$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: AKNsm2CRA9mnEM/GhachplxF4AV97rZVOeLzy1ts4nA= Subject key identifier: A9:E2:5A:01:85:4C:9B:6B:38:76:DD:A1:92:F2:DF:01:A3:F0:1F:AC Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 3101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 3094 Signing time: Sun 02 Nov 2025 15:27:11 +0000 Manifest this update: Sun 02 Nov 2025 15:27:11 +0000 Manifest next update: Sun 09 Nov 2025 15:27:11 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: 7rNKLvKH19mLigYseG5uv5KKaa8CtZXoevhRRfsDVIc=) 2: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: VA85W2DwFcltrLQso3iWrGCK1p8MpteiBw4nv3k0XAA=) 3: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wLLmVC0SWl0ZV8inkOYwu+rXfwtuFkyqT9a9NHg4fsQ=) 4: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: u9Tgdh2mj51OfGhJuvlQ1Gy4m51DMyrbUiBF/Y8Vkj0=) 5: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: 7Dey0JGvmlqmWqhli9F4C8bTHZAZtymVOQxhxzYVfX4=) 6: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: aQNQHDH++NuHPMuhQ++m65fQNUDwylkPh47sY3kbEIs=) 7: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: yOrqaE9NockE6FGEvsKt1/X3bfnUWyv76Yj9yl2GGVQ=) 8: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: e7Dy/yrmu0hcKMxT0huel1vNg0CC7+GJucCX8fymY2o=) 9: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: AE5EIx4+Tp7/f50+D6PpmR05HTKi7X3OlU7mCpH4y7o=) 10: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: S5yp4tMLnbSyML+bu0OdmFYzHfjyLDv16/Xr3BO1cSA=) 11: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: egr/0pi0LBVzAfSriSf0oLVb0kHzcxRy+vyO59CHJ/Y=) 12: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: hoEdWJgd+iSbkEJxwwEB2OfxtCPHdbL8GJWAjTC4NaI=) 13: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: 4+IsQGE9DpxrqXHaGDjhfyFcaRugPanxx+iKmCYBXD4=) 14: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: Ak9ulSCBepvFHHWrtvRX78jK7UjLDTIXpbZCAO4ELzg=) 15: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: U9tQePLnZPrszhMNvs/YV6XDVfsxC3+GK3UJVlQgINc=) 16: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: ADGrwVjYVax00+B1Ntoo1NH+4zxjH9qwLNY0BDM8s3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12545 (0x3101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Nov 2 15:27:11 2025 GMT Not After : Nov 9 15:27:11 2025 GMT Subject: CN=6907784f-f661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:c5:b4:44:55:c5:81:87:06:43:d2:33:3b: 9a:6d:77:ef:91:d3:db:3e:c2:07:5e:7b:7f:0b:ab: ca:f9:d9:10:2c:a9:39:3d:dd:8a:3d:7f:21:11:ca: a8:72:96:d3:a1:9d:dc:6d:29:20:ab:81:fb:3a:ff: b8:53:6f:f9:b9:ab:86:bc:1b:7a:1b:02:bf:f0:b2: 53:13:be:df:4e:85:60:40:d2:df:f9:29:61:b3:5b: d6:38:0c:4c:83:ca:d5:78:a7:3d:b9:30:b7:40:f7: c1:8e:34:fd:9f:b0:66:2b:1b:15:6d:35:e4:29:f2: d1:dd:68:73:b0:c1:30:2f:4c:48:2e:37:a0:f6:69: d9:40:62:9e:5e:d4:b4:b0:20:4e:69:89:2c:e7:f4: 58:55:03:4f:ad:fd:99:e9:e8:ab:ef:c9:99:0e:ef: 36:51:32:9d:01:d5:b0:87:1e:06:8e:33:c7:47:45: 1f:be:16:5c:02:5c:b0:a0:c5:f3:31:44:a3:9b:d0: c5:97:a3:32:ff:04:f7:1f:68:d7:a8:1b:34:85:13: a5:75:22:4e:39:f4:ab:ed:4b:2f:b4:6d:c9:5b:52: 5a:7f:1c:56:46:5d:e6:48:2a:0f:34:5c:de:d2:b4: 48:e3:9b:d4:58:41:a9:ec:55:23:40:1c:ea:0a:fe: 6f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:5A:01:85:4C:9B:6B:38:76:DD:A1:92:F2:DF:01:A3:F0:1F:AC X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5d:38:37:b2:95:6f:d5:9b:08:a7:3c:52:0c:7a:59:6c:1f: 83:7a:0f:4e:e8:64:5c:8a:cd:7f:f2:79:a9:09:8c:37:85:29: 81:dd:55:77:47:7c:4e:da:97:f2:fc:5f:b4:64:57:aa:d9:a6: d2:ac:3c:f3:83:51:23:f1:3a:b4:b9:50:ad:a7:9f:e5:27:56: 76:4f:dd:33:ff:df:cd:3d:23:15:66:1f:c1:90:c3:ad:a5:67: 13:c8:d2:3a:94:84:2d:71:04:1a:3c:9a:c8:da:1e:a9:0b:b5: 4f:40:ab:2b:74:59:04:d0:cb:54:ba:87:01:1f:d1:40:bd:3a: 9e:22:ab:d3:9d:3b:ff:8a:3b:fd:6c:f4:e8:5c:82:5d:11:ac: 95:8d:38:01:2e:20:aa:07:ba:f5:c8:eb:c1:ce:f6:06:20:3e: 0b:fd:1c:fb:72:c5:61:e9:99:2c:14:57:ec:1f:f5:b4:24:2f: 1d:7d:a1:90:24:65:3a:5d:57:5e:77:70:13:00:c8:e5:df:6d: 38:81:02:6d:10:30:a7:01:f4:74:37:ef:83:7a:d6:e4:c7:5f: 73:b2:99:93:62:b9:39:db:03:db:71:ba:26:82:81:48:d1:36: e1:c4:56:49:a1:8b:7a:7d:c0:0e:c0:db:3b:9e:3f:56:69:5f: c5:f4:28:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjUxMTAyMTUyNzExWhcNMjUxMTA5MTUyNzExWjAYMRYwFAYD VQQDEw02OTA3Nzg0Zi1mNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5rFtERVxYGHBkPSMzuabXfvkdPbPsIHXnt/C6vK+dkQLKk5Pd2KPX8hEcqo cpbToZ3cbSkgq4H7Ov+4U2/5uauGvBt6GwK/8LJTE77fToVgQNLf+Slhs1vWOAxM g8rVeKc9uTC3QPfBjjT9n7BmKxsVbTXkKfLR3WhzsMEwL0xILjeg9mnZQGKeXtS0 sCBOaYks5/RYVQNPrf2Z6eir78mZDu82UTKdAdWwhx4GjjPHR0UfvhZcAlywoMXz MUSjm9DFl6My/wT3H2jXqBs0hROldSJOOfSr7UsvtG3JW1JafxxWRl3mSCoPNFze 0rRI45vUWEGp7FUjQBzqCv5vfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKniWgGF TJtrOHbdoZLy3wGj8B+sMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjXTg3spVv1ZsIpzxSDHpZbB+Deg9O6GRcis1/8nmpCYw3hSmB3VV3 R3xO2pfy/F+0ZFeq2abSrDzzg1Ej8Tq0uVCtp5/lJ1Z2T90z/9/NPSMVZh/BkMOt pWcTyNI6lIQtcQQaPJrI2h6pC7VPQKsrdFkE0MtUuocBH9FAvTqeIqvTnTv/ijv9 bPToXIJdEayVjTgBLiCqB7r1yOvBzvYGID4L/Rz7csVh6ZksFFfsH/W0JC8dfaGQ JGU6XVded3ATAMjl3204gQJtEDCnAfR0N++Detbkx19zspmTYrk52wPbcbomgoFI 0TbhxFZJoYt6fcAOwNs7nj9WaV/F9CgA -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:53 2025 by rpki-client