$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json) Hash identifier: EqZvIRBD3Jzj3a3sq5FRnBDK/Q9BCFSiGal5IpinNas= Subject key identifier: 92:AE:92:68:BD:5D:47:87:F2:51:64:C3:00:DF:03:D8:99:41:86:4F Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft Manifest number: 012C Signing time: Sun 19 Oct 2025 07:30:44 +0000 Manifest this update: Sun 19 Oct 2025 07:30:44 +0000 Manifest next update: Sun 26 Oct 2025 07:30:44 +0000 Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: 0EDgkB1srpK9cBdkyDfiZ0wo0eEKTRK8BHOfKWa0xYY=) 2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: AhOHyTR8Y1BKmfRUj0AuSJ2KJPys3xbmw5f4K4GCzjI=) 3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: EKYVn1LnE/qYTW245x3NVrE53P336TlJMyIXtYLhWG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Validity Not Before: Oct 19 07:30:44 2025 GMT Not After : Oct 26 07:30:44 2025 GMT Subject: CN=68f493a4-b6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:23:c5:e1:8a:d7:d2:34:8d:b8:fa:41:b1: 66:1a:bb:5d:6d:25:70:cf:21:c0:18:c5:eb:77:73: 60:8b:5a:1e:c0:4a:92:33:c7:74:e2:4e:a1:42:be: d8:cd:d2:75:d3:ff:94:62:b7:42:2a:04:df:d0:31: e0:57:88:63:7e:e1:4c:8c:bb:c7:0d:0d:42:a1:3f: 8f:f2:53:dd:56:f9:aa:4c:ed:f2:e1:4e:18:e2:09: d2:2b:bd:53:6c:2c:41:e9:c5:63:f3:b4:e9:4c:bb: 5e:3a:fc:c3:dd:14:55:ee:0f:f4:a0:5d:c8:31:a3: e5:24:2e:71:6e:78:9d:6a:3a:5a:e6:5a:51:0e:8f: 40:78:fa:ff:d7:80:de:75:4e:bf:2b:19:00:2d:0a: f3:22:0a:7e:d9:64:15:f0:77:1c:c8:52:3c:9e:fb: 9d:c0:3f:6f:50:fd:57:b4:14:b0:db:9f:8b:fb:8b: a5:f5:ae:78:76:0e:55:9c:63:fe:c5:86:2f:a1:b1: 4f:84:9d:98:2f:02:fe:48:d9:31:1d:b9:d6:f9:7e: b4:f6:fa:3e:f2:2f:31:80:ee:97:ee:dc:9e:2e:be: 8a:a8:ee:75:ae:2e:79:55:6e:bf:6e:79:6a:4a:56: 4a:62:08:2e:6a:be:1a:bd:63:b3:3b:5b:c2:c2:1b: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AE:92:68:BD:5D:47:87:F2:51:64:C3:00:DF:03:D8:99:41:86:4F X509v3 Authority Key Identifier: keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:aa:e9:aa:34:cd:af:30:ac:9c:9a:36:e3:95:cc:46:e1:33: ad:bd:e2:4a:c7:7b:3b:c5:c1:9d:65:7b:1a:dd:51:14:fa:20: 51:df:bb:56:c9:6c:e6:bc:16:b1:b3:ef:48:6b:ce:38:32:53: 6e:d1:80:bd:bb:9e:a1:4e:7c:b7:f4:d4:a9:45:56:69:a7:45: 03:1e:e6:ff:91:1d:a8:50:e4:8a:59:ee:e3:56:ab:db:86:20: d8:94:80:88:88:7f:52:00:8b:97:f1:68:5b:5f:b2:f0:00:df: f8:59:15:d7:b2:c8:a8:2a:d1:6d:93:ab:9d:09:93:0b:99:9d: 3e:e6:c3:6e:0f:8a:89:ad:ee:63:33:14:81:ca:e6:b0:71:a3: 7c:ea:e9:fe:bc:47:d1:39:f1:7f:d6:90:ca:d9:8c:6d:53:fa: ad:b7:f4:65:27:7a:0b:5c:71:9c:b3:39:63:0d:bb:a1:ee:89: 23:4e:a3:79:a7:4e:ad:83:04:87:ff:f6:43:26:9f:43:18:d8: 82:09:54:13:65:67:70:e0:87:6d:08:4b:7a:70:be:28:b1:cd: 69:ef:8a:de:9b:89:2b:39:ff:8e:46:b5:b2:03:89:65:d6:5b: a8:37:b3:55:61:ee:7f:1b:fb:14:ab:86:5c:4e:50:f9:19:5c: b0:2c:a2:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF RTFEOTM1Q0YwHhcNMjUxMDE5MDczMDQ0WhcNMjUxMDI2MDczMDQ0WjAYMRYwFAYD VQQDEw02OGY0OTNhNC1iNmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UUjxeGK19I0jbj6QbFmGrtdbSVwzyHAGMXrd3Ngi1oewEqSM8d04k6hQr7Y zdJ10/+UYrdCKgTf0DHgV4hjfuFMjLvHDQ1CoT+P8lPdVvmqTO3y4U4Y4gnSK71T bCxB6cVj87TpTLteOvzD3RRV7g/0oF3IMaPlJC5xbnidajpa5lpRDo9AePr/14De dU6/KxkALQrzIgp+2WQV8HccyFI8nvudwD9vUP1XtBSw25+L+4ul9a54dg5VnGP+ xYYvobFPhJ2YLwL+SNkxHbnW+X609vo+8i8xgO6X7tyeLr6KqO51ri55VW6/bnlq SlZKYgguar4avWOzO1vCwhur1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKukmi9 XUeH8lFkwwDfA9iZQYZPMB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4 MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0IyOS82MTdFOTQ0OEU4MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6 ZGZoRmFJWDJvUWZ1SFpOYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0qumqNM2vMKycmjbjlcxG4TOtveJKx3s7xcGdZXsa3VEU+iBR37tW yWzmvBaxs+9Ia844MlNu0YC9u56hTny39NSpRVZpp0UDHub/kR2oUOSKWe7jVqvb hiDYlICIiH9SAIuX8WhbX7LwAN/4WRXXssioKtFtk6udCZMLmZ0+5sNuD4qJre5j MxSByuawcaN86un+vEfROfF/1pDK2YxtU/qtt/RlJ3oLXHGcszljDbuh7okjTqN5 p06tgwSH//ZDJp9DGNiCCVQTZWdw4IdtCEt6cL4osc1p74rem4krOf+ORrWyA4ll 1luoN7NVYe5/G/sUq4ZcTlD5GVywLKKm -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:16 2025 by rpki-client