$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: 8/8K532TnZrjNHtXISPUSFm4C9sxqHRuSpQSfbYgs3o= Subject key identifier: C7:C3:D7:4D:A3:FF:E2:CE:F1:6D:6B:74:A6:DD:65:A4:82:CA:50:64 Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 0721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 071B Signing time: Sat 18 Oct 2025 23:15:15 +0000 Manifest this update: Sat 18 Oct 2025 23:15:14 +0000 Manifest next update: Sat 25 Oct 2025 23:15:14 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: kifbwgCFnLiomOte0mMvTC1OXPTdtDnP/oD4Pf0Glio=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: HlIyCnozTXmahx4OrgB34hXtStTSnVnLcqtp68+OH5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: Oct 18 23:15:14 2025 GMT Not After : Oct 25 23:15:14 2025 GMT Subject: CN=68f41f82-62af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3b:13:38:16:26:be:6e:b5:4e:0b:fe:bb:a6: 63:4c:35:07:9f:93:46:73:d3:ea:c8:cf:71:d2:42: 66:3e:c6:a1:53:54:fc:cb:b2:89:25:11:b5:07:12: a2:fa:53:07:cd:fe:2a:75:70:ae:cc:24:6f:de:5c: 7d:43:42:3e:fa:b0:94:fe:24:74:bd:ca:48:36:1b: 57:fb:9c:89:5d:08:d0:86:28:fc:bd:4d:a6:31:b0: 29:24:ac:24:03:f1:79:3d:a9:ca:5a:70:a7:6d:3d: c5:1a:2c:f8:74:64:32:8c:b0:64:f2:b0:c9:21:7f: 7d:da:57:13:d3:f8:22:29:41:73:fd:a4:a6:7b:8b: 38:af:05:f7:88:56:66:c6:e2:e9:4d:01:f3:83:d5: 76:d2:3c:ea:c4:4c:ee:32:68:95:74:1a:60:37:ef: 6d:c8:0f:4b:cd:6f:fb:91:14:41:8a:19:58:b4:22: 59:2e:d4:ba:82:af:c7:76:b4:af:bd:62:7e:92:80: 60:40:c3:77:5b:30:04:04:69:11:48:c1:74:b1:f8: d9:aa:91:3c:0c:57:10:24:42:df:e3:a1:c5:b7:c8: cf:ce:f7:ee:4a:81:35:79:e0:ec:f5:24:37:f8:c1: 7a:22:8a:de:78:bc:44:ee:90:61:53:4f:0b:ef:b1: c8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C3:D7:4D:A3:FF:E2:CE:F1:6D:6B:74:A6:DD:65:A4:82:CA:50:64 X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:92:4c:c8:ef:e4:a3:a2:55:42:e9:5b:c6:d5:ca:4b:63:98: ce:a2:96:99:43:e4:31:bd:1a:f7:a4:3f:ef:a7:eb:94:ca:4e: 4f:9d:8e:4e:c4:5c:e1:f1:5e:47:80:c4:0b:01:21:ee:77:f4: a6:15:46:92:75:fe:30:ba:d7:5d:6d:c1:7d:9c:e6:45:9f:29: 67:a1:a5:ce:f9:9f:a4:f8:8c:df:fb:55:48:55:83:3e:76:c8: 0a:f1:ce:aa:26:e4:73:a7:d7:07:c7:8e:5e:1d:04:1b:f0:18: 22:74:b4:79:74:c5:3c:84:dc:07:b1:c2:f4:61:c1:0d:8c:01: 5e:8d:17:2b:90:2d:86:55:aa:18:19:c8:07:0f:cf:79:7e:06: 61:27:70:ab:26:6f:cc:af:3d:2e:db:3b:6f:c7:bf:7d:9a:7a: 3f:46:31:12:4d:2b:35:40:76:f1:73:eb:c8:8c:ab:68:27:90: 56:c9:63:2f:51:0b:32:86:a0:64:0b:72:25:3d:1c:41:d1:18: 40:2f:64:b4:43:02:c1:55:c6:bc:cb:3e:28:03:ad:16:b4:23: ea:99:35:6f:a1:c4:61:cd:9a:4e:af:42:12:54:04:5e:71:06: c2:c6:0a:6c:37:cd:64:2a:13:75:56:de:59:de:7d:67:bb:62: c7:28:6a:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjUxMDE4MjMxNTE0WhcNMjUxMDI1MjMxNTE0WjAYMRYwFAYD VQQDEw02OGY0MWY4Mi02MmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zsTOBYmvm61Tgv+u6ZjTDUHn5NGc9PqyM9x0kJmPsahU1T8y7KJJRG1BxKi +lMHzf4qdXCuzCRv3lx9Q0I++rCU/iR0vcpINhtX+5yJXQjQhij8vU2mMbApJKwk A/F5PanKWnCnbT3FGiz4dGQyjLBk8rDJIX992lcT0/giKUFz/aSme4s4rwX3iFZm xuLpTQHzg9V20jzqxEzuMmiVdBpgN+9tyA9LzW/7kRRBihlYtCJZLtS6gq/HdrSv vWJ+koBgQMN3WzAEBGkRSMF0sfjZqpE8DFcQJELf46HFt8jPzvfuSoE1eeDs9SQ3 +MF6IoreeLxE7pBhU08L77HIwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfD102j /+LO8W1rdKbdZaSCylBkMB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3kkzI7+SjolVC6VvG1cpLY5jOopaZQ+QxvRr3pD/vp+uUyk5PnY5O xFzh8V5HgMQLASHud/SmFUaSdf4wutddbcF9nOZFnylnoaXO+Z+k+Izf+1VIVYM+ dsgK8c6qJuRzp9cHx45eHQQb8BgidLR5dMU8hNwHscL0YcENjAFejRcrkC2GVaoY GcgHD895fgZhJ3CrJm/Mrz0u2ztvx799mno/RjESTSs1QHbxc+vIjKtoJ5BWyWMv UQsyhqBkC3IlPRxB0RhAL2S0QwLBVca8yz4oA60WtCPqmTVvocRhzZpOr0ISVARe cQbCxgpsN81kKhN1Vt5Z3n1nu2LHKGrL -----END CERTIFICATE-----Generated at Mon Oct 20 14:02:10 2025 by rpki-client