$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: 0MpWVWPOfM8I10sTCvSzwAtRyCFW0EiSq56L6CFKqm8= Subject key identifier: 8D:63:D9:97:94:43:C2:9B:9D:5B:EF:F4:33:DC:1F:44:CE:3A:69:4A Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 03D0 Signing time: Thu 23 Oct 2025 01:55:10 +0000 Manifest this update: Thu 23 Oct 2025 01:55:10 +0000 Manifest next update: Thu 30 Oct 2025 01:55:10 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: Vw6cgHg78/tJ3YQkINPAagd58VOEEQNzFAOFQ/3FSls=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: DbGKbMecwcykqDAfU21+x6Kvm9Z6g5WTzg4SdqXRisc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Oct 23 01:55:10 2025 GMT Not After : Oct 30 01:55:10 2025 GMT Subject: CN=68f98afe-00f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:41:1d:04:88:a0:e0:e7:dc:a8:79:da:9b:b9: 80:a1:e7:0d:0f:74:0f:58:70:14:25:24:bd:49:9d: f2:72:68:06:41:0d:5f:8e:d3:98:38:04:98:f3:db: d8:94:66:68:0a:09:3c:b5:a6:ce:d0:6d:ea:d7:db: 68:90:53:76:d1:b6:d9:c8:84:e3:2e:04:ec:45:7b: 27:c3:1e:62:7d:57:c7:c5:b7:c5:20:c6:74:44:e1: 14:f6:8c:89:70:86:9a:9e:0b:fc:51:a8:db:ec:66: 10:12:b6:14:51:79:d0:cf:88:a2:ab:af:7f:47:0a: cd:46:05:c3:7d:44:0c:41:29:e3:cc:8e:00:9a:5d: 14:ad:a5:9d:51:68:7c:63:07:10:8c:51:bc:f0:25: 65:bb:0f:39:6a:44:dc:09:27:33:03:61:7b:fc:e2: b9:98:d6:4a:45:75:ff:67:2b:9d:96:c4:46:a1:ef: 23:b3:fa:d4:a8:a4:14:16:06:5d:b8:e9:1b:84:f7: 9a:26:35:46:c3:59:85:fa:64:83:08:bf:7f:dd:a1: 8d:bf:41:55:4d:81:2e:04:6e:e8:66:d3:c2:43:82: f9:4a:e9:10:ae:68:01:e4:ca:1e:2e:68:d7:a2:7e: 5f:62:aa:b5:ac:85:94:5c:96:ff:88:ea:20:11:92: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:63:D9:97:94:43:C2:9B:9D:5B:EF:F4:33:DC:1F:44:CE:3A:69:4A X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ba:66:ca:03:58:c4:40:8d:99:ce:1d:1c:59:22:6c:bf:e1: 14:24:63:42:b0:1c:ee:dd:2e:da:d0:f4:4a:42:1e:7d:21:34: 42:ca:cf:6d:21:a5:ff:89:77:9c:6b:18:45:7b:98:ca:3b:b8: 54:df:cd:43:87:18:11:54:43:a6:c4:79:8e:01:99:c1:e6:fb: 38:39:34:6d:2a:9e:2b:44:4b:c3:86:53:ef:8e:70:48:8c:bf: 45:aa:8a:ea:1c:54:09:40:bf:d7:07:0f:e4:bb:fb:b3:40:79: 8c:4c:cb:e7:4d:65:fb:7e:bf:26:85:ca:0a:b3:73:00:6d:6e: 8a:40:a4:c3:41:fc:bf:38:0e:fb:31:50:7a:13:38:8d:f1:ab: 5f:08:13:74:04:7f:29:6e:3d:b9:f8:2c:4a:f4:4d:4b:30:ff: 57:42:e0:8a:d6:ec:2a:9f:29:cc:e2:0d:6c:24:c6:e8:d0:fc: bd:5d:54:c9:19:06:2d:cc:b0:a2:12:c0:8f:00:fe:06:69:0d: 29:65:5b:70:45:f6:c6:77:92:bf:ec:fd:f7:a9:83:a5:76:fa: a7:fd:05:52:ec:ff:b5:63:50:a7:98:d3:fb:6c:72:e0:95:44: 27:af:e1:5f:ff:14:cf:a5:64:9f:bc:d4:df:cc:8f:fa:be:44: 54:52:af:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjUxMDIzMDE1NTEwWhcNMjUxMDMwMDE1NTEwWjAYMRYwFAYD VQQDEw02OGY5OGFmZS0wMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UEdBIig4OfcqHnam7mAoecND3QPWHAUJSS9SZ3ycmgGQQ1fjtOYOASY89vY lGZoCgk8tabO0G3q19tokFN20bbZyITjLgTsRXsnwx5ifVfHxbfFIMZ0ROEU9oyJ cIaangv8Uajb7GYQErYUUXnQz4iiq69/RwrNRgXDfUQMQSnjzI4Aml0UraWdUWh8 YwcQjFG88CVluw85akTcCSczA2F7/OK5mNZKRXX/ZyudlsRGoe8js/rUqKQUFgZd uOkbhPeaJjVGw1mF+mSDCL9/3aGNv0FVTYEuBG7oZtPCQ4L5SukQrmgB5MoeLmjX on5fYqq1rIWUXJb/iOogEZKa/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1j2ZeU Q8KbnVvv9DPcH0TOOmlKMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwumbKA1jEQI2Zzh0cWSJsv+EUJGNCsBzu3S7a0PRKQh59ITRCys9t IaX/iXecaxhFe5jKO7hU381DhxgRVEOmxHmOAZnB5vs4OTRtKp4rREvDhlPvjnBI jL9FqorqHFQJQL/XBw/ku/uzQHmMTMvnTWX7fr8mhcoKs3MAbW6KQKTDQfy/OA77 MVB6EziN8atfCBN0BH8pbj25+CxK9E1LMP9XQuCK1uwqnynM4g1sJMbo0Py9XVTJ GQYtzLCiEsCPAP4GaQ0pZVtwRfbGd5K/7P33qYOldvqn/QVS7P+1Y1CnmNP7bHLg lUQnr+Ff/xTPpWSfvNTfzI/6vkRUUq/7 -----END CERTIFICATE-----Generated at Sat Oct 25 03:11:56 2025 by rpki-client