$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: upfV9deQtQi1tTXzFcf3sjo46yQeH1JXkAVmy6KoHkU= Subject key identifier: 93:B0:17:69:4E:E9:EC:AF:98:C9:1C:30:FC:E5:45:25:75:E2:55:F0 Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7DC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 4878 Signing time: Sat 18 Oct 2025 17:29:12 +0000 Manifest this update: Sat 18 Oct 2025 17:29:11 +0000 Manifest next update: Sat 25 Oct 2025 17:29:11 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: ikJRCNTfeVGiOoQGQx28cDfg2VnY8/x1YMvaw/1tYzo=) 2: 93933F8EB8E311EF94962C19C4F9AE02.roa (hash: 79gBJkdJcqVlhvGhOBMwK3PQXe8dmykFHNHUWExFzEw=) 3: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: gt0aztJNpVc6KyHHIu4zVZe5pduw/IDthduLAxbDEGo=) 4: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: D+6z2UE89EEz0CJ5FsX6HX4bJl6z6qhGqxMwgCKoLK8=) 5: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: vQkkHhe44jmvD4H+y1zHy/eVtFXiwqeEyiEpP2p2y/4=) 6: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: +X9cqy5nzsM4rL9d9VoTaGOa9uOReDyvmQJrwlCmxzo=) 7: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: RUuXRFdsOwvKWwq9m+sHFH3M/ghjA85wtgfcZdC1dGw=) 8: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: iaZWlKC0BRK6sTPEnHrhdlX9WtoZdkozdrPT67pGJDY=) 9: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: L+xwzjXtQzYgvG+vHsmiVYE6Ewfl0oVoDgfwzY5pwN8=) 10: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: YJSyg7QmXDp0BYbgvJF4Ri7C1eahVBb5r1mM5QY6K6M=) 11: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: sO+0Vdvls9ZYR5Dlw5L5vQENPT3Y8xAMCjDslvaGngI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32198 (0x7dc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Oct 18 17:29:11 2025 GMT Not After : Oct 25 17:29:11 2025 GMT Subject: CN=68f3ce68-dd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:af:80:28:5d:b7:86:20:07:db:fe:f7:6f: 7e:4a:91:45:5b:a6:73:f5:55:a7:64:ee:42:56:fd: da:2d:da:bd:21:eb:d7:93:4b:c4:6a:3d:ee:c3:f9: 4f:10:82:a4:9c:ee:9e:9a:4a:fe:1b:51:3e:ee:a2: cc:00:55:22:fb:3d:81:57:6c:4d:5e:65:88:2e:05: 62:8b:ee:92:1a:30:d9:aa:b0:a9:5a:37:bb:f6:e4: 8f:7e:55:25:6e:5c:38:c8:05:33:f4:f9:18:fd:0c: e7:7a:ff:f1:74:e1:f0:75:ab:7d:0b:df:7b:a2:9b: cc:c7:dd:f5:fc:fc:f8:f2:a7:8e:f4:59:dc:2a:33: c5:be:f4:c8:8f:f3:0a:a2:f8:db:54:ba:65:a1:87: 76:3d:40:20:c5:63:0f:93:f9:43:19:17:16:ab:ed: b6:2f:31:26:7d:1d:1a:b5:19:45:de:23:24:35:91: 83:22:2f:8c:61:e2:1c:7a:5d:9e:ff:84:41:fa:10: 59:14:6c:50:26:20:36:a7:01:e6:8b:e9:1c:04:1d: d7:34:aa:46:8d:60:d6:77:73:a5:c3:68:40:5a:30: 8f:d0:7b:6e:a9:42:4d:fc:45:56:86:82:5a:d8:d6: 1d:73:1c:ba:9d:a9:fd:cf:18:d0:cf:76:f9:a9:93: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B0:17:69:4E:E9:EC:AF:98:C9:1C:30:FC:E5:45:25:75:E2:55:F0 X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4f:ed:cb:58:e6:a7:2f:9c:af:45:a9:92:cf:32:55:87:fd: ce:be:58:7e:a1:d6:5d:4e:ed:37:94:b6:d0:ad:77:65:46:63: 15:57:64:20:3a:38:bc:95:bc:0b:08:ce:5c:2c:66:2f:c2:9f: 93:c6:90:8b:bc:92:5a:ca:2f:5b:c7:3d:58:71:bd:cd:8d:3b: 84:e6:83:1f:1e:62:8c:41:da:1b:da:3b:52:e5:c8:57:98:10: a5:cc:1b:c5:82:4d:2e:b7:9d:10:6d:70:53:da:93:40:ca:5e: f7:f5:e2:c6:51:61:d2:39:ae:22:6e:40:96:c5:6c:0a:de:16: 5f:8f:c3:41:1e:39:c4:ba:73:9d:85:75:8e:fe:55:da:2f:e7: 88:87:88:cd:e9:36:df:a0:06:6c:72:02:27:7b:25:85:8c:f0: ec:26:e5:53:5f:a4:7e:e2:d9:1e:c9:c6:49:f3:d6:6b:b6:dc: 93:4f:79:d9:66:00:27:1c:7a:d4:f1:bb:17:b0:bc:8e:76:5c: 41:fd:af:0c:5a:3d:a3:1b:d7:0e:07:b2:0f:34:a0:54:71:4d: 4c:3d:62:a6:58:09:1c:01:2f:77:5f:43:c6:e4:b2:cf:b4:de: 26:88:89:e9:a3:05:a5:d9:38:5f:01:d4:46:d7:b5:0e:2b:e0: d6:ae:f2:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICfcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjUxMDE4MTcyOTExWhcNMjUxMDI1MTcyOTExWjAYMRYwFAYD VQQDEw02OGYzY2U2OC1kZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5evgChdt4YgB9v+929+SpFFW6Zz9VWnZO5CVv3aLdq9IevXk0vEaj3uw/lP EIKknO6emkr+G1E+7qLMAFUi+z2BV2xNXmWILgVii+6SGjDZqrCpWje79uSPflUl blw4yAUz9PkY/Qznev/xdOHwdat9C997opvMx931/Pz48qeO9FncKjPFvvTIj/MK ovjbVLploYd2PUAgxWMPk/lDGRcWq+22LzEmfR0atRlF3iMkNZGDIi+MYeIcel2e /4RB+hBZFGxQJiA2pwHmi+kcBB3XNKpGjWDWd3Olw2hAWjCP0HtuqUJN/EVWhoJa 2NYdcxy6nan9zxjQz3b5qZNSxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOwF2lO 6eyvmMkcMPzlRSV14lXwMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsT+3LWOanL5yvRamSzzJVh/3Ovlh+odZdTu03lLbQrXdlRmMVV2Qg Oji8lbwLCM5cLGYvwp+TxpCLvJJayi9bxz1Ycb3NjTuE5oMfHmKMQdob2jtS5chX mBClzBvFgk0ut50QbXBT2pNAyl739eLGUWHSOa4ibkCWxWwK3hZfj8NBHjnEunOd hXWO/lXaL+eIh4jN6TbfoAZscgIneyWFjPDsJuVTX6R+4tkeycZJ89ZrttyTT3nZ ZgAnHHrU8bsXsLyOdlxB/a8MWj2jG9cOB7IPNKBUcU1MPWKmWAkcAS93X0PG5LLP tN4miInpowWl2ThfAdRG17UOK+DWrvK4 -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:16 2025 by rpki-client