$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: qtkF/fzurUKRSbeFNEDHSr3E2kiTOu+ZN4Q1OzEszxo= Subject key identifier: 30:00:10:1D:3C:CF:FB:66:D8:5F:0C:26:EF:E8:5B:D7:B0:F6:13:A2 Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7DCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 4880 Signing time: Sun 02 Nov 2025 16:59:22 +0000 Manifest this update: Sun 02 Nov 2025 16:59:21 +0000 Manifest next update: Sun 09 Nov 2025 16:59:21 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: OJsSEGyoHgD8UHxJJ6vyH21VVyhtIiatyOhteHRJ8x0=) 2: 93933F8EB8E311EF94962C19C4F9AE02.roa (hash: 79gBJkdJcqVlhvGhOBMwK3PQXe8dmykFHNHUWExFzEw=) 3: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: gt0aztJNpVc6KyHHIu4zVZe5pduw/IDthduLAxbDEGo=) 4: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: D+6z2UE89EEz0CJ5FsX6HX4bJl6z6qhGqxMwgCKoLK8=) 5: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: vQkkHhe44jmvD4H+y1zHy/eVtFXiwqeEyiEpP2p2y/4=) 6: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: +X9cqy5nzsM4rL9d9VoTaGOa9uOReDyvmQJrwlCmxzo=) 7: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: RUuXRFdsOwvKWwq9m+sHFH3M/ghjA85wtgfcZdC1dGw=) 8: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: iaZWlKC0BRK6sTPEnHrhdlX9WtoZdkozdrPT67pGJDY=) 9: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: L+xwzjXtQzYgvG+vHsmiVYE6Ewfl0oVoDgfwzY5pwN8=) 10: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: YJSyg7QmXDp0BYbgvJF4Ri7C1eahVBb5r1mM5QY6K6M=) 11: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: sO+0Vdvls9ZYR5Dlw5L5vQENPT3Y8xAMCjDslvaGngI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32206 (0x7dce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Nov 2 16:59:21 2025 GMT Not After : Nov 9 16:59:21 2025 GMT Subject: CN=69078dea-a97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:8b:fe:a7:1f:d3:aa:b2:04:e2:7e:01:4b: 84:d7:d1:b3:de:cf:48:43:57:8a:e3:76:8b:96:5d: 78:13:3e:42:36:1d:ec:42:8a:9d:d0:d0:22:dc:80: a5:cf:59:50:61:03:05:1e:e0:8a:41:13:3f:12:41: 7d:19:00:6e:2b:b3:67:7c:97:4e:39:ba:37:82:b1: ca:86:22:65:ed:f0:50:e6:e2:ee:89:72:80:55:63: 1d:f9:26:5d:ff:65:cc:98:c3:4a:cb:d2:22:b5:15: 21:23:fb:cf:8f:69:4c:77:7d:c4:26:f3:23:78:39: 9b:1c:ff:1f:cd:53:f5:28:e1:96:ee:ca:23:44:e9: 02:71:d4:dc:f2:00:6e:da:e4:c6:65:56:fd:df:5c: f3:3f:e5:59:35:10:a3:fe:47:dd:82:66:59:d8:2b: 77:fd:e0:ba:43:7f:a1:be:1c:c2:b8:fb:59:70:3d: 71:51:5c:0c:8c:ae:76:a0:7b:85:f2:34:09:2d:f4: 26:65:cf:46:0c:bb:7e:f4:79:b2:f1:69:13:f6:61: 55:d3:6a:df:0e:50:ef:c7:e9:80:2b:7a:2d:86:e6: 14:a6:c0:01:7f:bd:68:8a:59:df:b5:3b:a9:56:68: 27:61:b4:92:40:f7:69:86:e7:7e:e8:2d:c8:97:86: 3a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:00:10:1D:3C:CF:FB:66:D8:5F:0C:26:EF:E8:5B:D7:B0:F6:13:A2 X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:af:81:ef:c2:a2:1b:88:0c:ba:3a:3f:1c:8d:ea:1f:99:e5: 6e:09:28:5f:8c:b4:bf:c0:a0:ba:f8:c7:57:40:36:4f:63:e8: 5b:46:c5:61:49:99:bc:e3:6b:5d:e7:2e:d4:bf:d4:ed:18:c9: 83:c3:1b:42:69:a8:2a:49:43:13:0f:fb:67:d6:79:de:5b:18: d4:71:ae:4c:99:20:f6:78:e4:81:4a:7f:c4:95:2f:1b:1d:d3: a6:af:fb:8e:e5:80:49:f0:d0:23:b5:65:2f:07:c6:f3:a4:ee: 62:dc:2f:1c:f0:1c:2b:81:c8:c3:03:31:bf:3c:25:2b:66:87: 2b:28:75:3b:e7:ab:6d:d7:43:1c:8b:a5:8d:aa:6e:f3:0d:bd: af:8c:b8:49:07:5b:db:c6:8c:59:c7:d4:9e:0e:fd:a2:70:88: 30:6b:79:58:15:55:4e:0e:3e:a6:10:60:f0:55:9e:3d:6d:49: 63:12:91:6f:e4:67:4c:bd:21:34:41:87:b6:e2:cf:ab:fa:45: c2:64:20:5e:cc:20:87:7a:09:dd:6a:99:4b:75:3d:48:d5:1e: ea:78:a6:66:c7:ab:36:96:22:33:47:7f:a4:24:2c:88:f9:b7: d1:71:a5:42:16:3f:50:74:ce:e8:8e:80:8b:b4:e5:d4:5f:fc: d8:de:63:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICfc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjUxMTAyMTY1OTIxWhcNMjUxMTA5MTY1OTIxWjAYMRYwFAYD VQQDEw02OTA3OGRlYS1hOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl6L/qcf06qyBOJ+AUuE19Gz3s9IQ1eK43aLll14Ez5CNh3sQoqd0NAi3ICl z1lQYQMFHuCKQRM/EkF9GQBuK7NnfJdOObo3grHKhiJl7fBQ5uLuiXKAVWMd+SZd /2XMmMNKy9IitRUhI/vPj2lMd33EJvMjeDmbHP8fzVP1KOGW7sojROkCcdTc8gBu 2uTGZVb931zzP+VZNRCj/kfdgmZZ2Ct3/eC6Q3+hvhzCuPtZcD1xUVwMjK52oHuF 8jQJLfQmZc9GDLt+9Hmy8WkT9mFV02rfDlDvx+mAK3othuYUpsABf71oilnftTup VmgnYbSSQPdphud+6C3Il4Y6SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAAEB08 z/tm2F8MJu/oW9ew9hOiMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+r4HvwqIbiAy6Oj8cjeofmeVuCShfjLS/wKC6+MdXQDZPY+hbRsVh SZm842td5y7Uv9TtGMmDwxtCaagqSUMTD/tn1nneWxjUca5MmSD2eOSBSn/ElS8b HdOmr/uO5YBJ8NAjtWUvB8bzpO5i3C8c8BwrgcjDAzG/PCUrZocrKHU756tt10Mc i6WNqm7zDb2vjLhJB1vbxoxZx9SeDv2icIgwa3lYFVVODj6mEGDwVZ49bUljEpFv 5GdMvSE0QYe24s+r+kXCZCBezCCHegndaplLdT1I1R7qeKZmx6s2liIzR3+kJCyI +bfRcaVCFj9QdM7ojoCLtOXUX/zY3mM1 -----END CERTIFICATE-----Generated at Tue Nov 4 12:47:53 2025 by rpki-client