$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: Dc5Agi70HYY1/rreGN+aGPApwRJEQz+lNqDsFgLf7IA= Subject key identifier: 2F:85:EE:8C:ED:2B:78:F2:2A:97:64:80:F3:9A:22:C3:79:C4:DA:2C Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 062E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 0629 Signing time: Sun 02 Nov 2025 22:43:57 +0000 Manifest this update: Sun 02 Nov 2025 22:43:57 +0000 Manifest next update: Sun 09 Nov 2025 22:43:57 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: XFxXfc971fcvZoIjGWEjZyF+iVxk1Qbv8jxE+QkG9Ro=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: l216klg+EdFhZXizpzBgdSx3W8LT8OTJYqEFSmlWpW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: Nov 2 22:43:57 2025 GMT Not After : Nov 9 22:43:57 2025 GMT Subject: CN=6907dead-0acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:46:ba:cc:f6:b0:c7:ab:60:ea:fc:00:8d:24: 9c:8c:26:0e:da:11:ee:bd:6b:c7:1d:8e:f3:c4:cd: d3:89:5b:71:d4:81:32:9c:18:20:30:0c:2f:4f:2b: 5a:7b:c8:95:61:bb:a0:17:34:8a:fe:26:c5:ea:af: 3e:ee:db:b9:da:c4:c3:8f:00:6f:f8:04:c9:60:eb: 17:1e:b6:7b:7f:06:20:ac:9e:2e:60:6d:74:cf:51: c4:3d:34:0d:a7:5b:c8:0d:8c:9c:c7:bb:36:79:6f: a5:74:02:2a:84:b1:a7:52:a8:e7:54:1d:bb:53:a9: 70:5c:ab:4b:9e:db:eb:52:dd:55:21:85:4b:86:02: 6b:f3:53:61:ba:9b:f0:a3:48:d8:9d:37:aa:3d:ae: bb:80:48:ca:45:b9:07:7e:31:56:db:d3:4d:17:03: 7e:d8:1c:49:94:fb:53:56:f5:3d:d1:c8:f1:98:3d: 5b:f9:55:d4:5c:51:25:0b:f6:b5:d8:03:3e:93:81: c6:aa:a2:bc:bb:4f:e8:59:3c:c8:a7:f8:5b:8a:23: 89:c1:90:ae:9e:de:69:78:b9:f3:77:ec:90:10:11: b6:68:55:90:78:42:bf:61:ea:2d:3f:ed:5b:c0:2e: 81:5f:da:50:2a:bd:21:13:1b:12:95:20:e4:c9:72: 76:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:85:EE:8C:ED:2B:78:F2:2A:97:64:80:F3:9A:22:C3:79:C4:DA:2C X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1b:30:1a:d7:14:47:9e:e5:f3:54:d3:6a:40:58:72:50:69: ca:b6:9d:5e:3b:66:d0:e8:ce:d7:db:b7:1e:b4:8b:ee:fc:cd: b9:99:c2:af:73:62:38:de:58:0c:a2:3f:3a:17:b4:f2:6e:36: 32:7a:75:33:7f:ea:f6:0e:9b:5c:55:ce:0d:53:24:82:bf:99: 42:57:ba:e6:41:16:c3:e8:4d:1e:fa:85:14:8c:ef:8f:87:57: a7:bc:4c:6b:42:72:cf:2b:0f:67:75:c6:42:c7:1d:bc:38:4a: 4d:8b:94:39:7c:ec:53:7d:13:87:52:18:ae:36:c5:61:49:d2: 15:99:0b:da:30:be:5e:57:76:3a:74:97:5d:0a:b1:99:c9:57: 45:8d:a3:f3:f1:32:4e:ed:05:06:f7:7a:8e:69:b0:24:12:46: ca:5d:89:11:fd:23:6c:79:39:60:e9:68:a6:1f:21:92:be:db: 03:2a:c8:9a:40:26:7a:79:e4:47:cd:77:f5:53:3f:c1:64:c8: f3:d2:39:f3:75:fb:89:f7:61:e7:e7:44:bd:fa:1c:e3:f3:8d: 83:8a:eb:1d:6b:b5:2e:f5:35:64:09:e5:6f:5c:06:21:7c:3f: 2f:8a:dc:98:42:e7:9c:90:96:de:0c:7d:13:62:87:e6:c3:00: c0:51:19:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjUxMTAyMjI0MzU3WhcNMjUxMTA5MjI0MzU3WjAYMRYwFAYD VQQDEw02OTA3ZGVhZC0wYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Ua6zPawx6tg6vwAjSScjCYO2hHuvWvHHY7zxM3TiVtx1IEynBggMAwvTyta e8iVYbugFzSK/ibF6q8+7tu52sTDjwBv+ATJYOsXHrZ7fwYgrJ4uYG10z1HEPTQN p1vIDYycx7s2eW+ldAIqhLGnUqjnVB27U6lwXKtLntvrUt1VIYVLhgJr81Nhupvw o0jYnTeqPa67gEjKRbkHfjFW29NNFwN+2BxJlPtTVvU90cjxmD1b+VXUXFElC/a1 2AM+k4HGqqK8u0/oWTzIp/hbiiOJwZCunt5peLnzd+yQEBG2aFWQeEK/YeotP+1b wC6BX9pQKr0hExsSlSDkyXJ2mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+F7ozt K3jyKpdkgPOaIsN5xNosMB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWGzAa1xRHnuXzVNNqQFhyUGnKtp1eO2bQ6M7X27cetIvu/M25mcKv c2I43lgMoj86F7TybjYyenUzf+r2DptcVc4NUySCv5lCV7rmQRbD6E0e+oUUjO+P h1envExrQnLPKw9ndcZCxx28OEpNi5Q5fOxTfROHUhiuNsVhSdIVmQvaML5eV3Y6 dJddCrGZyVdFjaPz8TJO7QUG93qOabAkEkbKXYkR/SNseTlg6WimHyGSvtsDKsia QCZ6eeRHzXf1Uz/BZMjz0jnzdfuJ92Hn50S9+hzj842Diusda7Uu9TVkCeVvXAYh fD8vityYQueckJbeDH0TYofmwwDAURmh -----END CERTIFICATE-----Generated at Wed Nov 5 00:20:21 2025 by rpki-client