$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft File: -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json) Hash identifier: oTw23HM1eOJEWhZkaEK5dIrHxmtcvu16ki9b1yCFwOc= Subject key identifier: 3D:29:D3:3F:0A:9D:43:94:CB:55:17:FE:8C:25:36:78:A9:AC:BF:C8 Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC Certificate issuer: /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft Manifest number: 021C Signing time: Sun 19 Oct 2025 04:28:47 +0000 Manifest this update: Sun 19 Oct 2025 04:28:47 +0000 Manifest next update: Sun 26 Oct 2025 04:28:47 +0000 Files and hashes: 1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: G7jtS4WilDMHJR7k7R/HvbhfGyuPGhukKhQdsvDnEDU=) 2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: P1cDwO0JwMVyMvSRcaDGiISLVg7IuTCLj2a8HaJzNI4=) 3: 69349714157D11F0876A4D62C4F9AE02.roa (hash: spR6GzQsviRpE5kB1PAg1GtPij2DNf/T1fZFU8oARv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196629, serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Validity Not Before: Oct 19 04:28:47 2025 GMT Not After : Oct 26 04:28:47 2025 GMT Subject: CN=68f468ff-d1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:e4:98:fc:29:9c:d4:32:94:24:4c:91:fb: 26:62:4f:5a:dc:78:4c:78:57:a8:5a:a6:65:78:a4: 7c:d6:09:01:85:61:b6:da:3b:79:3b:1a:86:37:b3: f6:7b:cf:25:59:82:b1:33:d4:76:ad:e3:42:73:67: bd:0e:c1:e6:0b:f0:69:71:6e:e1:a4:47:2c:0b:7b: 2e:14:e0:d0:4f:96:d9:8c:d4:14:0b:5a:cc:ec:fd: b4:81:3b:1a:14:bc:8f:64:31:94:3d:82:e3:12:93: 0d:21:bf:65:0e:1a:70:82:7f:57:62:91:fe:bd:17: f8:b8:fa:23:01:d0:75:70:2e:b0:bb:32:90:4b:5e: c8:d3:5c:7a:c6:51:5e:66:e3:ae:af:b7:d7:93:ca: d3:10:a2:ca:68:e8:b1:6d:94:d0:a0:d3:a7:18:34: 7a:40:fa:0d:f4:bf:90:7c:0b:0f:cf:c0:27:46:2f: 2c:9b:36:a1:b7:32:3d:68:63:7c:30:2d:0a:db:68: af:88:45:39:f5:ca:e2:16:da:00:10:f1:b9:6e:9e: b2:b4:fd:c0:76:6e:db:a8:27:7f:ab:96:d9:ea:61: 71:77:ac:07:cb:b8:b4:fa:cb:65:27:1b:35:f6:9a: 5f:a2:38:ec:f4:cb:69:87:1a:0a:6a:e9:b0:b2:2d: f3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:29:D3:3F:0A:9D:43:94:CB:55:17:FE:8C:25:36:78:A9:AC:BF:C8 X509v3 Authority Key Identifier: keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a4:c8:85:87:a1:e5:85:ae:41:3e:be:77:d7:9b:1f:c4:54: 2a:63:00:ab:35:b6:7a:45:b1:31:c3:c6:38:1b:47:2f:74:ef: 22:e0:9d:cc:42:53:ff:01:a7:af:78:fc:0f:8b:aa:8a:20:3b: a7:35:f0:59:aa:0d:a2:e1:1d:ff:fe:a6:41:6f:6a:ae:41:84: ea:a2:94:b4:b8:00:7f:c6:b1:65:62:e4:df:13:fc:81:eb:cb: d1:1d:ef:63:00:19:32:33:71:da:a4:0c:e0:a6:09:1f:21:19: 7a:04:e2:b7:ad:dd:8f:40:a6:53:3d:cb:b7:f4:f4:59:bc:90: 4b:a4:6b:2e:0e:55:1a:a2:d6:5e:af:d7:d5:10:d0:fc:e6:ca: d0:78:dc:f5:b2:91:11:57:bb:c1:cc:f8:1d:51:21:0b:12:2c: cf:de:f8:aa:e0:10:6a:03:85:a1:81:88:52:7d:78:60:cf:e8: 30:5e:d8:91:0d:65:f9:a7:96:54:30:38:87:b1:8c:e2:fb:b9: cc:ab:3d:ac:5c:8d:d0:c7:9a:5c:87:f8:be:76:f7:b4:3f:d4: 19:de:28:6f:d1:80:25:6a:76:6b:3f:11:ff:0e:c3:7a:91:ce: b3:bd:62:20:00:6d:5c:e6:31:fd:97:c3:a3:58:ab:e4:d4:e0: 98:fe:27:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY2MjkxMTAvBgNVBAUTKEY5Nzc5Nzc4REE3MEM1OEE1QTc5NjQ1REQyODk2MTEx QkE2RkVCQ0MwHhcNMjUxMDE5MDQyODQ3WhcNMjUxMDI2MDQyODQ3WjAYMRYwFAYD VQQDEw02OGY0NjhmZi1kMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKzkmPwpnNQylCRMkfsmYk9a3HhMeFeoWqZleKR81gkBhWG22jt5OxqGN7P2 e88lWYKxM9R2reNCc2e9DsHmC/BpcW7hpEcsC3suFODQT5bZjNQUC1rM7P20gTsa FLyPZDGUPYLjEpMNIb9lDhpwgn9XYpH+vRf4uPojAdB1cC6wuzKQS17I01x6xlFe ZuOur7fXk8rTEKLKaOixbZTQoNOnGDR6QPoN9L+QfAsPz8AnRi8smzahtzI9aGN8 MC0K22iviEU59criFtoAEPG5bp6ytP3Adm7bqCd/q5bZ6mFxd6wHy7i0+stlJxs1 9ppfojjs9MtphxoKaumwsi3ztQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0p0z8K nUOUy1UX/owlNniprL/IMB8GA1UdIwQYMBaAFPl3l3jacMWKWnlkXdKJYRG6b+vM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjYyOS9FMDk4NDYzRTdB QkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZcGFlV1JkMG9saEVicHY2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YZVhlTnB3eFlwYWVXUmQwb2xoRWJwdjY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjYyOS9FMDk4NDYzRTdBQkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZ cGFlV1JkMG9saEVicHY2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQpMiFh6Hlha5BPr5315sfxFQqYwCrNbZ6RbExw8Y4G0cvdO8i4J3M QlP/AaevePwPi6qKIDunNfBZqg2i4R3//qZBb2quQYTqopS0uAB/xrFlYuTfE/yB 68vRHe9jABkyM3HapAzgpgkfIRl6BOK3rd2PQKZTPcu39PRZvJBLpGsuDlUaotZe r9fVEND85srQeNz1spERV7vBzPgdUSELEizP3viq4BBqA4WhgYhSfXhgz+gwXtiR DWX5p5ZUMDiHsYzi+7nMqz2sXI3Qx5pch/i+dve0P9QZ3ihv0YAlanZrPxH/DsN6 kc6zvWIgAG1c5jH9l8OjWKvk1OCY/ide -----END CERTIFICATE-----Generated at Tue Oct 21 00:43:44 2025 by rpki-client