$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json) Hash identifier: EU7AclzgGTfOwXTsMVrGSb1LWSg5P3olht8NGL0PO/o= Subject key identifier: 50:6D:B4:A2:5A:A6:62:1F:70:02:B5:1F:FA:47:21:0C:6F:BC:DE:DA Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft Manifest number: 0404 Signing time: Sun 19 Oct 2025 03:41:08 +0000 Manifest this update: Sun 19 Oct 2025 03:41:07 +0000 Manifest next update: Sun 26 Oct 2025 03:41:07 +0000 Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: I/Yyqf8TTSVYoVlSL/pH/n8m6vu2Zypzmriq2WzIzLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Validity Not Before: Oct 19 03:41:07 2025 GMT Not After : Oct 26 03:41:07 2025 GMT Subject: CN=68f45dd3-95bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:85:71:03:9f:e5:b9:24:80:db:fb:a9:9d: cb:f4:c7:a5:f9:4e:04:5a:c9:bb:7e:5c:d4:e7:57: 17:03:3a:db:3e:13:84:b1:70:c1:59:d9:7a:77:3b: f0:08:94:c7:61:c5:14:03:7b:94:bc:20:c9:d8:4f: 94:cf:e7:7f:97:aa:52:46:c0:b9:d9:73:7d:8a:80: f5:c5:8c:01:6b:ec:07:15:65:b1:44:9e:e7:5f:2c: 70:22:f0:9f:33:b2:c0:92:59:12:3f:e2:a0:ae:d8: e9:b0:61:cd:1b:79:de:15:06:cf:1d:fa:dc:c9:49: 5c:65:4b:10:61:4c:ec:49:f1:bc:46:b7:1c:ca:67: 90:e8:8c:47:d3:bf:d3:a0:bb:03:ef:c4:c9:95:9b: 2a:3d:b6:ac:a0:5b:d6:b0:85:59:9f:25:cf:21:2d: be:6e:ce:4c:79:9b:03:f1:cc:d9:c1:c5:d0:d0:20: 19:af:3f:9c:9e:93:10:7f:8d:bc:af:d4:55:12:59: 42:5d:8e:a6:af:5f:e1:7f:56:03:9d:e2:2b:40:6e: e1:b7:46:e6:59:3f:af:15:7f:5b:57:3e:25:94:0b: 14:e9:bd:b5:dc:b3:b5:88:b5:57:08:29:c3:01:3a: 6b:ec:fe:e4:93:0b:65:7a:dc:e5:93:9f:43:13:99: 3a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6D:B4:A2:5A:A6:62:1F:70:02:B5:1F:FA:47:21:0C:6F:BC:DE:DA X509v3 Authority Key Identifier: keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:03:a0:51:55:5b:d8:18:02:db:43:78:2b:73:bf:75:47:a0: 6f:71:6a:8c:7e:54:cb:28:39:78:b9:44:2d:29:91:fe:4e:57: af:04:d7:75:19:c1:9d:61:1c:c8:6d:e8:eb:83:31:22:08:9e: 81:64:03:59:32:53:e1:fb:b2:34:5a:50:5b:66:99:47:2f:a5: ee:0d:d7:5f:82:c2:2e:b0:1a:6c:cd:37:e7:ee:00:75:dc:5d: 6d:a8:ba:12:ab:0e:41:be:87:59:ee:67:cd:dd:0e:0e:a7:eb: 47:b8:03:7e:a7:28:b6:1c:81:12:66:3c:08:a5:b4:f4:da:e7: 65:cb:f6:90:16:21:23:23:d9:6b:fd:f8:be:94:20:b8:57:4d: f3:e4:34:74:15:67:92:72:54:ff:11:68:e7:f9:2b:9a:42:87: d5:f5:09:35:b9:4b:45:73:5a:0b:08:f7:85:24:10:6b:39:60: 6f:c6:82:5c:e0:2c:9d:b4:b4:76:7f:48:e3:65:ef:cf:88:50: 7d:2d:35:be:d2:85:f3:6e:81:77:4e:53:1c:50:e3:65:39:a2: 63:03:79:61:e8:83:6a:da:b5:83:36:e1:92:7a:d1:28:24:f5: 32:82:c1:57:77:df:d1:ca:04:bb:47:57:d4:80:32:69:8a:0b: cd:0e:77:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDVDRUJEODY4NUIxNzQ5NURCM0UxRTc0NTk5NzlGRTg0 RjA0MzgzRjIwHhcNMjUxMDE5MDM0MTA3WhcNMjUxMDI2MDM0MTA3WjAYMRYwFAYD VQQDEw02OGY0NWRkMy05NWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszCFcQOf5bkkgNv7qZ3L9Mel+U4EWsm7flzU51cXAzrbPhOEsXDBWdl6dzvw CJTHYcUUA3uUvCDJ2E+Uz+d/l6pSRsC52XN9ioD1xYwBa+wHFWWxRJ7nXyxwIvCf M7LAklkSP+KgrtjpsGHNG3neFQbPHfrcyUlcZUsQYUzsSfG8RrccymeQ6IxH07/T oLsD78TJlZsqPbasoFvWsIVZnyXPIS2+bs5MeZsD8czZwcXQ0CAZrz+cnpMQf428 r9RVEllCXY6mr1/hf1YDneIrQG7ht0bmWT+vFX9bVz4llAsU6b213LO1iLVXCCnD ATpr7P7kkwtletzlk59DE5k6pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBttKJa pmIfcAK1H/pHIQxvvN7aMB8GA1UdIwQYMBaAFFzr2GhbF0lds+HnRZl5/oTwQ4Py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNWMno0ZWRGbVhuLWhQQkRn X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPdllhRnNYU1YyejRlZEZtWG4taFBCRGdfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNW Mno0ZWRGbVhuLWhQQkRnX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhA6BRVVvYGALbQ3grc791R6BvcWqMflTLKDl4uUQtKZH+TlevBNd1 GcGdYRzIbejrgzEiCJ6BZANZMlPh+7I0WlBbZplHL6XuDddfgsIusBpszTfn7gB1 3F1tqLoSqw5BvodZ7mfN3Q4Op+tHuAN+pyi2HIESZjwIpbT02udly/aQFiEjI9lr /fi+lCC4V03z5DR0FWeSclT/EWjn+SuaQofV9Qk1uUtFc1oLCPeFJBBrOWBvxoJc 4CydtLR2f0jjZe/PiFB9LTW+0oXzboF3TlMcUONlOaJjA3lh6INq2rWDNuGSetEo JPUygsFXd9/RygS7R1fUgDJpigvNDnfj -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:43 2025 by rpki-client