$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: 7DqP+giY3S1NyOJc9vpxCj40ktwLXpZ+VdVLgi3+AR4= Subject key identifier: B9:41:AC:B9:25:8E:C7:DD:D3:AB:44:23:4C:3D:AA:3E:5E:0B:7E:46 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 06B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 067A Signing time: Sun 19 Oct 2025 00:18:40 +0000 Manifest this update: Sun 19 Oct 2025 00:18:39 +0000 Manifest next update: Sun 26 Oct 2025 00:18:39 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: 2PCl673PRhNxiaWlUZJbp/NsdmKPXn7cjnTA6J86Kqo=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: oyubRpGqXRPhXUbHGDMN11nyLcbaEyRpquXs/6vcD1s=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: 4DBjk9RooSzZolI3F0wRR+UkFptKPPbZZIJnu5t3sTc=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: q5An5IejOkRYWLTS2K7o5KZUOm0z/1pEEu1xwJZBWV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Oct 19 00:18:39 2025 GMT Not After : Oct 26 00:18:39 2025 GMT Subject: CN=68f42e60-8740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:2b:80:84:a4:1b:90:89:3f:7e:40:97:0c: 7b:4b:51:1e:a2:ff:1e:e4:47:ed:2c:b5:cb:22:a2: fe:48:1e:49:53:21:c9:17:fc:18:60:d2:0a:a9:a4: 80:d1:67:f8:d8:c4:9c:8d:71:41:e9:03:8f:58:95: 27:52:32:27:1d:ab:b5:3e:d0:2c:c9:02:ca:ff:08: c6:ec:87:e6:38:30:01:53:72:89:16:1e:fd:6b:5e: 55:54:ea:cb:eb:73:95:3d:0c:1e:a3:f5:52:6c:d4: 92:ad:2f:17:65:b3:b2:51:3b:9b:bf:a8:1c:bc:2f: 01:58:43:a0:36:5d:a0:13:0f:d1:15:79:f3:2c:ef: 6e:ae:d8:69:a3:d9:86:e1:ca:4a:df:40:89:eb:d8: 91:00:17:d6:15:9b:d2:c0:ce:e7:82:75:0c:69:59: 4f:bb:8c:ec:a5:96:05:a4:a0:c1:a2:42:cb:3a:db: 05:61:0f:8d:c9:aa:69:d3:ee:66:d4:e5:b8:fe:46: 91:df:09:2f:ab:33:0b:6b:d6:a1:29:1c:05:04:7a: 1f:34:b0:6e:9f:f9:9c:8e:7b:a6:1c:df:bc:5d:29: 0b:11:98:4d:d4:d0:19:27:3c:2b:a9:35:74:4b:87: 63:01:b5:bd:59:ad:de:ca:d7:2d:8f:01:4b:94:1a: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:41:AC:B9:25:8E:C7:DD:D3:AB:44:23:4C:3D:AA:3E:5E:0B:7E:46 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0f:bb:4d:07:bd:9a:52:4d:21:30:e4:21:05:4c:e6:3e:93: 6f:71:36:bf:e8:e0:91:1a:7d:4d:e2:fa:3f:5f:c3:fb:74:a0: f4:49:af:39:69:8d:f5:0c:7a:9f:72:62:ce:e2:4c:20:92:d2: af:a2:71:1d:a8:05:6c:ad:f8:0c:51:46:ce:74:f2:a1:14:02: a7:10:0f:cc:55:d2:58:95:ae:72:76:b6:27:e1:23:05:b0:7e: d9:f3:c4:40:8e:46:ff:56:41:da:3a:f1:a5:8c:a1:79:11:3c: af:fd:2d:57:6e:a1:a4:07:a6:37:8b:e9:08:b9:e5:0a:49:2e: 3f:f1:a0:d1:c9:70:d5:30:ed:8b:e9:f4:95:78:8c:ca:43:0c: 10:f1:25:aa:d5:3d:c8:f5:3e:df:8b:9d:2b:82:9c:82:da:39: 4d:b4:26:65:49:f5:b3:8f:64:7f:fd:42:e1:49:41:15:c3:b7: eb:e0:ff:27:6e:a8:09:8c:31:b0:e4:5a:57:a8:c0:77:b0:66: c0:52:b8:57:dd:ad:0f:c1:81:61:d2:6d:d1:17:3b:d7:2d:49: 6f:15:f4:af:b9:61:02:1d:36:f3:ea:d8:c0:7a:45:fc:9f:5f: cf:b0:71:ea:8d:21:da:2e:db:51:f7:b2:3f:dc:92:42:55:e5: f6:55:a6:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUxMDE5MDAxODM5WhcNMjUxMDI2MDAxODM5WjAYMRYwFAYD VQQDEw02OGY0MmU2MC04NzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBorgISkG5CJP35Alwx7S1Eeov8e5EftLLXLIqL+SB5JUyHJF/wYYNIKqaSA 0Wf42MScjXFB6QOPWJUnUjInHau1PtAsyQLK/wjG7IfmODABU3KJFh79a15VVOrL 63OVPQweo/VSbNSSrS8XZbOyUTubv6gcvC8BWEOgNl2gEw/RFXnzLO9urthpo9mG 4cpK30CJ69iRABfWFZvSwM7ngnUMaVlPu4zspZYFpKDBokLLOtsFYQ+Nyapp0+5m 1OW4/kaR3wkvqzMLa9ahKRwFBHofNLBun/mcjnumHN+8XSkLEZhN1NAZJzwrqTV0 S4djAbW9Wa3eytctjwFLlBqIzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlBrLkl jsfd06tEI0w9qj5eC35GMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhD7tNB72aUk0hMOQhBUzmPpNvcTa/6OCRGn1N4vo/X8P7dKD0Sa85 aY31DHqfcmLO4kwgktKvonEdqAVsrfgMUUbOdPKhFAKnEA/MVdJYla5ydrYn4SMF sH7Z88RAjkb/VkHaOvGljKF5ETyv/S1XbqGkB6Y3i+kIueUKSS4/8aDRyXDVMO2L 6fSVeIzKQwwQ8SWq1T3I9T7fi50rgpyC2jlNtCZlSfWzj2R//ULhSUEVw7fr4P8n bqgJjDGw5FpXqMB3sGbAUrhX3a0PwYFh0m3RFzvXLUlvFfSvuWECHTbz6tjAekX8 n1/PsHHqjSHaLttR97I/3JJCVeX2Vaaw -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:21 2025 by rpki-client