$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json) Hash identifier: /IJX3sNjRVsu/39ZBSKnj3KXope045I8Sb+gg9YaPoQ= Subject key identifier: 15:54:6D:D7:A0:12:E5:81:D3:4F:02:83:A5:93:0D:F1:7B:41:71:69 Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft Manifest number: 0762 Signing time: Sat 18 Oct 2025 23:03:23 +0000 Manifest this update: Sat 18 Oct 2025 23:03:22 +0000 Manifest next update: Sat 25 Oct 2025 23:03:22 +0000 Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: Q8VaNG+JOMxh43HvYOYA1ukM3Sl17RIWLOWONNoA0QY=) 2: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: qHbtyOGNfvy85AlmzO8CEnT5fTz9AwvvFi0y6XbFwG0=) 3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: SFXCFjWV3nIjHDr4Y0nX1h+ByORJe0z+8s0nBYc0bds=) 4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: ZsYDlTfdZ4GWQgL9mV+7VPUB+1RhWLSObaxg0y98Kxs=) 5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: aIhdOoGq/5IV6Mhns4F3omRFw08MxMY0t1LOWZhYXz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Validity Not Before: Oct 18 23:03:22 2025 GMT Not After : Oct 25 23:03:22 2025 GMT Subject: CN=68f41cbb-d682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:49:97:0c:b2:75:98:12:da:8a:27:3d:68: a9:62:5c:8c:11:44:b9:c5:e8:31:42:a0:06:4f:fa: 1f:bd:fb:c7:2f:b0:c1:20:84:a1:5b:71:c3:f8:ea: 0b:db:19:9a:6a:6a:6d:60:ce:7f:93:d4:3d:ee:86: ab:0c:d5:27:eb:5b:76:39:bc:e3:0d:ae:60:48:38: 1c:17:fe:c3:9b:cf:be:0b:48:36:f8:86:48:07:ea: f5:21:dd:16:8f:3c:f6:2c:bd:ef:be:9c:46:f9:b4: 2a:39:48:60:44:e3:ce:65:ed:3c:56:5a:f9:85:2e: e4:80:88:d3:07:07:6c:b4:70:e1:b8:24:46:3b:24: 85:a1:5d:8c:dc:5c:ee:96:67:bf:a7:96:a5:81:23: a3:ac:e2:54:8b:82:ba:88:2b:b2:f1:05:42:fc:33: 82:7c:f2:5c:5d:ba:39:62:2c:ad:a5:4e:11:29:7a: 48:d4:b2:b8:bb:c5:30:ba:70:89:22:23:54:6a:12: 5f:d9:df:67:21:fb:18:6f:fe:0b:a2:00:06:2d:44: 54:11:98:41:57:e2:c1:24:fc:c6:84:9f:de:8d:b0: 4e:31:c5:c7:4e:19:36:4e:8e:5a:e9:2c:ed:f8:c7: 54:18:1b:8a:74:70:0f:71:75:44:b3:5e:3f:a4:86: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:54:6D:D7:A0:12:E5:81:D3:4F:02:83:A5:93:0D:F1:7B:41:71:69 X509v3 Authority Key Identifier: keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3b:26:f4:d3:74:23:b1:88:fb:21:b5:28:50:59:9e:a4:12: b4:0d:61:91:41:45:35:f1:27:4a:27:bd:71:18:f2:fc:d7:e0: 23:fc:a0:02:b2:84:91:fe:c1:92:18:0f:e9:c7:68:c5:54:01: e7:a9:84:78:dd:85:0a:f6:74:85:67:29:a0:94:01:c7:8a:71: 4b:c5:3a:5b:13:e5:45:3a:fb:81:f4:36:ba:a5:7e:fc:8d:ab: 65:e1:2b:5b:9f:aa:1a:f7:e3:95:17:e3:47:19:7f:00:9f:12: b9:a2:2f:11:b4:a9:3c:31:67:b2:a4:46:3e:1b:df:07:4b:68: 19:9a:a2:56:b7:ad:81:2a:88:22:41:6e:25:38:d8:83:c7:0f: 44:70:8b:66:7b:e4:e0:f5:68:85:fe:3c:1f:3c:20:ad:37:7d: cb:6e:b1:17:61:5f:17:72:15:20:fd:99:c0:1a:da:cf:97:7d: 1d:73:b8:be:48:64:df:da:d6:05:09:9d:6a:d8:3a:01:90:86: 49:74:67:86:84:bb:ba:8a:5d:7b:a1:b3:64:7f:61:db:46:57: 52:7a:51:fe:d6:40:28:98:59:02:22:60:77:8a:36:5d:7c:20: de:66:c1:38:44:db:d6:35:5c:51:45:65:30:aa:3c:f2:8c:1b: 94:0d:92:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy NEVDMjRFOTIwHhcNMjUxMDE4MjMwMzIyWhcNMjUxMDI1MjMwMzIyWjAYMRYwFAYD VQQDEw02OGY0MWNiYi1kNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbNJlwyydZgS2oonPWipYlyMEUS5xegxQqAGT/ofvfvHL7DBIIShW3HD+OoL 2xmaamptYM5/k9Q97oarDNUn61t2ObzjDa5gSDgcF/7Dm8++C0g2+IZIB+r1Id0W jzz2LL3vvpxG+bQqOUhgROPOZe08Vlr5hS7kgIjTBwdstHDhuCRGOySFoV2M3Fzu lme/p5algSOjrOJUi4K6iCuy8QVC/DOCfPJcXbo5YiytpU4RKXpI1LK4u8UwunCJ IiNUahJf2d9nIfsYb/4LogAGLURUEZhBV+LBJPzGhJ/ejbBOMcXHThk2To5a6Szt +MdUGBuKdHAPcXVEs14/pIbelwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVUbdeg EuWB008Cg6WTDfF7QXFpMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m WVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpOyb003QjsYj7IbUoUFmepBK0DWGRQUU18SdKJ71xGPL81+Aj/KAC soSR/sGSGA/px2jFVAHnqYR43YUK9nSFZymglAHHinFLxTpbE+VFOvuB9Da6pX78 jatl4Stbn6oa9+OVF+NHGX8AnxK5oi8RtKk8MWeypEY+G98HS2gZmqJWt62BKogi QW4lONiDxw9EcItme+Tg9WiF/jwfPCCtN33LbrEXYV8XchUg/ZnAGtrPl30dc7i+ SGTf2tYFCZ1q2DoBkIZJdGeGhLu6il17obNkf2HbRldSelH+1kAomFkCImB3ijZd fCDeZsE4RNvWNVxRRWUwqjzyjBuUDZJm -----END CERTIFICATE-----Generated at Mon Oct 20 08:58:26 2025 by rpki-client