$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft File: xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft (raw, json) Hash identifier: rrO9fMZwa4YHonbmfJ67AcGC16oANsj4Ne6MRxoMczs= Subject key identifier: 17:21:01:BA:35:DF:2D:DA:17:F4:05:CE:02:A0:1D:AB:3A:13:02:9E Authority key identifier: C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 Certificate issuer: /CN=A91A76AD/serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft Manifest number: 0149 Signing time: Wed 05 Nov 2025 04:26:03 +0000 Manifest this update: Wed 05 Nov 2025 04:26:03 +0000 Manifest next update: Wed 12 Nov 2025 04:26:03 +0000 Files and hashes: 1: xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl (hash: seszPdBv5agwi8fGb/bDgfvMryzN5WSFDwzyXQJgvvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Validity Not Before: Nov 5 04:26:03 2025 GMT Not After : Nov 12 04:26:03 2025 GMT Subject: CN=690ad1db-b848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:cb:ed:07:99:d6:b0:36:ee:c8:ff:62:e2: 5f:bf:a8:c6:ab:6f:38:5f:97:8b:ea:cb:d7:a1:b6: b5:0e:8b:a5:bf:a5:fb:b8:c2:e6:77:71:35:88:e8: 9c:ed:9b:2c:2d:cd:8c:08:a3:47:4e:3a:a6:f0:83: be:c4:a4:3f:2b:dc:2c:b1:5f:6d:9e:66:f8:ff:90: dd:90:7b:37:60:29:09:e6:5e:17:fb:72:9f:4a:bc: 9c:05:55:9f:9f:6c:8e:7c:31:1c:2d:85:98:e6:48: 59:f2:24:b5:d7:04:b6:52:3b:61:44:2e:61:bb:0a: 34:20:f3:fc:e9:a3:3a:fc:97:c4:42:26:be:38:2f: 3b:ff:b6:5d:47:a3:ea:5b:81:19:3b:51:65:21:36: a3:43:c1:ab:3a:61:40:60:46:bc:c2:40:00:52:38: 25:4b:35:cf:5c:75:34:7d:20:05:00:6c:3d:f6:6a: 11:a6:5a:89:9b:f1:f9:2f:29:f9:f6:9a:ee:08:9d: a0:8c:28:83:19:b7:d0:bc:59:32:b4:d0:53:a0:b3: 92:5f:76:ad:c9:d5:d1:10:7d:bc:38:dd:9f:a8:bd: 37:99:63:0a:97:cb:43:9b:79:e8:8a:b7:0b:87:78: 08:9c:42:d1:b1:cb:49:86:29:8e:f7:3d:f2:ed:fe: ba:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:21:01:BA:35:DF:2D:DA:17:F4:05:CE:02:A0:1D:AB:3A:13:02:9E X509v3 Authority Key Identifier: keyid:C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:dc:c5:90:fd:03:5a:2a:43:43:28:0c:71:27:79:59:e1:3f: 50:fd:5e:df:30:82:fb:df:e6:2b:d2:47:5f:78:d5:b3:82:0f: 07:ce:8e:54:21:49:7c:0b:a8:06:a8:74:e7:42:c2:11:45:d6: 84:60:ca:90:b9:8b:ed:7d:eb:ac:2c:fe:19:1c:49:6e:a6:ca: 04:87:d8:96:0d:f9:07:3c:71:cc:66:3c:7a:a2:03:f9:a2:9c: 89:c4:0e:33:a7:82:3a:0c:58:39:77:a1:ca:df:a8:87:64:37: ce:9a:8d:5b:e1:c1:00:4b:d3:02:34:7d:b9:57:17:48:88:4c: bf:33:73:c0:7e:0e:9d:4b:18:a4:78:6c:9e:2f:6a:c8:4c:9b: 3c:18:6c:11:67:da:9d:1c:a5:6c:f5:34:2b:80:cf:69:c3:58: 0c:21:6e:2c:cf:3a:42:d1:ac:24:26:92:e7:af:ab:f1:78:b0: fc:21:e0:02:35:77:32:5e:fe:80:d8:61:29:e7:3d:3b:ee:8d: 82:e4:0a:f1:d3:43:9f:c9:48:5e:ac:ed:6d:4e:53:b4:b4:0c: c6:5e:96:d4:79:91:67:d0:17:50:f6:49:8b:61:08:91:cf:09: 8c:79:0a:42:a3:b7:c4:0a:b5:06:c9:12:01:bf:95:15:88:54: d0:ee:8d:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKEM0QjYyNTAzRTZENjcwMkFDMjlEMDBCRjM1MEM4QjJD MTJFNzlGMDUwHhcNMjUxMTA1MDQyNjAzWhcNMjUxMTEyMDQyNjAzWjAYMRYwFAYD VQQDEw02OTBhZDFkYi1iODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQjL7QeZ1rA27sj/YuJfv6jGq284X5eL6svXoba1Doulv6X7uMLmd3E1iOic 7ZssLc2MCKNHTjqm8IO+xKQ/K9wssV9tnmb4/5DdkHs3YCkJ5l4X+3KfSrycBVWf n2yOfDEcLYWY5khZ8iS11wS2UjthRC5huwo0IPP86aM6/JfEQia+OC87/7ZdR6Pq W4EZO1FlITajQ8GrOmFAYEa8wkAAUjglSzXPXHU0fSAFAGw99moRplqJm/H5Lyn5 9pruCJ2gjCiDGbfQvFkytNBToLOSX3atydXREH28ON2fqL03mWMKl8tDm3noircL h3gInELRsctJhimO9z3y7f66mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBchAbo1 3y3aF/QFzgKgHas6EwKeMB8GA1UdIwQYMBaAFMS2JQPm1nAqwp0AvzUMiywS558F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC8wN0Y1MkU0NkJF ODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2NDckNuUUNfTlF5TExCTG5u d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hMWWxBLWJXY0NyQ25RQ19OUXlMTEJMbm53VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC8wN0Y1MkU0NkJFODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2ND ckNuUUNfTlF5TExCTG5ud1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB3MWQ/QNaKkNDKAxxJ3lZ4T9Q/V7fMIL73+Yr0kdfeNWzgg8Hzo5U IUl8C6gGqHTnQsIRRdaEYMqQuYvtfeusLP4ZHElupsoEh9iWDfkHPHHMZjx6ogP5 opyJxA4zp4I6DFg5d6HK36iHZDfOmo1b4cEAS9MCNH25VxdIiEy/M3PAfg6dSxik eGyeL2rITJs8GGwRZ9qdHKVs9TQrgM9pw1gMIW4szzpC0awkJpLnr6vxeLD8IeAC NXcyXv6A2GEp5z077o2C5Arx00OfyUherO1tTlO0tAzGXpbUeZFn0BdQ9kmLYQiR zwmMeQpCo7fECrUGyRIBv5UViFTQ7o0A -----END CERTIFICATE-----Generated at Wed Nov 5 09:59:50 2025 by rpki-client