10:64:8b:0c:1f:41:90:c2:68:d6:a5:f6:8a:99: b7:04:07:e5:a3:88:0c:7c:d7:66:10:66:e4:c3:b2:cc:2c:fe: 11:16:24:4f:4b:ed:6b:1d:33:52:1f:56:be:5a:95:1a:71:15: d7:4e:10:e5:6c:c2:4b:25:19:95:37:f1:a8:7c:39:ad:f5:2a: 2f:4f:c2:59:44:1a:73:9e:b9:b0:e2:7b:b2:6b:51:49:f7:8d: 58:50:8f:b3:31:90:4e:5f:cf:fa:72:09:46:a6:86:05:22:ea: de:6f:93:0e:13:50:20:68:09:a4:fe:f8:1d:53:91:e5:1e:ee: d4:2f:3c:a2:24:bc:ac:f7:4a:a5:f3:b9:87:99:16:f2:24:1c: 51:57:37:4b:ce:a4:52:99:0b:31:08:68:92:5f:a3:9b:f8:3b: 4e:77:e0:ff:19:c1:35:96:ea:dc:09:61:c7:30:98:67:14:2b: 14:76:88:82:d8:11:21:e4:25:b5:a4:e0:71:7f:11:ac:ea:cc: bf:75:91:e4:e7:55:66:57:cd:e0:80:3e:b2:a8:84:66:76:fa: 98:2d:20:d4:e3:d3:23:a3:b8:7b:65:96:67:ea:8b:50:f6:37: d5:4d:fc:cc:1a:43:56:f2:18:bb:ca:a2:41:87:78:85:37:20: c3:6b:7a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjUxMDE5MDQyOTMwWhcNMjUxMDI2MDQyOTMwWjAYMRYwFAYD VQQDEw02OGY0NjkyYi1hMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyzDAhfgmfJHsfbhq3707RHGzhC8Yrqy7ePOI9XDrkkzc+rSDz/6VI/TWN+k lC65s4I3CXitVSjLF/iGYWVcCw4IGdyjf0ZCBvIfJR5MJ2PxIFdNSPdf0tgzWsmH 7sN2NEhu25hSiSoTyYFnX2+LYzPogjAa6MQ16+V0/lMy1AuCOG9nTbKBrEnfZVH7 yPGvKl+PFmzryodGMUQI2/eKDR8pXcXcOQiTSjgXxpAA3GthiPjJ3ICffOm5ypN6 AVPZQzvFUjGjiiDnYD6ZAGO9BfBiyubB6aaVeHKE4+CYZCW4iqvCzILmOKIO2Ik9 7PxGa65nmKjnnOdMk5tzmGBBkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLTDpXM s3t4q4+KhpA8Sqqd4C25MB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAol3MiEGSLDB9BkMJo1qX2ipm3BAflo4gMfNdmEGbkw7LMLP4RFiRP S+1rHTNSH1a+WpUacRXXThDlbMJLJRmVN/GofDmt9SovT8JZRBpznrmw4nuya1FJ 941YUI+zMZBOX8/6cglGpoYFIureb5MOE1AgaAmk/vgdU5HlHu7ULzyiJLys90ql 87mHmRbyJBxRVzdLzqRSmQsxCGiSX6Ob+DtOd+D/GcE1lurcCWHHMJhnFCsUdoiC 2BEh5CW1pOBxfxGs6sy/dZHk51VmV83ggD6yqIRmdvqYLSDU49Mjo7h7ZZZn6otQ 9jfVTfzMGkNW8hi7yqJBh3iFNyDDa3oT -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:17 2025 by rpki-client