$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: Awp+8mO+jnaSzMPsLs7QjxpeOYIRer8Y4zZg7Krgrys= Subject key identifier: 7B:9B:47:CB:A0:75:02:58:E8:CE:6C:C9:0B:93:27:A2:C1:A6:F2:56 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 3502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 34E7 Signing time: Sat 18 Oct 2025 14:19:25 +0000 Manifest this update: Sat 18 Oct 2025 14:19:24 +0000 Manifest next update: Sat 25 Oct 2025 14:19:24 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: qspJQn8kkqHrJcHjARttjLOPqRDZk0m5Y2Hn3qCaSuw=) 2: 2C5F8752A10D11EFB9BE8476C4F9AE02.roa (hash: jPj9bTXq8/V0TwHLgDmyYaPhRw7As2Sxl+kCUunMcow=) 3: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: ks6ZHeQSlWbDyKZP3PDWWDRvxvqWjlQTJpFGHN+LCL4=) 4: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: dgki84RnKxfDFSXW7buISP/w97pblO+d10cyHqDLr80=) 5: F8E58782A10C11EFA3C0F375C4F9AE02.roa (hash: YmetKHnU5ANrgA6cs+nuZb/Ddq+jw2xRjEtksMKjh6c=) 6: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: e5E6IXPuP1rU/JKfEU2JqffZsvpnjnyYycraO2Bit8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13570 (0x3502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Oct 18 14:19:24 2025 GMT Not After : Oct 25 14:19:24 2025 GMT Subject: CN=68f3a1ec-742f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:da:4a:56:a2:9e:dc:5f:bb:9f:af:f3:8d: 72:e7:3f:3b:4c:22:33:78:37:76:1d:b4:71:fc:e5: e7:89:b0:e1:5a:2b:2a:75:db:8e:26:5b:2a:49:d4: c5:e4:fc:c4:d6:69:1c:46:12:c1:a9:db:18:39:76: 9d:bf:37:35:94:99:9f:9a:a4:c3:5f:6b:11:a9:3e: eb:d7:e3:b8:96:53:17:ca:9f:75:ca:cb:ca:a9:5c: 43:3e:c7:99:1d:2b:e8:54:cd:dd:1e:10:98:6a:4e: d2:ce:3e:ad:c6:52:75:0d:e7:55:9e:41:36:ab:84: 65:87:bc:e2:55:df:4d:8f:37:b6:06:9f:55:fc:7e: f0:31:45:bd:55:ab:34:02:03:63:74:49:70:98:ef: ab:9a:e8:f6:9b:47:f0:22:6a:00:f6:20:2e:c5:54: a6:bb:e1:d7:41:b1:f5:30:09:3f:bb:e6:65:c5:24: f2:2c:ff:f2:27:5e:2b:21:55:b1:1d:26:27:e8:91: e2:ed:ab:ee:ac:b1:bf:5b:1b:44:97:c2:07:88:6c: 35:80:06:13:7e:a3:f0:67:07:59:76:26:0a:fd:22: 20:f3:9e:64:32:f0:c6:05:67:02:15:06:f8:86:0f: ac:75:e9:16:ac:7c:d6:70:d3:a1:39:0f:8e:fa:1d: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9B:47:CB:A0:75:02:58:E8:CE:6C:C9:0B:93:27:A2:C1:A6:F2:56 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:61:ba:9f:b7:29:9b:f4:23:1c:65:f3:7f:44:9c:20:9d:54: 12:33:59:a3:8f:07:9d:d7:73:55:06:10:a9:3a:c6:ca:f2:26: 50:0c:d0:c1:b8:66:dc:69:6d:1b:df:6a:d2:63:47:74:9b:17: 2e:f7:71:ee:b8:72:9b:39:a3:cf:2f:ce:e0:7c:5c:e7:65:13: 3c:43:a2:c3:68:f2:74:d3:df:8b:5a:85:95:d1:75:66:5a:41: 0f:e9:3e:96:a6:26:da:1a:a6:c0:f6:23:d4:ee:a4:c6:2a:0c: 90:f9:89:9c:ae:61:c4:c6:2d:3f:1d:f8:09:aa:dd:8c:5c:e2: 3e:22:51:29:bf:0f:53:1d:84:66:be:0a:ef:43:3d:99:76:bb: 69:7b:15:b8:e1:5e:6d:5b:bd:99:24:c4:38:57:8d:b9:f7:fe: ac:4c:ea:d6:e1:ac:f3:13:08:38:d8:53:a4:cc:0c:d6:e8:8e: be:09:78:a0:c5:c3:2c:a4:fc:8a:d8:c3:c9:d9:41:6a:2a:94: 0c:be:47:75:d1:d8:5e:df:48:0e:4d:a3:0e:a8:4a:7e:37:4e: 4f:1c:c3:ce:20:ac:46:9d:b3:25:41:7c:fd:6e:5a:56:1b:3e: 47:cd:1c:9b:31:41:e3:bc:8b:7f:2c:a4:99:91:14:c6:31:71: fc:59:53:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjUxMDE4MTQxOTI0WhcNMjUxMDI1MTQxOTI0WjAYMRYwFAYD VQQDEw02OGYzYTFlYy03NDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqI3aSlaintxfu5+v841y5z87TCIzeDd2HbRx/OXnibDhWisqdduOJlsqSdTF 5PzE1mkcRhLBqdsYOXadvzc1lJmfmqTDX2sRqT7r1+O4llMXyp91ysvKqVxDPseZ HSvoVM3dHhCYak7Szj6txlJ1DedVnkE2q4Rlh7ziVd9Njze2Bp9V/H7wMUW9Vas0 AgNjdElwmO+rmuj2m0fwImoA9iAuxVSmu+HXQbH1MAk/u+ZlxSTyLP/yJ14rIVWx HSYn6JHi7avurLG/WxtEl8IHiGw1gAYTfqPwZwdZdiYK/SIg855kMvDGBWcCFQb4 hg+sdekWrHzWcNOhOQ+O+h0LfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHubR8ug dQJY6M5syQuTJ6LBpvJWMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIYbqftymb9CMcZfN/RJwgnVQSM1mjjwed13NVBhCpOsbK8iZQDNDB uGbcaW0b32rSY0d0mxcu93HuuHKbOaPPL87gfFznZRM8Q6LDaPJ009+LWoWV0XVm WkEP6T6WpibaGqbA9iPU7qTGKgyQ+YmcrmHExi0/HfgJqt2MXOI+IlEpvw9THYRm vgrvQz2ZdrtpexW44V5tW72ZJMQ4V4259/6sTOrW4azzEwg42FOkzAzW6I6+CXig xcMspPyK2MPJ2UFqKpQMvkd10dhe30gOTaMOqEp+N05PHMPOIKxGnbMlQXz9blpW Gz5HzRybMUHjvIt/LKSZkRTGMXH8WVOZ -----END CERTIFICATE-----Generated at Mon Oct 20 15:55:22 2025 by rpki-client