$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: TsUcmFdUmJgvV3z9y/e4l8h8wt9AhegFfoCaPGJYsOM= Subject key identifier: A7:42:A0:22:FD:8F:3D:93:E7:11:6A:3E:47:24:FF:08:99:B2:EC:27 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 03CF Signing time: Sun 19 Oct 2025 02:36:47 +0000 Manifest this update: Sun 19 Oct 2025 02:36:46 +0000 Manifest next update: Sun 26 Oct 2025 02:36:46 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: riH4wtBoxdixgtYlxHT+jUTRH06YKDyVWyhWB799Fpw=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: DbGKbMecwcykqDAfU21+x6Kvm9Z6g5WTzg4SdqXRisc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Oct 19 02:36:46 2025 GMT Not After : Oct 26 02:36:46 2025 GMT Subject: CN=68f44ebe-c7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:6a:9b:7c:df:0a:d3:55:00:29:73:64:50: 2d:b4:29:40:5d:8c:22:e6:21:63:9a:bb:04:d5:fe: 10:8e:86:5d:18:d2:fa:20:fa:7b:bf:5b:7a:d1:8c: 39:12:90:d2:6b:68:9a:f4:49:1c:cc:69:8a:62:26: d3:20:63:96:e2:28:24:dc:e0:78:73:fe:c7:c9:1f: b2:eb:47:3b:0a:f5:7b:24:5e:0d:94:33:18:cd:d8: e7:5a:54:67:0c:68:4f:c5:ed:0b:1a:7c:61:fb:f1: 8b:be:cb:4c:11:95:35:37:49:c7:00:1f:4d:0f:f4: 14:bf:8d:2e:50:73:91:ea:d2:5a:2a:4b:c8:7d:62: cc:26:e7:0a:63:9c:82:15:3d:c6:ad:9a:40:2a:86: a7:41:a6:a4:d3:59:d8:09:f9:31:57:94:4b:ae:6e: d2:ad:a8:5a:67:3a:6f:00:92:65:fb:7c:b4:ab:ad: 19:85:b6:f2:33:d7:3c:7b:3b:5e:6c:c3:43:10:f2: 1f:68:0f:d7:8d:41:64:9d:f0:b1:ad:d5:c2:c0:bb: 36:d8:32:06:a8:82:29:3c:aa:f3:97:f3:41:a2:a8: 1c:2b:f2:a5:8b:fd:c9:10:d0:8b:ac:63:cb:a5:87: e9:2d:46:be:2d:39:32:46:55:d1:3a:44:d7:3d:c4: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:42:A0:22:FD:8F:3D:93:E7:11:6A:3E:47:24:FF:08:99:B2:EC:27 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:fd:a0:e3:80:bd:07:75:25:ae:cf:75:e1:ad:4b:17:a0:1b: 86:4b:aa:a0:a9:51:13:11:8e:26:0a:b2:54:3e:17:20:d5:34: 8b:49:33:e0:61:ac:ae:63:12:c6:6f:63:5e:30:53:f7:a1:94: ba:bf:4c:9a:9b:38:67:32:42:42:da:54:a8:99:fb:41:91:83: 6f:97:5d:2f:a9:36:a8:d7:14:48:b0:5f:ce:34:7a:b3:8a:a4: 91:5c:8a:e4:43:2d:9b:fb:70:48:43:c7:d7:b9:e4:44:69:cd: 33:fc:75:c0:30:14:f8:25:11:6d:81:75:e4:a7:62:23:ca:f5: e1:e7:3d:9b:05:fd:8c:ee:82:61:7c:31:e1:d1:26:84:13:33: 2f:29:c3:d4:1d:42:ce:da:f7:0f:e6:d9:4e:92:95:b0:d0:47: a0:cf:4c:64:3d:7a:90:93:a4:27:f6:5a:0f:1a:5e:da:ae:a4: e2:cb:61:24:fe:ff:ea:6e:49:90:bb:21:de:55:1d:2a:da:4a: 8a:67:9a:59:4b:a0:41:ce:54:d8:b8:a5:07:06:d1:d5:c8:08: aa:c7:9e:fb:bd:7a:22:db:c8:99:61:26:33:1a:22:10:54:1d: 21:9c:f5:13:11:10:64:bc:fc:ed:60:05:39:4b:6f:ae:43:b2: ff:37:97:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjUxMDE5MDIzNjQ2WhcNMjUxMDI2MDIzNjQ2WjAYMRYwFAYD VQQDEw02OGY0NGViZS1jN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxdqm3zfCtNVAClzZFAttClAXYwi5iFjmrsE1f4QjoZdGNL6IPp7v1t60Yw5 EpDSa2ia9EkczGmKYibTIGOW4igk3OB4c/7HyR+y60c7CvV7JF4NlDMYzdjnWlRn DGhPxe0LGnxh+/GLvstMEZU1N0nHAB9ND/QUv40uUHOR6tJaKkvIfWLMJucKY5yC FT3GrZpAKoanQaak01nYCfkxV5RLrm7SrahaZzpvAJJl+3y0q60ZhbbyM9c8ezte bMNDEPIfaA/XjUFknfCxrdXCwLs22DIGqIIpPKrzl/NBoqgcK/Kli/3JENCLrGPL pYfpLUa+LTkyRlXROkTXPcQSiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdCoCL9 jz2T5xFqPkck/wiZsuwnMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ/aDjgL0HdSWuz3XhrUsXoBuGS6qgqVETEY4mCrJUPhcg1TSLSTPg YayuYxLGb2NeMFP3oZS6v0yamzhnMkJC2lSomftBkYNvl10vqTao1xRIsF/ONHqz iqSRXIrkQy2b+3BIQ8fXueREac0z/HXAMBT4JRFtgXXkp2IjyvXh5z2bBf2M7oJh fDHh0SaEEzMvKcPUHULO2vcP5tlOkpWw0Eegz0xkPXqQk6Qn9loPGl7arqTiy2Ek /v/qbkmQuyHeVR0q2kqKZ5pZS6BBzlTYuKUHBtHVyAiqx577vXoi28iZYSYzGiIQ VB0hnPUTERBkvPztYAU5S2+uQ7L/N5e7 -----END CERTIFICATE-----Generated at Mon Oct 20 15:25:35 2025 by rpki-client