$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: ZU6sy1m2Q0t88YSPamEigjrkrReSx3+e6wQg/6YGWtE= Subject key identifier: B5:AC:0E:C0:2F:AA:94:07:BB:5F:60:0D:2F:D7:41:27:43:C1:D2:90 Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 4C Signing time: Sun 19 Oct 2025 10:46:25 +0000 Manifest this update: Sun 19 Oct 2025 10:46:25 +0000 Manifest next update: Sun 26 Oct 2025 10:46:25 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: /FRBUujbS+cOjwQR2nJRtuMQb7YIOJW+8n9+EpZjupc=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: rIKd0p3e0QLGiCh3oOuC0PziP82slPgSfQtsZGWJI0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Oct 19 10:46:25 2025 GMT Not After : Oct 26 10:46:25 2025 GMT Subject: CN=68f4c181-2847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b1:00:83:4f:ec:22:51:4e:95:4f:b8:94:dc: 27:b8:8f:24:b2:97:e7:09:06:34:f6:bf:03:e2:bf: f6:50:40:a5:46:9b:d7:a1:b0:5c:75:87:84:da:16: 7b:97:eb:57:e4:e4:40:4c:4c:94:7f:4e:1e:d8:ec: 8a:7c:7e:0a:05:91:df:f9:2c:54:04:4e:8b:d1:01: 97:e1:49:b8:ae:08:59:71:89:13:66:0c:8e:fe:59: 87:30:b8:9d:be:d2:1d:79:da:0c:4d:10:cc:15:7a: 31:11:d4:cd:06:6d:fd:18:cf:3d:54:69:ef:7e:98: f9:46:78:0d:a6:cd:13:00:e5:15:14:8a:0a:20:1f: 5b:1a:36:15:ee:0c:9a:54:b9:b7:d9:41:ae:8f:bb: fd:c2:79:c1:8b:8b:ef:88:71:3f:8b:80:67:22:d3: b6:4c:48:74:bd:0e:97:d1:6a:5e:af:c9:d2:ae:e0: 9c:f3:95:66:3f:7e:56:05:71:0d:87:04:bf:77:e7: 64:3f:51:12:27:d5:01:ef:da:d8:7f:eb:4f:e4:34: 49:e2:41:84:c8:be:63:c6:08:2f:55:4b:d0:b1:03: bd:87:3f:12:83:f5:44:a1:cd:71:3f:4e:3b:20:16: 58:7b:03:0d:74:2a:21:4a:08:0f:f3:88:49:a1:ff: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AC:0E:C0:2F:AA:94:07:BB:5F:60:0D:2F:D7:41:27:43:C1:D2:90 X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:ce:f6:dd:f3:0f:3e:9a:83:b5:40:ca:d0:7f:7c:6f:70:0e: 5f:cf:6b:7e:e3:eb:2b:2c:9a:dd:ee:f3:35:9b:9c:fe:18:d3: c6:fc:d5:0d:cb:3f:9b:2c:ab:e7:2c:64:ae:0f:a6:89:11:fc: 69:47:95:fa:32:18:d9:b6:2a:d3:ff:6c:bb:3f:a9:85:bb:9d: b5:03:f4:0c:09:f8:95:d5:f1:c2:ba:03:01:0b:23:a4:4a:98: 4a:ae:f4:32:f5:d6:9f:71:76:25:53:51:bf:84:ed:23:d2:d3: da:2f:9d:6f:d4:a9:57:b3:03:78:60:76:34:3d:a5:9c:24:0c: 1a:da:31:c3:e0:b4:86:2d:53:5e:79:96:1a:3f:c1:b2:72:71: 7f:6d:ea:c5:05:c3:03:0a:b7:48:62:86:fb:04:93:eb:bd:c5: 92:d2:e7:f2:da:5c:c4:69:ac:5b:a8:b5:9f:cb:e6:ef:18:86: a9:ff:e3:7e:45:d1:ed:be:06:e2:8c:54:59:6a:52:34:13:7b: 9f:95:d2:97:05:69:8f:6f:f0:72:7d:b5:87:12:ae:66:06:b9: 0e:a7:9b:d3:bd:86:88:95:52:fe:0b:52:bb:f8:1d:ac:ce:41: 5a:8a:6c:38:2a:b4:67:c3:9d:93:14:a1:6b:be:cd:ed:7c:66: 0e:03:fc:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoQzQyNkQ0MjY0MDA2NzY1NTU5NzNERkVERTRFQjI2NDRC RUVEMjg3MzAeFw0yNTEwMTkxMDQ2MjVaFw0yNTEwMjYxMDQ2MjVaMBgxFjAUBgNV BAMTDTY4ZjRjMTgxLTI4NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrsQCDT+wiUU6VT7iU3Ce4jySyl+cJBjT2vwPiv/ZQQKVGm9ehsFx1h4TaFnuX 61fk5EBMTJR/Th7Y7Ip8fgoFkd/5LFQETovRAZfhSbiuCFlxiRNmDI7+WYcwuJ2+ 0h152gxNEMwVejER1M0Gbf0Yzz1Uae9+mPlGeA2mzRMA5RUUigogH1saNhXuDJpU ubfZQa6Pu/3CecGLi++IcT+LgGci07ZMSHS9DpfRal6vydKu4JzzlWY/flYFcQ2H BL9352Q/URIn1QHv2th/60/kNEniQYTIvmPGCC9VS9CxA72HPxKD9UShzXE/Tjsg Flh7Aw10KiFKCA/ziEmh/y8TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtawOwC+q lAe7X2ANL9dBJ0PB0pAwHwYDVR0jBBgwFoAUxCbUJkAGdlVZc9/t5OsmRL7tKHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0MxRjczMDcyM0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveENiVUprQUdkbFZaYzlfdDVPc21STDd0S0hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0MxRjczMDcyM0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxW WmM5X3Q1T3NtUkw3dEtITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOPO9t3zDz6ag7VAytB/fG9wDl/Pa37j6yssmt3u8zWbnP4Y08b81Q3L P5ssq+csZK4PpokR/GlHlfoyGNm2KtP/bLs/qYW7nbUD9AwJ+JXV8cK6AwELI6RK mEqu9DL11p9xdiVTUb+E7SPS09ovnW/UqVezA3hgdjQ9pZwkDBraMcPgtIYtU155 lho/wbJycX9t6sUFwwMKt0hihvsEk+u9xZLS5/LaXMRprFuotZ/L5u8Yhqn/435F 0e2+BuKMVFlqUjQTe5+V0pcFaY9v8HJ9tYcSrmYGuQ6nm9O9hoiVUv4LUrv4HazO QVqKbDgqtGfDnZMUoWu+ze18Zg4D/O8= -----END CERTIFICATE-----Generated at Tue Oct 21 15:03:02 2025 by rpki-client