$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: fanp6aQL0jglgYl09KxAJFxBWyYG3MuRL7XZ1lGVE44= Subject key identifier: 6C:11:64:DC:FA:6A:B2:C5:DB:AD:F1:90:09:D3:CB:6E:88:24:DE:F1 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0E7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0E56 Signing time: Sun 02 Nov 2025 17:46:49 +0000 Manifest this update: Sun 02 Nov 2025 17:46:48 +0000 Manifest next update: Sun 09 Nov 2025 17:46:48 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: YndgiktGD7BdJNKlbkEAyD1N7xJzzU+ZJVsG8kpylDA=) 2: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: qtVktuatmgxYDOUKpmx9+4mvFE8ErGGHadU2rZXHHOI=) 3: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: 6vTa2jFZRIl18mXvmJhTh/HGMJaVZWt9h8uikA4SPmc=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: QRv08V7HqtcB3bHnZdM9X+W4jlFsB6z2SpL2l3Cbxgo=) 5: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: rV1Z8AbpTv1d+o44R7LlYsk8JevP6flWo0s81DQ5Rok=) 6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: lbAPfcc0myVwdYbEISgNYKY5g+qS8g/HzTgMPDxOCGE=) 7: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: 1hlPRZQBD73jEyWKbHC8ZRWrArjylE9If913X/Jb57A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3710 (0xe7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Nov 2 17:46:48 2025 GMT Not After : Nov 9 17:46:48 2025 GMT Subject: CN=69079908-87ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c7:1c:f2:8e:86:86:7b:5f:ba:72:45:e7:6d: 60:da:3e:ec:18:36:82:c3:d0:9f:8a:a2:4d:b7:9e: 7a:71:11:bc:66:12:81:ba:17:4b:17:3b:7a:4d:fa: 93:fe:99:cd:03:7f:02:d1:fe:13:26:2e:da:1b:6c: 3d:ec:dd:ba:54:f1:0a:eb:21:7b:b3:b5:18:4e:66: 5f:7e:2c:46:4e:29:76:e5:23:c0:81:6d:b0:2f:52: a1:3d:7d:6d:92:1c:a3:8b:e7:6a:d6:cd:c5:9c:77: 1a:68:78:d5:b3:ca:34:2f:8d:18:ff:31:dc:ea:fd: 79:4d:af:f2:db:ef:a3:7b:90:41:84:a5:d4:d9:ee: e8:22:48:74:2c:30:bb:fc:7f:b7:c1:91:fc:20:56: c9:df:e1:39:79:7b:dd:ab:c6:67:05:a9:f5:13:ed: ed:2f:9a:ae:de:08:9b:32:dc:b0:5f:5b:d7:2a:8d: df:ec:2a:0d:0a:1c:c3:b5:9c:4c:53:db:08:19:27: ed:8d:d1:f8:3b:c3:2b:0a:49:6b:7a:45:ce:82:e0: 8c:aa:13:48:f4:da:af:6a:a4:97:c6:6a:e1:41:52: 3b:6a:b2:cb:54:23:be:2a:e3:3b:0e:2c:5d:cb:73: fd:ba:b0:67:1c:91:83:d6:11:93:2d:03:b9:fd:df: 4e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:11:64:DC:FA:6A:B2:C5:DB:AD:F1:90:09:D3:CB:6E:88:24:DE:F1 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:7c:52:38:22:37:b3:96:78:f2:e5:97:ea:c6:0f:22:54:91: f8:bb:12:b1:24:5b:72:54:98:e1:62:40:0d:05:a4:a7:b2:7c: b8:70:06:9c:06:e7:99:a5:1e:61:2f:08:03:10:b5:36:e6:5e: 29:56:ea:9a:75:76:ca:37:92:f6:85:32:4e:44:ce:de:2b:4d: 98:15:38:76:6a:76:70:14:8d:96:af:22:f3:07:df:c0:99:46: 63:a1:ae:68:fb:93:00:13:75:a0:22:03:0e:27:93:c7:f8:7e: 56:cb:2c:68:aa:06:57:4b:84:14:0b:e7:7a:0f:40:6f:7a:55: 5f:72:fe:03:ed:c6:12:52:fe:f4:ba:da:53:5a:62:8d:9c:10: 8b:67:c2:08:c6:30:bd:49:a0:eb:4e:ed:ba:70:12:ec:63:f3: 04:26:f9:f0:9d:15:ba:d0:e3:98:77:46:b5:95:f1:62:15:15: 17:c3:43:52:1a:b4:25:42:91:24:2f:b0:fd:40:af:f6:d3:92: f2:96:37:d6:73:ab:48:9e:74:d4:38:ef:ad:2a:49:d2:93:b1: 40:8f:c8:f8:17:80:81:19:f3:36:80:fc:96:b6:d1:5f:21:e4: 96:05:7d:0a:e8:82:a9:60:01:f9:d7:89:eb:3b:76:f3:ef:f1: 10:b0:a9:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjUxMTAyMTc0NjQ4WhcNMjUxMTA5MTc0NjQ4WjAYMRYwFAYD VQQDEw02OTA3OTkwOC04N2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Mcc8o6GhntfunJF521g2j7sGDaCw9CfiqJNt556cRG8ZhKBuhdLFzt6TfqT /pnNA38C0f4TJi7aG2w97N26VPEK6yF7s7UYTmZffixGTil25SPAgW2wL1KhPX1t khyji+dq1s3FnHcaaHjVs8o0L40Y/zHc6v15Ta/y2++je5BBhKXU2e7oIkh0LDC7 /H+3wZH8IFbJ3+E5eXvdq8ZnBan1E+3tL5qu3gibMtywX1vXKo3f7CoNChzDtZxM U9sIGSftjdH4O8MrCklrekXOguCMqhNI9NqvaqSXxmrhQVI7arLLVCO+KuM7Dixd y3P9urBnHJGD1hGTLQO5/d9O6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwRZNz6 arLF263xkAnTy26IJN7xMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFfFI4Ijezlnjy5Zfqxg8iVJH4uxKxJFtyVJjhYkANBaSnsny4cAac BueZpR5hLwgDELU25l4pVuqadXbKN5L2hTJORM7eK02YFTh2anZwFI2WryLzB9/A mUZjoa5o+5MAE3WgIgMOJ5PH+H5WyyxoqgZXS4QUC+d6D0BvelVfcv4D7cYSUv70 utpTWmKNnBCLZ8IIxjC9SaDrTu26cBLsY/MEJvnwnRW60OOYd0a1lfFiFRUXw0NS GrQlQpEkL7D9QK/205LyljfWc6tInnTUOO+tKknSk7FAj8j4F4CBGfM2gPyWttFf IeSWBX0K6IKpYAH514nrO3bz7/EQsKl6 -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:55 2025 by rpki-client