$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: C1JxrfACHB40qRcIxJUtppooJl32G3LysTTKfvCeaJI= Subject key identifier: C4:A2:F2:99:FA:18:ED:F2:8C:5D:71:DC:6E:93:F3:BC:1C:35:5E:CD Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 0245 Signing time: Mon 03 Nov 2025 02:04:11 +0000 Manifest this update: Mon 03 Nov 2025 02:04:11 +0000 Manifest next update: Mon 10 Nov 2025 02:04:11 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: mkhEvUrmYCQoZ7tiy0TtO+i6TkFhmpzEOvk/qMAUwjo=) 2: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: D+g5jzuWcvphD1ps8jnw5QvvfxsQjGFWKglonqcWSi0=) 3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: Kuncg/OKHO6KINevgnEgm8twmyohuTIV8xS8NsrR5Yw=) 4: CD152404495B11EF93EA3757C4F9AE02.roa (hash: G7ZmL/GFUdvItC3mb/pIr2VOosfHx+vaBIP/nBv1gCo=) 5: 6121C23230AC11F08C150767C4F9AE02.roa (hash: fShyVa3rIna9iRvZNHAjyEZoQgutIuaEQEMpg+RXaTc=) 6: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: 4uRsfI3UTikSBwFuE1LkYP4yx1HQPN2T4+sSHop7B54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Nov 3 02:04:11 2025 GMT Not After : Nov 10 02:04:11 2025 GMT Subject: CN=69080d9b-258e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f6:03:b6:42:92:b9:27:89:46:be:c0:23:58: 9a:b5:91:68:95:5f:5d:32:e1:d7:b2:45:95:84:9f: 1e:cf:41:8d:91:a8:b4:81:e7:ba:6c:0b:a3:ff:a6: bc:1b:e8:12:99:58:41:5c:0e:51:78:27:dc:3c:6f: af:ea:95:bb:c2:37:b5:5e:89:c8:2a:fc:83:ca:97: c8:a7:44:96:3a:53:e1:8e:f8:65:49:79:ea:b8:32: f8:99:84:62:db:d1:2d:db:c3:cd:06:63:e2:1a:e2: 6e:4c:1d:98:14:d9:40:37:c3:9b:4d:cf:13:22:04: 07:4a:f1:86:83:71:6f:ad:f4:d6:f3:b4:64:3a:c9: 0a:12:3e:df:70:b2:55:ff:65:c7:16:3e:31:c4:e9: 1a:a5:6d:fa:8f:b6:3b:9c:5f:bd:9c:81:a4:bf:12: 50:9d:4a:5b:79:05:45:d7:ee:25:09:df:2f:62:64: 3c:96:2f:54:8f:ec:ec:d9:0e:5c:77:bc:ea:3e:68: e7:99:24:8a:75:5d:42:8f:92:29:e7:16:9f:33:2a: 62:24:93:2f:6a:d7:8c:cf:fb:2a:14:91:66:e5:55: d8:cc:14:16:fb:02:47:ec:80:fb:b1:d6:2a:1c:73: aa:73:44:52:05:60:b5:3a:7c:51:25:3e:eb:a8:7a: c7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A2:F2:99:FA:18:ED:F2:8C:5D:71:DC:6E:93:F3:BC:1C:35:5E:CD X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:06:ee:79:ab:6a:a2:d8:98:fd:2e:0a:44:c7:83:51:c1:e8: 86:de:40:bd:3d:f0:5b:92:c3:0f:0e:09:8c:a6:ac:a4:8a:a8: f2:a9:d0:7d:d5:83:f9:3d:b5:d1:c0:ec:04:c8:c1:1d:af:15: e1:42:c4:44:b0:41:0e:90:f1:d9:55:2e:aa:c3:db:30:6d:e0: 18:3c:4a:9e:a2:ba:0b:47:fe:6d:e6:ed:60:ec:ad:0a:6c:9c: 47:df:bc:cd:99:9b:36:af:6d:da:b3:51:9e:69:9f:dc:6c:f5: 1f:aa:a4:98:e1:dc:0f:d5:47:2d:ea:4d:fe:2a:73:0a:27:9c: 6d:7a:3a:1b:d0:58:b0:76:02:6f:b4:88:d9:4b:13:7b:2b:be: 29:4e:3e:3f:a0:87:d9:47:84:5d:71:ce:f7:82:9c:10:57:1d: 2c:42:9a:4c:44:36:5c:8e:c6:bd:0d:86:83:64:db:34:5d:42: 25:52:88:7e:9c:06:07:2c:20:bb:c2:56:b0:36:67:30:e5:69: 4c:58:b1:7f:c9:f4:1a:18:a9:3b:8c:20:f9:6d:1b:d8:2c:33: 79:55:e4:51:bc:0c:67:3f:ab:fa:bc:21:37:18:ea:80:e3:bd: ee:00:0a:dc:8c:1e:26:10:c1:2d:25:bd:cb:9d:36:b1:3a:73: 7b:5e:0a:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjUxMTAzMDIwNDExWhcNMjUxMTEwMDIwNDExWjAYMRYwFAYD VQQDEw02OTA4MGQ5Yi0yNThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/YDtkKSuSeJRr7AI1iatZFolV9dMuHXskWVhJ8ez0GNkai0gee6bAuj/6a8 G+gSmVhBXA5ReCfcPG+v6pW7wje1XonIKvyDypfIp0SWOlPhjvhlSXnquDL4mYRi 29Et28PNBmPiGuJuTB2YFNlAN8ObTc8TIgQHSvGGg3FvrfTW87RkOskKEj7fcLJV /2XHFj4xxOkapW36j7Y7nF+9nIGkvxJQnUpbeQVF1+4lCd8vYmQ8li9Uj+zs2Q5c d7zqPmjnmSSKdV1Cj5Ip5xafMypiJJMvateMz/sqFJFm5VXYzBQW+wJH7ID7sdYq HHOqc0RSBWC1OnxRJT7rqHrHwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSi8pn6 GO3yjF1x3G6T87wcNV7NMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbBu55q2qi2Jj9LgpEx4NRweiG3kC9PfBbksMPDgmMpqykiqjyqdB9 1YP5PbXRwOwEyMEdrxXhQsREsEEOkPHZVS6qw9swbeAYPEqeoroLR/5t5u1g7K0K bJxH37zNmZs2r23as1GeaZ/cbPUfqqSY4dwP1Uct6k3+KnMKJ5xtejob0FiwdgJv tIjZSxN7K74pTj4/oIfZR4Rdcc73gpwQVx0sQppMRDZcjsa9DYaDZNs0XUIlUoh+ nAYHLCC7wlawNmcw5WlMWLF/yfQaGKk7jCD5bRvYLDN5VeRRvAxnP6v6vCE3GOqA 473uAArcjB4mEMEtJb3LnTaxOnN7XgqP -----END CERTIFICATE-----Generated at Wed Nov 5 00:22:26 2025 by rpki-client