$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json) Hash identifier: i6it2c/bOu1vvOBDDTmObeIn8tkjsecATonIHgr16OM= Subject key identifier: 4B:A4:12:3A:FD:C4:21:72:2D:D6:89:80:D6:6A:5E:28:2F:5F:C0:AA Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Certificate serial: 10A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft Manifest number: 109D Signing time: Sun 02 Nov 2025 17:22:21 +0000 Manifest this update: Sun 02 Nov 2025 17:22:20 +0000 Manifest next update: Sun 09 Nov 2025 17:22:20 +0000 Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: YxBJLbNoG644YHk0F34jpCewvKUexrB5F2ncx5xGAQA=) 2: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: zI34h0FmFtZZLolHCnykLI2wVD3iOXp1eKhUZqTjA48=) 3: 691023063A8311E99AF5572DC4F9AE02.roa (hash: Uy8f9hnHu5ZNhfoO9b7+eo6ci2jsbvNnSUlZAZd6nGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4265 (0x10a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Validity Not Before: Nov 2 17:22:20 2025 GMT Not After : Nov 9 17:22:20 2025 GMT Subject: CN=6907934d-145e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:a6:00:c8:31:8b:3d:69:72:56:17:ac:57: fa:f2:fe:4b:ca:3c:3e:dd:b8:c1:e8:db:81:29:13: b4:90:5d:98:db:c0:34:95:97:42:ab:82:30:65:f7: f8:44:cd:92:06:59:83:1f:18:6e:e0:ff:3c:ea:5c: a0:db:01:db:45:c3:59:b6:d2:fe:b7:1f:e5:58:66: e7:58:0c:c5:96:14:6d:fb:9f:b0:ba:26:9c:5a:95: 0d:37:04:0c:d6:8f:3b:a3:f9:e0:b1:3c:ee:d9:76: 8e:37:3f:ec:1c:21:a4:17:31:a2:e9:60:da:06:41: e1:e4:60:8f:9b:0c:be:ca:c7:f1:89:5a:b2:4d:61: 43:36:b3:ae:50:72:0c:8e:e5:0d:e8:95:1a:7b:a7: 18:8e:f5:7e:17:67:35:1a:d3:21:e3:22:82:39:49: 64:42:0a:27:a0:35:6e:4b:e7:5e:46:85:b1:92:50: 11:4e:94:cd:b3:21:4e:26:4d:5f:53:08:15:47:74: 3d:ff:6f:b9:b0:59:6b:5f:04:58:56:0c:d6:80:c9: 06:3b:bd:1c:df:22:f8:de:ec:7a:89:46:fc:e7:fa: 47:11:3e:e5:c1:52:d7:64:f1:d9:50:e5:25:17:ef: d2:55:da:55:f5:24:af:4b:a0:a7:08:a4:a0:62:21: 42:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A4:12:3A:FD:C4:21:72:2D:D6:89:80:D6:6A:5E:28:2F:5F:C0:AA X509v3 Authority Key Identifier: keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d1:b6:0b:d0:5d:6f:e6:83:17:b4:a7:10:d1:cb:b5:ba:22: 48:a3:ea:a8:9c:6e:38:ec:4c:6d:d7:a1:83:30:ae:1b:65:74: 79:f5:df:01:2c:62:8e:6b:ac:e2:36:53:36:5d:74:16:1b:72: d6:56:c0:8c:fd:4d:23:79:0e:d4:83:5f:ea:bc:5a:dc:00:fb: 7b:99:35:84:d5:6d:09:ef:50:1f:02:59:82:d3:8d:04:71:8e: d9:d9:12:69:0a:cb:ef:20:09:4d:8e:9f:b0:dd:1d:2d:dd:6c: 2f:3b:29:de:80:2b:fb:65:22:cd:5d:40:c9:fc:6b:89:00:c1: da:29:91:cb:c7:5c:49:25:f3:15:b8:5e:64:8a:55:2b:cf:12: 3b:69:80:f5:49:d2:8a:1b:98:e8:9b:75:82:f6:86:69:4b:88: dc:f7:27:56:ec:aa:74:5e:81:5f:ed:91:db:33:13:dd:ba:e0: 2a:72:1f:9d:03:ab:6b:15:6f:8e:3f:4c:ca:3e:f0:c0:29:a6: 61:e7:a2:af:64:b9:18:64:e7:2c:3e:67:33:18:f6:5c:35:2d: 14:9f:8d:c7:63:76:50:26:08:72:c0:16:1d:d3:94:42:17:85: 14:29:46:66:38:7d:b6:04:f1:11:43:66:41:4c:86:1d:86:4d: 8f:3e:52:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1 MUEyMzUwQUYwHhcNMjUxMTAyMTcyMjIwWhcNMjUxMTA5MTcyMjIwWjAYMRYwFAYD VQQDEw02OTA3OTM0ZC0xNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TamAMgxiz1pclYXrFf68v5Lyjw+3bjB6NuBKRO0kF2Y28A0lZdCq4IwZff4 RM2SBlmDHxhu4P886lyg2wHbRcNZttL+tx/lWGbnWAzFlhRt+5+wuiacWpUNNwQM 1o87o/ngsTzu2XaONz/sHCGkFzGi6WDaBkHh5GCPmwy+ysfxiVqyTWFDNrOuUHIM juUN6JUae6cYjvV+F2c1GtMh4yKCOUlkQgonoDVuS+deRoWxklARTpTNsyFOJk1f UwgVR3Q9/2+5sFlrXwRYVgzWgMkGO70c3yL43ux6iUb85/pHET7lwVLXZPHZUOUl F+/SVdpV9SSvS6CnCKSgYiFCiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEukEjr9 xCFyLdaJgNZqXigvX8CqMB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjEwQS9BNTM4QURCODNBODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1 cVIxejAyUTg2N3RSb2pVSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+0bYL0F1v5oMXtKcQ0cu1uiJIo+qonG447Ext16GDMK4bZXR59d8B LGKOa6ziNlM2XXQWG3LWVsCM/U0jeQ7Ug1/qvFrcAPt7mTWE1W0J71AfAlmC040E cY7Z2RJpCsvvIAlNjp+w3R0t3WwvOynegCv7ZSLNXUDJ/GuJAMHaKZHLx1xJJfMV uF5kilUrzxI7aYD1SdKKG5jom3WC9oZpS4jc9ydW7Kp0XoFf7ZHbMxPduuAqch+d A6trFW+OP0zKPvDAKaZh56KvZLkYZOcsPmczGPZcNS0Un43HY3ZQJghywBYd05RC F4UUKUZmOH22BPERQ2ZBTIYdhk2PPlJD -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:02 2025 by rpki-client