$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: YAKU8bFTCjyfUo5ppS04Z+UCBiA1fEXQOos7E/vkARc= Subject key identifier: 52:45:F7:CB:43:2C:1F:43:8D:52:C9:E0:AE:53:70:2A:B4:0F:2D:89 Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0CA6 Signing time: Tue 04 Nov 2025 18:32:08 +0000 Manifest this update: Tue 04 Nov 2025 18:32:07 +0000 Manifest next update: Tue 11 Nov 2025 18:32:07 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: HGI4wCqoAfpF/aJp77uv6XgXqbG2ZYfZNOpy8IOPFsU=) 2: F0202A84B36311F082F02072C4F9AE02.roa (hash: BPqEGs/kp4/YORti6uUMV8XFvZq0a3v1h7gImxJAxZo=) 3: C13356C0921511F089DDCF39C4F9AE02.roa (hash: GIRtzwnKS+hvb6bEPI5Irt7NyfjR/9n068VTfKa3GPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Nov 4 18:32:07 2025 GMT Not After : Nov 11 18:32:07 2025 GMT Subject: CN=690a46a8-fa4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:b5:3a:97:46:1d:40:02:59:b9:a1:7e:5b: 5d:cf:20:65:d4:cc:c9:6b:22:b1:cf:49:b6:ec:3a: 16:ff:0f:a7:a0:dc:b1:6a:64:23:5e:d0:a6:1b:4d: 76:8b:c0:80:36:a4:a2:1d:99:ec:9e:17:c9:3c:c5: 6b:f5:6b:f8:bc:49:ec:0c:b0:8b:f1:77:dd:d6:aa: 30:1b:3c:e7:42:ba:b1:57:0e:5e:3a:25:6b:d7:b0: b6:27:7b:82:49:84:19:ba:5e:dc:d6:52:fd:de:b1: 1b:66:31:5f:97:14:b8:41:87:2c:3d:67:58:91:71: 3d:a5:14:eb:64:b9:c9:50:3b:82:7c:a6:17:bf:a3: 5a:06:96:2f:25:ea:34:28:6c:f8:13:6a:77:c7:ff: bc:e0:f5:bb:3d:65:48:fb:c5:23:c9:d0:63:f6:a6: 38:2a:df:ac:1a:ea:91:dc:7d:1b:a5:3a:3b:83:83: 7f:38:56:25:8a:4c:1d:5f:4c:4a:79:af:84:83:24: e8:21:e6:a4:49:b9:f2:4a:c3:c1:c0:05:3b:f3:41: be:63:5e:d0:14:d3:9a:13:52:4c:c6:3e:70:fd:9a: 2d:9c:49:71:5b:b2:7e:31:6b:21:32:54:70:4c:89: 0c:e6:04:58:85:23:0c:c5:09:53:b8:a4:22:53:22: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:45:F7:CB:43:2C:1F:43:8D:52:C9:E0:AE:53:70:2A:B4:0F:2D:89 X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d6:27:9a:12:34:79:59:ac:52:4d:d1:a5:02:a6:57:84:fc: f6:6c:36:44:17:5e:c1:b4:c5:35:d5:87:fb:35:9b:87:4c:e9: 78:ed:4d:ab:fb:7e:0d:99:de:94:2c:a8:bb:08:fd:fa:ae:87: 20:0f:6b:38:74:83:d8:64:91:d2:3b:09:9f:c1:67:9b:c8:12: 06:5f:24:14:d5:a4:c6:29:a8:31:98:11:21:b8:ac:19:d1:49: e5:79:1f:f0:b4:e3:cd:59:bf:f7:51:1e:6d:22:71:c8:d5:9e: 98:39:95:01:ca:83:ce:f8:ca:d1:53:c4:b0:20:c6:a2:b8:90: bc:57:ed:f1:8a:10:f1:94:45:0a:04:87:70:d2:40:b9:ae:5e: cf:e3:f7:47:f9:79:d5:d7:c2:c2:19:e2:28:ab:89:93:ac:89: 0f:60:88:73:e1:82:e2:f1:7f:94:ce:29:13:c0:cd:b4:5b:5c: 3a:2b:71:3f:79:5a:fc:6a:bb:c5:19:a8:55:ed:9e:04:c9:79: 12:81:84:b8:fb:02:ce:04:8f:3f:4d:41:c1:ef:96:fa:72:28: b5:78:28:b3:90:37:c4:48:13:6d:eb:d6:7e:0a:02:e7:fb:79: ac:14:24:69:63:3b:77:74:15:a0:5d:5c:c0:5d:90:53:a5:8a: f5:d4:84:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUxMTA0MTgzMjA3WhcNMjUxMTExMTgzMjA3WjAYMRYwFAYD VQQDEw02OTBhNDZhOC1mYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPa1OpdGHUACWbmhfltdzyBl1MzJayKxz0m27DoW/w+noNyxamQjXtCmG012 i8CANqSiHZnsnhfJPMVr9Wv4vEnsDLCL8Xfd1qowGzznQrqxVw5eOiVr17C2J3uC SYQZul7c1lL93rEbZjFflxS4QYcsPWdYkXE9pRTrZLnJUDuCfKYXv6NaBpYvJeo0 KGz4E2p3x/+84PW7PWVI+8UjydBj9qY4Kt+sGuqR3H0bpTo7g4N/OFYlikwdX0xK ea+EgyToIeakSbnySsPBwAU780G+Y17QFNOaE1JMxj5w/ZotnElxW7J+MWshMlRw TIkM5gRYhSMMxQlTuKQiUyIxJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJF98tD LB9DjVLJ4K5TcCq0Dy2JMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd1ieaEjR5WaxSTdGlAqZXhPz2bDZEF17BtMU11Yf7NZuHTOl47U2r +34Nmd6ULKi7CP36rocgD2s4dIPYZJHSOwmfwWebyBIGXyQU1aTGKagxmBEhuKwZ 0UnleR/wtOPNWb/3UR5tInHI1Z6YOZUByoPO+MrRU8SwIMaiuJC8V+3xihDxlEUK BIdw0kC5rl7P4/dH+XnV18LCGeIoq4mTrIkPYIhz4YLi8X+UzikTwM20W1w6K3E/ eVr8arvFGahV7Z4EyXkSgYS4+wLOBI8/TUHB75b6cii1eCizkDfESBNt69Z+CgLn +3msFCRpYzt3dBWgXVzAXZBTpYr11IQI -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:59 2025 by rpki-client