$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json) Hash identifier: QaDM8jQLxhW+RsXjIyca1jDIhoT4lWzQPGJCKoQ042s= Subject key identifier: 8A:2D:0B:25:7D:62:CA:0F:33:98:CA:81:9B:80:29:2C:B9:AD:61:9D Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Certificate serial: 0C39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft Manifest number: 0C2E Signing time: Tue 04 Nov 2025 18:45:57 +0000 Manifest this update: Tue 04 Nov 2025 18:45:57 +0000 Manifest next update: Tue 11 Nov 2025 18:45:57 +0000 Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: 1yuZrehWj+hRJ2XdUHaI7cCJHxVzKiPRv5gMzYlpPUY=) 2: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: vuAfqS+oupAqLtbWHhdz3OsiJgWg5sczosdrHd8kXwo=) 3: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: DQuIcDvil4xhDWRcyNWiHmLcTyjG0SYLvwiCuCDmI90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3129 (0xc39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Validity Not Before: Nov 4 18:45:57 2025 GMT Not After : Nov 11 18:45:57 2025 GMT Subject: CN=690a49e5-d384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:03:75:14:3f:26:d1:6a:34:14:bb:41:30:ee: d6:fb:fb:2c:97:46:63:e2:79:fe:09:26:77:ca:24: b4:48:53:e3:fe:c6:50:c1:b9:6d:f8:16:39:c8:8f: e3:d4:63:54:6f:f6:b4:60:ec:1d:f9:db:9d:25:47: 0e:66:9f:fd:56:d1:21:81:83:51:b1:e0:44:85:69: 10:af:55:64:ff:95:00:34:93:fd:53:ef:74:7a:ab: 32:02:bc:4b:13:8c:f1:c1:07:27:77:b2:0b:86:3e: 8a:18:2a:c6:68:32:11:1e:77:b2:d0:70:c5:ba:30: ad:5e:9e:ea:76:02:64:50:14:95:2d:4e:1e:9e:ba: 21:1c:a8:b8:0c:26:c4:99:f4:fb:e1:f8:9b:8f:d9: 25:3a:87:de:9a:a6:81:2c:88:49:63:c7:dd:41:63: 4d:a9:0f:08:db:7e:f4:bf:96:05:e7:7c:4c:d3:75: 6a:10:36:7d:80:a6:15:c3:a4:c3:66:90:af:0c:88: a2:f1:e1:74:25:6b:b0:68:a6:0a:f2:06:22:95:a3: 92:3f:55:89:3e:8b:05:12:35:a7:f2:c7:8d:31:7e: 51:eb:9d:bc:92:70:31:c7:a5:04:ff:f3:15:58:8a: 00:50:38:76:16:ba:dd:9e:00:7d:8e:e3:11:58:7c: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:0B:25:7D:62:CA:0F:33:98:CA:81:9B:80:29:2C:B9:AD:61:9D X509v3 Authority Key Identifier: keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:12:80:38:70:33:c0:d6:2b:85:6d:1f:a4:a2:5a:98:60:aa: 9a:fd:13:56:60:ae:bf:68:cc:6c:c5:07:4c:3d:85:9f:12:87: 15:22:e0:f3:da:fa:2e:ae:05:92:2e:e2:47:5e:9f:c5:1d:d6: 77:db:f6:ef:16:19:55:99:16:e9:40:d8:08:0e:2b:04:81:38: ff:af:0e:ca:d4:77:10:c3:91:74:37:4f:ae:bf:b2:c9:0d:34: ec:12:7a:98:d4:99:b8:53:2a:13:c1:66:98:04:fc:00:0d:a7: a7:40:97:e3:2e:59:29:d7:05:ff:51:36:24:9e:c9:8c:6b:df: a1:37:cd:af:90:65:f9:26:b8:fe:84:16:0f:ec:29:3f:45:aa: 6b:af:f6:39:a1:c1:98:35:91:5a:42:c5:94:3e:13:7f:21:6d: 72:70:67:1a:ed:bd:95:64:da:7f:21:42:07:88:6d:2f:cd:c4: bd:ac:7e:31:3e:c9:d9:2a:08:43:61:c9:49:d0:c6:ff:0e:8e: d4:a7:e7:06:9c:c9:da:6d:a8:38:9e:d3:0a:23:4e:03:ff:f7: 84:26:fb:50:82:4d:ee:fd:94:5b:40:03:91:20:69:cb:c4:3e: 8b:68:47:71:2c:8e:69:b1:a3:6f:bd:c7:51:c4:5b:82:72:75: 88:fb:09:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND OEZEODU5MzkwHhcNMjUxMTA0MTg0NTU3WhcNMjUxMTExMTg0NTU3WjAYMRYwFAYD VQQDEw02OTBhNDllNS1kMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gN1FD8m0Wo0FLtBMO7W+/ssl0Zj4nn+CSZ3yiS0SFPj/sZQwblt+BY5yI/j 1GNUb/a0YOwd+dudJUcOZp/9VtEhgYNRseBEhWkQr1Vk/5UANJP9U+90eqsyArxL E4zxwQcnd7ILhj6KGCrGaDIRHney0HDFujCtXp7qdgJkUBSVLU4enrohHKi4DCbE mfT74fibj9klOofemqaBLIhJY8fdQWNNqQ8I2370v5YF53xM03VqEDZ9gKYVw6TD ZpCvDIii8eF0JWuwaKYK8gYilaOSP1WJPosFEjWn8seNMX5R6528knAxx6UE//MV WIoAUDh2FrrdngB9juMRWHzxDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIotCyV9 YsoPM5jKgZuAKSy5rWGdMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2QS8xMjZERkM5NjFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJ OWJaUi1HU1RKZlBJX1lXVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKEoA4cDPA1iuFbR+kolqYYKqa/RNWYK6/aMxsxQdMPYWfEocVIuDz 2vourgWSLuJHXp/FHdZ32/bvFhlVmRbpQNgIDisEgTj/rw7K1HcQw5F0N0+uv7LJ DTTsEnqY1Jm4UyoTwWaYBPwADaenQJfjLlkp1wX/UTYknsmMa9+hN82vkGX5Jrj+ hBYP7Ck/Raprr/Y5ocGYNZFaQsWUPhN/IW1ycGca7b2VZNp/IUIHiG0vzcS9rH4x PsnZKghDYclJ0Mb/Do7Up+cGnMnabag4ntMKI04D//eEJvtQgk3u/ZRbQAORIGnL xD6LaEdxLI5psaNvvcdRxFuCcnWI+wk6 -----END CERTIFICATE-----Generated at Wed Nov 5 21:16:02 2025 by rpki-client