$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: oNmUmFT8I8hlRN50au4BdX+M0UHkOZ/+2KSPT/Nq8Iw= Subject key identifier: 7A:A2:30:2E:E3:8A:29:A0:9F:57:0C:09:75:2C:30:5E:61:80:D1:44 Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 60A1 Signing time: Tue 04 Nov 2025 14:15:20 +0000 Manifest this update: Tue 04 Nov 2025 14:15:20 +0000 Manifest next update: Tue 11 Nov 2025 14:15:20 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: 0gUpLy+IEemexheYgJ7PfMiPnFZrAno8YxmmmWKCcZ8=) 2: 813E372A946711F081C10711C4F9AE02.roa (hash: kExd4zSpp7AjmXFgOmX60/PfKSK3ZoaisYrs5b1dJbk=) 3: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: hZakqVHe8O4RVi1dDA3NxvC3rtRxeZVjqvS+/bKAPhU=) 4: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Wde+/tbwO6emtqEAbVU9kd5LqQ/7rRJAB/r7M8LU5/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Nov 4 14:15:20 2025 GMT Not After : Nov 11 14:15:20 2025 GMT Subject: CN=690a0a78-68de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:8c:1a:cf:82:f1:4e:10:e2:83:bf:d7:a0: dd:04:9c:d9:9f:4d:a7:8d:80:dd:70:fa:a1:92:db: 94:49:46:a9:5b:19:a4:97:fc:0f:41:34:de:7a:c8: 70:21:30:97:d3:f8:8e:22:68:11:e7:f6:24:fb:31: 57:1b:1c:c9:ef:3a:dd:4d:74:41:97:6c:cb:2a:4d: 2a:65:df:78:43:56:37:68:31:d9:0a:9d:57:51:42: 1c:0c:8f:d5:de:18:af:aa:79:d2:db:9e:63:f0:e9: 2a:f5:47:88:d9:69:e2:6b:df:51:bd:41:59:43:ed: 04:8a:fa:32:55:15:d1:df:8c:19:e9:dc:7b:53:5f: f5:db:88:3f:d2:45:af:d6:be:a1:40:25:a1:99:97: 60:89:b9:a3:5f:f7:6c:bb:32:5a:df:23:d6:39:ce: f4:37:8b:37:78:44:5d:c6:54:94:91:92:34:f4:27: 45:6d:26:29:1d:13:98:2f:f9:5a:ca:7a:70:87:20: c1:98:a6:0c:25:7c:b0:01:f6:67:a1:e7:a5:af:6a: 00:fe:cd:14:0c:ea:03:38:36:aa:85:7f:8b:0a:77: 7f:7d:e2:37:98:14:5d:65:f6:04:1a:13:df:88:e3: bb:44:85:42:0d:22:30:03:27:2a:a3:05:8f:21:76: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A2:30:2E:E3:8A:29:A0:9F:57:0C:09:75:2C:30:5E:61:80:D1:44 X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5f:68:28:89:da:0e:4b:de:b3:99:9a:72:a0:43:53:1d:37: c7:24:bd:db:a1:ce:2a:bc:e6:a7:17:6a:28:d6:16:e8:e0:84: 26:e4:a1:23:35:3c:c5:cc:4d:73:9d:bd:12:56:0a:95:83:88: 52:19:f0:48:5b:a6:23:2d:bf:43:35:17:24:8b:2b:2f:89:fd: d5:5a:25:87:10:74:1b:da:ae:a9:34:c1:09:72:3c:4a:d9:34: fd:2f:fc:4f:55:85:05:5d:7d:9a:31:a2:3f:a9:32:cf:04:bd: 13:86:58:7f:39:11:fc:0a:8d:5b:5f:e3:c0:e6:d6:f4:4e:6f: 74:f8:4a:45:5d:4a:8c:06:f6:5a:7f:88:48:9c:b6:07:d6:06: 75:4b:6b:a1:e5:32:35:d3:3e:8c:e7:c3:ab:da:7d:74:91:ec: cb:9b:37:c1:87:e4:b9:42:71:4e:a2:e2:c0:b5:fe:9e:8f:52: 5c:e0:dd:71:53:ab:aa:53:fa:1e:47:05:7e:98:e5:fc:99:83: 5d:e6:91:ee:79:53:3f:5f:dc:fa:69:b1:e5:54:f2:37:75:2a: 41:a8:23:a2:85:1c:00:e2:ed:91:d5:97:95:ca:53:66:d2:74: cf:53:62:db:b3:08:3b:88:5d:f2:83:0c:de:6c:ff:83:af:43: 71:26:49:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjUxMTA0MTQxNTIwWhcNMjUxMTExMTQxNTIwWjAYMRYwFAYD VQQDEw02OTBhMGE3OC02OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+6MGs+C8U4Q4oO/16DdBJzZn02njYDdcPqhktuUSUapWxmkl/wPQTTeeshw ITCX0/iOImgR5/Yk+zFXGxzJ7zrdTXRBl2zLKk0qZd94Q1Y3aDHZCp1XUUIcDI/V 3hivqnnS255j8Okq9UeI2Wnia99RvUFZQ+0EivoyVRXR34wZ6dx7U1/124g/0kWv 1r6hQCWhmZdgibmjX/dsuzJa3yPWOc70N4s3eERdxlSUkZI09CdFbSYpHROYL/la ynpwhyDBmKYMJXywAfZnoeelr2oA/s0UDOoDODaqhX+LCnd/feI3mBRdZfYEGhPf iOO7RIVCDSIwAycqowWPIXZSHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqiMC7j iimgn1cMCXUsMF5hgNFEMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgX2goidoOS96zmZpyoENTHTfHJL3boc4qvOanF2oo1hbo4IQm5KEj NTzFzE1znb0SVgqVg4hSGfBIW6YjLb9DNRckiysvif3VWiWHEHQb2q6pNMEJcjxK 2TT9L/xPVYUFXX2aMaI/qTLPBL0Thlh/ORH8Co1bX+PA5tb0Tm90+EpFXUqMBvZa f4hInLYH1gZ1S2uh5TI10z6M58Or2n10kezLmzfBh+S5QnFOouLAtf6ej1Jc4N1x U6uqU/oeRwV+mOX8mYNd5pHueVM/X9z6abHlVPI3dSpBqCOihRwA4u2R1ZeVylNm 0nTPU2Lbswg7iF3ygwzebP+Dr0NxJknL -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:01 2025 by rpki-client