$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: A5qgXmXhOkzHGZ9kyvO+OGfgk7nCjn65cyIo6yc+HYs= Subject key identifier: C6:55:22:C0:3E:57:26:A1:80:84:13:43:D0:E7:5E:C3:53:1B:AA:7A Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 0208 Signing time: Sun 19 Oct 2025 04:36:38 +0000 Manifest this update: Sun 19 Oct 2025 04:36:37 +0000 Manifest next update: Sun 26 Oct 2025 04:36:37 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: BQLPvUXqmZVvpY5CDgo/cbXTHsx3R0RW/1tNIul/Z2A=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: Oct 19 04:36:37 2025 GMT Not After : Oct 26 04:36:37 2025 GMT Subject: CN=68f46ad6-dcd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:96:67:fb:4b:bb:ca:9f:2a:76:60:e0:47:a7: 6a:5f:20:ce:89:5d:c0:26:a9:6c:44:96:6b:2a:2f: db:69:e6:06:3d:42:77:b3:1a:59:f3:38:17:d2:89: 81:2f:a0:0c:ab:f4:22:cb:6f:1f:68:39:2d:3c:fc: bd:95:3e:51:ac:25:cd:4b:63:a6:0f:1a:d7:7c:64: db:1b:fe:9a:4f:da:c0:42:ae:95:84:2f:46:15:ab: 17:c1:68:ed:f4:c2:b5:eb:f7:3c:84:51:6a:e6:57: 9d:54:fe:8a:bd:08:9d:47:b5:e4:78:24:1c:ce:6f: 34:ff:1e:8f:11:b4:55:57:c9:32:73:e6:a0:a9:cd: 89:4e:56:44:ed:57:0d:b9:37:2b:37:7f:52:8c:9d: 93:82:c3:fc:82:f5:e3:d7:1a:b2:46:73:61:50:19: 07:89:73:b0:d2:14:f1:9f:59:95:c4:b6:5c:0c:ad: b1:d2:bb:b2:eb:5c:4f:8e:c8:ae:21:5a:28:b1:df: 45:b4:23:a7:b2:a4:05:00:02:fc:58:55:3e:af:a0: f6:be:2a:05:e5:ef:bf:37:7e:64:d7:69:03:2b:f0: ca:c2:7a:8b:f9:34:ea:c2:1a:a6:f3:d8:56:61:e8: 0d:9b:b0:b1:a9:12:14:d5:44:c6:8c:f6:63:fa:bf: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:55:22:C0:3E:57:26:A1:80:84:13:43:D0:E7:5E:C3:53:1B:AA:7A X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f6:3f:66:1d:94:55:e7:7d:ca:27:61:59:57:e2:2c:16:06: 1b:53:b4:09:02:c6:ac:14:50:12:a6:70:2f:b7:fa:86:92:89: 4b:ce:c1:4b:ee:33:aa:d5:5e:75:82:3a:59:21:0b:80:58:d6: 93:8a:29:c7:a9:41:3f:60:b2:e9:84:6d:85:87:06:9f:3c:45: 66:9c:57:8b:0a:b0:87:bd:fe:b9:64:2d:dd:8c:54:5b:c9:e6: 30:59:22:8e:36:ce:66:52:5e:ef:ca:20:af:15:b9:38:06:d1: 2f:20:fd:3c:76:a0:90:ef:20:c4:f5:9c:8a:e1:ce:4c:c2:a9: ce:4f:00:d0:f1:b8:85:c8:f5:f3:3f:fa:fa:1d:a5:42:3c:f4: 1b:99:df:86:03:32:86:09:f6:6f:05:b2:f6:36:ba:61:de:59: 27:a3:58:61:ad:9a:77:16:cc:05:fa:23:d0:08:3c:74:98:87: 14:d6:6b:bd:3b:cc:c4:cc:7c:d7:9d:f9:eb:12:88:67:51:78: 79:41:2d:53:c4:5b:01:e2:17:e1:c3:31:38:b2:1f:3d:8a:e0: 9e:d2:56:e2:8f:fc:71:a7:3f:f5:96:da:77:e8:56:fc:59:8a: ad:21:60:96:9c:cd:c7:52:22:9a:9e:b0:b6:a0:94:9e:9a:ce: 41:8f:20:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjUxMDE5MDQzNjM3WhcNMjUxMDI2MDQzNjM3WjAYMRYwFAYD VQQDEw02OGY0NmFkNi1kY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pZn+0u7yp8qdmDgR6dqXyDOiV3AJqlsRJZrKi/baeYGPUJ3sxpZ8zgX0omB L6AMq/Qiy28faDktPPy9lT5RrCXNS2OmDxrXfGTbG/6aT9rAQq6VhC9GFasXwWjt 9MK16/c8hFFq5ledVP6KvQidR7XkeCQczm80/x6PEbRVV8kyc+agqc2JTlZE7VcN uTcrN39SjJ2TgsP8gvXj1xqyRnNhUBkHiXOw0hTxn1mVxLZcDK2x0ruy61xPjsiu IVoosd9FtCOnsqQFAAL8WFU+r6D2vioF5e+/N35k12kDK/DKwnqL+TTqwhqm89hW YegNm7CxqRIU1UTGjPZj+r/ttwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZVIsA+ VyahgIQTQ9DnXsNTG6p6MB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh9j9mHZRV533KJ2FZV+IsFgYbU7QJAsasFFASpnAvt/qGkolLzsFL 7jOq1V51gjpZIQuAWNaTiinHqUE/YLLphG2FhwafPEVmnFeLCrCHvf65ZC3djFRb yeYwWSKONs5mUl7vyiCvFbk4BtEvIP08dqCQ7yDE9ZyK4c5MwqnOTwDQ8biFyPXz P/r6HaVCPPQbmd+GAzKGCfZvBbL2Nrph3lkno1hhrZp3FswF+iPQCDx0mIcU1mu9 O8zEzHzXnfnrEohnUXh5QS1TxFsB4hfhwzE4sh89iuCe0lbij/xxpz/1ltp36Fb8 WYqtIWCWnM3HUiKanrC2oJSems5BjyCA -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:49 2025 by rpki-client