$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: ND48Rvp7P5vWrdx2XriArPYJulKYwhzk13guiq/tTw4= Subject key identifier: 77:90:81:31:81:01:0F:64:C6:D6:69:27:88:5D:31:14:56:F1:C0:BE Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 02BE Signing time: Sun 19 Oct 2025 03:36:55 +0000 Manifest this update: Sun 19 Oct 2025 03:36:54 +0000 Manifest next update: Sun 26 Oct 2025 03:36:54 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: 8Z1TJo1GJuqoxsyORirkkiaOkKViIHKJEulq8rLpHSk=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: ipAHoMEeSi68f+rJDCwmxc6LIwQCY1InwnKCCeoYyk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: Oct 19 03:36:54 2025 GMT Not After : Oct 26 03:36:54 2025 GMT Subject: CN=68f45cd7-16c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:e9:63:9d:bf:14:5a:cc:31:76:53:76:1a: 55:1b:6b:b0:ca:02:7d:29:56:f1:13:27:74:eb:b2: 6d:f2:0c:ae:32:29:12:b2:fd:be:8a:25:f1:41:a5: d8:3b:e6:3c:52:eb:16:42:d9:2c:bf:a7:b1:a0:f7: 53:83:bd:fb:52:74:59:c5:88:89:04:d3:51:a4:05: 5e:8e:f8:ff:08:28:5d:11:4e:5d:90:35:e2:74:04: 46:94:a8:08:06:20:4a:b4:c3:4c:43:e1:3b:b3:87: 0d:a1:64:e6:95:76:09:b2:67:9b:51:f0:48:7e:f1: a2:46:60:64:df:08:94:b5:c9:e7:4d:08:9f:62:23: c0:7c:e2:81:65:18:29:2a:f2:5b:a3:ec:76:e5:02: c7:b1:00:31:ec:20:ae:eb:96:38:8d:eb:0e:66:87: 6f:25:9f:24:f4:6e:af:d1:63:4f:ab:80:e1:a6:5d: 17:b2:9b:ab:6e:b4:ce:92:c2:5c:14:c1:2d:5b:de: 58:90:6d:6a:f1:5a:99:8d:9e:60:7c:90:b6:30:e9: e2:f2:0b:64:33:8d:4f:d3:5e:04:c5:ce:d3:0b:9b: 86:7b:14:98:0a:53:d5:50:aa:06:c9:18:69:70:9d: 70:e4:88:fb:64:e0:af:d0:08:de:52:26:61:37:20: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:90:81:31:81:01:0F:64:C6:D6:69:27:88:5D:31:14:56:F1:C0:BE X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0a:64:ab:b3:f5:a8:bc:81:f3:f2:f5:2b:91:d3:eb:f9:91: 6f:ba:06:a9:3b:61:70:7b:95:14:fa:75:f5:ce:7f:b4:f6:e3: 2d:b1:75:99:0c:80:77:0a:37:c6:0e:00:ea:a4:d6:d9:65:cc: 4b:96:6f:46:a3:4c:0e:bd:2e:88:1f:64:f0:8c:c4:c5:0c:f2: 49:3d:ca:b6:a9:2e:1a:9d:f4:a3:cd:b9:2a:86:9a:1c:a1:76: 4e:08:b9:df:e2:ea:0b:01:9e:33:e4:16:40:71:1b:5b:61:8b: 98:1b:d6:18:37:35:12:a9:a6:98:bf:bc:71:a0:7d:01:d8:05: 69:eb:ff:21:a4:ee:9e:b0:6e:ba:bd:de:31:f0:ff:93:47:4b: 5a:41:b8:a7:6c:8d:fb:d0:c5:54:a7:57:e9:65:f8:f0:48:bf: 3d:fb:0f:2d:8d:82:f6:fa:fe:ed:06:91:be:0d:97:67:aa:fd: 1d:0d:5a:67:97:04:32:8b:20:92:7b:73:58:07:56:e9:21:a1: 11:c4:6b:47:8b:80:64:0d:d6:7c:c3:cc:2e:71:26:40:1b:27: 81:6f:7b:4e:4c:b3:18:00:f3:3a:47:87:cd:d4:d4:7d:76:a1: 5b:3b:4f:6a:10:1f:81:5b:13:57:39:0d:5d:2d:4e:53:a0:a3: af:4d:d9:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjUxMDE5MDMzNjU0WhcNMjUxMDI2MDMzNjU0WjAYMRYwFAYD VQQDEw02OGY0NWNkNy0xNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTPpY52/FFrMMXZTdhpVG2uwygJ9KVbxEyd067Jt8gyuMikSsv2+iiXxQaXY O+Y8UusWQtksv6exoPdTg737UnRZxYiJBNNRpAVejvj/CChdEU5dkDXidARGlKgI BiBKtMNMQ+E7s4cNoWTmlXYJsmebUfBIfvGiRmBk3wiUtcnnTQifYiPAfOKBZRgp KvJbo+x25QLHsQAx7CCu65Y4jesOZodvJZ8k9G6v0WNPq4Dhpl0XspurbrTOksJc FMEtW95YkG1q8VqZjZ5gfJC2MOni8gtkM41P014Exc7TC5uGexSYClPVUKoGyRhp cJ1w5Ij7ZOCv0AjeUiZhNyChtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeQgTGB AQ9kxtZpJ4hdMRRW8cC+MB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaCmSrs/WovIHz8vUrkdPr+ZFvugapO2Fwe5UU+nX1zn+09uMtsXWZ DIB3CjfGDgDqpNbZZcxLlm9Go0wOvS6IH2TwjMTFDPJJPcq2qS4anfSjzbkqhpoc oXZOCLnf4uoLAZ4z5BZAcRtbYYuYG9YYNzUSqaaYv7xxoH0B2AVp6/8hpO6esG66 vd4x8P+TR0taQbinbI370MVUp1fpZfjwSL89+w8tjYL2+v7tBpG+DZdnqv0dDVpn lwQyiyCSe3NYB1bpIaERxGtHi4BkDdZ8w8wucSZAGyeBb3tOTLMYAPM6R4fN1NR9 dqFbO09qEB+BWxNXOQ1dLU5ToKOvTdl9 -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:01 2025 by rpki-client