$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft File: xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft (raw, json) Hash identifier: E/X4A/teC3vjv331GNuBRKDJtmFRA0rM+Ruu7hyhJQk= Subject key identifier: 00:3B:13:FF:12:08:49:A1:A3:A1:A8:2C:46:20:18:8E:01:5C:94:3D Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft Manifest number: 0685 Signing time: Sat 18 Oct 2025 23:54:59 +0000 Manifest this update: Sat 18 Oct 2025 23:54:58 +0000 Manifest next update: Sat 25 Oct 2025 23:54:58 +0000 Files and hashes: 1: xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl (hash: qCPAgEIsxETxop/pRrMGH408wJrTAz1q2jdLwHBzafk=) 2: 807CB298903A11EBA9783756C4F9AE02.roa (hash: HcRkeL0L46StqN8XUYCiDhZBU5a1szFT/RluEKL79UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Validity Not Before: Oct 18 23:54:58 2025 GMT Not After : Oct 25 23:54:58 2025 GMT Subject: CN=68f428d3-0576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:41:b5:17:1c:e4:7a:ac:8b:54:d9:54:21:9a: b2:b3:10:16:4b:9d:77:e4:24:9f:7b:9b:d9:c7:5d: 20:14:a5:5c:55:4c:55:b9:4d:a5:fe:7a:f6:e9:da: 55:d9:9d:79:e1:a4:39:32:b9:ce:86:da:69:b8:b6: d9:3e:fd:c4:17:06:1f:a3:73:ef:cf:92:99:7a:7c: 37:60:d0:34:56:5d:79:63:20:e7:4c:64:56:a9:6e: c0:1b:43:6d:f7:ed:d7:5c:f7:29:f7:37:d5:56:e2: 16:70:a4:76:02:15:61:be:19:2c:17:aa:59:ec:b6: 85:8c:4b:00:f8:9b:2a:7c:a1:ef:7f:85:1f:02:70: 70:7c:03:c3:66:9d:23:0e:40:19:c6:a5:2b:94:15: 9b:41:e6:c8:1c:01:26:f5:e6:2f:f3:1a:2d:40:ef: e5:d8:8a:3b:11:6c:3e:97:be:af:3b:f6:fc:5b:45: 62:91:97:aa:62:bf:67:d4:b9:ce:cb:fa:f1:48:cd: cf:c9:00:e5:a0:fb:45:2b:fd:f8:51:a3:ab:67:f0: f8:48:c6:33:7a:a2:de:59:0d:a9:7e:9a:12:4c:8e: 1c:e4:8e:d1:3a:66:24:cb:73:92:50:b1:97:31:29: 15:3d:3d:69:ac:13:e1:54:bd:8c:45:e7:4f:6b:f4: 1e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:13:FF:12:08:49:A1:A3:A1:A8:2C:46:20:18:8E:01:5C:94:3D X509v3 Authority Key Identifier: keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9a:c9:d4:00:b0:71:51:1a:8b:6c:8f:70:24:9c:f9:75:52: 11:ae:cc:a3:da:3d:fe:e8:ed:ab:15:ff:cc:63:7f:14:50:b2: 22:9c:81:8f:2b:bf:4e:29:af:e5:a9:ec:d2:df:8d:48:6c:b5: 68:cb:53:52:0b:cd:30:2b:0c:a7:91:9f:80:b2:11:99:5c:b2: b8:b7:95:91:d6:82:a5:20:a5:70:af:e5:f0:7d:96:cf:e8:13: 80:6d:51:15:68:f9:7f:e5:ce:48:b9:b8:8c:f7:cd:04:17:14: 8b:ec:e4:7a:36:6c:96:57:de:4e:34:71:46:2d:53:47:42:94: 58:38:b1:ba:d0:f3:9d:c1:f4:f5:e8:9a:6c:de:37:a6:33:c7: 83:1c:fe:a4:98:19:3b:6b:39:23:da:77:72:db:c6:50:2e:8b: 66:78:ba:a0:bb:b6:84:d9:25:dd:d0:fd:23:08:7a:6b:39:d0: 83:11:50:c8:15:dd:ab:bd:9f:2e:aa:63:bd:81:d1:75:6e:9a: b4:4d:fb:68:11:bf:4c:a8:cd:27:ce:67:76:20:e9:a2:e8:dc: f2:7c:04:30:1a:5f:9e:ee:58:87:63:c6:35:dd:4b:bb:a2:06: f1:58:68:7d:9a:22:43:99:fa:f9:30:23:ea:c4:af:8e:d1:b1: a0:a5:a8:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNjYxMTAvBgNVBAUTKEM0NTVCMDg2QkFCODY0N0NEMjUxMENBODMyNDFFNzAw MTRDRDhBNDQwHhcNMjUxMDE4MjM1NDU4WhcNMjUxMDI1MjM1NDU4WjAYMRYwFAYD VQQDEw02OGY0MjhkMy0wNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kG1FxzkeqyLVNlUIZqysxAWS5135CSfe5vZx10gFKVcVUxVuU2l/nr26dpV 2Z154aQ5MrnOhtppuLbZPv3EFwYfo3Pvz5KZenw3YNA0Vl15YyDnTGRWqW7AG0Nt 9+3XXPcp9zfVVuIWcKR2AhVhvhksF6pZ7LaFjEsA+JsqfKHvf4UfAnBwfAPDZp0j DkAZxqUrlBWbQebIHAEm9eYv8xotQO/l2Io7EWw+l76vO/b8W0VikZeqYr9n1LnO y/rxSM3PyQDloPtFK/34UaOrZ/D4SMYzeqLeWQ2pfpoSTI4c5I7ROmYky3OSULGX MSkVPT1prBPhVL2MRedPa/QekQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAA7E/8S CEmho6GoLEYgGI4BXJQ9MB8GA1UdIwQYMBaAFMRVsIa6uGR80lEMqDJB5wAUzYpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I2Ni9FNUM0RDMyNjkw MzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpIelNVUXlvTWtIbkFCVE5p a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hGV3docnE0Wkh6U1VReW9Na0huQUJUTmlrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I2Ni9FNUM0RDMyNjkwMzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpI elNVUXlvTWtIbkFCVE5pa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnmsnUALBxURqLbI9wJJz5dVIRrsyj2j3+6O2rFf/MY38UULIinIGP K79OKa/lqezS341IbLVoy1NSC80wKwynkZ+AshGZXLK4t5WR1oKlIKVwr+XwfZbP 6BOAbVEVaPl/5c5IubiM980EFxSL7OR6NmyWV95ONHFGLVNHQpRYOLG60POdwfT1 6Jps3jemM8eDHP6kmBk7azkj2ndy28ZQLotmeLqgu7aE2SXd0P0jCHprOdCDEVDI Fd2rvZ8uqmO9gdF1bpq0TftoEb9MqM0nzmd2IOmi6NzyfAQwGl+e7liHY8Y13Uu7 ogbxWGh9miJDmfr5MCPqxK+O0bGgpahE -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:24 2025 by rpki-client