$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: QxCt0w5a+X2+w+wGpicD5miDDqR5PaSFV21dIndYZ2g= Subject key identifier: E2:8C:37:99:44:EB:11:3C:F7:21:E4:A0:BC:35:0F:E6:DA:51:B2:24 Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 023E Signing time: Sun 19 Oct 2025 04:25:59 +0000 Manifest this update: Sun 19 Oct 2025 04:25:59 +0000 Manifest next update: Sun 26 Oct 2025 04:25:59 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: Ui1/MC/0QJqBunUXbkmEKFmdmjebrpo+sq2yvaMBcC0=) 2: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: D+g5jzuWcvphD1ps8jnw5QvvfxsQjGFWKglonqcWSi0=) 3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: Kuncg/OKHO6KINevgnEgm8twmyohuTIV8xS8NsrR5Yw=) 4: 6121C23230AC11F08C150767C4F9AE02.roa (hash: fShyVa3rIna9iRvZNHAjyEZoQgutIuaEQEMpg+RXaTc=) 5: CD152404495B11EF93EA3757C4F9AE02.roa (hash: G7ZmL/GFUdvItC3mb/pIr2VOosfHx+vaBIP/nBv1gCo=) 6: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: 4uRsfI3UTikSBwFuE1LkYP4yx1HQPN2T4+sSHop7B54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Oct 19 04:25:59 2025 GMT Not After : Oct 26 04:25:59 2025 GMT Subject: CN=68f46857-20bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:1f:1a:09:53:ad:1c:6f:7a:8b:8e:8c:23: eb:d9:33:74:6c:68:92:2f:11:b5:d7:32:b6:f9:e1: 8a:c7:86:f7:05:90:9b:96:08:55:9a:8c:b6:8c:55: 62:59:f3:c3:1b:5e:44:8e:05:0a:6f:88:7d:d9:6e: 20:c5:74:1b:0d:3b:1d:03:55:3c:69:d4:9f:f6:14: e3:f9:83:29:c3:58:15:f9:e7:3e:1b:3d:f5:8a:ed: 01:17:d0:db:c1:56:be:40:04:81:bf:24:12:2e:c3: 2b:5a:88:d7:3a:b6:fb:e0:c0:a4:66:69:33:db:05: 44:0b:34:03:62:c1:7f:39:68:ab:c8:5b:cd:5e:b3: f0:e2:ce:f4:8f:84:70:40:d5:d7:ac:1b:27:25:13: 43:e1:ca:68:8c:e0:fa:d9:17:87:81:31:b6:52:64: b2:d7:69:23:8b:d4:4f:d7:89:91:1a:d1:6a:8f:1b: c5:9f:15:c8:ee:bd:00:7a:27:21:5c:a1:97:14:11: d3:9b:c0:71:c6:03:77:36:a4:3d:d5:30:2f:35:60: ea:5f:5f:c7:54:d8:41:08:7e:8d:99:cf:ed:cc:2a: 8d:2d:97:38:54:25:e8:40:80:1c:04:73:e8:9e:73: d8:37:4a:17:8b:91:50:9c:22:a9:45:ae:3e:37:f9: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8C:37:99:44:EB:11:3C:F7:21:E4:A0:BC:35:0F:E6:DA:51:B2:24 X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d4:0c:24:d7:98:2b:45:57:df:4b:a0:e5:b6:54:3c:97:fa: a8:7a:68:eb:28:b4:4e:54:d9:be:0c:25:18:ec:a3:68:17:61: b0:4d:f7:bd:ee:f0:81:87:8a:e5:77:84:ff:2d:96:a1:b2:94: 69:f7:f5:63:0e:7e:07:b7:96:e5:45:20:38:09:05:12:c2:80: d1:d2:63:dd:7a:9f:ef:d3:5d:6f:3d:8f:d9:43:ab:9a:11:80: 33:10:2c:33:59:aa:5d:76:44:98:d2:2a:81:33:32:7a:e7:16: e7:24:90:81:57:1d:c2:60:3d:1a:22:68:60:6b:21:df:cc:d5: 76:91:07:d7:d4:bf:b9:e2:07:9f:2c:b5:2e:a7:1c:d5:64:c7: 8a:5e:f4:da:6c:0c:47:c5:c1:6b:85:1a:a1:82:1e:3a:b4:6d: f3:cd:aa:ba:04:a8:08:86:fd:20:84:39:cf:26:ec:54:c2:79: 0b:36:1e:12:c8:c6:ca:59:5d:22:82:a4:40:11:ed:4c:00:f8: c3:ad:52:c6:16:28:d4:0b:2b:ae:72:e4:ee:af:d9:6a:b9:3a: 82:1f:7d:7b:60:4c:5e:5b:27:c8:41:f0:f4:28:f4:69:ef:c2: fe:48:f4:f7:32:81:30:39:42:24:53:17:1b:bd:b8:44:f9:03: 69:df:b9:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjUxMDE5MDQyNTU5WhcNMjUxMDI2MDQyNTU5WjAYMRYwFAYD VQQDEw02OGY0Njg1Ny0yMGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPQfGglTrRxveouOjCPr2TN0bGiSLxG11zK2+eGKx4b3BZCblghVmoy2jFVi WfPDG15EjgUKb4h92W4gxXQbDTsdA1U8adSf9hTj+YMpw1gV+ec+Gz31iu0BF9Db wVa+QASBvyQSLsMrWojXOrb74MCkZmkz2wVECzQDYsF/OWiryFvNXrPw4s70j4Rw QNXXrBsnJRND4cpojOD62ReHgTG2UmSy12kji9RP14mRGtFqjxvFnxXI7r0Aeich XKGXFBHTm8BxxgN3NqQ91TAvNWDqX1/HVNhBCH6Nmc/tzCqNLZc4VCXoQIAcBHPo nnPYN0oXi5FQnCKpRa4+N/mTQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKMN5lE 6xE89yHkoLw1D+baUbIkMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK1Awk15grRVffS6DltlQ8l/qoemjrKLROVNm+DCUY7KNoF2GwTfe9 7vCBh4rld4T/LZahspRp9/VjDn4Ht5blRSA4CQUSwoDR0mPdep/v011vPY/ZQ6ua EYAzECwzWapddkSY0iqBMzJ65xbnJJCBVx3CYD0aImhgayHfzNV2kQfX1L+54gef LLUupxzVZMeKXvTabAxHxcFrhRqhgh46tG3zzaq6BKgIhv0ghDnPJuxUwnkLNh4S yMbKWV0igqRAEe1MAPjDrVLGFijUCyuucuTur9lquTqCH317YExeWyfIQfD0KPRp 78L+SPT3MoEwOUIkUxcbvbhE+QNp37nc -----END CERTIFICATE-----Generated at Mon Oct 20 10:46:10 2025 by rpki-client