$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft File: xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json) Hash identifier: uQs7iQjSNVwwU9sNx9aV3ShpTAk/nqLXGbQeiPJOZtE= Subject key identifier: F9:ED:03:B0:E9:5B:4C:96:91:4D:D0:73:61:EF:15:52:90:32:B8:7F Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE Certificate issuer: /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Certificate serial: 1341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft Manifest number: 1337 Signing time: Mon 20 Oct 2025 17:26:01 +0000 Manifest this update: Mon 20 Oct 2025 17:26:00 +0000 Manifest next update: Mon 27 Oct 2025 17:26:00 +0000 Files and hashes: 1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: xAhw7uGj2nan8YMk//+3uubtAGppes7PAzfnD2pfszA=) 2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: 0tM/V7nX9hi4ETzuWiBmb9YtIWsrgFEIcg6fokAj5jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4929 (0x1341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161EA6, serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Validity Not Before: Oct 20 17:26:00 2025 GMT Not After : Oct 27 17:26:00 2025 GMT Subject: CN=68f670a9-0b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:11:62:fb:86:aa:d9:9c:64:9a:64:04:4e: 26:13:a1:85:a9:bf:8f:c6:2c:7a:85:14:14:22:43: 8c:ff:f2:1d:2b:13:cb:9e:2e:df:8c:fc:6f:a1:32: fc:cc:89:a4:45:6e:ae:e9:6d:3b:a1:4b:c2:7a:fe: b8:1a:33:8b:a0:71:f5:77:64:b4:63:19:11:25:c9: c1:20:33:61:07:e8:d4:71:d3:46:89:58:bd:24:e7: 19:46:d9:78:f7:97:ab:28:ac:6a:d1:b4:2d:5a:c6: c9:95:3a:18:c5:63:0d:69:17:2b:d1:bc:3a:e3:f3: 05:0e:1f:69:06:7b:f2:0b:47:dc:8e:51:89:0c:a4: 98:71:07:5b:ec:21:8c:ab:0a:17:0a:23:ac:bb:39: 75:a5:f0:a7:18:a6:fe:e8:88:80:ed:c7:e3:c7:d0: ab:7c:41:76:2a:20:65:5d:5c:0a:e8:da:b7:cd:25: 81:27:ed:56:c2:cf:f5:2f:cd:e0:22:bf:6d:ae:5c: 06:98:a8:7e:5f:e7:5c:b7:5c:1d:be:8c:1a:31:17: ea:f4:af:6e:bb:45:c1:86:5c:64:e7:a6:c1:ce:18: ff:78:b4:40:a2:55:ef:d8:fe:d5:ad:f5:cc:f3:b6: 20:09:e8:bb:b2:e8:84:75:ec:de:59:b4:e9:1a:9c: fe:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:ED:03:B0:E9:5B:4C:96:91:4D:D0:73:61:EF:15:52:90:32:B8:7F X509v3 Authority Key Identifier: keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e9:01:53:f9:e2:51:7b:72:a0:d8:74:39:3a:ee:6b:0f:d4: 1f:cf:71:0f:f0:78:95:23:0f:18:7e:15:d0:77:93:85:1b:27: 2a:fd:5e:9e:d0:70:ff:da:e5:c9:aa:6d:d0:21:57:62:db:6c: b0:55:a6:35:75:0c:cb:00:d6:dc:61:25:01:cb:47:3a:c7:55: ff:9d:c8:b1:53:7d:2d:43:a5:98:56:ba:f1:5b:62:a7:e2:84: 4a:78:9e:de:6b:44:85:11:b0:c7:3c:19:bb:8a:4b:92:2e:ce: fe:92:e7:90:7f:38:86:1d:79:cc:e3:b1:ac:9f:af:58:e0:90: 95:80:f2:db:95:b3:f3:df:98:2f:12:91:3f:e9:44:20:57:69: b6:b8:1a:e1:ae:b2:b0:09:22:e2:6a:74:5e:46:8c:f5:5e:21: 74:b8:89:31:76:07:b3:27:9e:38:53:bf:6b:dd:88:8f:6a:89: b0:9c:2f:75:7e:3d:12:ca:9a:41:b1:c0:a8:86:2b:d5:a0:69: 0d:3e:66:50:db:ec:53:ef:0f:04:04:25:8b:d7:91:69:f9:9c: 21:af:d2:17:f1:b8:32:ab:aa:8d:40:da:dd:3e:e6:5d:99:ee: 7c:b0:bd:c2:1e:17:83:9b:7a:11:0b:52:10:5f:02:78:39:e8: a0:34:cd:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFFQTYxMTAvBgNVBAUTKEM3M0VCRjRGMTVGQTI2MjkyQkY1QURCODhBODY1NzdF QzNBNzFDREUwHhcNMjUxMDIwMTcyNjAwWhcNMjUxMDI3MTcyNjAwWjAYMRYwFAYD VQQDEw02OGY2NzBhOS0wYjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+IRYvuGqtmcZJpkBE4mE6GFqb+Pxix6hRQUIkOM//IdKxPLni7fjPxvoTL8 zImkRW6u6W07oUvCev64GjOLoHH1d2S0YxkRJcnBIDNhB+jUcdNGiVi9JOcZRtl4 95erKKxq0bQtWsbJlToYxWMNaRcr0bw64/MFDh9pBnvyC0fcjlGJDKSYcQdb7CGM qwoXCiOsuzl1pfCnGKb+6IiA7cfjx9CrfEF2KiBlXVwK6Nq3zSWBJ+1Wws/1L83g Ir9trlwGmKh+X+dct1wdvowaMRfq9K9uu0XBhlxk56bBzhj/eLRAolXv2P7VrfXM 87YgCei7suiEdezeWbTpGpz+wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPntA7Dp W0yWkU3Qc2HvFVKQMrh/MB8GA1UdIwQYMBaAFMc+v08V+iYpK/WtuIqGV37Dpxze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUVBNi8xQURFMkUyNkI2 MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkppa3I5YTI0aW9aWGZzT25I TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h6Nl9UeFg2SmlrcjlhMjRpb1pYZnNPbkhONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUVBNi8xQURFMkUyNkI2MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkpp a3I5YTI0aW9aWGZzT25ITjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC6QFT+eJRe3Kg2HQ5Ou5rD9Qfz3EP8HiVIw8YfhXQd5OFGycq/V6e 0HD/2uXJqm3QIVdi22ywVaY1dQzLANbcYSUBy0c6x1X/ncixU30tQ6WYVrrxW2Kn 4oRKeJ7ea0SFEbDHPBm7ikuSLs7+kueQfziGHXnM47Gsn69Y4JCVgPLblbPz35gv EpE/6UQgV2m2uBrhrrKwCSLianReRoz1XiF0uIkxdgezJ544U79r3YiPaomwnC91 fj0SyppBscCohivVoGkNPmZQ2+xT7w8EBCWL15Fp+Zwhr9IX8bgyq6qNQNrdPuZd me58sL3CHheDm3oRC1IQXwJ4OeigNM1J -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:18 2025 by rpki-client