$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft File: XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json) Hash identifier: rfMYJSPGE0uIZUJ56HiStgUn8KSCR+mtsO7pafnzsrs= Subject key identifier: 51:73:12:8B:87:19:0F:C4:27:7D:82:CA:F8:72:53:21:EF:E7:83:C9 Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC Certificate issuer: /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft Manifest number: 0124 Signing time: Sun 19 Oct 2025 07:31:16 +0000 Manifest this update: Sun 19 Oct 2025 07:31:15 +0000 Manifest next update: Sun 26 Oct 2025 07:31:15 +0000 Files and hashes: 1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: oBJsP1CJLWyTPpNoqzorXV9nLqp7DC7MBhU4gcyzt1o=) 2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: +NOhwE6m6lpwH5XuFy8HqU1ULWBp+YrGh21v4UoRt+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC Validity Not Before: Oct 19 07:31:15 2025 GMT Not After : Oct 26 07:31:15 2025 GMT Subject: CN=68f493c4-0405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:d1:49:8f:ac:84:e8:e3:23:12:b4:2a:16: ec:d6:5a:61:bd:8d:df:ba:a7:ec:a0:95:6a:58:82: 0b:07:2f:fb:cc:8b:6a:8f:0d:2c:a2:c5:f6:f2:19: 56:6d:25:d8:9f:82:2c:58:f3:75:f5:1e:9a:68:11: 70:f1:46:33:ce:94:ff:a0:d0:4e:76:7c:93:a6:51: 0e:31:18:93:45:5b:e9:10:d4:5c:7e:ad:e1:37:5c: d3:e0:bd:05:06:ef:bd:5e:9c:dc:79:56:74:45:da: 35:87:d0:00:07:48:5e:35:7b:13:bb:34:ef:7c:db: 58:fe:35:32:76:31:29:d6:5d:2e:8d:ab:1b:f4:29: 79:c0:6d:9a:bb:96:de:8a:d3:2e:30:45:d4:d3:2d: 94:ff:13:43:52:af:3f:bd:71:15:fc:c3:30:2f:84: a1:37:36:28:2b:31:04:69:f8:40:ed:ce:e8:6d:6e: c7:d2:b1:d4:b6:2b:51:47:4b:8a:ee:f8:2b:11:9c: 00:fd:27:c7:7d:bb:e1:d1:ce:8c:c1:22:6e:70:f0: da:75:54:38:f0:d1:b7:8b:28:f8:9a:35:26:53:26: 8e:68:33:25:75:8b:05:da:2a:00:b4:9f:43:57:4b: 82:97:ed:00:f7:9b:af:86:8b:23:68:46:66:d4:97: e5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:73:12:8B:87:19:0F:C4:27:7D:82:CA:F8:72:53:21:EF:E7:83:C9 X509v3 Authority Key Identifier: keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e5:fa:39:fe:46:17:94:86:c0:73:ac:75:52:d8:4c:b7:fb: 88:b1:bc:0c:09:3d:4c:f5:b3:24:00:2e:6d:4c:6e:b6:80:14: ce:9b:c2:18:39:2b:18:c3:da:76:08:66:08:45:41:ae:4e:23: 30:ce:42:ab:b5:9a:78:28:e4:d5:a5:36:df:04:6e:30:db:03: a4:35:63:7b:67:01:e3:c5:54:83:3e:34:3b:ce:0c:01:35:c0: ef:d0:70:92:60:84:07:5c:5c:fe:62:35:98:6b:51:23:c5:66: ad:75:82:f6:51:28:9e:b7:0f:e0:a1:7e:44:80:5d:b1:c8:d3: d2:14:19:58:1e:ed:67:b5:79:b9:6d:20:53:2b:33:c9:b8:f0: 05:1e:c9:a9:88:58:8a:3e:0f:a8:53:c1:74:14:58:51:f5:7e: 07:18:e1:84:08:8d:aa:da:21:e8:2e:f8:4a:d8:e6:42:2d:02: a3:22:cf:49:25:48:f2:1b:50:74:53:22:94:bc:8a:f7:66:21: c3:e4:5d:d9:c1:03:bb:4d:c5:bd:37:8e:7c:90:61:d8:c5:a0: 1a:c9:d3:5c:4b:f0:d2:34:16:05:81:af:cc:99:4e:4a:90:c2: bb:d5:83:4b:32:6a:8d:0b:5a:6f:17:1b:3a:d4:14:4d:b1:28: b6:a7:af:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDVFMjMzOUQxRUFBRjUzNDlBMTM4QTQ3OTdEQTgyRDBF QjRERkE5RUMwHhcNMjUxMDE5MDczMTE1WhcNMjUxMDI2MDczMTE1WjAYMRYwFAYD VQQDEw02OGY0OTNjNC0wNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JXRSY+shOjjIxK0Khbs1lphvY3fuqfsoJVqWIILBy/7zItqjw0sosX28hlW bSXYn4IsWPN19R6aaBFw8UYzzpT/oNBOdnyTplEOMRiTRVvpENRcfq3hN1zT4L0F Bu+9XpzceVZ0Rdo1h9AAB0heNXsTuzTvfNtY/jUydjEp1l0ujasb9Cl5wG2au5be itMuMEXU0y2U/xNDUq8/vXEV/MMwL4ShNzYoKzEEafhA7c7obW7H0rHUtitRR0uK 7vgrEZwA/SfHfbvh0c6MwSJucPDadVQ48NG3iyj4mjUmUyaOaDMldYsF2ioAtJ9D V0uCl+0A95uvhosjaEZm1JflCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFzEouH GQ/EJ32CyvhyUyHv54PJMB8GA1UdIwQYMBaAFF4jOdHqr1NJoTikeX2oLQ6036ns MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC80QzkwMEYxQ0VB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUwbWhPS1I1ZmFndERyVGZx ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hpTTUwZXF2VTBtaE9LUjVmYWd0RHJUZnFldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC80QzkwMEYxQ0VBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUw bWhPS1I1ZmFndERyVGZxZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE5fo5/kYXlIbAc6x1UthMt/uIsbwMCT1M9bMkAC5tTG62gBTOm8IY OSsYw9p2CGYIRUGuTiMwzkKrtZp4KOTVpTbfBG4w2wOkNWN7ZwHjxVSDPjQ7zgwB NcDv0HCSYIQHXFz+YjWYa1EjxWatdYL2USietw/goX5EgF2xyNPSFBlYHu1ntXm5 bSBTKzPJuPAFHsmpiFiKPg+oU8F0FFhR9X4HGOGECI2q2iHoLvhK2OZCLQKjIs9J JUjyG1B0UyKUvIr3ZiHD5F3ZwQO7TcW9N458kGHYxaAaydNcS/DSNBYFga/MmU5K kMK71YNLMmqNC1pvFxs61BRNsSi2p695 -----END CERTIFICATE-----Generated at Tue Oct 21 08:09:45 2025 by rpki-client