$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: wpOSpxK0RD42GS6tBRr/5Y6QJzzsRM5KuwUKiwEptpo= Subject key identifier: 9A:CF:43:98:C3:06:57:F7:83:69:A8:74:8A:8A:D0:CD:01:3A:49:1B Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0CC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0C9A Signing time: Sat 18 Oct 2025 19:13:16 +0000 Manifest this update: Sat 18 Oct 2025 19:13:15 +0000 Manifest next update: Sat 25 Oct 2025 19:13:15 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: CZL9B5kgc+1y7Fi2Yt7U0q2xSBeuUvwUD4ip3Ch+sK0=) 2: C13356C0921511F089DDCF39C4F9AE02.roa (hash: xKO8f4vIOBPlV36RLVMQ2Mn7ZysoWA4NDFm+p2c2Wvo=) 3: 82054BC05A5211F0BBE5D43EC4F9AE02.roa (hash: PeGjSUoxfFhFQ0C87K9ThPEDCalU5hsYJY8EJY1qm7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3268 (0xcc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Oct 18 19:13:15 2025 GMT Not After : Oct 25 19:13:15 2025 GMT Subject: CN=68f3e6cb-2905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5e:a9:b1:bd:90:49:3f:b6:7c:45:ce:c6:08: 7f:1c:a5:ae:f6:97:a1:ec:27:f5:8b:c4:70:1d:6d: 1e:f9:74:b4:37:0f:8a:82:fc:4b:1c:58:a1:bd:a0: 68:c0:ca:91:75:54:66:85:89:53:eb:35:22:79:5b: 30:c8:56:e6:b3:12:7f:17:37:d3:60:7d:1b:fe:b6: 03:24:c1:62:e8:72:a1:fb:25:12:23:42:ce:67:b7: 2d:4a:b8:53:66:ae:2d:9f:9d:fc:75:d7:61:ae:9f: 90:c8:06:72:52:58:f4:8c:e7:c6:93:79:ad:b4:98: 92:8a:fc:b2:42:a6:c4:c7:bb:b2:02:7b:41:c3:d8: be:98:10:67:16:60:ed:a7:76:ee:8d:7c:16:48:e2: 86:ea:3a:b7:97:a4:0d:0c:7f:e4:a2:a3:fb:4b:44: d2:eb:52:e2:4f:97:fb:6e:38:f1:0a:f8:d6:74:e3: 0c:a7:c0:2a:6f:6b:2c:c9:91:70:3a:e7:33:ea:05: 3c:d7:53:ac:0d:d3:a7:a7:72:a5:2a:f9:68:d8:b8: 92:ad:51:b0:4e:0e:0c:11:23:02:73:eb:eb:8a:22: f3:37:1b:0c:81:cd:e7:1d:ce:dd:ff:83:ed:ac:00: 55:74:d3:66:9f:00:69:7b:61:cd:31:2e:a9:6d:35: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CF:43:98:C3:06:57:F7:83:69:A8:74:8A:8A:D0:CD:01:3A:49:1B X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:c1:f3:ad:f7:96:38:ba:20:37:24:1d:d9:41:16:c3:b4:9d: 5c:5e:22:2f:6d:a8:33:73:f8:91:ef:3b:c9:e0:f8:a9:08:21: 7d:07:f3:25:a8:23:56:59:7b:62:38:4a:52:be:3c:db:9b:7a: 3f:84:03:9c:a7:8b:0d:19:86:7d:9a:df:49:70:6d:27:b1:5f: 13:10:dc:7a:bf:0e:53:cd:cd:f3:6b:11:9f:3b:1c:af:1c:28: 7f:d9:4a:60:7e:3a:1f:5b:64:d8:d1:eb:63:d6:bd:c3:26:d2: 4c:6c:0a:9e:af:85:27:94:18:3a:74:1b:ff:b1:26:70:a3:9b: 18:73:cc:89:e1:28:b2:e6:0d:68:db:ae:b0:eb:1a:40:f4:42: 10:8c:41:5a:a1:b6:6a:c8:4f:69:65:54:10:a3:d9:6c:d6:b1: f6:b5:5d:1b:95:8c:43:25:cd:d0:ec:2a:db:4d:9f:39:df:c6: 51:e2:b1:e2:23:0f:99:92:c4:03:8b:1a:8d:58:d9:2b:3d:e8: cb:2e:9c:fe:d9:a9:df:14:17:9d:8a:70:35:29:d9:ab:66:91: 78:35:9d:be:4f:8a:25:61:ca:00:af:43:0f:ec:17:3d:6b:a3: 1d:58:57:c3:75:80:21:02:25:4d:59:95:10:6b:cf:38:e1:fd: 07:74:8e:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUxMDE4MTkxMzE1WhcNMjUxMDI1MTkxMzE1WjAYMRYwFAYD VQQDEw02OGYzZTZjYi0yOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA916psb2QST+2fEXOxgh/HKWu9peh7Cf1i8RwHW0e+XS0Nw+KgvxLHFihvaBo wMqRdVRmhYlT6zUieVswyFbmsxJ/FzfTYH0b/rYDJMFi6HKh+yUSI0LOZ7ctSrhT Zq4tn538dddhrp+QyAZyUlj0jOfGk3mttJiSivyyQqbEx7uyAntBw9i+mBBnFmDt p3bujXwWSOKG6jq3l6QNDH/koqP7S0TS61LiT5f7bjjxCvjWdOMMp8Aqb2ssyZFw Oucz6gU811OsDdOnp3KlKvlo2LiSrVGwTg4MESMCc+vriiLzNxsMgc3nHc7d/4Pt rABVdNNmnwBpe2HNMS6pbTX5/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrPQ5jD Blf3g2modIqK0M0BOkkbMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3wfOt95Y4uiA3JB3ZQRbDtJ1cXiIvbagzc/iR7zvJ4PipCCF9B/Ml qCNWWXtiOEpSvjzbm3o/hAOcp4sNGYZ9mt9JcG0nsV8TENx6vw5Tzc3zaxGfOxyv HCh/2UpgfjofW2TY0etj1r3DJtJMbAqer4UnlBg6dBv/sSZwo5sYc8yJ4Siy5g1o 266w6xpA9EIQjEFaobZqyE9pZVQQo9ls1rH2tV0blYxDJc3Q7CrbTZ8538ZR4rHi Iw+ZksQDixqNWNkrPejLLpz+2anfFBedinA1KdmrZpF4NZ2+T4olYcoAr0MP7Bc9 a6MdWFfDdYAhAiVNWZUQa8844f0HdI4M -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:29 2025 by rpki-client