$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: Wq4mDvu1xuaGccKogW/sNCyh0CstJo8ToQ/72MfStWM= Subject key identifier: C6:3D:0F:0B:B8:D0:6C:12:B5:84:15:51:2A:47:FF:00:52:EF:54:E6 Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 081E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 0818 Signing time: Sat 18 Oct 2025 22:05:03 +0000 Manifest this update: Sat 18 Oct 2025 22:05:03 +0000 Manifest next update: Sat 25 Oct 2025 22:05:03 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: IcvfEgCbpTNl+m/XHyjimGe2sl0Y35rcG3r2LfimNcw=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: Oct 18 22:05:03 2025 GMT Not After : Oct 25 22:05:03 2025 GMT Subject: CN=68f40f0f-e5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:ba:74:de:ef:d0:da:09:37:6d:74:b4:f3: b0:71:6a:b4:51:58:00:35:08:7c:b1:c6:2a:75:9b: b2:ec:f7:49:92:9c:96:86:da:7e:b0:e4:56:49:07: 48:b5:f4:67:0c:4b:61:5a:dc:a5:8a:85:0d:60:68: af:60:a0:29:ac:d1:55:d6:4d:02:9b:30:01:a7:37: 6f:22:db:8f:64:b1:41:6b:a2:68:63:fb:60:f2:c0: 7e:2b:c5:42:3f:c3:39:64:ea:89:58:05:3c:ac:3a: 46:63:ff:3f:90:e5:c6:50:5b:90:e6:77:25:fb:27: 0b:9d:5d:d3:97:3d:c9:3d:bd:cc:59:67:9f:50:76: 57:09:53:19:37:2e:6d:42:fe:10:43:00:30:2e:3e: ff:1d:1d:35:9d:c1:e3:5c:fc:d5:3f:14:e0:f5:e9: c6:be:3d:f7:c0:04:ac:a5:52:21:9c:a8:c2:b1:db: e1:0e:7b:41:87:6e:dd:29:e0:70:c6:c3:d3:88:45: 07:20:8a:63:19:5b:76:30:5d:cf:d8:92:74:43:5c: 96:f8:9f:17:47:9f:23:24:c7:50:b1:eb:95:8a:ae: 5e:1f:88:16:a3:b6:9d:73:3f:4f:04:55:3f:9b:d5: 2e:e9:ab:ad:ed:34:97:b2:c9:00:5f:d1:c2:7e:c4: e6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3D:0F:0B:B8:D0:6C:12:B5:84:15:51:2A:47:FF:00:52:EF:54:E6 X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:6d:be:86:ec:4b:00:78:3f:4a:e2:60:cc:a1:5d:2d:35:d4: a5:65:f5:d9:53:30:6b:47:5f:a1:82:12:1f:ef:69:ce:be:a5: 11:4f:ab:2e:4a:30:5f:84:38:bc:c7:c4:e2:09:23:82:f4:fe: ef:4d:6d:f9:65:74:3f:05:56:55:c6:31:fe:d7:d5:d7:70:f0: fe:4a:30:72:4f:ad:98:56:49:d7:4e:ba:4f:1b:ef:59:7c:b1: 84:43:dd:34:85:b2:c2:06:8b:f9:bd:a1:61:41:10:28:d6:97: ca:0f:1f:d9:df:50:f1:d4:77:0a:92:cb:6e:0c:27:aa:fa:ae: 3b:36:09:ae:e8:7a:3e:45:ce:f6:67:8e:7d:ce:6f:63:be:dd: 24:2e:9d:10:fa:85:d6:4a:c7:c9:25:4e:6e:4a:d9:9d:f3:28: 71:2a:9e:a9:66:f8:08:58:1c:34:de:92:9a:4a:79:50:bd:63: e1:d6:81:bb:bf:0d:70:f5:61:4a:47:f4:b9:f5:f4:62:5c:8d: 4c:43:14:8e:d1:f8:74:c6:20:5f:26:14:03:ca:ca:a5:8e:3b: 88:20:93:c1:fd:a1:45:ba:98:9d:fc:87:41:70:38:ea:bf:0f: 80:a8:bc:d7:e9:a7:a8:bf:7b:23:5d:e0:60:fa:f5:86:41:52: b6:50:94:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjUxMDE4MjIwNTAzWhcNMjUxMDI1MjIwNTAzWjAYMRYwFAYD VQQDEw02OGY0MGYwZi1lNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWu6dN7v0NoJN210tPOwcWq0UVgANQh8scYqdZuy7PdJkpyWhtp+sORWSQdI tfRnDEthWtylioUNYGivYKAprNFV1k0CmzABpzdvItuPZLFBa6JoY/tg8sB+K8VC P8M5ZOqJWAU8rDpGY/8/kOXGUFuQ5ncl+ycLnV3Tlz3JPb3MWWefUHZXCVMZNy5t Qv4QQwAwLj7/HR01ncHjXPzVPxTg9enGvj33wASspVIhnKjCsdvhDntBh27dKeBw xsPTiEUHIIpjGVt2MF3P2JJ0Q1yW+J8XR58jJMdQseuViq5eH4gWo7adcz9PBFU/ m9Uu6aut7TSXsskAX9HCfsTmKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY9Dwu4 0GwStYQVUSpH/wBS71TmMB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9bb6G7EsAeD9K4mDMoV0tNdSlZfXZUzBrR1+hghIf72nOvqURT6su SjBfhDi8x8TiCSOC9P7vTW35ZXQ/BVZVxjH+19XXcPD+SjByT62YVknXTrpPG+9Z fLGEQ900hbLCBov5vaFhQRAo1pfKDx/Z31Dx1HcKkstuDCeq+q47Ngmu6Ho+Rc72 Z459zm9jvt0kLp0Q+oXWSsfJJU5uStmd8yhxKp6pZvgIWBw03pKaSnlQvWPh1oG7 vw1w9WFKR/S59fRiXI1MQxSO0fh0xiBfJhQDysqljjuIIJPB/aFFupid/IdBcDjq vw+AqLzX6aeov3sjXeBg+vWGQVK2UJSY -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:19 2025 by rpki-client