$ rpki-client -vvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft File: X8G2OMzN_5nWRFZVKcgHCGhomzE.mft (raw, json) Hash identifier: TdWMWNHqKm7+tCfgDUihCfzdVspaFE9zUPeyAaLjPMA= Subject key identifier: A5:77:0F:D8:CD:EB:04:61:BD:F9:BC:22:BE:AE:13:49:15:63:81:05 Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31 Certificate issuer: /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft Manifest number: 84 Signing time: Wed 05 Nov 2025 06:53:26 +0000 Manifest this update: Wed 05 Nov 2025 06:53:26 +0000 Manifest next update: Wed 12 Nov 2025 06:53:26 +0000 Files and hashes: 1: X8G2OMzN_5nWRFZVKcgHCGhomzE.crl (hash: DG2d3kNwrr72czAT7Kl+HrJ7mQQNQYEsSeYjQ8sQnYI=) 2: AA456842107211F09A9E631FC4F9AE02.roa (hash: 6DJYRNtdCQtPDVdh/suSAFKdKgawzgUz82oOnswPp6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31 Validity Not Before: Nov 5 06:53:26 2025 GMT Not After : Nov 12 06:53:26 2025 GMT Subject: CN=690af466-86a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:f3:8f:82:ad:7d:3a:ca:66:96:1b:05:cc: f4:46:1e:cc:64:45:b9:fe:b2:84:22:2e:1d:2d:0c: 72:1e:b9:eb:a4:82:27:07:85:a3:f6:df:1e:28:7f: 35:35:02:0c:6a:a4:2f:14:3a:2a:e4:6c:c5:58:4f: 7d:f7:d2:58:1a:33:a3:bd:3d:15:ed:c5:b3:26:b2: 5c:1d:88:7e:ff:f7:f3:2e:6f:b6:ac:b9:9d:7f:b4: d3:55:f0:ef:e1:47:af:06:6a:23:c6:97:99:b5:e5: b1:93:3a:70:cd:10:39:b8:a8:c5:f4:b5:27:11:ec: 2c:3e:a3:de:71:d5:bc:cf:77:d0:d0:9f:67:51:e6: 22:d1:a7:41:23:29:b0:7f:22:7b:e8:ae:3e:2e:f4: 33:cd:61:ed:88:21:5e:4f:50:32:0b:43:d7:ea:11: f6:fc:5a:51:bc:94:d0:3a:0f:73:fb:45:05:06:ed: 47:77:50:b4:f3:7f:3c:6a:01:67:77:61:71:b6:cf: 73:36:57:fe:68:b6:b8:38:99:13:54:1b:48:df:ad: cd:9a:89:b1:f5:31:17:65:bf:a8:ef:89:81:ef:0a: 1a:6a:6a:84:ff:76:0c:2c:b4:49:9c:96:e4:61:62: 5e:eb:60:95:ea:72:8d:c7:8b:de:ec:ee:71:57:54: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:77:0F:D8:CD:EB:04:61:BD:F9:BC:22:BE:AE:13:49:15:63:81:05 X509v3 Authority Key Identifier: keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:6a:0f:53:ec:20:a7:74:07:41:30:80:1f:f1:17:ad:20:fb: 1f:31:65:98:19:7b:54:a5:aa:11:e8:1d:4d:34:a7:9a:b8:2b: 58:8a:f9:79:a0:d5:eb:f5:e5:9b:ec:6d:d2:2c:7d:d1:22:76: 01:a3:73:b5:bf:63:3f:4c:74:e0:97:48:28:e8:33:64:a3:2d: 35:f2:f3:3e:05:e4:59:3b:b5:e9:53:d8:c7:97:a8:28:63:27: 70:6e:ca:eb:4c:3d:8e:11:54:fd:2d:9a:18:73:11:da:c2:06: 42:8a:7a:75:10:5e:9d:d4:34:9b:46:ab:8c:89:d3:cd:7e:26: 59:70:45:c0:3a:d4:f3:96:3f:8b:e7:8d:44:24:a3:1c:db:49: d6:fd:c5:4a:e1:b1:e1:3f:37:bd:24:7f:c2:3c:16:56:53:9c: d9:1b:57:63:56:20:23:3e:d1:37:ac:06:99:1c:6a:5d:c5:ce: ed:dd:a7:cf:27:9f:ff:33:6e:fc:97:46:55:ef:82:1e:26:25: c7:9b:8e:72:58:3e:8d:f5:e0:b9:3d:fe:d8:51:83:51:f7:11: e6:4c:24:de:be:5c:b6:ee:b4:da:8c:be:23:74:54:44:8f:bc: f1:ab:78:e2:44:2b:ec:ed:a4:d5:1b:35:b8:24:18:bc:82:38: 3f:39:d1:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyOEUxMTAvBgNVBAUTKDVGQzFCNjM4Q0NDREZGOTlENjQ0NTY1NTI5QzgwNzA4 Njg2ODlCMzEwHhcNMjUxMTA1MDY1MzI2WhcNMjUxMTEyMDY1MzI2WjAYMRYwFAYD VQQDEw02OTBhZjQ2Ni04NmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Dzj4KtfTrKZpYbBcz0Rh7MZEW5/rKEIi4dLQxyHrnrpIInB4Wj9t8eKH81 NQIMaqQvFDoq5GzFWE9999JYGjOjvT0V7cWzJrJcHYh+//fzLm+2rLmdf7TTVfDv 4UevBmojxpeZteWxkzpwzRA5uKjF9LUnEewsPqPecdW8z3fQ0J9nUeYi0adBIymw fyJ76K4+LvQzzWHtiCFeT1AyC0PX6hH2/FpRvJTQOg9z+0UFBu1Hd1C08388agFn d2Fxts9zNlf+aLa4OJkTVBtI363Nmomx9TEXZb+o74mB7woaamqE/3YMLLRJnJbk YWJe62CV6nKNx4ve7O5xV1QZgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV3D9jN 6wRhvfm8Ir6uE0kVY4EFMB8GA1UdIwQYMBaAFF/BtjjMzf+Z1kRWVSnIBwhoaJsx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTI4RS9DREEzQTcxRUY1 OUIxMUVGQTRGNTcxMjhDNEY5QUUwMi9YOEcyT016Tl81bldSRlpWS2NnSENHaG9t ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4RzJPTXpOXzVuV1JGWlZLY2dIQ0dob216RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTI4RS9DREEzQTcxRUY1OUIxMUVGQTRGNTcxMjhDNEY5QUUwMi9YOEcyT016Tl81 bldSRlpWS2NnSENHaG9tekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJag9T7CCndAdBMIAf8RetIPsfMWWYGXtUpaoR6B1NNKeauCtYivl5 oNXr9eWb7G3SLH3RInYBo3O1v2M/THTgl0go6DNkoy018vM+BeRZO7XpU9jHl6go YydwbsrrTD2OEVT9LZoYcxHawgZCinp1EF6d1DSbRquMidPNfiZZcEXAOtTzlj+L 541EJKMc20nW/cVK4bHhPze9JH/CPBZWU5zZG1djViAjPtE3rAaZHGpdxc7t3afP J5//M278l0ZV74IeJiXHm45yWD6N9eC5Pf7YUYNR9xHmTCTevly27rTajL4jdFRE j7zxq3jiRCvs7aTVGzW4JBi8gjg/OdEB -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:28 2025 by rpki-client