$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: E7SCunZFDFMGtzHuHQTU1o9pIWKgrYziAR8r6+w+r1U= Subject key identifier: CF:3B:30:29:0A:40:DD:EE:BE:C4:F2:FD:66:AF:A1:F1:DC:7A:57:98 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0D32 Signing time: Tue 04 Nov 2025 18:10:15 +0000 Manifest this update: Tue 04 Nov 2025 18:10:15 +0000 Manifest next update: Tue 11 Nov 2025 18:10:15 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: JXqie/09V5rrk92PTcxonVIi/JZizhtAmx7v12t0tzs=) 2: 6EA46446646511EFA9435879C4F9AE02.roa (hash: N1pVptA00WkhE4m7SJH5EH6Jm0Owz+2oXrWW4KUrpu8=) 3: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: /aVclLD4E4tWBUOjWLIy9WCs0APOAP9s7RhIp3StsiQ=) 4: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: BDVB4NGwuoV9jd6p0mq+EV/AIWqBPxsn1M/JVs61jFc=) 5: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: IlqRKAixBVu9Vx4XUBGktOBKcBONHQKrwOz30YJWU9c=) 6: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: glN4k7urNUEminalwjQaEl9qzQ9uaPGYJxVPLRonhOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Nov 4 18:10:15 2025 GMT Not After : Nov 11 18:10:15 2025 GMT Subject: CN=690a4187-4717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:07:31:f7:25:5d:77:9b:55:33:8c:0c:de:38: 93:d5:bd:22:20:e6:18:57:4e:21:ba:ee:44:0f:e4: f6:94:c6:49:3f:24:8b:0b:66:de:68:b6:bd:b0:45: 8a:b7:6f:93:70:9e:eb:18:63:6a:15:d8:32:7c:9e: 67:6d:a9:a5:e6:10:a0:5c:ae:f3:54:f9:6d:e0:52: 1b:9a:d7:45:3e:6c:cd:97:a2:2f:1d:9a:0f:30:6e: 9b:18:2a:ad:b2:d0:f5:fe:6d:31:a2:c9:fe:4a:f9: 14:d8:e0:d5:c9:19:06:b5:8a:9f:7c:ee:43:3e:5a: 11:5a:d9:ca:f9:ef:c4:c2:30:99:c1:cf:95:5e:42: 79:11:5e:cc:ee:25:a7:69:2d:37:6f:03:36:2d:4f: 8e:2d:9c:32:50:9c:ab:ce:63:96:aa:3c:21:24:01: db:38:9e:66:40:1c:20:2b:8d:24:b0:26:2f:56:a0: 41:ed:af:e2:7d:e9:ab:b2:b5:fd:75:80:25:bf:a3: b9:aa:bf:e5:12:19:9b:90:75:8c:7b:97:5f:5b:ec: cf:81:4d:16:6e:eb:2f:fe:7f:50:90:11:a6:29:f7: 61:35:e2:36:2a:25:bc:38:54:2d:42:08:99:02:ff: 55:ff:a2:46:6f:74:64:a7:b0:9e:77:db:34:68:f7: 7b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3B:30:29:0A:40:DD:EE:BE:C4:F2:FD:66:AF:A1:F1:DC:7A:57:98 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:78:b7:cf:b3:b3:b2:f1:2a:08:0d:16:13:bf:39:2b:83:0b: d6:63:d0:47:a4:24:f2:21:d2:00:59:a7:f8:7d:09:98:4b:66: 22:53:44:9c:a9:92:e7:16:c7:c8:46:c5:c6:31:b4:ab:36:7c: e6:30:56:89:06:3d:f2:f0:b4:b5:20:e5:93:e5:c7:0f:fa:93: d8:f6:7a:a4:07:dd:9c:3f:75:3b:2b:36:7b:cc:64:ef:9c:30: d9:85:cf:3e:64:82:04:57:58:91:73:55:2a:09:e9:ae:9b:08: b7:46:07:66:98:8b:3f:25:85:23:e3:0f:de:38:41:a3:13:14: 0c:44:37:14:25:de:5f:c8:29:63:ca:52:40:70:e4:f8:23:09: 78:c8:3b:73:ea:02:7d:85:70:41:2e:7a:3c:d5:9d:85:22:ee: c2:57:c0:bb:b8:32:9d:e5:12:f6:4a:fc:b7:9b:ee:49:02:33: 43:5a:ab:57:33:08:e1:2e:1c:98:71:33:17:e8:86:c5:53:2c: 79:eb:42:93:79:8f:7f:f3:ef:45:23:cd:dc:a5:fc:cb:d9:a2: 79:8f:db:67:8e:29:81:0b:29:5c:d6:38:58:f8:1f:60:e6:f4: 12:56:53:f7:c8:0a:ae:a1:26:c2:10:a3:3f:62:02:bf:91:b9: f9:88:27:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUxMTA0MTgxMDE1WhcNMjUxMTExMTgxMDE1WjAYMRYwFAYD VQQDEw02OTBhNDE4Ny00NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gcx9yVdd5tVM4wM3jiT1b0iIOYYV04huu5ED+T2lMZJPySLC2beaLa9sEWK t2+TcJ7rGGNqFdgyfJ5nbaml5hCgXK7zVPlt4FIbmtdFPmzNl6IvHZoPMG6bGCqt stD1/m0xosn+SvkU2ODVyRkGtYqffO5DPloRWtnK+e/EwjCZwc+VXkJ5EV7M7iWn aS03bwM2LU+OLZwyUJyrzmOWqjwhJAHbOJ5mQBwgK40ksCYvVqBB7a/ifemrsrX9 dYAlv6O5qr/lEhmbkHWMe5dfW+zPgU0Wbusv/n9QkBGmKfdhNeI2KiW8OFQtQgiZ Av9V/6JGb3Rkp7Ced9s0aPd7ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM87MCkK QN3uvsTy/WavofHceleYMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZeLfPs7Oy8SoIDRYTvzkrgwvWY9BHpCTyIdIAWaf4fQmYS2YiU0Sc qZLnFsfIRsXGMbSrNnzmMFaJBj3y8LS1IOWT5ccP+pPY9nqkB92cP3U7KzZ7zGTv nDDZhc8+ZIIEV1iRc1UqCemumwi3RgdmmIs/JYUj4w/eOEGjExQMRDcUJd5fyClj ylJAcOT4Iwl4yDtz6gJ9hXBBLno81Z2FIu7CV8C7uDKd5RL2Svy3m+5JAjNDWqtX MwjhLhyYcTMX6IbFUyx560KTeY9/8+9FI83cpfzL2aJ5j9tnjimBCylc1jhY+B9g 5vQSVlP3yAquoSbCEKM/YgK/kbn5iCdV -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:11 2025 by rpki-client