$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: EGVK7Q/0l6lGPYemR1kQ5pgLC5odR/0fGgV2J35+Y6M= Subject key identifier: 59:91:CF:5B:63:7D:8A:40:7C:9B:52:E1:A1:0B:C5:98:DF:86:2C:30 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 53 Signing time: Mon 03 Nov 2025 07:14:17 +0000 Manifest this update: Mon 03 Nov 2025 07:14:17 +0000 Manifest next update: Mon 10 Nov 2025 07:14:17 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: z+5Kpn+NJlwlF5RvmbIWsVWyIIdhvjAVPqotJoGYZ7g=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GaxzV7+DkMGpd57xnNkPMderTpqjXPXFd/uGzJlcq9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Nov 3 07:14:17 2025 GMT Not After : Nov 10 07:14:17 2025 GMT Subject: CN=69085649-c53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:9f:f5:32:34:3e:ef:e8:05:1e:f2:45:4e:04: d4:ed:43:34:35:a8:e7:c1:fe:7d:fd:7a:f0:41:df: 4a:90:e3:af:aa:ed:5d:ca:f9:04:a4:da:74:df:82: 37:ea:4f:54:7b:e2:6f:a0:3b:e8:c0:6f:62:32:35: 79:5d:2c:14:51:f7:ba:86:7b:b5:d4:df:0d:38:0b: 08:e7:4a:68:be:e3:c4:be:bf:ef:a6:fa:85:a0:fe: 91:8d:63:3a:b7:f3:dd:0d:49:53:20:2c:c0:52:5b: c3:30:fe:53:d1:b8:88:dc:a7:fb:03:56:1d:bf:0a: f0:ae:70:b0:da:4d:a5:62:21:96:13:d6:77:65:b6: cd:de:93:78:a3:bd:64:0b:3c:cb:22:61:fd:39:78: 02:99:67:a0:72:28:6a:50:81:b9:4b:f4:b6:5e:99: 18:ee:a8:cd:9c:fb:bc:8f:3a:e3:bb:7e:12:11:37: 9a:bc:56:84:90:de:bf:1c:24:eb:03:ee:01:da:87: 8e:8c:e6:4b:62:13:c8:f3:e0:c0:bc:7a:da:ab:a2: 2b:73:d0:96:5e:9f:ca:db:e2:60:24:ec:02:a1:dc: 6c:26:f7:5f:fe:a5:a2:db:31:d2:72:85:9f:0a:36: de:80:2c:c0:ca:2c:24:5a:7b:fb:cc:23:31:bc:de: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:91:CF:5B:63:7D:8A:40:7C:9B:52:E1:A1:0B:C5:98:DF:86:2C:30 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:c6:ec:9a:85:c2:c2:05:e0:df:e0:af:dd:c9:0b:6b:26:7d: 69:15:10:1d:db:31:3e:88:8c:35:85:1d:2d:47:1b:27:04:37: de:88:6b:2d:c6:ed:a5:4b:34:de:3f:5d:96:bf:1e:a7:cb:e7: d7:cc:82:b3:a3:4f:5d:77:3b:fe:0f:a7:2e:09:60:8f:5e:32: 52:b9:e1:02:50:e5:a2:87:ad:10:f4:1a:ed:bf:54:af:1a:db: a1:e2:64:cf:57:44:91:00:52:24:91:29:f9:26:ef:14:54:72: ea:8e:7b:ed:0e:e7:8b:68:88:73:fe:00:a6:95:ed:8e:3f:91: 15:28:98:02:4c:e9:10:00:eb:5e:09:fa:7a:65:92:17:e8:8b: 87:f5:c0:91:c4:67:94:78:e2:0f:48:f2:5c:c7:ce:2e:e2:fb: 92:e0:0e:75:83:90:78:4c:75:66:23:b3:1d:3f:0f:44:af:5e: ea:6b:99:57:ea:10:ca:f9:07:6e:1d:a2:ea:51:84:4d:72:85: d9:ef:38:09:e7:fa:f8:73:fd:38:e2:47:08:8d:8a:e6:c8:7c: 1b:46:8b:b6:f0:9f:72:92:b6:01:d0:0b:ea:a1:15:5a:c8:a8: 87:40:2e:88:4a:da:cc:8b:97:ef:d9:84:af:e5:83:81:31:12: 66:a2:8d:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTExMDMwNzE0MTdaFw0yNTExMTAwNzE0MTdaMBgxFjAUBgNV BAMTDTY5MDg1NjQ5LWM1M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2n/UyND7v6AUe8kVOBNTtQzQ1qOfB/n39evBB30qQ46+q7V3K+QSk2nTfgjfq T1R74m+gO+jAb2IyNXldLBRR97qGe7XU3w04CwjnSmi+48S+v++m+oWg/pGNYzq3 890NSVMgLMBSW8Mw/lPRuIjcp/sDVh2/CvCucLDaTaViIZYT1ndlts3ek3ijvWQL PMsiYf05eAKZZ6ByKGpQgblL9LZemRjuqM2c+7yPOuO7fhIRN5q8VoSQ3r8cJOsD 7gHah46M5ktiE8jz4MC8etqroitz0JZen8rb4mAk7AKh3Gwm91/+paLbMdJyhZ8K Nt6ALMDKLCRae/vMIzG83v8TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWZHPW2N9 ikB8m1LhoQvFmN+GLDAwHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANvG7JqFwsIF4N/gr93JC2smfWkVEB3bMT6IjDWFHS1HGycEN96Iay3G 7aVLNN4/XZa/HqfL59fMgrOjT113O/4Ppy4JYI9eMlK54QJQ5aKHrRD0Gu2/VK8a 26HiZM9XRJEAUiSRKfkm7xRUcuqOe+0O54toiHP+AKaV7Y4/kRUomAJM6RAA614J +nplkhfoi4f1wJHEZ5R44g9I8lzHzi7i+5LgDnWDkHhMdWYjsx0/D0SvXuprmVfq EMr5B24doupRhE1yhdnvOAnn+vhz/TjiRwiNiubIfBtGi7bwn3KStgHQC+qhFVrI qIdALohK2syLl+/ZhK/lg4ExEmaijcs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:48 2025 by rpki-client