$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: yc5GPvnWvg4PBJttq+Gbfl9fQl+9/0UTBQ1u8lPeywo= Subject key identifier: A7:69:CA:F2:AE:49:63:DE:D0:3E:AC:A4:1B:52:40:82:67:D8:B5:3E Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 01BA Signing time: Wed 05 Nov 2025 03:17:02 +0000 Manifest this update: Wed 05 Nov 2025 03:17:02 +0000 Manifest next update: Wed 12 Nov 2025 03:17:02 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: 3fx4chsQ140EqdlIDSx0o35955gXn2Ex0Q/m6SNH24U=) 2: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: XI2MRT3apixej+c7Uuh5Oy/DdOkTdTWC2j0oX0vYoiA=) 3: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=) 4: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: GgalYjkY1TSQEVBeTqrV+j4tzZy8hdDlsyXixDM61Sw=) 5: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: VniQg/Q8eQO09WHTg5jdvrFHg394rGunw1V45oxGtZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Nov 5 03:17:02 2025 GMT Not After : Nov 12 03:17:02 2025 GMT Subject: CN=690ac1ae-284b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:76:70:8e:a8:73:09:d8:92:48:57:bf:f0: 9a:1e:87:94:85:13:f7:6f:95:91:3f:30:d7:8d:ac: 89:f3:c4:b9:3b:c3:4e:bf:96:97:2c:5c:26:20:f2: e8:87:70:1a:2d:e0:fc:ba:47:66:c2:7d:4f:84:08: 55:f7:a2:d8:0e:34:9e:73:c6:a2:fc:0d:13:dd:d8: 2c:d6:69:08:31:d9:d1:63:6b:9c:f8:14:e0:f1:6d: ea:be:e4:12:5d:05:40:28:e6:88:4a:42:7a:3c:5e: 1e:fe:8d:59:f1:6e:75:56:10:da:1d:ad:d5:ee:83: bb:67:5b:55:e3:c7:24:1c:13:e7:39:a8:cc:cf:b4: 8c:3a:c8:61:fe:e5:26:c7:8f:fb:57:7c:a0:73:a2: 40:7a:9b:ee:01:c2:a9:90:38:38:ea:e8:45:07:ac: aa:6c:4a:40:a0:82:2e:e0:93:ef:89:50:58:34:7e: 72:b3:8c:3c:45:b3:08:25:81:bf:bf:02:fe:46:88: d4:3d:b7:4d:10:b2:23:ad:8b:4e:14:36:77:06:be: e6:4b:83:d1:6b:61:b0:e8:d9:1a:e3:e4:9a:39:0d: ee:ed:5b:48:1e:2b:cc:e5:3e:29:86:fd:d8:33:44: a2:7d:98:07:4b:94:57:61:90:37:3c:d1:3b:95:38: f8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:69:CA:F2:AE:49:63:DE:D0:3E:AC:A4:1B:52:40:82:67:D8:B5:3E X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:41:30:c0:12:0d:c6:82:4c:61:54:c7:cb:1a:bc:2c:c0:f4: f9:ac:48:81:2c:04:7a:4a:66:ae:37:04:a2:65:80:88:97:5e: 1e:31:3b:57:7c:90:10:5e:16:ca:eb:25:3c:84:02:f7:dc:4c: 29:7b:d7:9f:2f:83:63:15:0d:31:96:c7:da:4d:95:e8:a5:dc: f1:0e:42:dd:03:f1:1a:0d:db:cb:eb:e1:3a:5c:8c:c1:1f:9e: 32:e2:2c:23:22:fb:15:1f:82:5e:73:3b:ed:a7:a0:c6:80:eb: 9f:29:cb:08:21:ea:59:7e:19:90:47:e0:1f:f9:8b:16:60:c5: 5e:ed:bf:bd:8c:3c:d7:9f:ce:c2:66:bb:76:3e:83:4c:a3:60: fd:99:8f:a2:fb:78:bb:ed:ea:89:6b:25:ec:ca:1c:b7:b0:90: 97:52:5b:95:8b:65:7e:ce:75:18:7e:77:6c:74:79:51:13:3c: 8f:9d:df:91:f4:c6:eb:2d:94:f5:13:f7:67:a3:19:30:07:85: ee:37:41:b7:b9:d3:fb:0b:c8:28:aa:61:21:32:c7:ce:70:87: 79:16:52:1d:c6:60:99:51:68:eb:99:24:7c:b4:94:86:24:5a: d0:f7:5f:e7:39:79:b7:c5:08:57:47:1d:4e:a5:4d:26:66:57: 13:75:b4:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUxMTA1MDMxNzAyWhcNMjUxMTEyMDMxNzAyWjAYMRYwFAYD VQQDEw02OTBhYzFhZS0yODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyct2cI6ocwnYkkhXv/CaHoeUhRP3b5WRPzDXjayJ88S5O8NOv5aXLFwmIPLo h3AaLeD8ukdmwn1PhAhV96LYDjSec8ai/A0T3dgs1mkIMdnRY2uc+BTg8W3qvuQS XQVAKOaISkJ6PF4e/o1Z8W51VhDaHa3V7oO7Z1tV48ckHBPnOajMz7SMOshh/uUm x4/7V3ygc6JAepvuAcKpkDg46uhFB6yqbEpAoIIu4JPviVBYNH5ys4w8RbMIJYG/ vwL+RojUPbdNELIjrYtOFDZ3Br7mS4PRa2Gw6Nka4+SaOQ3u7VtIHivM5T4phv3Y M0SifZgHS5RXYZA3PNE7lTj4OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdpyvKu SWPe0D6spBtSQIJn2LU+MB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWQTDAEg3GgkxhVMfLGrwswPT5rEiBLAR6SmauNwSiZYCIl14eMTtX fJAQXhbK6yU8hAL33Ewpe9efL4NjFQ0xlsfaTZXopdzxDkLdA/EaDdvL6+E6XIzB H54y4iwjIvsVH4Jeczvtp6DGgOufKcsIIepZfhmQR+Af+YsWYMVe7b+9jDzXn87C Zrt2PoNMo2D9mY+i+3i77eqJayXsyhy3sJCXUluVi2V+znUYfndsdHlREzyPnd+R 9MbrLZT1E/dnoxkwB4XuN0G3udP7C8goqmEhMsfOcId5FlIdxmCZUWjrmSR8tJSG JFrQ91/nOXm3xQhXRx1OpU0mZlcTdbRC -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:43 2025 by rpki-client