$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: 9fo6TM8iQqh+vlmmMsj5GLYoIkEeo2Ip944V/cBXyi8= Subject key identifier: B0:CC:37:FF:4C:B9:10:80:B3:4D:54:78:39:55:9A:90:D1:77:5C:22 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 23A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 2386 Signing time: Sat 18 Oct 2025 16:04:34 +0000 Manifest this update: Sat 18 Oct 2025 16:04:33 +0000 Manifest next update: Sat 25 Oct 2025 16:04:33 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: lx2IGwnUeAG7Jth6qbadbrzMuLnV53UE5QieHU4rh08=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: yQ+XYCupRjpKC1z+KmqRpy0/MHYgLpl3GjcGFImbs1s=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: c0fUfF2O4q3/3ooNrYKlqBAmFHkp10eQdlPnj3yP614=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9122 (0x23a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Oct 18 16:04:33 2025 GMT Not After : Oct 25 16:04:33 2025 GMT Subject: CN=68f3ba91-334d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:e8:80:bd:58:78:9f:ed:43:01:ef:6f:28: 50:5d:12:2b:7d:2f:69:d4:7d:1f:cb:af:c6:ac:04: c2:68:24:9a:4a:9d:a9:e6:fc:60:76:2b:da:60:5c: 71:7a:7a:55:9e:2c:36:16:7a:d5:42:cf:9b:3a:07: 02:b7:56:3b:48:58:fb:75:72:3f:e8:0e:96:d2:43: 87:f8:f7:23:cb:e3:23:2f:b9:67:bf:ef:c5:63:15: 93:cd:53:a1:21:ba:bd:02:e1:ee:79:a5:18:85:47: 80:a4:82:93:93:de:45:02:6e:9e:22:56:e9:01:fd: 1d:95:77:1a:69:48:64:e3:4c:c8:7b:ac:9e:cd:54: 52:98:86:db:a0:cb:fe:f4:3d:e1:f0:9a:0a:63:43: 21:da:5b:34:d5:b5:f1:b9:c1:4c:f8:b5:55:64:c2: c3:0a:13:33:2e:c4:5b:41:d4:7b:0a:ab:6e:12:ef: ba:93:ed:3f:c1:be:eb:9a:2f:04:73:67:87:f9:51: 78:fd:99:2d:d8:d3:c7:20:ca:16:97:17:55:25:65: 11:4d:96:9b:68:07:83:58:2f:4a:c1:12:2c:d8:37: f6:19:01:ce:34:d5:fc:91:f0:b5:9c:f6:4f:fb:11: a9:aa:c6:43:95:53:90:d8:e3:78:b3:8b:88:70:54: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CC:37:FF:4C:B9:10:80:B3:4D:54:78:39:55:9A:90:D1:77:5C:22 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:bd:50:1c:39:be:93:78:1d:d2:2a:56:1f:f9:5f:54:b0:6d: 1f:ae:bb:ff:92:1d:e5:c7:e3:6a:65:6c:7e:1a:ee:ee:9d:be: 94:53:02:e7:99:49:f9:94:8e:21:36:25:23:56:d1:34:64:ea: 83:ab:b5:06:86:fe:c5:dc:57:7f:f6:44:f3:4a:66:3f:e7:74: 6c:dd:e5:a2:ba:63:ac:e1:a9:bc:e8:f5:d4:20:31:4e:69:07: 8f:2e:d2:06:23:37:a2:f1:87:ea:6d:f9:ae:6a:d8:e1:eb:8f: e1:19:91:6d:83:0b:0a:05:db:39:eb:d5:7f:be:06:cd:92:c4: fa:16:c9:11:b6:a0:b1:13:4c:15:8b:09:35:ad:33:ef:b9:12: db:36:42:f2:dd:05:4e:4a:31:89:3c:65:58:be:b6:30:e5:c1: 09:c1:4c:dc:4e:84:b6:55:14:3e:87:0a:41:3a:96:81:30:90: c6:50:64:7e:a3:80:67:7b:e8:d8:1b:39:ad:9f:b4:1c:15:c4: 9d:0b:6a:12:ea:1d:11:0f:dd:ae:7a:c9:6f:dd:f3:1c:10:0c: 75:5c:9e:55:18:75:7a:0a:18:db:84:ce:60:2f:82:7f:94:47: 56:76:dc:21:00:9b:9d:3d:24:ae:ab:96:c5:58:55:87:12:c3: 6f:ea:3b:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjUxMDE4MTYwNDMzWhcNMjUxMDI1MTYwNDMzWjAYMRYwFAYD VQQDEw02OGYzYmE5MS0zMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjXogL1YeJ/tQwHvbyhQXRIrfS9p1H0fy6/GrATCaCSaSp2p5vxgdivaYFxx enpVniw2FnrVQs+bOgcCt1Y7SFj7dXI/6A6W0kOH+Pcjy+MjL7lnv+/FYxWTzVOh Ibq9AuHueaUYhUeApIKTk95FAm6eIlbpAf0dlXcaaUhk40zIe6yezVRSmIbboMv+ 9D3h8JoKY0Mh2ls01bXxucFM+LVVZMLDChMzLsRbQdR7CqtuEu+6k+0/wb7rmi8E c2eH+VF4/Zkt2NPHIMoWlxdVJWURTZabaAeDWC9KwRIs2Df2GQHONNX8kfC1nPZP +xGpqsZDlVOQ2ON4s4uIcFR02QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDMN/9M uRCAs01UeDlVmpDRd1wiMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDlvVAcOb6TeB3SKlYf+V9UsG0frrv/kh3lx+NqZWx+Gu7unb6UUwLn mUn5lI4hNiUjVtE0ZOqDq7UGhv7F3Fd/9kTzSmY/53Rs3eWiumOs4am86PXUIDFO aQePLtIGIzei8Yfqbfmuatjh64/hGZFtgwsKBds569V/vgbNksT6FskRtqCxE0wV iwk1rTPvuRLbNkLy3QVOSjGJPGVYvrYw5cEJwUzcToS2VRQ+hwpBOpaBMJDGUGR+ o4Bne+jYGzmtn7QcFcSdC2oS6h0RD92ueslv3fMcEAx1XJ5VGHV6ChjbhM5gL4J/ lEdWdtwhAJudPSSuq5bFWFWHEsNv6jtt -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:00 2025 by rpki-client