$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: iTs49tw8VAT9lNdXXMlWkL7dThTMtbHzVIEnRFdau7I= Subject key identifier: E4:AB:D2:4C:7D:01:B6:17:0F:81:B5:58:58:8F:03:9E:EA:D0:CD:43 Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 34DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 34D6 Signing time: Sat 18 Oct 2025 14:43:20 +0000 Manifest this update: Sat 18 Oct 2025 14:43:19 +0000 Manifest next update: Sat 25 Oct 2025 14:43:19 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: +/aKafem74Pce/JJec6DTgFUOcs2DiMAvmtV9RtxMOc=) 2: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: m1Ja+K+BQF88h58Y18w9A7vu3WiRuOsB65pKsql8BvI=) 3: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: Zl4gUZhHt66LNUFLaLmernm+th1hHU0/5O3LszjxBds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13535 (0x34df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Oct 18 14:43:19 2025 GMT Not After : Oct 25 14:43:19 2025 GMT Subject: CN=68f3a787-92e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3e:8a:78:1f:ca:c6:b6:4f:3d:78:e7:b0:3b: dc:82:d0:f6:dd:7a:68:c2:5a:83:eb:a0:2d:1b:a0: 77:4b:a2:8a:3e:a4:b3:f5:cf:e0:b6:58:7f:db:7c: d6:53:d0:23:fb:52:bd:da:f9:e3:79:c9:5b:54:2d: b3:fe:76:1b:8b:00:61:d2:3b:dc:85:35:c3:b7:36: 9b:32:73:64:be:30:b5:47:78:de:bd:49:e0:ab:e2: c9:3a:27:05:53:ba:c5:e9:0f:cc:3f:6c:11:e1:de: ee:a2:69:cf:23:8e:93:b2:59:89:4d:08:26:9a:a6: e3:6a:ad:fa:19:a7:c3:29:da:d8:cb:9e:18:63:cb: 50:13:36:70:8d:63:b3:e7:8a:7c:1c:f1:ef:77:01: 8e:fe:ee:75:36:a2:fc:ed:86:1b:7e:10:89:08:a4: e3:88:8c:bc:88:1f:89:4d:06:aa:22:22:77:a6:65: e5:7e:ed:ba:a3:f8:6b:7f:72:39:f0:c6:49:b1:26: 26:b1:25:d1:dc:25:4c:14:ed:84:76:08:e8:60:77: 53:13:a6:c0:2c:b3:c2:48:f6:34:d8:17:41:bb:0f: b3:a7:00:85:3a:44:27:4f:13:5d:45:2b:d3:d8:e9: f8:7d:c4:13:63:35:bc:89:1e:f1:fa:a8:d6:47:d0: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AB:D2:4C:7D:01:B6:17:0F:81:B5:58:58:8F:03:9E:EA:D0:CD:43 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a0:5c:c1:3d:a3:c8:68:78:05:dd:07:26:88:a9:c7:07:a2: b8:00:58:59:77:cf:cc:5b:d5:c8:c8:85:dd:31:a8:73:c0:ce: 20:56:d8:33:36:57:95:b5:41:eb:0c:84:9c:e8:a4:e6:42:05: a8:4a:ac:23:27:bc:ff:70:5b:2f:fa:95:82:30:62:9c:65:f6: 33:21:c4:71:ca:9f:d7:09:f3:b3:44:77:c2:3a:89:01:bd:8c: 4e:38:d9:d6:c9:4a:7c:38:03:64:6a:1b:8c:20:ec:3e:cb:32: c7:82:b8:90:48:c0:5e:fc:f5:7e:b4:f5:ac:16:8a:2a:15:ae: 94:ca:3a:9c:22:5f:78:0a:bf:84:f2:0d:96:c7:ea:9d:db:82: 13:0f:28:f2:bc:20:57:96:45:da:59:24:9d:06:8f:bd:6f:37: f5:59:af:01:44:84:16:a2:97:ee:2a:fc:db:3a:a3:a2:c9:d8: f2:37:c2:2a:0f:61:ad:88:f4:5d:fe:f2:1a:c9:70:ad:e5:48: 89:7a:22:a5:82:ca:7f:3d:f0:a5:ad:0f:4c:f6:6f:fb:21:c9: 06:3f:c1:d7:8f:ab:ad:1b:e0:09:d9:05:41:2b:a5:74:39:c0: 29:36:58:37:af:5f:ad:cc:fc:67:b2:95:15:39:3f:04:49:e1: 60:2c:f3:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjUxMDE4MTQ0MzE5WhcNMjUxMDI1MTQ0MzE5WjAYMRYwFAYD VQQDEw02OGYzYTc4Ny05MmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7z6KeB/KxrZPPXjnsDvcgtD23XpowlqD66AtG6B3S6KKPqSz9c/gtlh/23zW U9Aj+1K92vnjeclbVC2z/nYbiwBh0jvchTXDtzabMnNkvjC1R3jevUngq+LJOicF U7rF6Q/MP2wR4d7uomnPI46TslmJTQgmmqbjaq36GafDKdrYy54YY8tQEzZwjWOz 54p8HPHvdwGO/u51NqL87YYbfhCJCKTjiIy8iB+JTQaqIiJ3pmXlfu26o/hrf3I5 8MZJsSYmsSXR3CVMFO2EdgjoYHdTE6bALLPCSPY02BdBuw+zpwCFOkQnTxNdRSvT 2On4fcQTYzW8iR7x+qjWR9CIgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSr0kx9 AbYXD4G1WFiPA57q0M1DMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZoFzBPaPIaHgF3QcmiKnHB6K4AFhZd8/MW9XIyIXdMahzwM4gVtgz NleVtUHrDISc6KTmQgWoSqwjJ7z/cFsv+pWCMGKcZfYzIcRxyp/XCfOzRHfCOokB vYxOONnWyUp8OANkahuMIOw+yzLHgriQSMBe/PV+tPWsFooqFa6UyjqcIl94Cr+E 8g2Wx+qd24ITDyjyvCBXlkXaWSSdBo+9bzf1Wa8BRIQWopfuKvzbOqOiydjyN8Iq D2GtiPRd/vIayXCt5UiJeiKlgsp/PfClrQ9M9m/7IckGP8HXj6utG+AJ2QVBK6V0 OcApNlg3r1+tzPxnspUVOT8ESeFgLPPx -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:21 2025 by rpki-client