$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json) Hash identifier: IjJa2UKQub0kgKwEbiv/q9OVEr79Z1pidaih3TOs/JY= Subject key identifier: BA:D4:18:5D:DD:F7:52:DD:AC:A0:0A:03:8F:F9:86:C5:68:50:FD:B4 Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft Manifest number: 0124 Signing time: Sun 19 Oct 2025 07:35:09 +0000 Manifest this update: Sun 19 Oct 2025 07:35:09 +0000 Manifest next update: Sun 26 Oct 2025 07:35:09 +0000 Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: cEv5Bdq3No5LVI0Xdmzqo4zgzpxpkVD8ek8Io2iU9Fg=) 2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: H2P0kf4hy4afyomyyat64ajTM5Qyh5RNKdo/uhIFD+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Validity Not Before: Oct 19 07:35:09 2025 GMT Not After : Oct 26 07:35:09 2025 GMT Subject: CN=68f494ad-cacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:53:e5:ab:46:0b:f9:b0:bd:2a:f6:5f:86: 68:26:07:4d:33:e4:c8:06:42:6e:e1:af:ea:9b:b4: 1d:04:94:22:81:c3:77:68:4d:85:41:d5:e3:d2:c3: 36:1f:69:2f:20:56:b7:8a:12:b6:b7:2a:dc:5e:18: fa:50:81:af:37:c9:7b:6b:f2:56:20:34:76:0e:c0: b9:b9:7b:47:97:19:94:45:3d:81:5d:28:ef:c4:45: dd:0d:80:8e:90:c8:54:53:2b:47:db:d8:13:2e:18: af:8e:32:00:10:cf:9d:c1:1e:12:8e:7d:6c:14:a1: b3:e8:07:8e:95:69:b4:be:89:67:66:fd:74:27:be: 2f:08:2f:3a:1d:1c:cf:1d:f7:27:66:a6:e4:33:23: 2f:35:cc:e8:5f:3a:ea:a3:0e:49:60:5e:97:f5:2f: f4:f7:50:7d:27:b9:77:6e:dd:56:53:92:67:cb:55: 45:50:68:30:74:0f:ed:00:5f:f6:13:7b:a3:e4:06: 63:a9:eb:ec:45:e9:dd:fa:60:29:a3:28:7d:15:a4: 56:ab:5b:51:ce:33:2b:a8:20:fc:c5:bc:58:49:43: ec:97:53:a3:18:d3:4f:87:f4:c6:a0:06:45:e8:ad: 78:39:ce:b5:f1:f1:83:16:a6:a1:fb:8e:01:47:3d: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D4:18:5D:DD:F7:52:DD:AC:A0:0A:03:8F:F9:86:C5:68:50:FD:B4 X509v3 Authority Key Identifier: keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:3d:e6:25:a3:0c:45:f9:d7:55:54:f8:fe:cd:e8:a0:2d:5b: 5b:c7:a7:cb:18:ee:50:2a:a4:e5:fe:fb:27:ca:64:bf:e9:49: 3a:db:db:50:49:ad:88:d8:0d:7d:9d:8c:58:88:b2:51:f4:3b: 86:cc:76:d0:1f:f7:27:79:89:37:a1:17:21:7e:be:44:98:34: f6:c5:10:f2:63:83:88:f5:3d:1c:72:c6:6f:81:49:61:8f:10: b3:c1:dd:ae:56:b8:06:29:64:ef:b9:37:64:79:8e:7d:64:4b: 67:d1:6c:e3:6e:dc:6f:27:94:b2:a0:47:9d:75:89:46:ad:b3: 57:ec:62:3d:56:36:ae:c2:2a:18:04:8c:b6:2a:cd:9f:df:bc: d7:48:5d:b8:e6:63:04:12:25:ee:0f:d4:52:bf:5a:d1:f1:9c: 59:49:40:c8:3b:5a:52:23:45:e7:ec:9b:ef:1c:21:8e:cf:32: 41:8e:28:3d:d9:05:25:8d:9e:fc:73:35:28:17:6c:9a:7f:92: d9:85:b1:4a:52:9b:ce:78:1f:34:8b:b4:f2:70:34:62:61:2e: cd:7f:b8:5c:58:76:a3:a9:81:df:96:eb:2b:2d:4f:3a:75:21: 15:3a:48:ee:69:09:c2:6f:28:33:c9:30:2d:a2:74:7b:4a:86: 66:f3:eb:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy MTg1MzBDNjUwHhcNMjUxMDE5MDczNTA5WhcNMjUxMDI2MDczNTA5WjAYMRYwFAYD VQQDEw02OGY0OTRhZC1jYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMVT5atGC/mwvSr2X4ZoJgdNM+TIBkJu4a/qm7QdBJQigcN3aE2FQdXj0sM2 H2kvIFa3ihK2tyrcXhj6UIGvN8l7a/JWIDR2DsC5uXtHlxmURT2BXSjvxEXdDYCO kMhUUytH29gTLhivjjIAEM+dwR4Sjn1sFKGz6AeOlWm0volnZv10J74vCC86HRzP HfcnZqbkMyMvNczoXzrqow5JYF6X9S/091B9J7l3bt1WU5Jny1VFUGgwdA/tAF/2 E3uj5AZjqevsRend+mApoyh9FaRWq1tRzjMrqCD8xbxYSUPsl1OjGNNPh/TGoAZF 6K14Oc618fGDFqah+44BRz2rgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrUGF3d 91LdrKAKA4/5hsVoUP20MB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH a2t1N2xsWG40UGdoaFRER1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvPeYlowxF+ddVVPj+zeigLVtbx6fLGO5QKqTl/vsnymS/6Uk629tQ Sa2I2A19nYxYiLJR9DuGzHbQH/cneYk3oRchfr5EmDT2xRDyY4OI9T0ccsZvgUlh jxCzwd2uVrgGKWTvuTdkeY59ZEtn0WzjbtxvJ5SyoEeddYlGrbNX7GI9VjauwioY BIy2Ks2f37zXSF245mMEEiXuD9RSv1rR8ZxZSUDIO1pSI0Xn7JvvHCGOzzJBjig9 2QUljZ78czUoF2yaf5LZhbFKUpvOeB80i7TycDRiYS7Nf7hcWHajqYHflusrLU86 dSEVOkjuaQnCbygzyTAtonR7SoZm8+v0 -----END CERTIFICATE-----Generated at Mon Oct 20 17:44:04 2025 by rpki-client