$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: +A4iUdgECVX0A2/8kOt3xme/l+ecb2Dkf0piK+Tk914= Subject key identifier: E3:7B:6A:DC:32:D2:0D:C2:18:7E:43:37:74:A4:8F:88:53:6D:91:9F Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 0805 Signing time: Sat 18 Oct 2025 22:11:12 +0000 Manifest this update: Sat 18 Oct 2025 22:11:11 +0000 Manifest next update: Sat 25 Oct 2025 22:11:11 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: BoQfAbFcJy/AQj0kcoh/Zch8ytSDrqoVLdQ1EEyp6iQ=) 2: FC4EA8D8918511EDB3CBB378C4F9AE02.roa (hash: 4bMonkEILF31i3rwXcmiWVxlZY8L3ObeZ0NQ0u78bEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Oct 18 22:11:11 2025 GMT Not After : Oct 25 22:11:11 2025 GMT Subject: CN=68f41080-208c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:01:d2:39:65:93:39:91:26:68:54:6b:8d: 28:0f:98:6d:40:28:15:bc:44:2e:46:02:a5:ec:d3: 3c:34:63:54:4c:aa:9d:54:87:cd:16:6e:00:2d:91: 0d:6f:9e:0c:7c:69:8b:9c:50:26:a5:ae:73:d3:11: 39:02:e8:e9:d8:df:29:48:ba:b6:2c:f4:af:b1:4d: c2:d9:1e:80:24:1c:2f:3c:85:98:72:b3:ba:eb:bf: 66:56:a7:b3:49:e6:60:bb:02:b5:dc:e9:f2:13:c2: 3a:9e:76:07:ef:54:fc:c3:55:73:27:54:55:fd:3e: c9:b4:59:e4:72:24:11:0f:66:37:c9:5e:fc:e2:3e: 78:fc:b8:ab:e8:68:85:32:b7:c4:2b:24:24:e3:92: 27:2c:fc:53:14:4e:69:77:67:2d:2c:61:9d:cd:78: 70:a5:99:22:38:44:29:6d:8f:71:be:f2:61:fa:2f: 37:4e:18:60:8c:b2:61:7a:db:0e:5d:75:95:9a:f1: 06:d7:c6:8f:97:fd:86:a3:43:c8:83:aa:af:03:62: 06:a3:2d:94:b7:7d:3e:64:95:73:07:90:4f:f5:1f: 11:af:25:00:4e:bd:54:fc:ee:af:c4:88:b8:ce:ff: aa:4c:32:df:1e:e5:a7:3a:a1:86:24:08:84:0a:20: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7B:6A:DC:32:D2:0D:C2:18:7E:43:37:74:A4:8F:88:53:6D:91:9F X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:89:47:03:41:04:9e:f6:a1:64:9a:26:91:85:f2:2f:b2:ea: 98:37:59:0c:a8:a5:f3:29:84:d7:0d:b8:f2:07:79:5c:f5:69: 55:13:f1:4c:da:67:fc:1d:5b:07:5d:01:9f:54:bc:06:3c:1d: c6:5a:0b:10:de:22:4c:ed:11:11:4a:7e:4c:7f:6e:a8:5b:b2: 86:3b:76:c4:3c:99:8c:30:3e:f3:52:00:47:8c:a4:f6:53:33: 05:53:d2:d7:c1:be:1e:d5:87:88:db:7e:81:56:dc:0a:5e:28: 3f:93:05:5f:cd:88:9e:5f:9c:09:9c:89:ad:f2:a0:3d:28:b2: 3b:15:cc:a3:bb:38:90:1f:fa:64:a7:e2:9c:0a:b5:f3:ee:d2: 36:9d:ed:e4:60:27:9a:ae:75:a2:5c:f2:50:b6:c8:3d:f1:15: 29:7a:c8:d3:a9:6d:81:fc:16:5c:1c:ce:21:61:e1:d9:a0:bc: 37:1c:f6:9b:cf:c5:4d:01:fd:a7:75:e2:21:83:58:a6:e0:de: 74:36:c7:e2:6d:1d:2a:70:ae:3d:2a:61:3c:7b:5b:9b:bf:1a: ff:5d:f9:12:3e:ba:2c:e7:a2:fd:39:6c:67:57:98:be:77:7b: 6c:b0:6f:b9:0d:40:c7:39:9a:ec:78:80:38:3a:4d:17:0b:97: 8f:b0:b4:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjUxMDE4MjIxMTExWhcNMjUxMDI1MjIxMTExWjAYMRYwFAYD VQQDEw02OGY0MTA4MC0yMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZQB0jllkzmRJmhUa40oD5htQCgVvEQuRgKl7NM8NGNUTKqdVIfNFm4ALZEN b54MfGmLnFAmpa5z0xE5Aujp2N8pSLq2LPSvsU3C2R6AJBwvPIWYcrO6679mVqez SeZguwK13OnyE8I6nnYH71T8w1VzJ1RV/T7JtFnkciQRD2Y3yV784j54/Lir6GiF MrfEKyQk45InLPxTFE5pd2ctLGGdzXhwpZkiOEQpbY9xvvJh+i83ThhgjLJhetsO XXWVmvEG18aPl/2Go0PIg6qvA2IGoy2Ut30+ZJVzB5BP9R8RryUATr1U/O6vxIi4 zv+qTDLfHuWnOqGGJAiECiBjnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFON7atwy 0g3CGH5DN3Skj4hTbZGfMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwiUcDQQSe9qFkmiaRhfIvsuqYN1kMqKXzKYTXDbjyB3lc9WlVE/FM 2mf8HVsHXQGfVLwGPB3GWgsQ3iJM7RERSn5Mf26oW7KGO3bEPJmMMD7zUgBHjKT2 UzMFU9LXwb4e1YeI236BVtwKXig/kwVfzYieX5wJnImt8qA9KLI7FcyjuziQH/pk p+KcCrXz7tI2ne3kYCearnWiXPJQtsg98RUpesjTqW2B/BZcHM4hYeHZoLw3HPab z8VNAf2ndeIhg1im4N50NsfibR0qcK49KmE8e1ubvxr/XfkSPros56L9OWxnV5i+ d3tssG+5DUDHOZrseIA4Ok0XC5ePsLSO -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:36 2025 by rpki-client