$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: toXSWtkd5vfYpniUjbcP2Fh3VNmcWp2DYESYkvkmhUA= Subject key identifier: 50:69:9C:8B:05:19:87:0A:57:9C:6F:62:FD:F9:33:D1:20:AF:27:4D Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2BF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2BF8 Signing time: Tue 04 Nov 2025 15:34:36 +0000 Manifest this update: Tue 04 Nov 2025 15:34:36 +0000 Manifest next update: Tue 11 Nov 2025 15:34:36 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: YnET/JzH9Qy2F37XAHAq6/e+Wysj4SdLpcNSGFNJvP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11256 (0x2bf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Nov 4 15:34:36 2025 GMT Not After : Nov 11 15:34:36 2025 GMT Subject: CN=690a1d0c-31d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:bb:e7:31:ed:32:17:c3:da:37:3a:fe:f5: f4:a8:0d:9a:11:cc:ea:72:2e:aa:f7:8c:a7:5c:34: a8:8e:f8:22:1f:4c:97:14:fc:68:5b:fc:fd:49:2b: 23:32:dc:cb:a4:0f:ee:55:5b:83:31:ef:c8:0c:ee: 70:56:3a:2f:b2:73:62:6d:13:ed:12:69:5b:78:fc: 14:64:f7:ae:06:4c:c3:e5:1d:09:d1:d2:2f:60:72: ec:2b:5f:6d:09:c6:a5:a9:2e:a4:78:56:c4:8f:18: 37:99:c6:19:35:26:6b:9a:57:66:5a:92:20:9a:bb: e4:be:0b:b8:d4:1e:f6:ad:44:5c:79:b2:65:37:58: 84:6c:62:ed:c7:3e:57:fb:b7:ac:77:fe:64:a0:7c: 3e:6b:0b:4f:18:70:79:6a:2e:a3:95:5d:8d:0d:a7: c6:a5:fc:7b:89:33:e4:6a:a9:41:cd:c1:30:b7:02: de:eb:c5:cf:55:74:21:c5:e6:d3:5e:2c:2c:07:b6: 9d:02:29:4e:4a:45:36:f4:2e:07:34:fd:f0:aa:9d: 2e:43:b7:73:96:95:35:c2:b3:ee:8c:0d:a0:0b:1d: 94:a0:ae:bc:09:74:82:3d:56:be:6f:fd:ad:02:c7: 7a:5e:ed:1e:38:86:d7:65:06:3e:30:0f:9a:a8:b3: 32:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:69:9C:8B:05:19:87:0A:57:9C:6F:62:FD:F9:33:D1:20:AF:27:4D X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:04:c3:fe:6b:bf:61:88:ba:65:24:3d:8c:b3:fc:72:ca:62: 69:52:3b:17:9e:89:71:a6:c0:c3:15:90:c2:91:4a:a2:c3:e1: 4e:7b:fb:62:a2:ac:98:98:d0:b1:0a:29:f2:1d:b9:12:2b:15: 13:33:25:c0:72:d2:09:80:48:ca:19:af:e7:e3:ce:9d:44:04: 1e:dd:27:ed:ac:33:d5:4f:d0:05:b0:c4:80:ec:26:81:0a:d0: 59:ca:d4:ed:21:8a:8d:ec:77:02:d0:19:88:9e:50:58:16:0c: a9:f9:c2:57:c1:6a:88:0f:4f:e5:54:62:62:7f:db:86:ee:96: e9:57:0c:0a:b8:7d:62:1f:c6:e3:2a:01:fa:eb:c4:ec:79:0b: 64:a2:c9:90:b3:dd:19:4f:4d:6f:81:3a:6f:7d:96:9d:df:e1: a1:b1:33:a8:df:75:04:cc:e4:aa:54:27:42:db:b8:a1:5b:01: a8:dc:5b:30:57:63:fd:e8:7a:e8:32:ad:99:a4:98:7d:08:88: b9:bf:b1:1c:2c:7a:15:bb:18:5c:8d:4c:c6:98:b0:4f:3f:71: b4:47:e1:33:01:ca:c4:23:f6:ec:a6:e4:eb:50:42:91:4f:35: e2:11:6b:3e:e7:67:e6:5d:d9:59:84:42:89:d3:82:78:26:f6: 36:1e:a4:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUxMTA0MTUzNDM2WhcNMjUxMTExMTUzNDM2WjAYMRYwFAYD VQQDEw02OTBhMWQwYy0zMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7O75zHtMhfD2jc6/vX0qA2aEczqci6q94ynXDSojvgiH0yXFPxoW/z9SSsj MtzLpA/uVVuDMe/IDO5wVjovsnNibRPtEmlbePwUZPeuBkzD5R0J0dIvYHLsK19t CcalqS6keFbEjxg3mcYZNSZrmldmWpIgmrvkvgu41B72rURcebJlN1iEbGLtxz5X +7esd/5koHw+awtPGHB5ai6jlV2NDafGpfx7iTPkaqlBzcEwtwLe68XPVXQhxebT XiwsB7adAilOSkU29C4HNP3wqp0uQ7dzlpU1wrPujA2gCx2UoK68CXSCPVa+b/2t Asd6Xu0eOIbXZQY+MA+aqLMyrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBpnIsF GYcKV5xvYv35M9EgrydNMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeBMP+a79hiLplJD2Ms/xyymJpUjsXnolxpsDDFZDCkUqiw+FOe/ti oqyYmNCxCinyHbkSKxUTMyXActIJgEjKGa/n486dRAQe3SftrDPVT9AFsMSA7CaB CtBZytTtIYqN7HcC0BmInlBYFgyp+cJXwWqID0/lVGJif9uG7pbpVwwKuH1iH8bj KgH668TseQtkosmQs90ZT01vgTpvfZad3+GhsTOo33UEzOSqVCdC27ihWwGo3Fsw V2P96HroMq2ZpJh9CIi5v7EcLHoVuxhcjUzGmLBPP3G0R+EzAcrEI/bspuTrUEKR TzXiEWs+52fmXdlZhEKJ04J4JvY2HqTB -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:42 2025 by rpki-client