$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json) Hash identifier: bZzFwy/Mtg/EFhnL4f4rSKuZC92PXlVExgW731t9C24= Subject key identifier: 62:B8:E5:4C:C7:45:99:26:DB:C5:31:3E:CE:99:61:13:5E:60:FB:4B Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 0612 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft Manifest number: 060C Signing time: Sun 19 Oct 2025 00:28:36 +0000 Manifest this update: Sun 19 Oct 2025 00:28:35 +0000 Manifest next update: Sun 26 Oct 2025 00:28:35 +0000 Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: kr7HHq3JiGqXSSKCr9FPre6k4KQEdEuKM0Hq33By7zk=) 2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: ydOAiWCM6NkM+mxAS7XZYLAQc/Fn5GEwebXDqOLlzZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1554 (0x612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: Oct 19 00:28:35 2025 GMT Not After : Oct 26 00:28:35 2025 GMT Subject: CN=68f430b4-d68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:63:35:9b:e6:bb:4e:fa:44:d8:cd:34:da: df:03:e0:82:cc:7e:9e:9e:b1:cd:2c:c8:4e:51:de: 5e:82:bd:80:c9:c7:1d:f5:7e:e7:1f:ba:b0:92:4b: e6:31:3d:67:55:43:09:48:e8:26:77:b4:0b:a6:c6: 13:ba:53:28:27:0e:0a:73:9a:a4:b8:b9:30:db:ee: ea:09:fe:04:a7:39:48:0a:d7:3e:fa:10:13:98:91: 8a:24:d2:78:3f:bf:87:26:76:4e:3e:cc:b9:89:4a: 22:e0:71:3a:0e:c9:d6:21:b2:db:79:91:10:e5:46: 5f:6b:1b:b2:01:8b:97:d5:ae:c9:0a:ca:e8:3a:9a: 07:12:94:3d:4d:d4:f0:ae:7f:da:7f:18:dd:2b:7b: a8:f0:a4:26:b3:cf:39:44:2c:cd:92:8e:1c:10:9f: 92:ac:b2:1a:3d:3a:fb:be:72:5c:c8:9a:60:53:bd: d3:71:f5:99:9f:bf:53:d4:c6:a4:7a:66:52:76:1f: 46:cc:29:31:33:b4:60:bc:fa:ec:ac:17:9f:ae:0b: ab:31:07:cb:be:09:4e:fc:b9:15:11:e6:7d:37:59: ed:32:8e:8a:aa:89:e8:99:0d:b3:a9:eb:87:cb:90: eb:68:f8:8e:5f:65:d6:83:a4:09:b3:0d:7b:15:34: 61:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B8:E5:4C:C7:45:99:26:DB:C5:31:3E:CE:99:61:13:5E:60:FB:4B X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0b:67:8f:ec:f1:d4:15:8b:76:78:ee:be:ff:b5:ea:69:72: 1b:13:ca:57:b5:79:8e:cd:a4:7d:70:4d:7b:63:8c:4c:08:3d: ee:15:73:d9:2d:e9:d0:37:e9:e4:4c:9f:cf:63:f4:74:9f:2d: 51:78:3c:04:54:40:d2:bc:7d:f3:a0:a4:7b:45:3b:1f:d9:ea: 83:47:32:47:ed:c6:65:52:16:d5:71:c7:85:a9:16:24:28:92: 61:ef:f5:5c:e8:4d:f9:59:5f:3f:26:df:19:26:81:54:1a:a4: bf:98:91:53:40:f5:c4:69:ee:fa:c6:18:08:5b:77:cd:d4:86: 04:00:34:98:15:7f:0f:38:8f:5c:dd:d9:b3:0d:05:ae:1a:dd: 32:21:65:2a:df:ec:49:ec:48:9b:76:80:2b:b9:d2:2e:f9:27: 70:cc:13:38:f8:dc:9d:79:23:d3:cb:9a:c1:7b:44:8e:59:62: 66:14:f0:60:73:c7:e3:a8:83:02:df:5d:d4:08:5d:f9:11:cc: 73:de:42:10:3d:f2:f8:c7:f2:bf:6b:ca:44:5c:67:0d:37:e3: 9c:29:6b:77:25:3e:4f:59:7e:4e:a4:8e:b8:fc:a7:ea:8f:72: 0b:fc:95:fe:f6:14:e5:f6:a4:43:e3:9d:d2:d0:e4:04:58:93: cc:e4:05:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjUxMDE5MDAyODM1WhcNMjUxMDI2MDAyODM1WjAYMRYwFAYD VQQDEw02OGY0MzBiNC1kNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoFjNZvmu076RNjNNNrfA+CCzH6enrHNLMhOUd5egr2Ayccd9X7nH7qwkkvm MT1nVUMJSOgmd7QLpsYTulMoJw4Kc5qkuLkw2+7qCf4EpzlICtc++hATmJGKJNJ4 P7+HJnZOPsy5iUoi4HE6DsnWIbLbeZEQ5UZfaxuyAYuX1a7JCsroOpoHEpQ9TdTw rn/afxjdK3uo8KQms885RCzNko4cEJ+SrLIaPTr7vnJcyJpgU73TcfWZn79T1Mak emZSdh9GzCkxM7RgvPrsrBefrgurMQfLvglO/LkVEeZ9N1ntMo6KqonomQ2zqeuH y5DraPiOX2XWg6QJsw17FTRhJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGK45UzH RZkm28UxPs6ZYRNeYPtLMB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU5QS8yRjhEQ0IwMkMxQ0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9Bckxr Vlg2SVdtd09xMTBOQncxNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwC2eP7PHUFYt2eO6+/7XqaXIbE8pXtXmOzaR9cE17Y4xMCD3uFXPZ LenQN+nkTJ/PY/R0ny1ReDwEVEDSvH3zoKR7RTsf2eqDRzJH7cZlUhbVcceFqRYk KJJh7/Vc6E35WV8/Jt8ZJoFUGqS/mJFTQPXEae76xhgIW3fN1IYEADSYFX8POI9c 3dmzDQWuGt0yIWUq3+xJ7EibdoArudIu+SdwzBM4+NydeSPTy5rBe0SOWWJmFPBg c8fjqIMC313UCF35Ecxz3kIQPfL4x/K/a8pEXGcNN+OcKWt3JT5PWX5OpI64/Kfq j3IL/JX+9hTl9qRD453S0OQEWJPM5AXv -----END CERTIFICATE-----Generated at Mon Oct 20 04:23:03 2025 by rpki-client