$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft File: b0XbXSi7uaZT-C0c94J6WYN2RfM.mft (raw, json) Hash identifier: wdCjQfClRQ9GXhRflpNHrhZlf2oCFJdHtjeRWNcBqbA= Subject key identifier: 0B:23:A4:AE:DB:DE:F6:76:B1:59:2F:EA:3E:B0:FB:55:56:3D:13:14 Authority key identifier: 6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3 Certificate issuer: /CN=A9159309/serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft Manifest number: 33 Signing time: Sun 19 Oct 2025 11:06:38 +0000 Manifest this update: Sun 19 Oct 2025 11:06:36 +0000 Manifest next update: Sun 26 Oct 2025 11:06:36 +0000 Files and hashes: 1: b0XbXSi7uaZT-C0c94J6WYN2RfM.crl (hash: 3wSZ8tM78Hx23DMRQF9Xo5pruZaYfFQ1wsYhaV+J7nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3 Validity Not Before: Oct 19 11:06:36 2025 GMT Not After : Oct 26 11:06:36 2025 GMT Subject: CN=68f4c63d-8b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:68:4e:96:f3:e8:cb:fd:91:5b:de:89:c4: bb:16:f3:e0:1d:68:44:95:aa:ad:46:60:72:ec:64: f5:03:75:40:be:0b:d6:d0:c0:96:ac:ac:45:17:70: a4:f5:7d:e6:ce:61:a3:66:5c:41:04:92:b3:cd:0e: 12:df:ff:74:67:73:c1:cf:3e:f8:6b:cd:a9:b3:d6: 82:c9:b9:23:8d:a1:f9:ff:5a:dd:df:8a:9e:f1:1c: 7e:2f:0e:90:7d:05:a0:29:63:86:27:b5:62:a5:39: 74:76:a7:3b:17:5b:75:82:71:d8:a5:78:06:46:9d: 77:c0:6c:ae:bd:e4:52:df:95:f7:92:68:32:1d:16: f3:4d:61:40:09:c6:8d:01:11:82:8b:7c:ae:5e:74: 9e:dc:a1:91:df:86:e8:dd:b3:b0:81:7a:b3:9a:aa: 10:ae:75:0c:9f:02:5f:00:1b:2a:23:f4:02:65:07: 77:2d:95:5f:11:e8:2f:40:e0:b0:f0:e5:fe:bc:39: 4f:c7:66:42:3a:62:5c:9e:84:97:1f:cd:20:41:b0: 4c:b1:c0:36:c1:ea:9b:82:6f:a7:a9:0a:f5:1c:98: aa:25:10:15:54:bd:02:0b:5f:42:78:c3:08:fc:b6: 0f:14:ef:37:ae:fa:1e:79:24:6a:e2:60:10:48:e8: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:23:A4:AE:DB:DE:F6:76:B1:59:2F:EA:3E:B0:FB:55:56:3D:13:14 X509v3 Authority Key Identifier: keyid:6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:8c:1d:7a:f7:74:ca:13:58:a7:c6:58:86:0c:ab:2f:69:58: f6:52:ac:c2:4d:03:81:8a:dc:42:ba:1d:44:45:d4:d7:fb:47: 01:e8:a2:52:ee:6c:8c:7d:76:c0:07:4e:1a:b8:78:87:3c:50: c3:30:33:0b:41:07:ca:81:50:e8:ab:a1:33:00:2c:69:54:00: 00:a4:08:1c:06:98:a6:04:b8:b4:3b:b0:97:94:a2:b3:6b:f9: f1:96:98:3e:5f:ef:da:2c:b1:f8:a4:6b:bf:36:3b:71:9c:8a: 52:e3:4e:04:80:9d:4d:ec:31:18:59:a9:ae:dc:54:4d:20:98: 93:8c:ef:79:46:8c:47:78:02:03:3e:f0:58:e9:2d:5d:d7:11: 93:50:f7:ec:b3:7a:58:71:60:01:65:20:ef:bf:4b:cc:3c:65: 7c:0c:aa:c6:b4:5f:bb:bd:f2:df:b9:cc:4a:cc:33:57:bf:df: 51:e6:08:40:fc:0e:32:fa:11:32:37:f7:7a:0a:d3:d5:b3:c4: 4d:50:d9:1d:5e:e8:7f:5d:72:27:1f:ec:8d:2b:d0:84:75:6e: 36:f0:87:c5:db:be:ba:34:5a:f2:b2:4e:b9:ed:83:c0:a2:b3: b8:e9:a6:80:37:ae:b9:d0:35:3e:7c:63:cd:73:7b:1d:e7:24: 00:6b:df:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTMwOTExMC8GA1UEBRMoNkY0NURCNUQyOEJCQjlBNjUzRjgyRDFDRjc4MjdBNTk4 Mzc2NDVGMzAeFw0yNTEwMTkxMTA2MzZaFw0yNTEwMjYxMTA2MzZaMBgxFjAUBgNV BAMTDTY4ZjRjNjNkLThiNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwlmhOlvPoy/2RW96JxLsW8+AdaESVqq1GYHLsZPUDdUC+C9bQwJasrEUXcKT1 febOYaNmXEEEkrPNDhLf/3Rnc8HPPvhrzamz1oLJuSONofn/Wt3fip7xHH4vDpB9 BaApY4YntWKlOXR2pzsXW3WCcdileAZGnXfAbK695FLflfeSaDIdFvNNYUAJxo0B EYKLfK5edJ7coZHfhujds7CBerOaqhCudQyfAl8AGyoj9AJlB3ctlV8R6C9A4LDw 5f68OU/HZkI6YlyehJcfzSBBsEyxwDbB6puCb6epCvUcmKolEBVUvQILX0J4wwj8 tg8U7zeu+h55JGriYBBI6DWTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCyOkrtve 9naxWS/qPrD7VVY9ExQwHwYDVR0jBBgwFoAUb0XbXSi7uaZT+C0c94J6WYN2RfMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5L0EyN0I4QkZDNjEz RDExRjBCMDM2QjgzNkM0RjlBRTAyL2IwWGJYU2k3dWFaVC1DMGM5NEo2V1lOMlJm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjBYYlhTaTd1YVpULUMwYzk0SjZXWU4yUmZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 MzA5L0EyN0I4QkZDNjEzRDExRjBCMDM2QjgzNkM0RjlBRTAyL2IwWGJYU2k3dWFa VC1DMGM5NEo2V1lOMlJmTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMmMHXr3dMoTWKfGWIYMqy9pWPZSrMJNA4GK3EK6HURF1Nf7RwHoolLu bIx9dsAHThq4eIc8UMMwMwtBB8qBUOiroTMALGlUAACkCBwGmKYEuLQ7sJeUorNr +fGWmD5f79ossfika782O3GcilLjTgSAnU3sMRhZqa7cVE0gmJOM73lGjEd4AgM+ 8FjpLV3XEZNQ9+yzelhxYAFlIO+/S8w8ZXwMqsa0X7u98t+5zErMM1e/31HmCED8 DjL6ETI393oK09WzxE1Q2R1e6H9dcicf7I0r0IR1bjbwh8Xbvro0WvKyTrntg8Ci s7jppoA3rrnQNT58Y81zex3nJABr39s= -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:06 2025 by rpki-client