$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: gmBaZghLOAfNO0yXUEYF5JBNF+L2JjjUPOsNKSzDrn0= Subject key identifier: AD:48:86:C2:82:8B:73:F5:9D:9A:AB:8B:92:5C:50:91:8C:98:A0:CE Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 019C Signing time: Sun 19 Oct 2025 05:56:39 +0000 Manifest this update: Sun 19 Oct 2025 05:56:38 +0000 Manifest next update: Sun 26 Oct 2025 05:56:38 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: sK6llomUyMOETPEtlqeilrUdEnwCX88J+fvQG5LOHjQ=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: Ko2wZOucS0J/Gzb2C9yks7gKzQf0Lz0Srb4aABcYNMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: Oct 19 05:56:38 2025 GMT Not After : Oct 26 05:56:38 2025 GMT Subject: CN=68f47d97-8e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:71:0b:91:05:b4:9e:ba:7d:a3:cc:2e:4f: 87:63:7d:aa:44:bc:3d:e5:e4:0b:9c:50:64:85:34: 71:9d:4b:56:ec:c5:bc:c7:d3:8b:73:b1:7b:0f:a1: 16:9d:2a:38:32:2a:0c:6b:a3:32:37:d1:a0:be:aa: 4f:2e:a1:be:76:31:73:13:36:0f:c6:22:6a:20:d2: 89:4d:90:9a:5a:0b:3c:74:66:42:79:1b:1e:31:a1: 37:8f:1a:c8:81:9d:c7:28:5b:14:b8:10:ff:ac:9c: 14:42:5d:2c:00:b1:73:41:48:da:ab:7c:c6:2e:1e: 9f:dc:a8:84:27:1f:51:52:89:e5:ce:a1:a5:d7:d6: a3:67:c8:27:6d:a3:1d:3f:c8:ba:f2:28:9e:9f:93: d5:a5:d2:3b:b1:48:40:d8:1d:42:8b:ae:b3:94:b6: 4b:52:30:16:55:33:13:96:b8:ea:d7:1f:e2:fd:19: b5:12:6b:d2:fe:4e:f5:b6:50:43:97:c8:e1:18:f3: 79:17:23:e0:4b:29:82:99:d3:84:aa:20:3d:4f:31: 2e:74:9b:50:8c:55:c9:dc:d7:9a:e2:ca:11:82:0a: 41:cc:01:2b:fe:fe:19:ab:6e:e8:7b:90:7c:4b:6a: 33:e7:6d:59:4a:cb:25:47:1f:c6:e3:1a:5c:0a:35: 35:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:48:86:C2:82:8B:73:F5:9D:9A:AB:8B:92:5C:50:91:8C:98:A0:CE X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:11:b7:9f:f5:78:e5:72:7d:0d:f3:c0:51:8c:df:2c:61:ec: 6c:c7:aa:6e:b3:2d:96:bd:fa:13:3e:8d:2f:4c:b3:ad:57:72: 9a:f9:00:fb:41:74:c3:8e:16:26:26:ab:93:ee:e7:a2:ae:80: 3d:09:e7:88:c2:d9:e2:c3:13:0e:73:ff:11:33:34:1f:cb:83: 51:b9:22:b7:06:86:27:2b:a6:7e:45:29:8f:e1:9b:b1:a7:50: 64:35:9d:7b:1f:cc:c2:a5:ef:9e:59:4c:b8:48:02:77:af:87: df:61:eb:68:a4:e1:1f:fc:20:2e:f6:9a:31:65:34:8b:e7:05: bc:77:9e:f1:48:dd:da:d9:d5:31:54:37:44:46:09:ab:19:52: 5a:32:39:aa:a0:7f:5c:29:ef:fd:09:85:48:bb:28:bc:ca:64: 6e:3f:64:76:19:79:ed:bd:1b:e6:1b:13:af:72:23:41:f9:10: f4:ce:6b:c3:8c:4d:81:f8:e3:90:f9:59:3d:30:43:11:0b:f3: 32:8b:07:8b:3a:3c:6c:70:ec:38:3f:ed:ff:12:52:ee:79:31: d0:c9:53:fa:02:56:fa:cc:60:3c:aa:32:c1:26:e3:95:53:62: c7:f9:9c:9b:7e:14:f4:a0:2d:39:46:b7:ce:eb:0d:21:9c:a7: 21:b8:f1:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjUxMDE5MDU1NjM4WhcNMjUxMDI2MDU1NjM4WjAYMRYwFAYD VQQDEw02OGY0N2Q5Ny04ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtClxC5EFtJ66faPMLk+HY32qRLw95eQLnFBkhTRxnUtW7MW8x9OLc7F7D6EW nSo4MioMa6MyN9GgvqpPLqG+djFzEzYPxiJqINKJTZCaWgs8dGZCeRseMaE3jxrI gZ3HKFsUuBD/rJwUQl0sALFzQUjaq3zGLh6f3KiEJx9RUonlzqGl19ajZ8gnbaMd P8i68iien5PVpdI7sUhA2B1Ci66zlLZLUjAWVTMTlrjq1x/i/Rm1EmvS/k71tlBD l8jhGPN5FyPgSymCmdOEqiA9TzEudJtQjFXJ3Nea4soRggpBzAEr/v4Zq27oe5B8 S2oz521ZSsslRx/G4xpcCjU1uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1IhsKC i3P1nZqri5JcUJGMmKDOMB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoEbef9Xjlcn0N88BRjN8sYexsx6pusy2WvfoTPo0vTLOtV3Ka+QD7 QXTDjhYmJquT7ueiroA9CeeIwtniwxMOc/8RMzQfy4NRuSK3BoYnK6Z+RSmP4Zux p1BkNZ17H8zCpe+eWUy4SAJ3r4ffYetopOEf/CAu9poxZTSL5wW8d57xSN3a2dUx VDdERgmrGVJaMjmqoH9cKe/9CYVIuyi8ymRuP2R2GXntvRvmGxOvciNB+RD0zmvD jE2B+OOQ+Vk9MEMRC/MyiweLOjxscOw4P+3/ElLueTHQyVP6Alb6zGA8qjLBJuOV U2LH+ZybfhT0oC05RrfO6w0hnKchuPG0 -----END CERTIFICATE-----Generated at Tue Oct 21 02:10:22 2025 by rpki-client