$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: 9tY3Ef7SIJ+aASdjZLvAq4Guw2/iZYgzZP/DAfASIEY= Subject key identifier: 45:B6:0C:FD:1E:A8:12:37:DD:96:3A:D3:57:C7:CF:23:41:23:AF:8A Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0A57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0A4C Signing time: Sat 18 Oct 2025 20:41:04 +0000 Manifest this update: Sat 18 Oct 2025 20:41:03 +0000 Manifest next update: Sat 25 Oct 2025 20:41:03 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: 43A55DSPywgaXup6ypaUwUEqOvdPSLpL7hSss/gvX20=) 2: 51D92BD25DD711F09B20C44DC4F9AE02.roa (hash: GSOu67thxVMGW+aBdpC8IU1FXpmsRcWLr3fcMku7g6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2647 (0xa57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Oct 18 20:41:03 2025 GMT Not After : Oct 25 20:41:03 2025 GMT Subject: CN=68f3fb60-99e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:ab:47:79:7c:42:72:20:89:76:46:cb:5a: 4c:d4:ac:4a:ae:c7:53:fc:68:13:70:94:ef:e5:ff: 03:34:08:26:34:4b:35:da:05:3b:2e:32:c2:e3:6b: fb:1c:91:1c:a8:d8:35:a2:3d:7a:1f:ef:33:c0:77: af:55:8e:22:a4:a7:82:c1:14:f8:da:71:7f:03:23: cb:65:dc:7b:86:c3:0c:ae:5b:a7:3a:07:85:1e:83: da:39:df:78:7b:55:4e:a4:9a:1e:47:c3:b2:f1:e9: 1a:33:ae:33:80:33:b4:57:77:e7:8c:15:5d:53:bb: 6d:d0:58:1e:db:a3:85:5a:65:d8:5d:fb:e6:5d:d4: cc:79:c4:08:a8:5a:ee:c6:f9:85:4c:23:10:2e:72: 06:a1:3b:db:00:62:00:11:83:8f:0b:03:dc:66:4d: a7:1f:f4:c8:76:0d:5c:6f:fe:e2:8e:b4:e3:82:a8: b9:ea:01:00:28:b9:b3:a4:be:e0:56:22:bb:ed:07: 59:9b:a7:50:50:a5:08:ba:df:70:1a:9e:cd:9c:16: fa:8b:3d:40:73:66:f8:50:7b:7b:47:14:53:01:10: bc:02:c3:90:44:ed:30:0e:ed:7c:55:7b:ef:bc:f2: aa:4e:f8:bd:89:81:3b:00:6e:1e:19:75:20:b6:89: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B6:0C:FD:1E:A8:12:37:DD:96:3A:D3:57:C7:CF:23:41:23:AF:8A X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:93:ff:f7:80:e7:b1:5f:26:a4:be:da:32:90:e6:cf:e0:99: 13:3e:d7:68:5d:49:eb:7e:e7:66:be:e1:74:9f:eb:b7:30:c1: 64:db:63:c5:f0:f7:0b:59:b7:ed:96:c1:9a:8f:09:bf:59:84: 99:87:74:a4:2a:93:af:a0:d4:af:fd:a1:74:22:ca:fc:2c:4d: f3:b4:e4:1b:8b:c3:69:2f:70:bc:ec:8d:92:e4:d6:a6:ea:25: cb:c5:35:6a:60:61:65:75:fa:6b:30:69:4c:bf:a4:de:e9:22: 76:4c:ca:93:1b:9d:c9:6c:45:d9:a1:2a:0a:60:3d:d3:e4:3d: 84:d9:fd:72:72:7c:7b:f6:2f:84:a8:92:c5:4b:28:83:0b:66: 59:dc:8e:7a:4d:97:79:a1:96:f7:75:ab:a6:fa:a6:10:36:24: 1a:50:2d:2d:0d:c0:8c:c8:63:ad:e5:04:ea:03:60:0b:91:31: e3:b7:96:82:2d:dd:26:b0:f8:31:f8:02:19:37:c2:0b:fc:72: bf:5c:77:e0:af:52:24:98:75:73:65:a0:9a:72:85:f8:b3:5d: 91:1a:30:cc:9c:41:19:ab:47:08:48:61:bd:6c:6c:7e:c8:c8: 05:78:e3:69:3a:23:b3:1c:6a:b8:ab:b5:7c:a9:ae:8c:a5:08: 46:90:77:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUxMDE4MjA0MTAzWhcNMjUxMDI1MjA0MTAzWjAYMRYwFAYD VQQDEw02OGYzZmI2MC05OWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVqrR3l8QnIgiXZGy1pM1KxKrsdT/GgTcJTv5f8DNAgmNEs12gU7LjLC42v7 HJEcqNg1oj16H+8zwHevVY4ipKeCwRT42nF/AyPLZdx7hsMMrlunOgeFHoPaOd94 e1VOpJoeR8Oy8ekaM64zgDO0V3fnjBVdU7tt0Fge26OFWmXYXfvmXdTMecQIqFru xvmFTCMQLnIGoTvbAGIAEYOPCwPcZk2nH/TIdg1cb/7ijrTjgqi56gEAKLmzpL7g ViK77QdZm6dQUKUIut9wGp7NnBb6iz1Ac2b4UHt7RxRTARC8AsOQRO0wDu18VXvv vPKqTvi9iYE7AG4eGXUgtokDvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEW2DP0e qBI33ZY601fHzyNBI6+KMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJk//3gOexXyakvtoykObP4JkTPtdoXUnrfudmvuF0n+u3MMFk22PF 8PcLWbftlsGajwm/WYSZh3SkKpOvoNSv/aF0Isr8LE3ztOQbi8NpL3C87I2S5Nam 6iXLxTVqYGFldfprMGlMv6Te6SJ2TMqTG53JbEXZoSoKYD3T5D2E2f1ycnx79i+E qJLFSyiDC2ZZ3I56TZd5oZb3daum+qYQNiQaUC0tDcCMyGOt5QTqA2ALkTHjt5aC Ld0msPgx+AIZN8IL/HK/XHfgr1IkmHVzZaCacoX4s12RGjDMnEEZq0cISGG9bGx+ yMgFeONpOiOzHGq4q7V8qa6MpQhGkHck -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:38 2025 by rpki-client