$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json) Hash identifier: L3GG/Yi65AEP8o9GD0ojalkvljY+Vv7ynEY4HhdeU70= Subject key identifier: F1:C3:C5:79:94:F1:59:6D:FD:EF:1B:41:BF:C5:AD:9E:46:1A:7D:EB Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft Manifest number: 02C7 Signing time: Sun 19 Oct 2025 03:32:25 +0000 Manifest this update: Sun 19 Oct 2025 03:32:24 +0000 Manifest next update: Sun 26 Oct 2025 03:32:24 +0000 Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: Ps9WPdxVINCUXKTX/vI3ZIuEdhi2Cpeop81dkJ5GsWg=) 2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: llGHaeZeNwyGtBSSkhkdbPBkxPf6MV+xeeQondsSA8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178ACB, serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Validity Not Before: Oct 19 03:32:24 2025 GMT Not After : Oct 26 03:32:24 2025 GMT Subject: CN=68f45bc8-b8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8b:bd:ec:1b:0b:97:c4:bf:27:d4:1a:2d:75: fb:ac:f0:aa:2a:8c:a3:41:73:45:5a:ba:dd:23:8f: 8e:ef:54:3d:1a:4c:51:92:0b:40:ee:89:b4:66:e8: eb:ce:7f:30:48:7f:8f:1f:14:e6:39:e3:c6:ff:9d: d6:3a:85:aa:cc:19:66:5c:26:85:42:4d:b2:43:c5: 86:09:6e:f5:f3:d9:8b:b1:40:0a:a3:76:e6:39:fa: 2c:20:5e:82:ef:54:53:7b:35:cf:ee:5a:6b:b5:1d: 64:02:ad:4f:b9:ef:68:22:b8:99:6e:d8:31:32:fa: 81:07:ae:5d:59:08:56:bb:ca:4c:c2:57:08:95:09: cb:58:37:79:ec:ec:bf:66:50:a6:52:8a:78:46:a8: 8c:36:8f:78:83:b4:87:46:cd:71:66:c5:90:1e:b4: de:de:76:39:ca:07:bb:5f:7a:dd:ed:24:e7:77:77: b7:42:e1:25:88:4e:72:68:8a:42:4f:bb:28:f1:15: af:3e:69:df:82:13:87:0c:b2:fb:9a:b5:35:5e:81: 94:a3:1b:99:e2:26:cb:2a:07:18:b9:30:91:6b:db: 4c:72:4a:68:ed:b5:8f:3d:2f:21:5b:36:53:c3:c6: 01:52:90:6c:e1:50:10:fb:c8:6e:d5:55:9e:58:a8: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C3:C5:79:94:F1:59:6D:FD:EF:1B:41:BF:C5:AD:9E:46:1A:7D:EB X509v3 Authority Key Identifier: keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:1c:9b:34:15:ca:e8:41:24:2c:61:34:ce:29:02:55:01:87: 5f:97:45:34:7d:c5:74:5c:5b:08:57:ae:71:e3:61:d0:aa:d4: 6f:69:08:50:5c:9e:96:8d:ce:1b:c1:67:85:15:d5:df:e2:71: 3b:22:8d:ea:a7:13:7f:32:d2:a9:b8:b9:c6:47:41:73:8a:03: 4b:00:d9:5b:9f:9b:d4:0d:a1:a8:b7:72:1e:fc:3e:03:08:51: e8:1f:1c:7d:0b:4e:d1:fa:82:d3:5d:24:77:f9:3f:cd:1e:37: 1f:8a:0c:fd:d8:3c:ac:e4:f3:23:6f:ef:f3:f5:42:7f:9f:f5: 2f:3f:37:3f:1f:79:db:c6:7e:33:93:be:02:19:85:2a:dd:c7: c4:37:55:51:0f:7f:4d:32:a5:b3:40:9e:f4:e6:96:46:c2:ac: 0d:1a:11:77:9a:72:52:18:44:29:e4:2a:0b:d5:ca:fe:1f:21: de:8c:23:aa:01:7f:fb:9c:a4:49:4e:4e:64:6d:1b:fd:76:db: 69:f8:17:08:a7:57:15:77:a1:5e:04:3c:77:df:57:84:53:ab: 73:e1:d8:a8:1c:8d:60:ca:c0:4f:23:e0:5f:b2:ae:a3:9a:24: d8:29:e6:2c:c2:0e:21:ac:8f:ce:04:3f:24:90:bd:0f:ee:e5: 23:e1:fc:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBQ0IxMTAvBgNVBAUTKDVDMjdENTNEMEYyMzgxM0M4RUExNjM4QUYwNkM4RDM0 RDhGMkRGRjEwHhcNMjUxMDE5MDMzMjI0WhcNMjUxMDI2MDMzMjI0WjAYMRYwFAYD VQQDEw02OGY0NWJjOC1iOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ou97BsLl8S/J9QaLXX7rPCqKoyjQXNFWrrdI4+O71Q9GkxRkgtA7om0Zujr zn8wSH+PHxTmOePG/53WOoWqzBlmXCaFQk2yQ8WGCW7189mLsUAKo3bmOfosIF6C 71RTezXP7lprtR1kAq1Pue9oIriZbtgxMvqBB65dWQhWu8pMwlcIlQnLWDd57Oy/ ZlCmUop4RqiMNo94g7SHRs1xZsWQHrTe3nY5yge7X3rd7STnd3e3QuEliE5yaIpC T7so8RWvPmnfghOHDLL7mrU1XoGUoxuZ4ibLKgcYuTCRa9tMckpo7bWPPS8hWzZT w8YBUpBs4VAQ+8hu1VWeWKh2uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHDxXmU 8Vlt/e8bQb/FrZ5GGn3rMB8GA1UdIwQYMBaAFFwn1T0PI4E8jqFjivBsjTTY8t/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFDQi81MjNBOEY1NjBC QTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdUeU9vV09LOEd5Tk5Oankz X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDZlZQUThqZ1R5T29XT0s4R3lOTk5qeTNfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFDQi81MjNBOEY1NjBCQTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdU eU9vV09LOEd5Tk5OankzX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4HJs0FcroQSQsYTTOKQJVAYdfl0U0fcV0XFsIV65x42HQqtRvaQhQ XJ6Wjc4bwWeFFdXf4nE7Io3qpxN/MtKpuLnGR0FzigNLANlbn5vUDaGot3Ie/D4D CFHoHxx9C07R+oLTXSR3+T/NHjcfigz92Dys5PMjb+/z9UJ/n/UvPzc/H3nbxn4z k74CGYUq3cfEN1VRD39NMqWzQJ705pZGwqwNGhF3mnJSGEQp5CoL1cr+HyHejCOq AX/7nKRJTk5kbRv9dttp+BcIp1cVd6FeBDx331eEU6tz4dioHI1gysBPI+Bfsq6j miTYKeYswg4hrI/OBD8kkL0P7uUj4fwQ -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:23 2025 by rpki-client