$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json) Hash identifier: WPdFlUoAQ3ReV3fd9SwSuoPyRrgY8XDABmyfQlMJPM8= Subject key identifier: 8B:AE:F4:36:58:6E:57:1B:7D:A4:1A:21:4F:4A:61:B9:18:3E:DA:0F Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft Manifest number: 0542 Signing time: Tue 04 Nov 2025 23:32:40 +0000 Manifest this update: Tue 04 Nov 2025 23:32:40 +0000 Manifest next update: Tue 11 Nov 2025 23:32:40 +0000 Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: 8eC61zhzDDBiXDSXhCays9/yLDFanl9OV9fxOyPvH6I=) 2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: UZdEVBj/lgoItLYURJapVrEERSSdanijwOdvoutuuW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F60, serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Validity Not Before: Nov 4 23:32:40 2025 GMT Not After : Nov 11 23:32:40 2025 GMT Subject: CN=690a8d18-ab23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:dc:07:93:45:0a:50:77:c8:56:00:3d:10: e2:23:5c:fe:fe:67:9c:49:18:01:be:33:ed:58:a0: a7:a7:62:4c:8b:ad:8b:06:fd:7e:9a:12:34:43:eb: 4e:66:d1:ad:43:97:63:b7:91:c2:09:8c:46:5b:ab: 21:80:bb:f0:68:b2:3d:1f:d2:6b:2a:32:72:7a:0f: 09:aa:4e:83:b3:12:9a:30:d7:f1:de:17:fd:47:33: 64:60:cc:b3:63:7c:0d:f7:03:71:ae:9a:b1:3e:c6: 0e:8e:bb:e6:cd:bc:8a:f0:23:3e:cf:88:d4:63:08: bf:ba:cb:96:d7:99:43:b0:01:3a:1a:8c:83:4b:39: 78:dc:0f:3f:a5:87:bd:50:51:a4:65:5a:2d:a6:1c: 80:19:81:11:3c:49:d9:54:4c:b9:17:42:d3:f3:94: 99:a1:d9:99:78:b9:9d:82:bc:00:1c:e9:78:18:f8: 4f:fd:94:0f:51:13:f7:79:22:71:da:dc:6f:ec:bf: 54:e6:01:e6:a5:71:d6:11:dd:a4:77:99:b7:fc:37: e0:47:0d:47:e5:95:23:db:ff:55:33:d8:fc:5a:70: 43:47:01:4a:e7:db:0b:13:fb:4a:82:b0:87:df:60: 01:2d:87:0b:a6:f7:b3:43:e0:e4:f9:e8:42:8c:fd: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AE:F4:36:58:6E:57:1B:7D:A4:1A:21:4F:4A:61:B9:18:3E:DA:0F X509v3 Authority Key Identifier: keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:0d:01:d9:66:57:71:c7:0b:38:75:a4:db:70:d0:5c:8e:3c: 6d:f5:ac:8f:44:25:ec:84:9c:e6:f0:5e:9a:1d:bc:d7:36:db: bf:c3:57:1b:8e:0d:55:d6:fa:3d:b4:2c:8a:48:14:37:74:8b: d9:80:7d:2b:af:bb:47:07:1a:3a:61:bd:0e:c5:f3:ec:00:5c: 66:b5:c0:0d:2d:8c:db:2a:77:dc:41:cc:5d:5e:03:93:02:58: a5:25:49:90:29:c5:8f:67:3f:e8:a2:8a:dc:b8:38:c2:22:22: 7e:f6:fd:47:41:32:4d:00:93:41:c6:e3:99:69:9a:32:e8:56: 33:66:78:be:97:13:58:30:ff:ae:b0:bf:68:20:15:2d:5d:1d: c5:3d:6b:6a:06:b9:38:21:a5:a5:97:96:63:e9:35:60:23:33: a9:bd:88:0e:9d:58:2c:c6:e7:d7:74:3d:41:68:ab:2a:5f:8e: 20:7d:21:8f:cd:4c:ed:76:82:4b:ac:66:04:f7:cf:ee:1d:91: 66:fe:af:fb:67:25:71:e8:96:35:4d:4c:82:17:a9:af:63:3c: b9:ce:6f:96:de:c5:1d:a4:6a:25:c0:aa:9a:87:e8:ae:f5:02: 62:64:49:ac:53:c2:83:1f:22:f2:e7:27:e4:df:31:48:70:16: 52:ec:70:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNjAxMTAvBgNVBAUTKEM0MTFDMkQ3MjQwMUY1M0VDQTAxNjM1Nzg4OUQ3RUJB M0JDQ0ZEQ0QwHhcNMjUxMTA0MjMzMjQwWhcNMjUxMTExMjMzMjQwWjAYMRYwFAYD VQQDEw02OTBhOGQxOC1hYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta7cB5NFClB3yFYAPRDiI1z+/mecSRgBvjPtWKCnp2JMi62LBv1+mhI0Q+tO ZtGtQ5djt5HCCYxGW6shgLvwaLI9H9JrKjJyeg8Jqk6DsxKaMNfx3hf9RzNkYMyz Y3wN9wNxrpqxPsYOjrvmzbyK8CM+z4jUYwi/usuW15lDsAE6GoyDSzl43A8/pYe9 UFGkZVotphyAGYERPEnZVEy5F0LT85SZodmZeLmdgrwAHOl4GPhP/ZQPURP3eSJx 2txv7L9U5gHmpXHWEd2kd5m3/DfgRw1H5ZUj2/9VM9j8WnBDRwFK59sLE/tKgrCH 32ABLYcLpvezQ+Dk+ehCjP2W0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuu9DZY blcbfaQaIU9KYbkYPtoPMB8GA1UdIwQYMBaAFMQRwtckAfU+ygFjV4idfro7zP3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY2MC85NDkzMkJFQzE1 MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlUN0tBV05YaUoxLXVqdk1f YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCSEMxeVFCOVQ3S0FXTlhpSjEtdWp2TV9jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY2MC85NDkzMkJFQzE1MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlU N0tBV05YaUoxLXVqdk1fYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYDQHZZldxxws4daTbcNBcjjxt9ayPRCXshJzm8F6aHbzXNtu/w1cb jg1V1vo9tCyKSBQ3dIvZgH0rr7tHBxo6Yb0OxfPsAFxmtcANLYzbKnfcQcxdXgOT AlilJUmQKcWPZz/ooorcuDjCIiJ+9v1HQTJNAJNBxuOZaZoy6FYzZni+lxNYMP+u sL9oIBUtXR3FPWtqBrk4IaWll5Zj6TVgIzOpvYgOnVgsxufXdD1BaKsqX44gfSGP zUztdoJLrGYE98/uHZFm/q/7ZyVx6JY1TUyCF6mvYzy5zm+W3sUdpGolwKqah+iu 9QJiZEmsU8KDHyLy5yfk3zFIcBZS7HBX -----END CERTIFICATE-----Generated at Wed Nov 5 05:09:06 2025 by rpki-client