$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: v9ZUhZdxaogHcIqcNTen+hpQzBDj9TDmazhHHdg6LyM= Subject key identifier: 1B:FE:57:1A:F4:45:58:44:45:18:A8:3B:EE:6B:86:6B:E9:5C:AB:CD Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 9C Signing time: Wed 05 Nov 2025 06:32:22 +0000 Manifest this update: Wed 05 Nov 2025 06:32:22 +0000 Manifest next update: Wed 12 Nov 2025 06:32:22 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: a3Dtc6C6KjZvDIfie0o2s1dzLN3hUX/tRPvuR66fKos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Nov 5 06:32:22 2025 GMT Not After : Nov 12 06:32:22 2025 GMT Subject: CN=690aef76-04f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:99:37:32:01:13:b7:37:87:67:4a:bf:a4: f8:1e:12:bf:88:3b:5f:77:fc:d7:50:5e:7e:83:e9: 2a:4a:a2:7a:0e:b4:30:f4:a8:39:46:06:90:05:6e: e2:0b:e1:19:5b:6b:c2:7e:90:ed:dd:c1:9b:1f:d0: b7:81:c0:b2:d0:15:8b:38:34:de:91:00:07:5e:26: db:38:32:8b:15:e8:68:30:64:7d:79:eb:a0:be:ac: 01:3f:1f:6b:6f:10:b8:c8:59:df:f3:12:03:0a:ce: dd:b4:ac:d5:97:3b:bd:5e:b0:cc:ce:e3:f9:f7:c3: 0d:85:35:aa:42:53:ba:65:01:87:35:67:bc:c2:f6: 13:87:b4:31:ae:62:6b:c6:ee:25:d5:ee:ff:0b:8b: 78:01:6f:69:40:5f:57:fa:78:81:3e:9c:c6:56:51: c9:08:b7:88:23:8a:7f:6a:8a:2e:6c:34:ea:80:c0: f4:ca:48:65:9a:7f:64:93:ca:20:68:90:15:cc:cb: 81:c2:d4:e9:50:76:a9:3f:96:07:ba:c0:a9:ad:ab: a4:a1:ee:91:72:65:d4:da:10:2a:14:e6:f6:e5:3e: c4:5b:ce:ad:6e:b8:b7:02:44:ee:2b:10:db:67:5f: 0a:d3:e6:09:b3:63:9c:99:b4:b9:33:7e:f1:7b:e3: b3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FE:57:1A:F4:45:58:44:45:18:A8:3B:EE:6B:86:6B:E9:5C:AB:CD X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:85:67:27:38:db:ce:e7:98:dd:15:a8:36:77:ac:82:de:50: 47:08:22:a8:89:67:51:2e:d2:21:03:6f:77:d7:fe:e5:1a:c1: 00:04:f2:8d:c0:12:89:3e:02:a0:5c:17:e3:ff:73:96:12:c6: 3d:0c:cc:0e:34:ad:1e:43:24:81:9f:9b:8a:a9:bf:23:b0:98: 90:b1:55:be:55:79:fe:91:2b:90:35:48:d6:43:23:04:fa:ad: 79:31:35:a7:85:73:19:0d:5e:ea:98:61:4d:4c:fc:67:fa:b4: 7e:54:33:18:3d:02:f4:7f:5f:5c:08:ed:97:f2:38:f1:fd:96: d5:1b:be:10:a1:a0:04:c5:cb:a7:7f:83:2c:c5:19:59:29:d9: d8:d3:74:d5:75:3a:f4:54:35:f4:f2:11:f2:a3:f3:53:b6:05: 52:f3:90:ec:17:58:bd:7b:5d:9f:3f:62:63:d0:bd:5e:b3:75: 83:6f:fa:f9:02:11:e9:7a:fa:55:81:ee:8f:66:28:34:db:ce: b9:9d:4a:e3:82:f6:ef:21:e3:91:ef:a5:30:6f:ac:41:b4:3b: 1d:6f:b4:c0:db:7a:6a:95:2d:cc:11:68:5a:3f:e4:dc:c4:23: ba:31:b7:ab:5a:7c:c0:44:c6:b9:bb:8c:ee:8f:01:98:ed:73: 5e:ff:9a:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG NUUxOUNBRTgwHhcNMjUxMTA1MDYzMjIyWhcNMjUxMTEyMDYzMjIyWjAYMRYwFAYD VQQDEw02OTBhZWY3Ni0wNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0uZNzIBE7c3h2dKv6T4HhK/iDtfd/zXUF5+g+kqSqJ6DrQw9Kg5RgaQBW7i C+EZW2vCfpDt3cGbH9C3gcCy0BWLODTekQAHXibbODKLFehoMGR9eeugvqwBPx9r bxC4yFnf8xIDCs7dtKzVlzu9XrDMzuP598MNhTWqQlO6ZQGHNWe8wvYTh7QxrmJr xu4l1e7/C4t4AW9pQF9X+niBPpzGVlHJCLeII4p/aooubDTqgMD0ykhlmn9kk8og aJAVzMuBwtTpUHapP5YHusCpraukoe6RcmXU2hAqFOb25T7EW86tbri3AkTuKxDb Z18K0+YJs2OcmbS5M37xe+OzEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBv+Vxr0 RVhERRioO+5rhmvpXKvNMB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3 Qm5HUkdUdER1YkwxNFp5dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfhWcnONvO55jdFag2d6yC3lBHCCKoiWdRLtIhA2931/7lGsEABPKN wBKJPgKgXBfj/3OWEsY9DMwONK0eQySBn5uKqb8jsJiQsVW+VXn+kSuQNUjWQyME +q15MTWnhXMZDV7qmGFNTPxn+rR+VDMYPQL0f19cCO2X8jjx/ZbVG74QoaAExcun f4MsxRlZKdnY03TVdTr0VDX08hHyo/NTtgVS85DsF1i9e12fP2Jj0L1es3WDb/r5 AhHpevpVge6PZig02865nUrjgvbvIeOR76Uwb6xBtDsdb7TA23pqlS3MEWhaP+Tc xCO6MberWnzARMa5u4zujwGY7XNe/5oE -----END CERTIFICATE-----Generated at Wed Nov 5 17:32:55 2025 by rpki-client