$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json) Hash identifier: 6vPj0LzNaJY/WeryK5o7mIDnfL0nU22ve2CtbF2iBRE= Subject key identifier: EF:6A:AD:06:19:E9:D1:DB:F0:52:0A:01:14:A7:BA:43:B0:82:C4:6A Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft Manifest number: D0 Signing time: Mon 03 Nov 2025 05:41:21 +0000 Manifest this update: Mon 03 Nov 2025 05:41:21 +0000 Manifest next update: Mon 10 Nov 2025 05:41:21 +0000 Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: XA9DnPWD9GvW92hWHNC9LBwbae99xoGsDrHT5KJROc8=) 2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: /MZsQd7r1AUngKpTxxkCkkNWLr5PAUrY0B8gx8HXfWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Validity Not Before: Nov 3 05:41:21 2025 GMT Not After : Nov 10 05:41:21 2025 GMT Subject: CN=69084081-4f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:29:1f:f6:5e:b9:f1:94:91:54:82:0d:d9:ca: 0b:a8:2e:fc:4a:b8:03:ef:d7:b9:21:f3:02:86:bb: dd:f7:3a:c4:2e:3e:12:bd:56:ea:f2:d4:8a:11:5d: 79:b8:2f:54:c8:f2:df:38:ad:2c:64:f3:75:0c:bd: a2:09:15:52:f7:41:c3:45:61:b8:2e:36:e1:e1:27: 03:d8:08:fa:c7:1d:83:97:7e:96:0b:07:57:05:1c: 74:ee:59:19:5e:39:e5:3a:0f:a8:03:6c:85:b5:be: fc:17:50:3c:a2:1d:c6:4b:83:88:39:c6:53:66:b1: 54:59:60:f4:9f:19:58:06:3e:6a:d1:51:de:3e:e6: 67:95:bd:ce:21:8a:30:9a:b7:c2:ca:eb:59:c7:53: af:fe:fd:83:09:be:72:c9:d1:78:1a:53:06:78:7f: 09:1e:40:03:12:9d:9c:eb:9a:a7:e1:8f:15:72:9d: ad:c1:d8:a5:61:6c:7d:35:9e:6f:ed:85:32:91:ed: 78:21:ac:54:96:8f:dc:30:7c:42:02:24:95:f9:a3: 80:00:59:d0:6b:9e:e6:f1:cd:87:23:01:33:f4:d2: 8b:55:df:d0:40:61:1a:08:d4:15:07:50:e0:0e:fb: 77:e9:3b:77:b8:a9:c6:66:02:53:bf:4b:8a:14:90: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6A:AD:06:19:E9:D1:DB:F0:52:0A:01:14:A7:BA:43:B0:82:C4:6A X509v3 Authority Key Identifier: keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:12:dd:4e:e5:d1:ea:b6:7d:8d:ff:b4:27:7a:0b:1c:90:00: c9:23:a5:2c:29:6f:c8:16:f7:39:fe:5c:b7:85:66:1c:05:02: bf:84:eb:4e:23:42:f2:7b:bd:5e:b7:e0:5a:c5:0e:0c:ac:a4: 30:c2:3d:a8:b5:21:ef:06:4f:9e:f1:d7:29:01:d0:68:78:19: a5:ba:f1:6b:10:96:9e:81:2d:63:6f:13:55:e6:db:9c:0a:07: 5d:3e:29:41:f0:fe:2d:ca:b8:ae:1a:e8:95:42:1f:e4:30:f2: af:c2:93:1e:d7:00:9c:6c:56:e1:14:95:e4:cd:02:ea:1c:51: 37:ec:63:11:9e:0c:2e:b2:54:84:98:63:80:e3:2b:0d:0b:94: c0:84:ea:8c:30:0b:ef:49:e2:86:e4:93:8a:b4:6a:3c:a3:f5: 3c:78:05:4e:2e:fc:b7:23:a9:86:7f:0a:85:ba:03:45:45:bd: df:0b:62:22:96:bf:1e:17:2d:e1:0f:22:fe:63:03:fe:4a:6c: fb:fc:bc:6a:64:53:f3:b9:7a:f9:87:9c:30:bf:52:d0:e9:75: 86:1a:94:24:33:0c:43:6d:60:cf:08:e4:cd:fc:aa:6c:aa:84: 5e:9f:97:47:8c:58:91:4b:d9:05:6c:8d:b6:82:60:6c:7b:47: 53:cb:41:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNEUxMTAvBgNVBAUTKEM3MjAwMjc2N0ExMEVDMkZGMTQ1MTVBMkFBQjg2RTYx NDA5N0E3NUMwHhcNMjUxMTAzMDU0MTIxWhcNMjUxMTEwMDU0MTIxWjAYMRYwFAYD VQQDEw02OTA4NDA4MS00ZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Skf9l658ZSRVIIN2coLqC78SrgD79e5IfMChrvd9zrELj4SvVbq8tSKEV15 uC9UyPLfOK0sZPN1DL2iCRVS90HDRWG4Ljbh4ScD2Aj6xx2Dl36WCwdXBRx07lkZ XjnlOg+oA2yFtb78F1A8oh3GS4OIOcZTZrFUWWD0nxlYBj5q0VHePuZnlb3OIYow mrfCyutZx1Ov/v2DCb5yydF4GlMGeH8JHkADEp2c65qn4Y8Vcp2twdilYWx9NZ5v 7YUyke14IaxUlo/cMHxCAiSV+aOAAFnQa57m8c2HIwEz9NKLVd/QQGEaCNQVB1Dg Dvt36Tt3uKnGZgJTv0uKFJDsUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9qrQYZ 6dHb8FIKARSnukOwgsRqMB8GA1UdIwQYMBaAFMcgAnZ6EOwv8UUVoqq4bmFAl6dc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU0RS9EMTY1RTRBMjdC RTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5vUTdDX3hSUldpcXJodVlVQ1hw MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h5QUNkbm9RN0NfeFJSV2lxcmh1WVVDWHAxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU0RS9EMTY1RTRBMjdCRTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5vUTdD X3hSUldpcXJodVlVQ1hwMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxEt1O5dHqtn2N/7QnegsckADJI6UsKW/IFvc5/ly3hWYcBQK/hOtO I0Lye71et+BaxQ4MrKQwwj2otSHvBk+e8dcpAdBoeBmluvFrEJaegS1jbxNV5tuc CgddPilB8P4tyriuGuiVQh/kMPKvwpMe1wCcbFbhFJXkzQLqHFE37GMRngwuslSE mGOA4ysNC5TAhOqMMAvvSeKG5JOKtGo8o/U8eAVOLvy3I6mGfwqFugNFRb3fC2Ii lr8eFy3hDyL+YwP+Smz7/LxqZFPzuXr5h5wwv1LQ6XWGGpQkMwxDbWDPCOTN/Kps qoRen5dHjFiRS9kFbI22gmBse0dTy0Gs -----END CERTIFICATE-----Generated at Wed Nov 5 05:19:06 2025 by rpki-client