$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json) Hash identifier: BAicaQekkeu9Pyvjk4LxPii3NXLEA31ismsWq3l6UO4= Subject key identifier: C4:7C:D3:7E:B9:43:56:58:1E:7C:84:C3:AE:07:9A:1D:4E:E1:B5:CE Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft Manifest number: 0152 Signing time: Mon 03 Nov 2025 04:18:16 +0000 Manifest this update: Mon 03 Nov 2025 04:18:16 +0000 Manifest next update: Mon 10 Nov 2025 04:18:16 +0000 Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: aIVxqAeQm5KrcqGsLo2rxx+kxFI4xApLzYXl6GznNnU=) 2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: rFJbuDYL88Z9KeNowFp3y8pDODtibJ7P1KjjzQ7u73o=) 3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: qHX8rwWLzYwQ68AYEwJa6sYGgUw03regWlERxMTMTs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Validity Not Before: Nov 3 04:18:16 2025 GMT Not After : Nov 10 04:18:16 2025 GMT Subject: CN=69082d08-1fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a1:d3:8c:18:59:27:d7:42:00:66:9c:78:b6: 06:a3:56:47:6a:c0:ff:7d:98:bd:e3:fd:a1:2a:c4: 8f:53:12:88:cc:89:5e:26:16:83:c3:46:d5:63:eb: 2c:3b:7f:d8:2a:4f:97:f1:c8:97:b9:e7:91:b5:57: a0:98:98:ce:83:18:18:45:b3:3b:ed:27:7d:94:90: 2e:2b:0c:60:e0:b7:9f:e8:99:f4:f7:49:2a:dc:9e: c0:d2:13:73:70:7f:98:bc:b1:8a:c0:a1:8f:7f:f0: 3a:4c:dd:f1:87:80:f1:64:ca:10:5f:88:e7:e3:ae: 15:7c:43:3f:b8:42:14:6b:3b:8f:25:54:2b:fd:8d: 2e:59:0f:ed:b7:d9:a0:83:67:4e:ca:18:53:40:e4: 79:de:20:29:fd:75:44:78:1a:45:a1:1f:ff:db:00: 9a:53:ef:3c:c9:69:ba:93:75:b5:33:0b:c9:00:dc: 73:68:b9:cb:a6:e6:b0:7e:23:47:db:5a:f3:b9:52: c1:61:3d:03:a2:cd:95:ac:1f:53:0d:93:34:98:3b: 0e:89:b3:23:24:f5:e9:69:e3:54:cd:d0:f7:3c:eb: ad:69:9a:f8:89:4b:a2:15:f3:a3:34:c3:a6:b7:4b: a7:e8:db:f1:d5:94:cc:67:76:f4:54:57:fa:84:d7: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7C:D3:7E:B9:43:56:58:1E:7C:84:C3:AE:07:9A:1D:4E:E1:B5:CE X509v3 Authority Key Identifier: keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:85:4d:0b:a1:b1:23:7f:de:b8:f0:ae:65:14:f3:d5:5b:bf: 19:85:49:04:59:be:a0:7b:8b:db:6f:32:ed:c9:2f:9f:0f:39: e4:d5:00:15:fe:d7:6d:dd:b5:15:91:8f:2c:a1:b9:f4:35:2f: b6:c7:1e:cc:4f:ad:1c:75:a1:2f:75:82:a0:e4:c1:13:2f:54: 05:e5:6a:61:8d:6c:f7:40:c0:04:ac:99:68:9e:0b:7f:0a:d5: b0:04:e5:cf:eb:b6:e6:10:43:c2:ca:c1:2d:a8:9e:b5:ad:d2: 1c:6d:84:0c:53:ea:9c:d9:47:63:2b:3b:09:80:b6:7e:45:41: 00:f5:b7:d8:ee:c4:b7:30:ff:62:fc:62:60:9e:5f:99:79:a4: 27:15:be:08:b4:6b:7f:a6:73:88:0d:cd:2b:24:2b:85:6b:29: 3b:a3:d2:a0:d9:d5:df:06:ad:c5:ad:ad:70:ef:42:48:eb:78: a9:61:2d:84:02:21:c2:37:50:0c:1d:1c:e1:dd:1c:fe:47:72: e1:51:48:ee:70:e1:0a:ed:66:87:df:d0:14:73:93:fe:40:06: dd:0a:3a:8f:17:03:ae:bc:40:ca:00:72:bd:ad:4f:55:eb:e3: 95:ad:85:31:3d:b8:e6:14:47:d6:4a:25:46:0e:0c:46:0b:41: 05:af:20:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF OENFNzg4QTcwHhcNMjUxMTAzMDQxODE2WhcNMjUxMTEwMDQxODE2WjAYMRYwFAYD VQQDEw02OTA4MmQwOC0xZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76HTjBhZJ9dCAGaceLYGo1ZHasD/fZi94/2hKsSPUxKIzIleJhaDw0bVY+ss O3/YKk+X8ciXueeRtVegmJjOgxgYRbM77Sd9lJAuKwxg4Lef6Jn090kq3J7A0hNz cH+YvLGKwKGPf/A6TN3xh4DxZMoQX4jn464VfEM/uEIUazuPJVQr/Y0uWQ/tt9mg g2dOyhhTQOR53iAp/XVEeBpFoR//2wCaU+88yWm6k3W1MwvJANxzaLnLpuawfiNH 21rzuVLBYT0Dos2VrB9TDZM0mDsOibMjJPXpaeNUzdD3POutaZr4iUuiFfOjNMOm t0un6Nvx1ZTMZ3b0VFf6hNfb0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR80365 Q1ZYHnyEw64Hmh1O4bXOMB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNBNi84MDc5NEM5QUMwOEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0 a21JcjViZTR2dV9vem5pS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbhU0LobEjf9648K5lFPPVW78ZhUkEWb6ge4vbbzLtyS+fDznk1QAV /tdt3bUVkY8sobn0NS+2xx7MT60cdaEvdYKg5METL1QF5WphjWz3QMAErJlongt/ CtWwBOXP67bmEEPCysEtqJ61rdIcbYQMU+qc2UdjKzsJgLZ+RUEA9bfY7sS3MP9i /GJgnl+ZeaQnFb4ItGt/pnOIDc0rJCuFayk7o9Kg2dXfBq3Fra1w70JI63ipYS2E AiHCN1AMHRzh3Rz+R3LhUUjucOEK7WaH39AUc5P+QAbdCjqPFwOuvEDKAHK9rU9V 6+OVrYUxPbjmFEfWSiVGDgxGC0EFryCT -----END CERTIFICATE-----Generated at Tue Nov 4 21:30:47 2025 by rpki-client