$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: Lj/TJ94+vpyx2hWcqAkFk6icUwsYaBEcmbKUkKTQhY0= Subject key identifier: 3C:91:03:2C:AD:45:FE:46:A7:06:1B:8F:97:9A:65:5D:48:A3:27:56 Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: BE Signing time: Wed 05 Nov 2025 06:09:58 +0000 Manifest this update: Wed 05 Nov 2025 06:09:57 +0000 Manifest next update: Wed 12 Nov 2025 06:09:57 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: /Lcfpy9eg9231f5LADCZl7SGH0ph4NOgoUVppaXyvq4=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: Iqqm3XnZxAwHyLfxm5fiQ2PL3nIt3cAVFXF23TPN80A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Nov 5 06:09:57 2025 GMT Not After : Nov 12 06:09:57 2025 GMT Subject: CN=690aea36-86b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:15:be:b6:aa:a8:88:f6:ec:33:8d:8d:2b:1d: 9d:70:6a:15:31:f3:c4:d5:09:5b:17:43:ce:43:91: 51:64:5a:67:c3:8e:f5:c3:00:7d:94:be:5c:42:d6: 5d:ea:bd:2d:c6:e0:5c:b2:1f:16:1d:8d:32:66:e7: af:de:3b:9d:0f:ef:f3:2c:11:a5:c8:d2:b3:19:8a: 8a:d7:57:43:10:11:0b:47:59:e4:7a:0d:06:9f:61: f9:25:03:77:74:61:fb:c5:f1:9e:58:5c:31:d4:db: 48:a2:48:dd:20:fc:4b:71:9a:2a:4b:17:33:1c:ad: 57:ea:8e:a1:ae:bf:90:4f:dd:6b:1f:90:4e:6c:77: 34:2c:97:f0:51:88:76:d9:f4:4c:86:df:99:1b:4e: d2:1b:38:30:61:20:dd:27:7d:49:1c:16:c2:01:17: 5d:27:19:eb:f4:cc:77:bc:1c:a3:8e:a3:86:1e:d4: 9c:ab:30:7f:07:8d:e2:63:68:d8:a7:21:09:8d:1f: c6:96:ba:84:42:4c:c7:3c:77:46:4c:95:0f:f2:ee: 53:d3:f7:b9:a4:b7:75:48:3e:20:ad:96:78:c9:78: 2f:e5:ae:91:df:b9:08:20:01:fe:d2:ba:22:85:19: 21:22:91:72:30:2d:0e:99:b4:87:56:0f:30:54:49: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:91:03:2C:AD:45:FE:46:A7:06:1B:8F:97:9A:65:5D:48:A3:27:56 X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:5c:44:d0:23:a6:2a:4e:d6:3d:f4:c5:8c:1d:6e:76:1c:4b: 93:d0:12:51:eb:43:4e:ee:a9:a8:f8:4e:40:60:96:75:de:91: aa:65:ac:cc:fd:8e:47:c0:d9:4a:40:1f:4a:79:0d:23:67:c1: d3:80:bc:0a:5e:fc:2b:7b:db:52:15:85:4d:c1:00:2c:cb:18: 4c:5b:54:23:6d:19:6f:53:c5:d8:74:21:dd:1a:0a:7a:c9:fb: 56:32:97:fc:fe:45:b8:95:c1:15:32:8c:2a:20:7f:4f:68:96: 54:fa:71:fc:ae:ec:7d:62:a3:19:ed:7b:1a:60:ff:e2:17:23: 8f:bb:c3:69:f0:86:cc:c4:57:74:3d:d8:33:07:70:6c:65:f6: 02:6d:14:a5:53:36:cc:3f:cd:cb:b9:b3:91:68:8c:db:dd:5c: 25:a9:30:5e:0a:8d:74:67:1f:9b:ea:af:ae:a5:35:46:b3:47: 57:bb:48:ef:b8:50:24:af:cf:a1:ed:d1:f5:e8:8b:66:b3:80: 12:53:a8:d0:31:30:12:b8:86:e8:d1:c8:59:db:33:22:a1:36: f9:7b:57:d8:b8:2e:cb:f0:6b:4b:2a:0b:fa:12:4d:9e:e0:9d: fa:48:50:c4:82:35:b3:a3:ee:ec:de:31:41:ed:01:c4:f0:99: 0b:a0:fc:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjUxMTA1MDYwOTU3WhcNMjUxMTEyMDYwOTU3WjAYMRYwFAYD VQQDEw02OTBhZWEzNi04NmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hW+tqqoiPbsM42NKx2dcGoVMfPE1QlbF0POQ5FRZFpnw471wwB9lL5cQtZd 6r0txuBcsh8WHY0yZuev3judD+/zLBGlyNKzGYqK11dDEBELR1nkeg0Gn2H5JQN3 dGH7xfGeWFwx1NtIokjdIPxLcZoqSxczHK1X6o6hrr+QT91rH5BObHc0LJfwUYh2 2fRMht+ZG07SGzgwYSDdJ31JHBbCARddJxnr9Mx3vByjjqOGHtScqzB/B43iY2jY pyEJjR/GlrqEQkzHPHdGTJUP8u5T0/e5pLd1SD4grZZ4yXgv5a6R37kIIAH+0roi hRkhIpFyMC0OmbSHVg8wVEkUVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyRAyyt Rf5GpwYbj5eaZV1IoydWMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS85NTZGNjYyQzlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlD Wnk1bTh3QmZaR20yS0pGeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXXETQI6YqTtY99MWMHW52HEuT0BJR60NO7qmo+E5AYJZ13pGqZazM /Y5HwNlKQB9KeQ0jZ8HTgLwKXvwre9tSFYVNwQAsyxhMW1QjbRlvU8XYdCHdGgp6 yftWMpf8/kW4lcEVMowqIH9PaJZU+nH8rux9YqMZ7XsaYP/iFyOPu8Np8IbMxFd0 PdgzB3BsZfYCbRSlUzbMP83LubORaIzb3VwlqTBeCo10Zx+b6q+upTVGs0dXu0jv uFAkr8+h7dH16Itms4ASU6jQMTASuIbo0chZ2zMioTb5e1fYuC7L8GtLKgv6Ek2e 4J36SFDEgjWzo+7s3jFB7QHE8JkLoPw+ -----END CERTIFICATE-----Generated at Wed Nov 5 13:51:12 2025 by rpki-client