$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft File: XrCY701WVcxmtq-Bw83kBi2ALzs.mft (raw, json) Hash identifier: FLiM/eyt6hltjxCYU0Y1WTgHdPyePMjUOM5oqEGRJuU= Subject key identifier: D5:AB:03:95:1D:8A:B8:A2:BD:A1:45:D6:AC:42:1F:79:4B:88:17:1A Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B Certificate issuer: /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Certificate serial: 051D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft Manifest number: 0517 Signing time: Tue 04 Nov 2025 23:39:30 +0000 Manifest this update: Tue 04 Nov 2025 23:39:29 +0000 Manifest next update: Tue 11 Nov 2025 23:39:29 +0000 Files and hashes: 1: XrCY701WVcxmtq-Bw83kBi2ALzs.crl (hash: ZMF27arv84lb4fN0l2B87XsmxhmUIM9aqAdx1aGmQss=) 2: B4D8E692267111ECA0546981C4F9AE02.roa (hash: 5Q4guNeQaB31WqKdHmdzuqJlgTxkvhYKs90qMoibdec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1309 (0x51d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3FB, serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Validity Not Before: Nov 4 23:39:29 2025 GMT Not After : Nov 11 23:39:29 2025 GMT Subject: CN=690a8eb1-7818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:aa:e0:8a:a6:98:fa:f3:9a:71:44:f6:e5: dd:21:02:67:b8:ed:c6:d0:19:8c:05:16:08:69:c5: 1e:8e:3d:03:4e:41:60:c1:38:99:ff:ff:e3:45:a2: c3:b5:3b:2d:86:d9:d0:8d:e6:a5:72:04:3e:a8:25: c3:27:98:f7:10:05:a0:96:e1:ee:91:6e:95:9c:84: 4c:0b:a5:47:f7:73:44:dd:11:e9:7c:6d:e5:ac:d2: c3:b2:de:5b:14:c9:47:d8:c5:06:a7:57:33:f2:20: 07:de:dc:ee:f4:a0:ff:f5:cb:d3:c0:cb:f6:80:81: 9c:0c:6b:b9:b3:d8:90:0f:6d:12:09:28:24:02:e8: 36:53:48:73:e8:d3:73:65:c1:7f:08:f8:4e:6f:b6: 2c:a1:28:96:78:86:17:c0:d4:f6:a9:3d:29:72:4f: ce:45:13:40:e6:56:d4:be:c8:24:7d:76:fa:90:20: f0:cc:19:a7:79:9b:8c:1b:83:10:b0:c6:e8:a8:1c: 8f:67:16:99:c7:ec:7f:01:26:fb:bc:27:ef:8d:b9: 81:33:bf:9f:8c:c0:99:1f:e2:ae:1f:2e:98:96:31: b7:48:81:00:bc:7e:93:4b:21:52:98:56:04:21:02: 8c:28:e2:07:a9:51:33:1e:2e:32:45:b7:a3:3c:fd: 7b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AB:03:95:1D:8A:B8:A2:BD:A1:45:D6:AC:42:1F:79:4B:88:17:1A X509v3 Authority Key Identifier: keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:70:27:ae:61:96:e7:1c:c5:1f:c7:d5:11:14:e1:24:15:eb: da:04:83:ec:42:77:e7:a7:30:3c:0f:8d:82:a8:ac:d7:64:33: b7:6f:57:8e:53:6f:ad:9b:06:1e:b6:1b:4f:b7:68:03:22:57: a8:90:c7:b3:5d:2a:57:da:ad:03:79:fc:17:7a:05:f3:b1:db: 7a:dc:6c:19:aa:6a:e8:f5:46:8e:08:e0:19:b3:d0:e2:10:9e: a8:78:d1:82:e8:a2:21:6b:d4:e1:66:28:13:19:e5:b9:e6:99: f7:62:4e:a8:a6:1e:5a:82:83:38:98:e2:37:92:e2:2c:0c:37: d5:d1:08:e5:97:06:37:de:2f:04:cc:8b:e0:a4:f0:aa:f4:14: 69:c3:f4:a5:29:91:a5:a2:9f:47:51:0a:f7:af:48:b0:46:b1: 7a:e8:c8:a3:9b:5b:2c:c3:5f:1f:a7:ab:51:5b:cf:df:6e:e1: d3:f1:06:f8:2d:7a:87:04:98:88:0c:ea:ca:6c:c6:b3:14:41: 7c:be:6b:21:f5:46:52:8e:3f:c4:6a:e7:0d:88:c2:fd:2d:6f: f8:a0:3a:91:e8:e7:d9:a6:c6:28:6a:81:33:3e:3b:96:bd:05: 66:bf:92:04:8a:38:34:35:64:71:3d:49:ae:b1:ab:ce:82:c0: d7:15:0b:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRkIxMTAvBgNVBAUTKDVFQjA5OEVGNEQ1NjU1Q0M2NkI2QUY4MUMzQ0RFNDA2 MkQ4MDJGM0IwHhcNMjUxMTA0MjMzOTI5WhcNMjUxMTExMjMzOTI5WjAYMRYwFAYD VQQDEw02OTBhOGViMS03ODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpuq4IqmmPrzmnFE9uXdIQJnuO3G0BmMBRYIacUejj0DTkFgwTiZ///jRaLD tTsthtnQjealcgQ+qCXDJ5j3EAWgluHukW6VnIRMC6VH93NE3RHpfG3lrNLDst5b FMlH2MUGp1cz8iAH3tzu9KD/9cvTwMv2gIGcDGu5s9iQD20SCSgkAug2U0hz6NNz ZcF/CPhOb7YsoSiWeIYXwNT2qT0pck/ORRNA5lbUvsgkfXb6kCDwzBmneZuMG4MQ sMboqByPZxaZx+x/ASb7vCfvjbmBM7+fjMCZH+KuHy6YljG3SIEAvH6TSyFSmFYE IQKMKOIHqVEzHi4yRbejPP17lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWrA5Ud iriivaFF1qxCH3lLiBcaMB8GA1UdIwQYMBaAFF6wmO9NVlXMZravgcPN5AYtgC87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNGQi9GREQ0NEMyMjI2 NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1ZjeG10cS1Cdzgza0JpMkFM enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyQ1k3MDFXVmN4bXRxLUJ3ODNrQmkyQUx6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNGQi9GREQ0NEMyMjI2NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1Zj eG10cS1Cdzgza0JpMkFMenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkcCeuYZbnHMUfx9URFOEkFevaBIPsQnfnpzA8D42CqKzXZDO3b1eO U2+tmwYethtPt2gDIleokMezXSpX2q0DefwXegXzsdt63GwZqmro9UaOCOAZs9Di EJ6oeNGC6KIha9ThZigTGeW55pn3Yk6oph5agoM4mOI3kuIsDDfV0QjllwY33i8E zIvgpPCq9BRpw/SlKZGlop9HUQr3r0iwRrF66Mijm1ssw18fp6tRW8/fbuHT8Qb4 LXqHBJiIDOrKbMazFEF8vmsh9UZSjj/EaucNiML9LW/4oDqR6OfZpsYoaoEzPjuW vQVmv5IEijg0NWRxPUmusavOgsDXFQsP -----END CERTIFICATE-----Generated at Wed Nov 5 18:08:38 2025 by rpki-client