$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: g08U1uIw6E1kmrawAFw071VTk8gKTO7Bli1D0oBzMnk= Subject key identifier: 87:A6:75:48:F2:7A:29:26:A2:83:E6:00:A9:18:85:C0:25:C7:BE:1D Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 0622 Signing time: Sun 19 Oct 2025 00:20:52 +0000 Manifest this update: Sun 19 Oct 2025 00:20:51 +0000 Manifest next update: Sun 26 Oct 2025 00:20:51 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: 5BZh+y0tB3SpLB0JzYCIJUFtjAkZFqABjG5u0EyJjxY=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: l216klg+EdFhZXizpzBgdSx3W8LT8OTJYqEFSmlWpW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: Oct 19 00:20:51 2025 GMT Not After : Oct 26 00:20:51 2025 GMT Subject: CN=68f42ee4-4765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:8b:10:03:82:f5:55:34:b3:a8:51:6e:2a: bf:fe:a8:b6:33:bc:26:1b:00:16:e1:1b:e0:86:aa: 16:66:ee:cd:00:14:72:9c:b5:f1:8a:85:80:d6:cd: 71:c0:8b:4a:66:ca:c3:5b:8f:a4:72:d8:a2:1e:f1: bf:e2:36:5d:63:da:51:db:14:af:18:9c:7b:5b:fd: 0d:fb:5d:19:b0:73:36:3b:9d:65:05:f6:b3:bc:cc: fa:38:48:51:f9:f6:97:84:79:d4:e4:c0:9a:35:68: 5d:73:6d:6a:5b:b4:d6:d4:bf:7d:71:fc:f8:a9:7d: 8f:40:2f:89:40:83:74:50:fb:26:2b:9d:7f:31:d2: cc:12:4d:67:cb:34:f4:29:af:f9:67:0d:0b:cc:bc: 6c:f3:77:97:d0:c5:e7:81:0a:c9:85:a6:95:00:f3: ae:b6:c9:e6:f4:f5:04:09:46:bf:29:ec:2f:f7:46: 22:9e:91:e5:a2:2a:19:e9:7e:18:80:3e:5e:2b:12: c5:ef:da:34:74:69:3c:0c:88:f0:b4:89:9d:08:40: a2:02:35:d8:de:48:c3:06:76:f7:51:1f:99:98:a0: a9:a7:00:b1:c7:56:21:a8:f6:1d:1b:41:a1:03:84: 4b:b9:67:f2:d5:b5:48:69:34:c0:b0:19:81:60:f1: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:75:48:F2:7A:29:26:A2:83:E6:00:A9:18:85:C0:25:C7:BE:1D X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:6c:29:b6:8c:9d:83:7e:8e:74:57:dc:1f:3d:ac:16:96:bb: b9:02:1d:9c:9c:3d:24:74:77:aa:ea:66:1d:ad:b4:2c:80:c3: ed:33:30:e2:85:62:7a:e3:0f:88:b4:94:96:8b:a2:0f:ee:f9: 80:18:0a:af:1b:ff:a4:3d:3d:fb:76:94:73:7d:e1:49:fa:c6: 5f:6d:b8:20:24:0d:bf:fb:c7:74:2f:ad:12:4f:fb:f1:50:fc: bf:5f:4a:d7:1a:9c:69:52:ee:1e:9e:ee:bf:d1:75:eb:e1:1e: dd:14:bc:fe:f1:37:7d:16:56:73:c9:64:ca:bc:73:58:e6:ac: e3:80:91:c0:db:9b:37:28:73:8c:6a:15:bb:d9:75:d4:9f:53: 11:3e:3d:59:1a:05:5d:b1:1d:25:d6:9d:6a:b3:d8:9c:2d:26: 89:b0:da:6a:3e:a8:e9:b6:8b:da:03:09:4f:33:f7:9b:f9:a2: 2c:65:58:c9:57:b0:1b:02:ab:dc:1b:5f:2c:59:e3:39:fd:8f: c8:17:27:60:b3:d5:2d:f4:92:6f:1c:93:37:b4:fa:5a:26:a2: 21:ed:12:8e:3c:33:7d:ca:58:c8:38:80:f2:3e:9d:03:49:52: 89:5b:40:55:fa:27:d8:71:1c:b9:ba:9a:d9:b7:fa:33:35:21: ad:5d:3e:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjUxMDE5MDAyMDUxWhcNMjUxMDI2MDAyMDUxWjAYMRYwFAYD VQQDEw02OGY0MmVlNC00NzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX+LEAOC9VU0s6hRbiq//qi2M7wmGwAW4RvghqoWZu7NABRynLXxioWA1s1x wItKZsrDW4+kctiiHvG/4jZdY9pR2xSvGJx7W/0N+10ZsHM2O51lBfazvMz6OEhR +faXhHnU5MCaNWhdc21qW7TW1L99cfz4qX2PQC+JQIN0UPsmK51/MdLMEk1nyzT0 Ka/5Zw0LzLxs83eX0MXngQrJhaaVAPOutsnm9PUECUa/Kewv90YinpHloioZ6X4Y gD5eKxLF79o0dGk8DIjwtImdCECiAjXY3kjDBnb3UR+ZmKCppwCxx1YhqPYdG0Gh A4RLuWfy1bVIaTTAsBmBYPHGfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIemdUjy eikmooPmAKkYhcAlx74dMB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUbCm2jJ2Dfo50V9wfPawWlru5Ah2cnD0kdHeq6mYdrbQsgMPtMzDi hWJ64w+ItJSWi6IP7vmAGAqvG/+kPT37dpRzfeFJ+sZfbbggJA2/+8d0L60ST/vx UPy/X0rXGpxpUu4enu6/0XXr4R7dFLz+8Td9FlZzyWTKvHNY5qzjgJHA25s3KHOM ahW72XXUn1MRPj1ZGgVdsR0l1p1qs9icLSaJsNpqPqjptovaAwlPM/eb+aIsZVjJ V7AbAqvcG18sWeM5/Y/IFydgs9Ut9JJvHJM3tPpaJqIh7RKOPDN9yljIOIDyPp0D SVKJW0BV+ifYcRy5uprZt/ozNSGtXT5R -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:42 2025 by rpki-client