$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json) Hash identifier: V+pd9DSgtoGbBs7Xqq1Wc60B6bYp0Rt3IwzGmC+nLUw= Subject key identifier: FC:0F:C9:5B:A1:FF:DE:F4:BD:7C:6A:41:73:C6:BC:3E:F1:15:79:45 Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft Manifest number: 0614 Signing time: Sun 02 Nov 2025 22:50:17 +0000 Manifest this update: Sun 02 Nov 2025 22:50:16 +0000 Manifest next update: Sun 09 Nov 2025 22:50:16 +0000 Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: cZwJ2h32jIGAxhRmZnbtJn0shZkUcgzW19nizkHTeqM=) 2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: ydOAiWCM6NkM+mxAS7XZYLAQc/Fn5GEwebXDqOLlzZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: Nov 2 22:50:16 2025 GMT Not After : Nov 9 22:50:16 2025 GMT Subject: CN=6907e028-33aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:c7:d7:2a:cc:8b:71:8c:e6:f9:c9:ff:43: 7c:ab:80:7b:ee:f3:68:30:cf:0a:b9:42:06:17:76: a8:07:1e:4d:55:86:24:3c:de:a0:ff:98:4c:87:be: 75:df:63:e8:89:98:cb:68:5f:13:c9:8f:d5:d8:8d: dd:27:e2:b6:94:98:27:fd:91:60:f6:9a:a6:46:d9: 32:db:71:3c:a1:f8:fa:1d:0d:72:4f:43:5a:52:68: 08:72:0e:de:d8:9b:51:6e:73:d9:22:b1:8a:70:83: 20:c4:f2:21:e1:08:fa:e9:63:c0:5b:10:2a:e8:1c: 68:45:f2:3f:80:29:e9:ff:74:f7:49:32:f4:ef:cf: 46:66:b1:10:97:ff:eb:ce:c7:99:a2:4d:22:6a:a2: 83:5e:dc:a6:04:c8:81:95:5e:05:fd:1a:25:9a:d4: 67:8c:f3:ac:dc:e5:9c:4c:d1:4a:fe:88:cb:e8:bb: 95:d0:7b:1c:01:23:f5:4b:73:78:a1:56:e9:c0:47: 1d:d1:df:d5:9e:99:a3:1f:59:78:39:2c:59:8e:a0: f2:87:7e:6b:aa:be:e1:60:f3:0c:a6:ba:84:2f:6e: 0f:ef:5b:5f:00:09:b5:c4:af:7a:ba:9a:81:dc:0e: 98:78:84:dd:58:0e:b7:bd:86:bf:d4:22:b3:f3:30: 7b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0F:C9:5B:A1:FF:DE:F4:BD:7C:6A:41:73:C6:BC:3E:F1:15:79:45 X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7f:10:cb:d9:53:8a:37:ef:10:e0:a1:5d:ce:19:37:ad:60: 69:15:6e:ed:cf:e1:7e:d3:ee:5f:ba:a5:21:2c:ad:d0:bc:14: 3d:4f:c7:17:3c:d3:13:b0:8a:d1:50:14:00:fc:c6:6c:7b:1f: 02:47:91:d4:6b:f6:c8:5f:9c:7b:3c:e0:a9:a5:84:03:f0:c0: 2b:2c:d3:1b:c5:a7:c2:2e:2e:05:f5:f6:87:06:9a:e8:28:45: d7:23:bc:72:67:b9:3f:b1:a4:e1:98:a9:59:fa:a6:e0:84:6a: 03:46:81:f0:e9:9b:8a:14:3d:4c:83:04:43:1e:c5:a8:2d:58: db:ec:28:4e:57:28:05:13:1c:f6:1a:23:cf:17:f2:74:32:28: bd:af:91:56:b3:ec:3f:a0:5e:67:df:fe:66:42:30:8a:e8:60: 71:d0:ff:fb:db:70:1e:fb:d5:09:3c:67:71:61:31:d1:b0:17: ba:b0:65:53:af:bd:6d:ac:57:38:02:c9:b8:62:71:ea:f3:08: 16:a0:90:42:b8:f5:28:15:43:04:40:fe:65:6b:3e:8a:7f:5c: f5:32:cb:f9:89:40:d2:6c:28:3d:64:20:64:16:d7:ca:fa:a8: 76:78:f8:c9:09:4e:54:30:33:72:17:1d:b3:1b:06:1a:ea:ed: b0:e2:d6:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjUxMTAyMjI1MDE2WhcNMjUxMTA5MjI1MDE2WjAYMRYwFAYD VQQDEw02OTA3ZTAyOC0zM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxLH1yrMi3GM5vnJ/0N8q4B77vNoMM8KuUIGF3aoBx5NVYYkPN6g/5hMh751 32PoiZjLaF8TyY/V2I3dJ+K2lJgn/ZFg9pqmRtky23E8ofj6HQ1yT0NaUmgIcg7e 2JtRbnPZIrGKcIMgxPIh4Qj66WPAWxAq6BxoRfI/gCnp/3T3STL0789GZrEQl//r zseZok0iaqKDXtymBMiBlV4F/RolmtRnjPOs3OWcTNFK/ojL6LuV0HscASP1S3N4 oVbpwEcd0d/VnpmjH1l4OSxZjqDyh35rqr7hYPMMprqEL24P71tfAAm1xK96upqB 3A6YeITdWA63vYa/1CKz8zB7ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwPyVuh /970vXxqQXPGvD7xFXlFMB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU5QS8yRjhEQ0IwMkMxQ0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9Bckxr Vlg2SVdtd09xMTBOQncxNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWfxDL2VOKN+8Q4KFdzhk3rWBpFW7tz+F+0+5fuqUhLK3QvBQ9T8cX PNMTsIrRUBQA/MZsex8CR5HUa/bIX5x7POCppYQD8MArLNMbxafCLi4F9faHBpro KEXXI7xyZ7k/saThmKlZ+qbghGoDRoHw6ZuKFD1MgwRDHsWoLVjb7ChOVygFExz2 GiPPF/J0Mii9r5FWs+w/oF5n3/5mQjCK6GBx0P/723Ae+9UJPGdxYTHRsBe6sGVT r71trFc4Asm4YnHq8wgWoJBCuPUoFUMEQP5laz6Kf1z1Msv5iUDSbCg9ZCBkFtfK +qh2ePjJCU5UMDNyFx2zGwYa6u2w4tZh -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:07 2025 by rpki-client