$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: Jn9pOp5340kWFig9llQrOLfK1f8rOXLHh8lgZPu+0uY= Subject key identifier: 1E:2C:4B:18:FB:06:87:5F:13:DB:E7:00:4C:B6:1A:67:65:0B:B5:AA Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 8E Signing time: Sun 19 Oct 2025 09:49:51 +0000 Manifest this update: Sun 19 Oct 2025 09:49:50 +0000 Manifest next update: Sun 26 Oct 2025 09:49:50 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: zGHzrkFkXaWvIcm62hYCKdvR1HqUKQKhO/TExkyvaaI=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Oct 19 09:49:50 2025 GMT Not After : Oct 26 09:49:50 2025 GMT Subject: CN=68f4b43e-064d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:45:a2:7d:45:63:6e:18:d4:ef:f2:5f:9b: 49:3e:dc:40:4a:6d:9f:03:c3:32:6d:20:fe:dc:94: 08:c8:2f:09:51:86:c6:26:2d:50:d6:3f:7a:e3:5e: 2b:37:e9:ef:8f:41:f1:7d:95:aa:29:39:3c:85:e0: 6a:5e:ca:dd:72:30:34:96:d8:cb:09:d4:cc:47:d0: fd:23:06:e7:e0:64:43:c5:fd:3b:b6:37:ee:10:14: f3:99:16:97:ac:94:b1:a0:32:f3:a5:1d:60:89:a4: 81:ab:7e:ad:69:05:1e:fe:5d:f1:8d:cf:89:01:0c: c9:c7:b8:04:e2:68:40:ee:11:7d:13:c6:28:78:49: c8:e9:96:f8:0f:a0:32:e6:d5:c9:46:6c:dc:95:47: bd:87:39:cc:aa:21:43:74:f1:60:6f:fa:6f:16:ca: 38:53:80:04:22:00:87:9b:99:4c:23:0e:ea:0a:45: 3b:02:9c:9e:eb:f9:9f:0d:98:f7:b3:0a:25:8b:4d: e8:96:d3:7b:f9:8f:05:c2:10:33:c0:f7:c9:b6:04: 47:22:29:50:26:d1:00:b1:4f:22:5b:ab:f1:20:a5: dc:29:41:db:a1:51:c3:19:2c:3e:dc:d5:69:7b:5a: 0d:40:b1:47:b6:a5:de:78:27:17:60:54:36:21:1a: be:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2C:4B:18:FB:06:87:5F:13:DB:E7:00:4C:B6:1A:67:65:0B:B5:AA X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:1f:be:65:59:a5:49:68:95:a8:74:7a:ab:4b:d7:b8:17:86: 8b:a4:f8:12:ee:88:10:c0:f9:08:db:88:45:ac:4e:09:f0:21: 4f:ac:c3:35:ba:fa:98:98:00:5a:97:31:00:87:0f:e5:a8:a0: dc:44:a2:a5:99:11:74:e1:23:7e:9a:d8:dd:c5:e5:91:06:d8: ae:9c:35:37:57:9a:bc:d6:14:a2:4b:bc:df:c7:f3:11:04:5a: ba:4a:b7:d2:45:e6:b6:9b:4f:57:25:e7:4f:0f:d7:9b:6f:77: f2:c5:cc:4c:ae:f4:1d:23:bc:09:a8:96:77:2a:7d:04:30:26: 21:a8:61:ad:04:fe:e1:4e:d7:75:38:03:19:14:98:6f:d1:db: 1a:bd:fd:91:f4:ad:d7:de:c7:fa:79:23:99:1c:f1:93:c7:9a: d2:44:51:4d:06:61:42:f0:08:d8:e8:5c:b0:94:7f:72:07:41: 57:a4:a4:21:55:2b:cf:30:a2:f4:59:0f:99:45:67:77:ee:39: b7:f6:e5:27:95:85:3f:77:02:79:3b:6d:41:b6:a0:31:10:f6: 0d:69:6f:75:f1:4a:c9:f1:6f:ae:4a:ee:bb:de:9b:19:d4:fa: 31:3b:f6:f6:8d:23:fc:1d:6b:48:2a:3a:39:50:15:1b:73:d8: a3:0d:a9:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRkYxMTAvBgNVBAUTKDVFRkRFOThDNEZCRjhEMTE4N0I2ODU4RUJDODFGMDYy NUIyOTMxNjAwHhcNMjUxMDE5MDk0OTUwWhcNMjUxMDI2MDk0OTUwWjAYMRYwFAYD VQQDEw02OGY0YjQzZS0wNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAtFon1FY24Y1O/yX5tJPtxASm2fA8MybSD+3JQIyC8JUYbGJi1Q1j96414r N+nvj0HxfZWqKTk8heBqXsrdcjA0ltjLCdTMR9D9Iwbn4GRDxf07tjfuEBTzmRaX rJSxoDLzpR1giaSBq36taQUe/l3xjc+JAQzJx7gE4mhA7hF9E8YoeEnI6Zb4D6Ay 5tXJRmzclUe9hznMqiFDdPFgb/pvFso4U4AEIgCHm5lMIw7qCkU7Apye6/mfDZj3 swoli03oltN7+Y8FwhAzwPfJtgRHIilQJtEAsU8iW6vxIKXcKUHboVHDGSw+3NVp e1oNQLFHtqXeeCcXYFQ2IRq+2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4sSxj7 BodfE9vnAEy2GmdlC7WqMB8GA1UdIwQYMBaAFF796YxPv40Rh7aFjryB8GJbKTFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yMEJFMUEzMEQ3 RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pSR0h0b1dPdklId1lsc3BN V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1XQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNGRi8yMEJFMUEzMEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pS R0h0b1dPdklId1lsc3BNV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMH75lWaVJaJWodHqrS9e4F4aLpPgS7ogQwPkI24hFrE4J8CFPrMM1 uvqYmABalzEAhw/lqKDcRKKlmRF04SN+mtjdxeWRBtiunDU3V5q81hSiS7zfx/MR BFq6SrfSRea2m09XJedPD9ebb3fyxcxMrvQdI7wJqJZ3Kn0EMCYhqGGtBP7hTtd1 OAMZFJhv0dsavf2R9K3X3sf6eSOZHPGTx5rSRFFNBmFC8AjY6FywlH9yB0FXpKQh VSvPMKL0WQ+ZRWd37jm39uUnlYU/dwJ5O21BtqAxEPYNaW918UrJ8W+uSu673psZ 1PoxO/b2jSP8HWtIKjo5UBUbc9ijDanT -----END CERTIFICATE-----Generated at Mon Oct 20 21:02:48 2025 by rpki-client