$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: KUn/lASaTT2lL4RKH1dntIYdbLlBauY3/9EL8G7waps= Subject key identifier: 2F:56:AA:53:FA:F5:90:83:7C:F1:78:1F:A3:65:F8:00:C3:0E:6A:6C Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 016F Signing time: Wed 05 Nov 2025 04:08:29 +0000 Manifest this update: Wed 05 Nov 2025 04:08:28 +0000 Manifest next update: Wed 12 Nov 2025 04:08:28 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: fURO6eRyAh9JBtKjuhdtzJ/Ex1bhNLJLp0EmlXy8rqU=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Nov 5 04:08:28 2025 GMT Not After : Nov 12 04:08:28 2025 GMT Subject: CN=690acdbd-4e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:ed:f5:1c:6d:78:48:12:a9:4f:f4:39:82: ba:f2:a9:40:c0:13:6f:5c:50:03:6b:12:61:db:82: ba:46:55:e7:81:bf:57:d4:8b:d9:65:2f:c2:c2:c6: 87:22:5d:eb:6b:d9:c3:5e:af:53:ff:a4:e5:03:3b: 55:40:3f:4f:81:50:85:65:05:b2:87:49:d4:5b:2a: 27:c9:52:f4:61:96:59:1c:2e:a2:72:ef:db:cd:61: 5d:94:0f:de:e3:88:ce:3e:92:06:90:98:7a:1a:bf: f7:46:dc:aa:fd:95:8b:48:62:bc:8c:73:b4:c6:16: 3c:45:29:86:b6:85:00:ce:d5:7b:35:d4:d9:ee:50: 41:dc:77:7f:f6:f5:e5:ad:34:41:ad:4f:e6:50:e9: 4b:78:07:b7:c8:87:a9:5c:3c:ba:8c:09:29:ac:d3: e5:d3:0d:73:ce:bd:3e:c4:7e:14:b5:09:52:88:d9: 64:e8:43:41:63:8e:5d:f9:77:25:54:e0:f8:0a:77: 82:96:f6:37:c3:1f:47:ba:ee:a3:e7:2c:90:33:7a: 60:b4:2e:52:23:b7:31:8c:21:68:65:fa:db:97:e6: f5:22:fe:5b:6d:17:b7:dc:eb:bb:b7:1c:e9:31:bf: 53:e7:ea:e3:e8:df:ae:00:cf:61:e7:bb:6e:80:6d: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:56:AA:53:FA:F5:90:83:7C:F1:78:1F:A3:65:F8:00:C3:0E:6A:6C X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:f7:a3:89:62:1a:32:03:40:c7:ef:2e:ba:61:ba:dd:92:ef: a5:6e:d0:15:a0:91:75:12:52:62:c3:a2:ed:87:7d:c1:ea:b4: ab:6c:df:c8:e2:7e:09:43:8c:d9:af:e4:71:a0:6b:e9:19:da: ca:ab:58:07:1f:5f:2e:3a:f6:54:6f:fd:b1:7a:c7:09:f7:81: 81:29:4e:dd:22:4d:56:3e:84:b3:e7:e9:b3:b6:8b:f6:e8:ab: 45:32:63:4b:9f:e5:e9:a1:c0:0e:e0:69:cc:d9:c4:72:26:08: 32:e9:5c:18:c1:2a:ad:ff:bb:ff:a0:13:56:13:ac:02:7a:32: db:01:7c:4e:21:22:2d:19:9e:95:ba:d6:99:86:e4:29:56:90: e8:c9:c8:ca:17:74:0f:a8:ef:6c:d5:b8:0f:89:83:0d:c7:77: 6e:5b:59:b9:21:f9:e7:a1:34:1e:bf:c4:7f:da:ce:58:e6:b4: 0d:61:8a:16:7c:a2:b9:3c:f6:56:9a:cf:2a:b4:5d:4d:59:cb: b8:cb:fb:7a:3b:e6:b6:f0:76:00:76:5f:98:e1:07:7c:20:69: 82:0e:0a:22:59:f2:91:30:87:17:57:0d:55:67:cf:2c:55:95: cf:37:05:22:c1:ab:87:64:4e:d0:dd:7e:5d:3b:8a:9c:06:26: 7f:f2:84:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUxMTA1MDQwODI4WhcNMjUxMTEyMDQwODI4WjAYMRYwFAYD VQQDEw02OTBhY2RiZC00ZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoynt9RxteEgSqU/0OYK68qlAwBNvXFADaxJh24K6RlXngb9X1IvZZS/CwsaH Il3ra9nDXq9T/6TlAztVQD9PgVCFZQWyh0nUWyonyVL0YZZZHC6icu/bzWFdlA/e 44jOPpIGkJh6Gr/3Rtyq/ZWLSGK8jHO0xhY8RSmGtoUAztV7NdTZ7lBB3Hd/9vXl rTRBrU/mUOlLeAe3yIepXDy6jAkprNPl0w1zzr0+xH4UtQlSiNlk6ENBY45d+Xcl VOD4CneClvY3wx9Huu6j5yyQM3pgtC5SI7cxjCFoZfrbl+b1Iv5bbRe33Ou7txzp Mb9T5+rj6N+uAM9h57tugG3xwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9WqlP6 9ZCDfPF4H6Nl+ADDDmpsMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm96OJYhoyA0DH7y66Ybrdku+lbtAVoJF1ElJiw6Lth33B6rSrbN/I 4n4JQ4zZr+RxoGvpGdrKq1gHH18uOvZUb/2xescJ94GBKU7dIk1WPoSz5+mztov2 6KtFMmNLn+XpocAO4GnM2cRyJggy6VwYwSqt/7v/oBNWE6wCejLbAXxOISItGZ6V utaZhuQpVpDoycjKF3QPqO9s1bgPiYMNx3duW1m5IfnnoTQev8R/2s5Y5rQNYYoW fKK5PPZWms8qtF1NWcu4y/t6O+a28HYAdl+Y4Qd8IGmCDgoiWfKRMIcXVw1VZ88s VZXPNwUiwauHZE7Q3X5dO4qcBiZ/8oTL -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:11 2025 by rpki-client