$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json) Hash identifier: adBGgc3F2gwjfx+akmtYOoIw7p4yKgpJIh8YOv3Lsmw= Subject key identifier: 5F:B9:E6:2A:C1:FD:36:84:58:6C:97:B8:32:2C:5A:31:C2:85:24:48 Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft Manifest number: 0835 Signing time: Tue 04 Nov 2025 20:52:22 +0000 Manifest this update: Tue 04 Nov 2025 20:52:21 +0000 Manifest next update: Tue 11 Nov 2025 20:52:21 +0000 Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: buolk+sXJlhj0/N1RmXek/XaeKSuQaIearjoU8W4m68=) 2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: iinohx2uez2EL2svxSw8QxTPKTPPk9i54jHLL6kBKQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Validity Not Before: Nov 4 20:52:21 2025 GMT Not After : Nov 11 20:52:21 2025 GMT Subject: CN=690a6785-087d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:36:e2:77:1a:e6:c3:f4:d1:8a:6f:e7:90: 48:0b:8d:b9:04:af:c2:45:be:7f:e6:c4:ca:4f:11: 03:6f:27:c5:36:0b:32:23:c9:f2:c0:29:66:62:2f: 30:c9:9d:17:03:71:15:d9:92:3e:0f:68:b8:1b:55: a4:12:03:75:ef:72:af:75:bb:e9:f6:91:32:0b:fd: 97:49:28:f6:37:c6:f8:52:67:09:b1:6e:7b:49:08: a8:2b:dc:e3:06:0c:93:99:14:96:b5:e2:0a:a2:86: f1:79:fa:eb:de:f8:2b:9b:2c:f4:8f:d4:13:56:39: 68:78:2a:0f:61:85:59:a3:2b:87:59:aa:e0:15:39: 94:5f:5b:0f:c5:bc:05:be:41:e9:3a:d1:66:24:6e: 4c:a1:61:af:08:92:93:cf:e9:3d:7f:95:7a:04:69: 40:cc:d8:af:34:fb:34:43:9f:05:dc:59:1d:60:de: 3c:da:60:7c:b0:7b:7b:8a:11:cc:3f:3c:3e:c4:1f: da:e2:a4:be:39:13:e6:91:7b:db:a9:15:c1:b3:4c: 65:c7:90:4f:58:42:75:e4:0f:26:1a:9a:fc:37:b6: 73:2a:a5:38:48:ce:6d:bb:1e:34:3d:a3:43:47:2e: 43:22:82:ca:68:31:4b:3c:47:e0:09:05:22:c6:da: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B9:E6:2A:C1:FD:36:84:58:6C:97:B8:32:2C:5A:31:C2:85:24:48 X509v3 Authority Key Identifier: keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f8:e0:d9:52:48:e7:44:07:3c:47:0f:cf:f9:20:f5:eb:a5: 5b:67:85:f1:75:59:8f:01:75:50:51:e5:c5:66:14:91:9f:db: e8:78:3e:26:5f:f4:ed:1e:08:58:4b:dc:0c:fc:49:85:cb:18: 87:ba:dc:13:46:bd:3f:df:be:16:1d:fd:c6:de:99:0b:2d:06: 21:8b:1f:55:ec:7c:06:09:c6:01:d4:71:c3:a6:2b:8b:0e:21: 13:33:3b:7c:a9:51:ab:bf:6b:25:62:3b:58:a6:b8:f1:a2:66: e3:b9:63:74:c8:de:08:16:ef:77:45:56:18:8b:0e:2e:8d:df: bb:3a:d9:c9:8d:81:80:5a:0e:39:fb:2f:1c:ce:43:69:f5:39: 99:5b:0e:1a:17:c9:11:3b:83:20:73:cb:4a:42:3e:a3:47:2d: 07:62:76:11:0a:9d:f5:d3:08:f2:d6:d1:74:35:74:a4:25:e4: b1:16:e0:f9:86:9e:d3:d3:31:19:79:9d:43:56:84:96:23:1d: c2:e6:04:92:06:a5:a9:8b:0c:b4:bc:f7:cb:80:41:2f:3d:28: b4:a4:24:da:0e:12:b0:35:da:31:43:20:c5:de:9a:b7:cf:33: f3:1f:90:ac:e9:ac:64:45:b6:67:69:6b:04:30:15:14:9f:68: d3:af:0c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTkyMzQ0MUJGNkY1 MTM0RkY5NTAwHhcNMjUxMTA0MjA1MjIxWhcNMjUxMTExMjA1MjIxWjAYMRYwFAYD VQQDEw02OTBhNjc4NS0wODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fw24nca5sP00Ypv55BIC425BK/CRb5/5sTKTxEDbyfFNgsyI8nywClmYi8w yZ0XA3EV2ZI+D2i4G1WkEgN173Kvdbvp9pEyC/2XSSj2N8b4UmcJsW57SQioK9zj BgyTmRSWteIKoobxefrr3vgrmyz0j9QTVjloeCoPYYVZoyuHWargFTmUX1sPxbwF vkHpOtFmJG5MoWGvCJKTz+k9f5V6BGlAzNivNPs0Q58F3FkdYN482mB8sHt7ihHM Pzw+xB/a4qS+ORPmkXvbqRXBs0xlx5BPWEJ15A8mGpr8N7ZzKqU4SM5tux40PaND Ry5DIoLKaDFLPEfgCQUixtqZFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+55irB /TaEWGyXuDIsWjHChSRIMB8GA1UdIwQYMBaAFF9phzlO7pJmrXsZI0Qb9vUTT/lQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0MS82MkJCNUM3NEVD RjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWttYXRleGtqUkJ2MjlSTlAt VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybUhPVTd1a21hdGV4a2pSQnYyOVJOUC1WQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWtt YXRleGtqUkJ2MjlSTlAtVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd+ODZUkjnRAc8Rw/P+SD166VbZ4XxdVmPAXVQUeXFZhSRn9voeD4m X/TtHghYS9wM/EmFyxiHutwTRr0/374WHf3G3pkLLQYhix9V7HwGCcYB1HHDpiuL DiETMzt8qVGrv2slYjtYprjxombjuWN0yN4IFu93RVYYiw4ujd+7OtnJjYGAWg45 +y8czkNp9TmZWw4aF8kRO4Mgc8tKQj6jRy0HYnYRCp310wjy1tF0NXSkJeSxFuD5 hp7T0zEZeZ1DVoSWIx3C5gSSBqWpiwy0vPfLgEEvPSi0pCTaDhKwNdoxQyDF3pq3 zzPzH5Cs6axkRbZnaWsEMBUUn2jTrwwm -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:46 2025 by rpki-client