$ rpki-client -vvf rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft File: Cxopcl-6iizdVPJWV-WHR46_u68.mft (raw, json) Hash identifier: 9QJDUyRwYdsy6pqCIRk+WvL7jLqWVcIfl4MJrbH5794= Subject key identifier: FE:AF:2A:C8:29:65:30:FE:97:B3:49:65:B1:87:C8:60:E3:FA:17:DF Authority key identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF Certificate issuer: /CN=A911793C/serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft Manifest number: 04 Signing time: Sun 19 Oct 2025 11:40:54 +0000 Manifest this update: Sun 19 Oct 2025 11:40:53 +0000 Manifest next update: Sun 26 Oct 2025 11:40:53 +0000 Files and hashes: 1: Cxopcl-6iizdVPJWV-WHR46_u68.crl (hash: XhPPQmaeW1qmQfUqhTbZ0j4yeHyBz9BOXguXN4Ti1TQ=) 2: 82E0EA4AA98F11F0BFFFD266C4F9AE02.roa (hash: U3fNgyRsEYYGrlqYay2UliRAIR25zBAEihTaCJp8u/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911793C, serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF Validity Not Before: Oct 19 11:40:53 2025 GMT Not After : Oct 26 11:40:53 2025 GMT Subject: CN=68f4ce45-7fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:c1:8e:33:e4:d0:5f:ec:50:3e:d0:62:c1: 2c:f0:a0:fd:6f:6e:48:ee:29:8d:3c:4d:00:2b:82: d8:ee:f2:54:5f:99:c9:48:c6:2b:50:19:4b:50:9b: 7a:5c:fb:75:5c:54:8a:49:b9:77:33:17:4d:37:9f: 21:ad:19:b6:e2:11:f9:ac:d6:07:ce:0c:a4:d3:ba: bc:5d:05:6e:67:03:87:18:c4:b4:1a:ef:92:63:2f: 45:a3:b6:a4:2a:91:9a:2a:f3:51:b8:d8:98:ae:13: dd:28:a4:03:4e:67:0d:eb:42:90:97:5e:6b:c2:41: 71:ae:6b:2e:69:0f:89:4c:6c:98:ee:48:5a:cb:8c: 9b:a6:37:05:42:7d:aa:9f:cc:49:a1:29:22:86:3d: 42:9c:9b:c4:37:4a:ac:27:8b:7f:c6:ab:bd:f3:b6: 99:1b:25:48:19:f2:2c:c9:6e:94:19:6e:87:03:41: c5:0e:27:ac:1b:4a:da:d3:b6:52:d7:92:70:ab:3f: e0:4d:00:96:11:3e:fe:7a:93:cd:8a:b5:fc:33:2b: 46:cf:bd:df:3f:80:75:d9:34:78:c1:3d:d5:b9:77: 07:77:95:46:9e:b3:8f:57:5b:15:02:ec:58:5e:03: c4:15:c7:5e:fa:72:b8:4c:4b:f3:5e:31:7d:fb:00: 6a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AF:2A:C8:29:65:30:FE:97:B3:49:65:B1:87:C8:60:E3:FA:17:DF X509v3 Authority Key Identifier: keyid:0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:e3:92:53:68:8c:00:79:94:fe:98:06:82:42:1e:b8:c5:bb: 30:7e:5e:f2:d8:c4:25:fd:d3:e5:c9:e6:66:36:97:e0:4e:13: f5:97:38:f2:34:0c:08:0d:62:0a:ca:a4:6f:57:c1:05:6c:01: 5b:fc:17:d2:14:bd:43:a2:eb:f7:bb:c8:96:be:70:6c:51:6c: 63:87:02:56:93:ce:3a:a0:75:e5:e3:85:e3:ad:7f:40:79:d5: dd:bf:8b:5c:fa:2b:32:08:66:33:01:bb:42:0a:e0:73:91:f5: 28:15:8d:0c:8d:64:cb:1c:64:5d:11:2d:af:74:1b:0b:5b:21: b4:d0:46:5d:f0:96:58:b3:7f:73:8d:c6:d5:7c:12:0b:cb:d2: 07:5e:50:89:ea:ee:0b:f3:81:ae:d7:c2:df:cb:aa:3f:40:79: 79:15:50:c7:9b:b1:b1:7d:9d:5b:2d:82:82:20:e0:45:a8:2a: 20:69:3f:76:a5:04:7e:a5:23:d2:d7:74:18:39:d1:bd:c4:d8: 34:0d:1a:a6:c0:8d:cb:40:ed:e1:d4:79:8d:25:95:40:4a:bf: b8:81:af:01:a0:e8:ff:e4:e6:18:7a:97:c8:45:7e:9c:aa:04: a3:82:24:7f:e6:30:24:20:db:98:02:36:f6:3a:b4:fb:0d:01: 0e:e7:64:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzkzQzExMC8GA1UEBRMoMEIxQTI5NzI1RkJBOEEyQ0RENTRGMjU2NTdFNTg3NDc4 RUJGQkJBRjAeFw0yNTEwMTkxMTQwNTNaFw0yNTEwMjYxMTQwNTNaMBgxFjAUBgNV BAMTDTY4ZjRjZTQ1LTdmYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLuMGOM+TQX+xQPtBiwSzwoP1vbkjuKY08TQArgtju8lRfmclIxitQGUtQm3pc +3VcVIpJuXczF003nyGtGbbiEfms1gfODKTTurxdBW5nA4cYxLQa75JjL0WjtqQq kZoq81G42JiuE90opANOZw3rQpCXXmvCQXGuay5pD4lMbJjuSFrLjJumNwVCfaqf zEmhKSKGPUKcm8Q3Sqwni3/Gq73ztpkbJUgZ8izJbpQZbocDQcUOJ6wbStrTtlLX knCrP+BNAJYRPv56k82KtfwzK0bPvd8/gHXZNHjBPdW5dwd3lUaes49XWxUC7Fhe A8QVx176crhMS/NeMX37AGr7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/q8qyCll MP6Xs0llsYfIYOP6F98wHwYDVR0jBBgwFoAUCxopcl+6iizdVPJWV+WHR46/u68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3OTNDLzI2MUY4NTAwQTk4 RjExRjBCNjU3Rjk2NUM0RjlBRTAyL0N4b3BjbC02aWl6ZFZQSldWLVdIUjQ2X3U2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3hvcGNsLTZpaXpkVlBKV1YtV0hSNDZfdTY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 OTNDLzI2MUY4NTAwQTk4RjExRjBCNjU3Rjk2NUM0RjlBRTAyL0N4b3BjbC02aWl6 ZFZQSldWLVdIUjQ2X3U2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFLjklNojAB5lP6YBoJCHrjFuzB+XvLYxCX90+XJ5mY2l+BOE/WXOPI0 DAgNYgrKpG9XwQVsAVv8F9IUvUOi6/e7yJa+cGxRbGOHAlaTzjqgdeXjheOtf0B5 1d2/i1z6KzIIZjMBu0IK4HOR9SgVjQyNZMscZF0RLa90GwtbIbTQRl3wllizf3ON xtV8EgvL0gdeUInq7gvzga7Xwt/Lqj9AeXkVUMebsbF9nVstgoIg4EWoKiBpP3al BH6lI9LXdBg50b3E2DQNGqbAjctA7eHUeY0llUBKv7iBrwGg6P/k5hh6l8hFfpyq BKOCJH/mMCQg25gCNvY6tPsNAQ7nZGE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:22 2025 by rpki-client