$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: OvXH60BDkLGLksY6UukNMDAx0NXXqSdSpTvMR0PjmjA= Subject key identifier: 8A:C4:06:3D:40:3F:FB:97:2F:D4:99:AE:A4:D9:94:F2:08:78:68:98 Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0C8B Signing time: Tue 04 Nov 2025 18:28:20 +0000 Manifest this update: Tue 04 Nov 2025 18:28:20 +0000 Manifest next update: Tue 11 Nov 2025 18:28:20 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: Rc0k5Y6sXRY8qqLy/XAfQDfBrzT6IOI4rG4eEXBn0iA=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3218 (0xc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Nov 4 18:28:20 2025 GMT Not After : Nov 11 18:28:20 2025 GMT Subject: CN=690a45c4-1025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:89:0c:d4:79:ab:3b:0b:2e:f4:7c:ce:04: 9c:39:82:3c:ca:04:60:a9:66:de:c6:5e:f1:6c:39: 2b:69:f4:92:52:2b:2c:16:98:9e:3b:c5:d4:d3:3b: 68:e6:d4:db:ed:43:72:81:4f:6e:08:f5:80:3d:50: 0f:0e:3b:1c:e9:9e:2b:dc:a2:cc:c5:7b:ac:77:0e: 39:f0:d2:c5:74:a5:0b:97:af:d2:1b:6f:80:eb:2d: fc:07:10:9e:dc:6d:37:03:db:0b:85:6f:29:27:4b: c2:8f:a8:64:4b:9d:10:97:20:63:a8:7c:12:d6:da: 1b:a9:4c:ea:5d:69:fb:7b:92:bb:47:cc:0e:ae:a3: b8:c0:7c:58:cf:b2:b0:dc:e3:78:dd:33:34:35:af: 26:50:ab:ec:82:04:38:50:76:59:5b:17:8a:98:96: c1:ee:9c:76:ca:d6:ee:9e:ac:0a:3c:a7:fa:57:d3: 27:0c:0a:e2:1c:cb:06:71:d2:96:32:20:32:11:d9: 7a:43:a2:3e:c8:0c:0d:79:ec:24:6b:a2:f1:86:d2: a2:d9:76:8f:58:be:cf:47:c3:e1:b0:da:ba:56:ca: 72:65:db:4b:a3:57:9a:2e:20:0c:47:ad:45:ab:8b: 71:a5:4f:9c:81:25:78:56:7a:d1:af:dc:6f:15:2a: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C4:06:3D:40:3F:FB:97:2F:D4:99:AE:A4:D9:94:F2:08:78:68:98 X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:16:f1:08:4b:b6:1f:5c:f9:36:d5:7b:e0:be:4a:e2:94:97: d5:58:63:22:2d:50:8d:56:09:98:a1:fe:a3:ee:e2:30:aa:1c: d4:ce:d7:e8:47:f8:4e:f6:52:33:ba:c9:41:97:9a:e2:a7:ea: 0d:8c:f9:53:52:a7:df:6e:a1:f6:7a:13:6b:35:1d:69:66:fd: 64:6b:68:a9:65:9f:d4:60:b1:27:8b:93:a0:67:a3:49:22:53: 6e:cf:08:c1:22:cd:81:01:8d:ee:a5:27:0a:21:66:0e:58:a6: 47:b4:c0:a5:48:e5:f9:f5:ed:65:f1:e6:a9:d3:2b:a1:09:e2: c8:99:a0:8e:2f:f5:15:56:c7:97:09:43:3c:f2:3b:81:56:6d: 3e:11:c8:90:de:8d:ae:0f:76:fe:9d:68:37:ae:e2:90:2c:ab: 9c:1a:64:1e:26:2f:1f:ea:d4:09:e2:fc:f7:01:35:75:a2:09: eb:95:8e:28:57:b8:1a:37:4f:8a:ea:8f:ac:bb:02:37:12:22: 16:d9:8d:38:7b:f0:ee:02:bb:7b:8b:40:1a:88:ab:5e:bf:20: 0b:cc:36:17:90:53:b8:1c:04:71:9f:3c:01:79:87:48:61:e3: 4c:65:bf:55:4d:c8:fd:31:85:63:d6:9d:ee:34:34:8e:8d:51: dc:2c:d0:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUxMTA0MTgyODIwWhcNMjUxMTExMTgyODIwWjAYMRYwFAYD VQQDEw02OTBhNDVjNC0xMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UyJDNR5qzsLLvR8zgScOYI8ygRgqWbexl7xbDkrafSSUissFpieO8XU0zto 5tTb7UNygU9uCPWAPVAPDjsc6Z4r3KLMxXusdw458NLFdKULl6/SG2+A6y38BxCe 3G03A9sLhW8pJ0vCj6hkS50QlyBjqHwS1tobqUzqXWn7e5K7R8wOrqO4wHxYz7Kw 3ON43TM0Na8mUKvsggQ4UHZZWxeKmJbB7px2ytbunqwKPKf6V9MnDAriHMsGcdKW MiAyEdl6Q6I+yAwNeewka6LxhtKi2XaPWL7PR8PhsNq6VspyZdtLo1eaLiAMR61F q4txpU+cgSV4VnrRr9xvFSoXBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrEBj1A P/uXL9SZrqTZlPIIeGiYMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgFvEIS7YfXPk21XvgvkrilJfVWGMiLVCNVgmYof6j7uIwqhzUztfo R/hO9lIzuslBl5rip+oNjPlTUqffbqH2ehNrNR1pZv1ka2ipZZ/UYLEni5OgZ6NJ IlNuzwjBIs2BAY3upScKIWYOWKZHtMClSOX59e1l8eap0yuhCeLImaCOL/UVVseX CUM88juBVm0+EciQ3o2uD3b+nWg3ruKQLKucGmQeJi8f6tQJ4vz3ATV1ognrlY4o V7gaN0+K6o+suwI3EiIW2Y04e/DuArt7i0AaiKtevyALzDYXkFO4HARxnzwBeYdI YeNMZb9VTcj9MYVj1p3uNDSOjVHcLNCI -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:37 2025 by rpki-client