$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft File: xPfznmL0ydeMXhL9wVGuTjK8mkI.mft (raw, json) Hash identifier: kE/RnYfursrq0TGsbgiuwv9y24FEg0UYAHpqDYQx9RI= Subject key identifier: FF:D3:89:29:71:93:B0:A6:88:FA:5E:83:8E:D3:FB:89:70:24:9B:4E Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft Manifest number: 0115 Signing time: Sun 19 Oct 2025 07:48:51 +0000 Manifest this update: Sun 19 Oct 2025 07:48:50 +0000 Manifest next update: Sun 26 Oct 2025 07:48:50 +0000 Files and hashes: 1: xPfznmL0ydeMXhL9wVGuTjK8mkI.crl (hash: SA9lt+k3ECRxNQs2ETih2kkBtDA/nc3zRj9AHmMd/tU=) 2: 127604E20F8B11EF87FC5918C4F9AE02.roa (hash: Ur2f+2mtS8rG+Wi5lYOAmNS8a2RYYseSRQgStkLqo/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B29B, serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Validity Not Before: Oct 19 07:48:50 2025 GMT Not After : Oct 26 07:48:50 2025 GMT Subject: CN=68f497e3-10fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:99:8f:5c:c3:f7:eb:57:8c:25:f9:e3:cf:92: 15:1d:4d:d3:68:19:e1:99:f8:c8:a0:98:8b:73:1b: 1a:6a:45:69:60:94:6e:2e:7d:95:76:d7:c3:1d:da: a6:f0:60:e1:e9:a2:d1:b0:80:e8:c5:c6:76:f7:ab: 40:d9:30:f2:4a:f3:d6:f7:d4:cb:51:f8:fb:17:bd: 8d:e9:f1:ab:75:e0:eb:ce:c9:1b:2f:8d:41:7e:3e: 57:09:19:9a:35:47:12:d2:0b:b7:6f:c6:70:aa:3a: 8b:70:f7:10:d2:7e:46:c8:7d:d8:e7:fd:b8:68:df: 09:06:f1:0d:70:89:50:b9:ee:1c:ec:44:d9:fd:7d: 36:1b:e0:2e:71:24:db:eb:51:fe:42:dd:b6:73:e8: c9:ba:1a:1b:ba:6a:7b:38:48:a4:b3:20:69:45:d9: 25:47:23:77:09:ad:70:88:15:ff:21:8d:70:67:44: b0:6d:de:5e:a1:7b:5d:f0:6c:8a:8a:db:a1:81:60: 9f:77:18:21:56:21:6d:27:49:54:30:0f:b4:96:ff: 64:b5:3e:ae:92:33:89:c1:0b:bb:2a:cf:74:09:f1: 3e:9b:58:83:44:35:c6:7c:8d:9e:30:9b:62:f4:f0: a5:37:8f:16:66:ad:2f:23:36:c3:e1:ff:58:c8:44: 50:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D3:89:29:71:93:B0:A6:88:FA:5E:83:8E:D3:FB:89:70:24:9B:4E X509v3 Authority Key Identifier: keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:9d:6c:cb:fb:e8:6f:b6:ef:e4:61:c3:b9:bd:c7:7a:ba:fb: b9:b3:9d:f7:cf:07:db:ec:ed:fb:b5:3e:e5:76:91:58:77:2d: d4:61:c4:70:f1:26:45:d4:ea:74:8c:88:c3:2c:b2:30:34:21: 6a:d9:f2:c1:ba:2e:49:56:2e:02:87:97:a5:27:7c:d1:25:16: 8e:10:23:00:16:46:1a:3e:a1:5c:76:7b:87:6b:35:56:91:fd: 08:86:03:64:5b:08:a9:35:16:ac:b9:64:7e:88:a5:d5:9d:4b: 52:e8:16:8e:4c:ba:d4:c9:4b:0e:8a:ac:66:12:78:e0:54:07: 1f:a9:f9:65:3e:75:51:aa:40:bb:67:24:7d:33:37:f5:aa:35: 6b:a1:b3:30:28:5d:a1:ad:91:28:4e:08:70:94:ab:98:ea:c8: 1d:c0:ac:4c:50:a7:11:4b:ff:d4:dd:f3:7e:c2:df:c6:91:df: 00:2c:d4:f6:b4:1a:0e:a8:fa:6e:09:bf:61:d5:19:90:36:e8: 5a:e9:bc:b2:b6:64:dc:98:79:dc:82:38:3d:4a:d2:04:37:c3: b1:d8:d4:84:10:c1:3c:4b:4c:62:9b:b8:c8:4c:bb:88:27:27: 28:ff:08:a3:5f:a8:70:46:13:88:16:9c:93:bf:42:4e:20:f9: 41:84:aa:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIyOUIxMTAvBgNVBAUTKEM0RjdGMzlFNjJGNEM5RDc4QzVFMTJGREMxNTFBRTRF MzJCQzlBNDIwHhcNMjUxMDE5MDc0ODUwWhcNMjUxMDI2MDc0ODUwWjAYMRYwFAYD VQQDEw02OGY0OTdlMy0xMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5mPXMP361eMJfnjz5IVHU3TaBnhmfjIoJiLcxsaakVpYJRuLn2VdtfDHdqm 8GDh6aLRsIDoxcZ296tA2TDySvPW99TLUfj7F72N6fGrdeDrzskbL41Bfj5XCRma NUcS0gu3b8ZwqjqLcPcQ0n5GyH3Y5/24aN8JBvENcIlQue4c7ETZ/X02G+AucSTb 61H+Qt22c+jJuhobump7OEiksyBpRdklRyN3Ca1wiBX/IY1wZ0Swbd5eoXtd8GyK ituhgWCfdxghViFtJ0lUMA+0lv9ktT6ukjOJwQu7Ks90CfE+m1iDRDXGfI2eMJti 9PClN48WZq0vIzbD4f9YyERQiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/TiSlx k7CmiPpeg47T+4lwJJtOMB8GA1UdIwQYMBaAFMT3855i9MnXjF4S/cFRrk4yvJpC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjI5Qi84QTNFMUQxQTBG ODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlkZU1YaEw5d1ZHdVRqSzht a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZnpubUwweWRlTVhoTDl3Vkd1VGpLOG1rSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjI5Qi84QTNFMUQxQTBGODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlk ZU1YaEw5d1ZHdVRqSzhta0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTnWzL++hvtu/kYcO5vcd6uvu5s533zwfb7O37tT7ldpFYdy3UYcRw 8SZF1Op0jIjDLLIwNCFq2fLBui5JVi4Ch5elJ3zRJRaOECMAFkYaPqFcdnuHazVW kf0IhgNkWwipNRasuWR+iKXVnUtS6BaOTLrUyUsOiqxmEnjgVAcfqfllPnVRqkC7 ZyR9Mzf1qjVrobMwKF2hrZEoTghwlKuY6sgdwKxMUKcRS//U3fN+wt/Gkd8ALNT2 tBoOqPpuCb9h1RmQNuha6byytmTcmHncgjg9StIEN8Ox2NSEEME8S0xim7jITLuI Jyco/wijX6hwRhOIFpyTv0JOIPlBhKpY -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:26 2025 by rpki-client