$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft File: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json) Hash identifier: 654LQvV8MutHIrSv+Ur7qo3iE4oA6mtGdeSKErP+eWI= Subject key identifier: 2E:FB:B4:92:65:85:A0:B6:B5:67:1E:64:7A:21:1E:CE:8E:96:72:87 Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C Certificate issuer: /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft Manifest number: 06D3 Signing time: Tue 04 Nov 2025 22:07:37 +0000 Manifest this update: Tue 04 Nov 2025 22:07:36 +0000 Manifest next update: Tue 11 Nov 2025 22:07:36 +0000 Files and hashes: 1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: 3JUWWgu2GQUVAG7W2BBIoj3BnHVqc7v4I6lgHds5hMw=) 2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: 53zKcN6L7abJ9zpJ1rsGk1CMb4hTUDymJuK8BDIQ0eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91569FB, serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Validity Not Before: Nov 4 22:07:36 2025 GMT Not After : Nov 11 22:07:36 2025 GMT Subject: CN=690a7929-8943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:05:42:18:31:99:ee:4e:2c:6f:a0:6c:a5: b3:72:c4:4e:78:97:06:ab:a9:71:a3:c3:24:c0:5d: 01:b1:6a:dd:70:87:25:d8:aa:5f:ec:15:6a:13:3f: f3:6b:53:aa:f0:60:16:f8:95:1a:0e:ff:d7:84:49: ce:a2:ce:45:35:1d:cf:98:8e:59:ea:fd:a7:3d:02: ad:1a:5e:1c:d2:66:92:c9:42:e8:db:34:7f:4b:7a: ef:67:63:03:c7:0d:7c:bf:de:a0:a1:0b:73:de:14: 6a:bb:fe:50:06:fc:b1:62:ca:fb:b2:04:ad:09:5c: cb:db:ae:3c:2f:5b:19:cf:f0:69:db:ad:26:c1:57: ff:db:ac:48:76:7d:02:cb:f6:11:e9:7c:58:a1:b7: 32:82:bb:c2:19:81:7b:9a:ef:b6:f1:ec:41:60:66: 77:48:83:ac:4a:51:69:5c:79:a1:fe:02:78:ab:9e: 91:b3:e5:8c:d7:d7:9b:e6:16:f6:ce:45:06:4f:91: 72:80:63:13:85:00:52:ab:6f:e5:cd:51:82:0c:d3: 05:7e:0c:b5:88:6e:f7:23:85:ad:18:4e:26:ac:41: 00:73:96:3b:d1:e1:92:35:f3:ee:86:79:89:a4:c9: c1:8f:cd:89:fb:ab:e0:6d:24:6e:0f:88:a9:23:d6: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FB:B4:92:65:85:A0:B6:B5:67:1E:64:7A:21:1E:CE:8E:96:72:87 X509v3 Authority Key Identifier: keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:47:c4:f0:23:b9:d0:aa:75:57:d2:dd:3e:14:29:48:1a:1b: 99:2f:1f:74:5b:60:ce:20:d5:63:c7:bd:33:18:15:87:87:31: 9b:b2:ea:f0:49:80:ea:3d:2a:9d:e7:9e:18:27:74:7c:ec:54: 0f:c1:f6:60:cc:a0:8d:2e:c8:71:dd:e0:54:df:79:a5:e6:89: 98:3d:eb:5e:4c:89:eb:d2:b5:86:18:cb:40:05:65:ef:71:eb: 66:9a:14:b6:fa:00:f1:f1:b6:a7:dc:fe:ff:71:df:47:15:ed: 90:02:29:c6:39:47:ac:15:ae:b9:88:4e:88:c5:65:42:aa:0e: 7c:75:7a:44:7b:12:b1:ec:df:d4:3e:38:21:50:e1:29:66:2d: 91:5b:b9:57:91:5c:b6:06:ff:14:8d:c1:c1:f7:95:61:ed:8f: bd:9c:65:bc:ba:47:1a:bb:76:f5:5d:da:c6:96:25:b1:b0:d8: 21:89:68:30:9c:d1:63:e1:ee:e8:33:dd:ab:29:be:95:e7:a4: 8f:08:48:27:44:aa:0f:6f:3a:89:f2:e1:10:f3:5d:00:9d:fc: db:be:2f:ac:4f:d6:99:fe:e1:3c:27:4b:bf:df:46:8e:76:00: 49:f5:77:c1:96:00:d0:60:25:9e:44:42:51:23:b0:6f:b8:84: f9:f9:5b:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5RkIxMTAvBgNVBAUTKDVERUUxNkVGODVBMkJGODREQUQ4ODc2NjY3NTlCMUVD MTVEMUI5NEMwHhcNMjUxMTA0MjIwNzM2WhcNMjUxMTExMjIwNzM2WjAYMRYwFAYD VQQDEw02OTBhNzkyOS04OTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mUFQhgxme5OLG+gbKWzcsROeJcGq6lxo8MkwF0BsWrdcIcl2Kpf7BVqEz/z a1Oq8GAW+JUaDv/XhEnOos5FNR3PmI5Z6v2nPQKtGl4c0maSyULo2zR/S3rvZ2MD xw18v96goQtz3hRqu/5QBvyxYsr7sgStCVzL2648L1sZz/Bp260mwVf/26xIdn0C y/YR6XxYobcygrvCGYF7mu+28exBYGZ3SIOsSlFpXHmh/gJ4q56Rs+WM19eb5hb2 zkUGT5FygGMThQBSq2/lzVGCDNMFfgy1iG73I4WtGE4mrEEAc5Y70eGSNfPuhnmJ pMnBj82J+6vgbSRuD4ipI9a/5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC77tJJl haC2tWceZHohHs6OlnKHMB8GA1UdIwQYMBaAFF3uFu+For+E2tiHZmdZsewV0blM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjlGQi84REUxRENEQTc2 MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0VGEySWRtWjFteDdCWFJ1 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlNFc3NFdpdjRUYTJJZG1aMW14N0JYUnVVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjlGQi84REUxRENEQTc2MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0 VGEySWRtWjFteDdCWFJ1VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuR8TwI7nQqnVX0t0+FClIGhuZLx90W2DOINVjx70zGBWHhzGbsurw SYDqPSqd554YJ3R87FQPwfZgzKCNLshx3eBU33ml5omYPeteTInr0rWGGMtABWXv cetmmhS2+gDx8ban3P7/cd9HFe2QAinGOUesFa65iE6IxWVCqg58dXpEexKx7N/U PjghUOEpZi2RW7lXkVy2Bv8UjcHB95Vh7Y+9nGW8ukcau3b1XdrGliWxsNghiWgw nNFj4e7oM92rKb6V56SPCEgnRKoPbzqJ8uEQ810Anfzbvi+sT9aZ/uE8J0u/30aO dgBJ9XfBlgDQYCWeREJRI7BvuIT5+Vuk -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:50 2025 by rpki-client