$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json) Hash identifier: 5r5chwOwR1H9zdtaHyaNUV8AYIryMB5wpH871TAf+58= Subject key identifier: A0:00:08:AA:38:18:70:4F:F3:E1:2F:20:72:D1:26:E7:DC:BD:06:22 Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft Manifest number: 06C0 Signing time: Sun 02 Nov 2025 22:05:47 +0000 Manifest this update: Sun 02 Nov 2025 22:05:46 +0000 Manifest next update: Sun 09 Nov 2025 22:05:46 +0000 Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: 3nEB3+Hb5bDosPexIXMBliAHIx1Ns2M7l+04zQ4ZPxA=) 2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: LymCYpP9ODjDnMZgIvd8/QCM8E6rGc1JYF+pBCdV8o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Validity Not Before: Nov 2 22:05:46 2025 GMT Not After : Nov 9 22:05:46 2025 GMT Subject: CN=6907d5bb-4d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:6f:89:08:dd:56:be:a3:77:9d:2c:56:c6: a4:ce:7a:f2:a2:0b:2f:b0:49:6d:99:25:0b:1d:fa: 72:12:93:35:7a:8d:c3:9a:0d:bf:58:eb:4f:5d:ca: b7:0a:61:81:d3:f0:0b:9a:23:07:ce:f3:4d:bd:50: 51:3b:ac:ac:33:8a:79:d8:15:57:6a:b0:53:f9:7e: 8c:03:a6:25:c8:bd:c9:3d:92:ba:d7:87:b7:29:dc: 72:a7:fd:b9:86:1e:5e:00:76:3b:18:5c:68:04:65: 1c:4a:93:5f:b3:d7:5f:ac:4b:9f:2c:da:24:71:10: d0:8a:7b:47:80:85:6e:6b:12:56:6d:f4:92:69:5c: d6:eb:6b:cc:ce:88:01:0a:d3:b2:cc:29:28:58:8b: 32:d9:05:54:80:ce:a0:12:f0:7f:98:cd:0c:b5:90: 57:b1:a5:8b:45:69:62:3b:c3:b7:98:7d:cc:68:89: 39:26:d9:cb:d7:f3:fb:09:35:9a:9c:41:da:11:e9: 63:c7:0a:0a:a4:55:8c:6c:ab:a8:24:98:58:3d:49: 5f:6c:e9:f8:cb:75:29:7e:34:cf:f0:7e:11:43:6a: ce:dc:55:09:c5:d4:8f:92:45:76:4c:be:5f:6f:5c: 30:e4:fe:b1:e2:08:51:ac:cc:9d:c7:80:91:ed:75: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:00:08:AA:38:18:70:4F:F3:E1:2F:20:72:D1:26:E7:DC:BD:06:22 X509v3 Authority Key Identifier: keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:48:78:f2:0e:e8:59:9b:0d:83:60:ef:fa:f2:e4:bf:e0:9e: 7d:75:1b:17:07:c2:c5:fa:23:b0:c6:f4:6b:e4:83:c4:2e:ce: 1d:5c:23:38:48:07:53:a8:e9:ee:9d:6a:aa:5b:6b:4f:51:73: 2d:82:7d:18:4d:09:e7:64:27:d7:0d:57:d2:2e:d5:e0:de:8d: 6a:8c:5e:cc:f8:dc:2a:91:d3:8d:e5:5f:7a:45:44:f1:a4:f6: 71:cc:5d:28:70:aa:3b:53:58:8f:d8:41:43:7c:74:f8:7d:c4: 77:a5:17:54:3d:f2:f3:df:79:67:a1:8d:3a:66:2f:a6:b6:15: 33:d6:57:1e:39:ed:44:2c:9b:43:a3:2d:66:1e:b2:03:2a:2c: 52:2c:f2:72:45:3f:2c:08:71:ed:fc:99:29:0a:62:a6:dd:2d: e3:17:a6:6a:5f:64:02:7b:6f:15:f9:14:1c:45:b6:8a:2a:ea: 86:63:d6:bb:17:4c:73:eb:0c:ca:08:cf:46:33:bf:e3:57:57: 12:08:51:c7:69:b2:3b:f1:9c:e9:02:f4:03:88:09:a5:14:ae: a1:2a:3c:82:3f:e3:84:4f:a9:65:28:67:8f:4a:9f:87:b9:db: d5:8e:56:1f:25:f8:24:4d:4c:da:ca:ac:f8:47:16:bf:1d:5f: 10:d0:06:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2RTE0QjEwMDFD MDgxOUREQTkwHhcNMjUxMTAyMjIwNTQ2WhcNMjUxMTA5MjIwNTQ2WjAYMRYwFAYD VQQDEw02OTA3ZDViYi00ZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9pviQjdVr6jd50sVsakznryogsvsEltmSULHfpyEpM1eo3Dmg2/WOtPXcq3 CmGB0/ALmiMHzvNNvVBRO6ysM4p52BVXarBT+X6MA6YlyL3JPZK614e3Kdxyp/25 hh5eAHY7GFxoBGUcSpNfs9dfrEufLNokcRDQintHgIVuaxJWbfSSaVzW62vMzogB CtOyzCkoWIsy2QVUgM6gEvB/mM0MtZBXsaWLRWliO8O3mH3MaIk5JtnL1/P7CTWa nEHaEeljxwoKpFWMbKuoJJhYPUlfbOn4y3UpfjTP8H4RQ2rO3FUJxdSPkkV2TL5f b1ww5P6x4ghRrMydx4CR7XXZ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAACKo4 GHBP8+EvIHLRJufcvQYiMB8GA1UdIwQYMBaAFMaTmbEy4a5rLqMRbhSxABwIGd2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDA1Qy9ERUNFMEYwQTdC RDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJtc3VveEZ1RkxFQUhBZ1oz YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwT1pzVExocm1zdW94RnVGTEVBSEFnWjNhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJt c3VveEZ1RkxFQUhBZ1ozYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVSHjyDuhZmw2DYO/68uS/4J59dRsXB8LF+iOwxvRr5IPELs4dXCM4 SAdTqOnunWqqW2tPUXMtgn0YTQnnZCfXDVfSLtXg3o1qjF7M+NwqkdON5V96RUTx pPZxzF0ocKo7U1iP2EFDfHT4fcR3pRdUPfLz33lnoY06Zi+mthUz1lceOe1ELJtD oy1mHrIDKixSLPJyRT8sCHHt/JkpCmKm3S3jF6ZqX2QCe28V+RQcRbaKKuqGY9a7 F0xz6wzKCM9GM7/jV1cSCFHHabI78ZzpAvQDiAmlFK6hKjyCP+OET6llKGePSp+H udvVjlYfJfgkTUzayqz4Rxa/HV8Q0Ab6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:19 2025 by rpki-client