$ rpki-client -vvf rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft (raw, json) Hash identifier: wOfqMXfLSG+QVVRyYLpDlwUVTSk8uEbQc095c2NJRHk= Subject key identifier: 4E:A7:97:33:0A:C1:36:36:CE:84:9C:02:AC:E4:E3:8E:93:35:BE:DD Authority key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 Certificate issuer: /CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft Manifest number: 03F9 Signing time: Mon 03 Nov 2025 00:25:36 +0000 Manifest this update: Mon 03 Nov 2025 00:25:36 +0000 Manifest next update: Mon 10 Nov 2025 00:25:36 +0000 Files and hashes: 1: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl (hash: UNj5QTmESIVmUAqeNgl7uo3hOBtZk+y0ba75nwG+us4=) 2: 5ADF4C92956811EC9028F155C4F9AE02.roa (hash: 6C9pOBCK4sWDlaS78t/pprsEcl/8A0s9Wlk6KVMoAhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Validity Not Before: Nov 3 00:25:36 2025 GMT Not After : Nov 10 00:25:36 2025 GMT Subject: CN=6907f680-ce82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:73:b8:60:77:fc:5f:8d:27:b1:97:c2:ca: 55:dd:56:21:df:fc:9d:67:eb:8b:a4:1e:a6:03:a7: 03:28:fa:91:79:4a:02:8c:e8:cc:1d:24:1e:28:bb: b2:7d:90:3a:c0:fc:aa:95:fb:51:39:65:92:62:6f: 43:e3:64:25:ec:f5:bf:85:bb:a8:d7:ff:2e:41:4c: 14:f5:6f:66:d1:38:4f:11:e7:e2:5a:b8:4b:d8:14: 2e:5e:fb:77:bf:36:e3:b2:35:44:a0:19:54:04:e0: f6:48:a8:be:1a:b4:ab:9e:7f:34:6f:6d:01:bd:ed: 31:ea:c3:d5:83:e0:37:1a:b5:7e:9a:82:57:c6:69: aa:1b:30:8e:a3:53:8c:81:48:e9:a9:7b:9d:f8:a2: 7c:38:8a:2c:ae:06:fa:56:e1:3d:7f:76:38:af:95: 5f:cc:d1:69:83:4a:20:04:50:9b:c9:ae:e8:4f:d7: 9e:49:55:6f:fa:8f:80:a0:ca:12:b1:c2:ed:89:8b: 6c:ff:99:18:f2:a9:94:56:a3:a5:b6:e5:2c:a0:73: 3b:5e:91:1c:1a:bd:c2:3c:80:5b:1a:fa:51:05:28: be:b4:7b:b0:60:34:cd:3a:7f:10:0f:ea:fc:35:26: da:aa:08:f4:74:0e:6e:be:46:69:49:9f:d1:6b:04: f9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A7:97:33:0A:C1:36:36:CE:84:9C:02:AC:E4:E3:8E:93:35:BE:DD X509v3 Authority Key Identifier: keyid:C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:00:9b:97:64:51:04:fe:ef:19:a3:68:0d:22:0c:88:ce:63: fa:09:a6:7c:a9:2e:08:5f:b0:e5:ba:d8:70:f6:8a:3d:c2:4c: 1f:e0:f1:64:78:91:08:57:37:64:59:7d:3c:ef:5f:1c:ac:cf: e5:97:ca:5f:ff:5f:51:b6:ed:7c:ac:eb:6e:39:85:e9:ec:af: 37:fb:65:9e:1b:d3:49:77:73:7f:db:ca:76:b6:04:15:65:89: 8e:5b:25:ba:46:4c:54:64:ed:42:04:9d:14:e9:70:50:d5:a4: eb:e2:5d:41:20:4f:6f:1f:be:e0:99:89:ef:7e:54:18:56:ea: ec:12:41:0e:51:44:67:de:02:a5:5d:ec:2c:e3:ac:17:35:66: 48:3f:f3:63:e7:0e:7a:90:4d:9b:8c:9a:65:ba:4e:a2:81:99: 63:ea:db:5c:c4:8e:52:c7:fc:72:80:d9:fc:9d:98:a0:72:41: 0c:87:42:af:a8:e5:49:fd:4a:50:c3:45:d0:9a:bf:1b:eb:59: ba:05:dc:9d:4b:0b:d4:b2:ca:7c:95:a5:a4:ef:57:d6:22:ad: 02:29:d9:a7:11:4c:67:b6:10:ad:d5:2e:57:21:e2:be:55:3b: 37:43:86:9e:c5:af:03:b0:75:63:68:b6:31:6d:08:65:57:f8: f0:b4:63:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzRkUxMTAvBgNVBAUTKEM3MEJGM0RGRjQ1MDIzRDQxQUY0QzRERjVENzY1MDQw QjkyNDFBQzcwHhcNMjUxMTAzMDAyNTM2WhcNMjUxMTEwMDAyNTM2WjAYMRYwFAYD VQQDEw02OTA3ZjY4MC1jZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jhzuGB3/F+NJ7GXwspV3VYh3/ydZ+uLpB6mA6cDKPqReUoCjOjMHSQeKLuy fZA6wPyqlftROWWSYm9D42Ql7PW/hbuo1/8uQUwU9W9m0ThPEefiWrhL2BQuXvt3 vzbjsjVEoBlUBOD2SKi+GrSrnn80b20Bve0x6sPVg+A3GrV+moJXxmmqGzCOo1OM gUjpqXud+KJ8OIosrgb6VuE9f3Y4r5VfzNFpg0ogBFCbya7oT9eeSVVv+o+AoMoS scLtiYts/5kY8qmUVqOltuUsoHM7XpEcGr3CPIBbGvpRBSi+tHuwYDTNOn8QD+r8 NSbaqgj0dA5uvkZpSZ/RawT5QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6nlzMK wTY2zoScAqzk446TNb7dMB8GA1UdIwQYMBaAFMcL89/0UCPUGvTE3112UEC5JBrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDNGRS85ODE0ODA2Mjk1 NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5UWE5TVRmWFhaUVFMa2tH c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3dnozX1JRSTlRYTlNVGZYWFpRUUxra0dzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDNGRS85ODE0ODA2Mjk1NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5 UWE5TVRmWFhaUVFMa2tHc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANAJuXZFEE/u8Zo2gNIgyIzmP6CaZ8qS4IX7Dluthw9oo9wkwf4PFk eJEIVzdkWX08718crM/ll8pf/19Rtu18rOtuOYXp7K83+2WeG9NJd3N/28p2tgQV ZYmOWyW6RkxUZO1CBJ0U6XBQ1aTr4l1BIE9vH77gmYnvflQYVursEkEOUURn3gKl Xews46wXNWZIP/Nj5w56kE2bjJpluk6igZlj6ttcxI5Sx/xygNn8nZigckEMh0Kv qOVJ/UpQw0XQmr8b61m6BdydSwvUssp8laWk71fWIq0CKdmnEUxnthCt1S5XIeK+ VTs3Q4aexa8DsHVjaLYxbQhlV/jwtGPH -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:21 2025 by rpki-client