$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: 2NFdUA5pj5ysXSiNJBrcrnbn2T/6KCxyrj2sKSAnV6s= Subject key identifier: BA:70:57:77:08:8A:44:38:A2:36:5A:E6:DB:23:8A:52:76:1B:91:EE Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0CD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0CA5 Signing time: Sun 02 Nov 2025 18:26:24 +0000 Manifest this update: Sun 02 Nov 2025 18:26:24 +0000 Manifest next update: Sun 09 Nov 2025 18:26:24 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: RHCOaaNJbHDVQVacK2bucFjmkJYjOlRfEv1rwPDqJwQ=) 2: F0202A84B36311F082F02072C4F9AE02.roa (hash: BPqEGs/kp4/YORti6uUMV8XFvZq0a3v1h7gImxJAxZo=) 3: C13356C0921511F089DDCF39C4F9AE02.roa (hash: GIRtzwnKS+hvb6bEPI5Irt7NyfjR/9n068VTfKa3GPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3281 (0xcd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Nov 2 18:26:24 2025 GMT Not After : Nov 9 18:26:24 2025 GMT Subject: CN=6907a250-38eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:cf:f6:1d:22:2b:dd:6b:79:dd:56:a1:cf: 48:5b:ae:7f:7d:44:75:7b:75:65:5a:8a:71:4f:75: 87:92:78:a7:de:ac:8e:cf:08:d6:63:b5:c5:07:4f: 12:36:49:3a:51:67:c8:3d:f7:df:c4:ad:a2:db:c9: 77:ea:0e:c7:2a:0c:73:9a:25:c2:cb:e9:18:88:6e: c0:af:74:bc:a5:fe:8f:ca:88:85:1b:67:1b:59:19: 51:c3:9e:e5:cd:7f:36:8c:4e:67:2d:59:66:4c:1f: 4c:bd:99:4a:ca:67:28:b4:de:c5:36:5d:6b:23:ed: b7:94:d7:50:76:82:bf:6a:70:a0:6d:63:10:ab:97: 71:96:ea:8f:12:b3:da:81:5f:f2:d6:09:48:97:f7: 3b:10:5f:6e:d0:fc:e2:cf:3e:90:13:19:21:75:a7: 75:62:49:5a:1f:36:34:2a:6d:12:ac:a1:b9:a0:5f: af:d5:c0:68:4e:64:e1:16:8e:47:45:78:b6:de:d8: 4a:27:5a:36:38:be:93:80:ac:13:aa:26:09:96:f6: 78:84:4c:05:d8:64:6e:0c:de:f8:b5:a5:24:2d:83: cd:0f:f6:89:bb:22:0e:24:07:c8:9e:43:f8:61:88: 34:90:71:5b:8f:6c:fd:ef:47:90:76:8d:3e:c4:3c: 3d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:70:57:77:08:8A:44:38:A2:36:5A:E6:DB:23:8A:52:76:1B:91:EE X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:af:71:91:a5:01:dd:25:cf:10:c3:fd:70:5e:1c:e0:67:67: 68:10:95:a5:4c:63:bb:1b:4c:3a:75:fd:5d:81:31:1a:2c:49: b4:59:16:d9:76:ce:63:ac:39:59:05:43:1a:2e:89:a0:13:2c: 86:dd:1d:00:7a:8b:bc:db:c2:df:f0:ec:f1:c1:96:57:02:ef: f5:97:d8:66:ad:8e:c4:04:c4:fa:fd:09:e2:f0:48:ed:aa:43: e2:70:52:2a:fe:2f:57:a9:c4:e7:32:c9:1a:22:c0:8c:93:2a: 44:d2:5c:6c:7a:f8:7b:20:3a:f9:dc:bc:c6:f9:8a:71:4a:d5: e3:ca:91:94:41:b6:a3:0a:b8:9e:e7:8d:cb:93:ba:78:71:24: c0:b9:f6:8c:1a:c5:c0:72:f9:e6:67:30:d6:38:05:83:cb:38: 1a:d3:4b:cd:44:66:33:ff:9f:9c:db:3d:ee:d1:e8:c1:8d:31: 41:1b:d9:ad:22:4d:7a:0a:27:a9:09:a5:d3:65:54:f7:6f:f9: e4:1a:3a:58:66:d2:19:04:66:7d:b8:8d:2a:6d:09:ee:52:43: f4:99:d7:bc:f6:87:08:c5:10:96:bb:34:02:05:a2:b4:14:fe: 58:2f:a4:fc:e1:82:bc:d2:b9:79:89:8c:1a:b2:76:b6:19:09: 6e:f4:5e:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUxMTAyMTgyNjI0WhcNMjUxMTA5MTgyNjI0WjAYMRYwFAYD VQQDEw02OTA3YTI1MC0zOGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NPP9h0iK91red1Woc9IW65/fUR1e3VlWopxT3WHknin3qyOzwjWY7XFB08S Nkk6UWfIPfffxK2i28l36g7HKgxzmiXCy+kYiG7Ar3S8pf6PyoiFG2cbWRlRw57l zX82jE5nLVlmTB9MvZlKymcotN7FNl1rI+23lNdQdoK/anCgbWMQq5dxluqPErPa gV/y1glIl/c7EF9u0Pzizz6QExkhdad1YklaHzY0Km0SrKG5oF+v1cBoTmThFo5H RXi23thKJ1o2OL6TgKwTqiYJlvZ4hEwF2GRuDN74taUkLYPND/aJuyIOJAfInkP4 YYg0kHFbj2z970eQdo0+xDw9NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpwV3cI ikQ4ojZa5tsjilJ2G5HuMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBr3GRpQHdJc8Qw/1wXhzgZ2doEJWlTGO7G0w6df1dgTEaLEm0WRbZ ds5jrDlZBUMaLomgEyyG3R0Aeou828Lf8OzxwZZXAu/1l9hmrY7EBMT6/Qni8Ejt qkPicFIq/i9XqcTnMskaIsCMkypE0lxsevh7IDr53LzG+YpxStXjypGUQbajCrie 543Lk7p4cSTAufaMGsXAcvnmZzDWOAWDyzga00vNRGYz/5+c2z3u0ejBjTFBG9mt Ik16CiepCaXTZVT3b/nkGjpYZtIZBGZ9uI0qbQnuUkP0mde89ocIxRCWuzQCBaK0 FP5YL6T84YK80rl5iYwasna2GQlu9F6C -----END CERTIFICATE-----Generated at Tue Nov 4 01:05:17 2025 by rpki-client