$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: uzos4Rdl90XZ9RNoy++kVCCqjGgSAKJwKP7gVAfFO+M= Subject key identifier: 9F:B8:03:09:93:8F:BA:86:C4:37:37:85:AD:DE:CA:59:9E:CB:37:2E Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 0232 Signing time: Sun 19 Oct 2025 04:10:09 +0000 Manifest this update: Sun 19 Oct 2025 04:10:08 +0000 Manifest next update: Sun 26 Oct 2025 04:10:08 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: LGo28DiYo3/5746rRj97AA0Ov/O6KLOWHEtI/Dp9cZQ=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: /pTedztaSiCOyPS1HOnaWKUVCcU322igmimIyTxJJbg=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: HWKUOlRf26vXVLrvzxoCBARsK7RmPl1k0ABbjAs3vlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Oct 19 04:10:08 2025 GMT Not After : Oct 26 04:10:08 2025 GMT Subject: CN=68f464a0-bfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:6f:a8:bd:54:50:84:2d:ff:8d:91:7c:90: 5e:77:b7:c7:f5:2c:d7:51:92:35:28:96:76:2c:a6: b3:85:3c:d7:eb:bb:80:8a:29:32:e0:af:18:58:89: 27:5f:02:24:87:99:a1:08:25:fc:98:84:5a:d4:ae: af:6a:d6:31:1d:00:64:58:3a:80:39:fa:6c:fa:61: c0:31:23:14:12:f4:b3:1d:9a:a7:2b:48:32:49:07: ff:a5:43:73:c9:d6:87:88:32:de:a9:69:7b:7b:66: 12:4c:84:a6:03:f2:f0:54:28:50:ae:8c:df:67:45: 2a:80:a8:37:8a:d3:ca:b8:7f:a8:89:71:60:c4:32: ca:2a:c0:ed:76:a2:86:af:44:9d:89:a0:b8:c5:94: 55:a7:f9:5b:f8:87:87:83:8b:d3:73:df:60:6b:31: 8c:06:56:a9:8f:05:d1:0b:a8:28:f0:dd:58:72:c7: 24:34:e0:47:b3:dd:e8:fd:b2:c3:9d:29:02:c8:36: a1:1b:8c:e7:ed:7b:cd:cf:2d:e6:86:dc:85:a3:b4: f2:7b:e9:3e:ac:8a:70:e0:a6:b2:5a:4d:2d:d3:00: eb:0b:2c:91:6f:ae:67:d4:4a:cc:e5:3c:93:26:0f: 0a:ab:be:86:75:17:50:6b:53:ac:39:d1:84:5a:01: 48:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B8:03:09:93:8F:BA:86:C4:37:37:85:AD:DE:CA:59:9E:CB:37:2E X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:ed:2f:4b:02:e8:1c:7f:16:7d:15:4c:6d:58:91:36:6d:d2: 18:f2:c0:34:97:4f:0f:fa:01:aa:12:31:87:47:0d:cf:d2:b6: b3:28:34:99:3c:dd:e1:3a:0a:95:75:0c:9c:a9:3d:2d:ac:2c: d6:23:b6:8e:fb:99:b8:4c:43:32:a5:6c:c0:aa:52:1e:a0:97: 3b:cb:0d:d0:af:a6:23:e5:64:7d:30:ba:2d:61:bf:33:83:1b: 59:d4:d0:1c:25:5b:c9:ce:f2:03:4d:14:ac:42:bb:80:31:d5: 61:f8:78:cc:c6:90:4e:dc:2f:b5:6a:ea:58:0f:5f:8a:44:83: b4:96:93:2c:3d:eb:7b:51:d6:9f:b1:6c:71:c2:f3:31:61:3f: 1f:4c:25:42:c9:07:27:64:fb:c0:df:44:c1:bd:af:b7:1a:7a: a3:7c:fc:56:19:40:8e:40:5b:ca:72:82:52:14:30:0a:02:84: 18:eb:62:e8:71:bc:c2:99:5e:f0:d6:4d:a0:1d:bb:0a:1f:6c: 77:95:a7:d3:b4:1d:b2:9f:fe:17:6c:c8:07:fc:cf:82:ed:0f: 02:59:2d:b9:51:af:89:e1:7a:28:11:b3:d1:da:04:f8:10:73: 5b:f1:87:eb:b6:3e:9b:69:12:f0:d9:95:68:a3:82:99:00:83: 7f:8b:f0:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjUxMDE5MDQxMDA4WhcNMjUxMDI2MDQxMDA4WjAYMRYwFAYD VQQDEw02OGY0NjRhMC1iZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CVvqL1UUIQt/42RfJBed7fH9SzXUZI1KJZ2LKazhTzX67uAiiky4K8YWIkn XwIkh5mhCCX8mIRa1K6vatYxHQBkWDqAOfps+mHAMSMUEvSzHZqnK0gySQf/pUNz ydaHiDLeqWl7e2YSTISmA/LwVChQrozfZ0UqgKg3itPKuH+oiXFgxDLKKsDtdqKG r0SdiaC4xZRVp/lb+IeHg4vTc99gazGMBlapjwXRC6go8N1YcsckNOBHs93o/bLD nSkCyDahG4zn7XvNzy3mhtyFo7Tye+k+rIpw4KayWk0t0wDrCyyRb65n1ErM5TyT Jg8Kq76GdRdQa1OsOdGEWgFI6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+4AwmT j7qGxDc3ha3eylmeyzcuMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC67S9LAugcfxZ9FUxtWJE2bdIY8sA0l08P+gGqEjGHRw3P0razKDSZ PN3hOgqVdQycqT0trCzWI7aO+5m4TEMypWzAqlIeoJc7yw3Qr6Yj5WR9MLotYb8z gxtZ1NAcJVvJzvIDTRSsQruAMdVh+HjMxpBO3C+1aupYD1+KRIO0lpMsPet7Udaf sWxxwvMxYT8fTCVCyQcnZPvA30TBva+3GnqjfPxWGUCOQFvKcoJSFDAKAoQY62Lo cbzCmV7w1k2gHbsKH2x3lafTtB2yn/4XbMgH/M+C7Q8CWS25Ua+J4XooEbPR2gT4 EHNb8Yfrtj6baRLw2ZVoo4KZAIN/i/AC -----END CERTIFICATE-----Generated at Mon Oct 20 10:51:57 2025 by rpki-client