$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft File: XoJBeVOzWp-LWaQuyUb00CTYd2s.mft (raw, json) Hash identifier: /6B+6Bdrs/Jxxop9VfToAgSoEEkt5gE+2RPM00bSCdQ= Subject key identifier: 49:CB:72:7E:3A:69:69:E2:8E:CF:E5:F2:A0:9B:1A:DC:B6:C1:88:F8 Authority key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B Certificate issuer: /CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft Manifest number: 068B Signing time: Sat 18 Oct 2025 23:54:09 +0000 Manifest this update: Sat 18 Oct 2025 23:54:09 +0000 Manifest next update: Sat 25 Oct 2025 23:54:09 +0000 Files and hashes: 1: XoJBeVOzWp-LWaQuyUb00CTYd2s.crl (hash: TVR1noxRph4+tv3zL7kdKbJP9BMqBuvZg+68JzOSH6g=) 2: 9378220A8DF211EBADEDD212C4F9AE02.roa (hash: VBf2KoYNobofH3/9baJ/IEUrVzYCh2sv0jk4TufySgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2F1, serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Validity Not Before: Oct 18 23:54:09 2025 GMT Not After : Oct 25 23:54:09 2025 GMT Subject: CN=68f428a1-e224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:39:1f:69:00:ce:d8:05:21:ea:ff:90:0e: 5c:6b:4f:9a:bc:a9:de:b2:76:3f:06:59:fc:14:29: 5f:1e:0b:36:81:23:b0:66:2c:67:7f:b4:83:1e:8d: b9:ff:6e:c8:5c:67:4c:69:e7:ed:25:01:4c:91:98: 6a:d7:d7:da:4b:79:ae:e8:a4:6d:d2:64:83:d7:34: c5:58:c2:fb:90:b4:87:b3:d8:2b:af:21:d7:2c:80: 9c:3d:5a:33:be:bf:1a:e0:a8:ee:52:59:61:e5:92: 99:bb:f1:c8:23:83:d4:d6:9e:be:83:da:95:41:dc: 4b:3f:56:61:e6:f0:9f:b9:2c:d4:3b:7a:6f:78:83: 41:dd:99:ed:ed:66:e9:29:a1:23:d0:c1:85:c3:8f: 4f:4a:a1:ae:c2:58:c9:87:9b:1d:b4:a3:7e:7e:d5: 05:4d:68:dc:1c:cb:b5:55:02:5c:d9:ec:60:29:0d: ab:2f:9e:d0:a9:d2:a5:c4:4d:67:fb:83:d6:25:bf: 76:da:a5:e8:7c:b2:3f:ba:5c:de:77:c9:fe:9b:af: 95:2b:07:21:de:0d:f0:62:03:aa:d7:b9:ee:e7:95: 6c:b4:dc:d6:13:e4:43:0b:bd:8a:b9:a0:92:5a:ed: b8:83:a5:74:81:32:cc:05:3f:95:6b:49:05:99:4d: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CB:72:7E:3A:69:69:E2:8E:CF:E5:F2:A0:9B:1A:DC:B6:C1:88:F8 X509v3 Authority Key Identifier: keyid:5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3e:e6:19:ea:33:6e:e9:63:45:4a:fc:ad:88:62:cc:1f:fd: 1d:d8:17:05:5d:dd:6a:e5:49:4c:a2:c5:83:cb:af:04:8c:ca: 72:ee:ea:2a:a1:a2:fd:92:ef:21:35:5b:ba:fd:30:87:65:25: f8:6c:3f:66:0e:f0:c3:c2:6d:98:6f:a0:66:9d:6f:fd:ba:01: a6:e5:da:22:18:af:05:ff:28:7d:82:c6:e4:fc:ce:71:88:0c: d4:08:36:5a:73:77:ea:11:3e:c0:9b:15:23:cb:99:68:8b:7a: 4d:e0:3a:ce:71:65:04:08:c9:51:54:ba:d4:eb:03:7c:78:35: 52:c1:8c:ae:21:83:4f:2c:9a:98:f3:d4:6c:85:d5:c5:62:d7: a5:88:46:a8:e2:07:5f:eb:b8:32:12:57:2b:48:94:81:fe:43: a5:f7:af:c6:32:38:2b:c7:ed:49:4f:b8:2b:d2:e5:ee:1f:ea: e5:5b:2a:c6:68:66:0d:41:b0:e3:fe:42:e5:cf:9f:ba:21:6c: ac:46:32:51:ff:da:dd:b0:4f:4d:4d:0b:81:7b:c5:40:ad:5d: 5f:28:07:b5:a8:30:3e:35:b2:22:8e:fe:97:5f:cc:61:15:f5: fe:c6:18:f4:cc:b0:b8:80:9a:ff:c1:bd:8b:ae:74:96:cb:97: cd:8a:98:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRjExMTAvBgNVBAUTKDVFODI0MTc5NTNCMzVBOUY4QjU5QTQyRUM5NDZGNEQw MjREODc3NkIwHhcNMjUxMDE4MjM1NDA5WhcNMjUxMDI1MjM1NDA5WjAYMRYwFAYD VQQDEw02OGY0MjhhMS1lMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF85H2kAztgFIer/kA5ca0+avKnesnY/Bln8FClfHgs2gSOwZixnf7SDHo25 /27IXGdMaeftJQFMkZhq19faS3mu6KRt0mSD1zTFWML7kLSHs9grryHXLICcPVoz vr8a4KjuUllh5ZKZu/HII4PU1p6+g9qVQdxLP1Zh5vCfuSzUO3pveINB3Znt7Wbp KaEj0MGFw49PSqGuwljJh5sdtKN+ftUFTWjcHMu1VQJc2exgKQ2rL57QqdKlxE1n +4PWJb922qXofLI/ulzed8n+m6+VKwch3g3wYgOq17nu55VstNzWE+RDC72KuaCS Wu24g6V0gTLMBT+Va0kFmU2c6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnLcn46 aWnijs/l8qCbGty2wYj4MB8GA1UdIwQYMBaAFF6CQXlTs1qfi1mkLslG9NAk2Hdr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJGMS8yNjAwN0ZCNjhE RjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldwLUxXYVF1eVViMDBDVFlk MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvSkJlVk96V3AtTFdhUXV5VWIwMENUWWQycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjJGMS8yNjAwN0ZCNjhERjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldw LUxXYVF1eVViMDBDVFlkMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATPuYZ6jNu6WNFSvytiGLMH/0d2BcFXd1q5UlMosWDy68EjMpy7uoq oaL9ku8hNVu6/TCHZSX4bD9mDvDDwm2Yb6BmnW/9ugGm5doiGK8F/yh9gsbk/M5x iAzUCDZac3fqET7AmxUjy5loi3pN4DrOcWUECMlRVLrU6wN8eDVSwYyuIYNPLJqY 89RshdXFYteliEao4gdf67gyElcrSJSB/kOl96/GMjgrx+1JT7gr0uXuH+rlWyrG aGYNQbDj/kLlz5+6IWysRjJR/9rdsE9NTQuBe8VArV1fKAe1qDA+NbIijv6XX8xh FfX+xhj0zLC4gJr/wb2LrnSWy5fNipjt -----END CERTIFICATE-----Generated at Mon Oct 20 06:43:42 2025 by rpki-client