$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: jVzjyxnMd57N06ZsTQkK0uavKc4PyNdrnSOqu/zxbLY= Subject key identifier: 25:19:E0:5B:F6:AD:AB:D3:A1:6C:9A:87:91:B7:42:21:42:99:73:8D Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 01E9 Signing time: Wed 05 Nov 2025 02:44:10 +0000 Manifest this update: Wed 05 Nov 2025 02:44:10 +0000 Manifest next update: Wed 12 Nov 2025 02:44:10 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: RIL+hCFsVMobxdBexUBnBlHyWVFf14cvK/0waH33fYk=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Nov 5 02:44:10 2025 GMT Not After : Nov 12 02:44:10 2025 GMT Subject: CN=690ab9fa-d598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:7f:7d:ed:dc:02:3b:b2:d1:37:2e:8d:35: 08:52:ea:4f:49:dd:5e:a4:54:39:a5:2b:3e:7d:9f: f8:d9:97:45:2d:68:89:7e:c6:eb:4d:5d:20:cf:38: 3e:a8:fd:7a:2b:c5:f6:2d:d8:58:b6:e1:b4:f1:f3: e8:8a:56:7f:c5:81:22:15:14:21:f4:55:1d:c9:03: 52:04:90:47:d6:8a:71:31:80:32:0d:03:72:aa:b4: 27:62:27:6c:31:85:f5:46:cd:45:f9:71:a2:a5:4e: dc:18:07:11:62:ab:72:db:4f:e7:50:ad:6c:06:b7: 02:83:87:1f:32:76:f6:c6:a9:27:37:1f:cc:22:dc: 46:d5:72:6a:d0:0b:39:7b:4b:ee:9a:76:4d:e1:4e: 2d:67:87:7a:f4:67:84:5b:82:96:3b:6e:bb:70:0f: 6a:30:4c:9d:b6:dc:ff:a4:c2:83:a7:cd:12:33:53: ec:49:b4:9b:6d:4e:d8:b9:27:d9:f2:7a:1c:b0:3f: 39:fd:33:df:45:5a:03:e8:b7:45:a9:dc:c0:1e:e8: eb:1f:68:d0:90:e5:4a:54:27:9a:4a:62:60:56:aa: 3f:50:6b:d5:77:07:fb:e2:90:1c:a1:7d:25:0b:f0: c3:3f:82:00:0f:89:ff:62:b6:9d:9f:d6:c6:3f:9d: 1e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:19:E0:5B:F6:AD:AB:D3:A1:6C:9A:87:91:B7:42:21:42:99:73:8D X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:03:23:82:f4:bb:6a:2a:5a:c1:81:11:b0:0d:b1:3a:fe:62: 6f:b3:77:88:49:a3:59:d5:31:14:98:c6:63:87:32:da:ba:63: 29:ff:c4:fc:cf:ac:10:37:b3:a3:a7:ba:53:9b:df:c4:c7:36: 2b:10:80:53:e4:53:cb:11:65:75:3f:8f:48:fc:21:96:88:db: 66:cc:e2:6b:84:e0:b7:b7:39:6f:11:05:c7:74:61:d5:3c:69: 6f:91:14:93:d3:24:2b:20:b8:c8:f5:86:fa:50:ed:5d:53:b6: 0a:dd:38:3c:e5:66:13:c5:c2:35:64:43:81:28:56:2d:55:bf: 54:0a:48:ef:9e:fe:95:49:8e:9d:78:8f:21:c1:76:23:cf:6f: 51:65:59:c3:bf:cd:6e:79:11:bc:05:74:b4:4c:89:c4:c2:d4: 90:63:24:10:e0:d5:2b:cd:98:26:3b:c8:b8:e7:3c:48:a4:e7: a1:a9:9c:d2:c1:71:e4:80:a2:66:10:bd:5b:0b:92:05:6a:4e: 9b:9f:63:6a:b4:99:62:a0:d2:25:56:89:33:00:83:b6:77:d3: 47:89:ff:f1:31:93:18:0c:44:48:25:e3:57:21:cd:07:0a:26: d9:20:99:52:b6:9b:f8:23:a9:ac:c1:5d:85:b3:a4:fb:4c:3d: 8b:e2:89:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjUxMTA1MDI0NDEwWhcNMjUxMTEyMDI0NDEwWjAYMRYwFAYD VQQDEw02OTBhYjlmYS1kNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR9/fe3cAjuy0TcujTUIUupPSd1epFQ5pSs+fZ/42ZdFLWiJfsbrTV0gzzg+ qP16K8X2LdhYtuG08fPoilZ/xYEiFRQh9FUdyQNSBJBH1opxMYAyDQNyqrQnYids MYX1Rs1F+XGipU7cGAcRYqty20/nUK1sBrcCg4cfMnb2xqknNx/MItxG1XJq0As5 e0vumnZN4U4tZ4d69GeEW4KWO267cA9qMEydttz/pMKDp80SM1PsSbSbbU7YuSfZ 8nocsD85/TPfRVoD6LdFqdzAHujrH2jQkOVKVCeaSmJgVqo/UGvVdwf74pAcoX0l C/DDP4IAD4n/Yradn9bGP50eXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUZ4Fv2 ravToWyah5G3QiFCmXONMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAAyOC9LtqKlrBgRGwDbE6/mJvs3eISaNZ1TEUmMZjhzLaumMp/8T8 z6wQN7Ojp7pTm9/ExzYrEIBT5FPLEWV1P49I/CGWiNtmzOJrhOC3tzlvEQXHdGHV PGlvkRST0yQrILjI9Yb6UO1dU7YK3Tg85WYTxcI1ZEOBKFYtVb9UCkjvnv6VSY6d eI8hwXYjz29RZVnDv81ueRG8BXS0TInEwtSQYyQQ4NUrzZgmO8i45zxIpOehqZzS wXHkgKJmEL1bC5IFak6bn2NqtJlioNIlVokzAIO2d9NHif/xMZMYDERIJeNXIc0H CibZIJlStpv4I6mswV2Fs6T7TD2L4ok9 -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:15 2025 by rpki-client