$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: Ify0PPm6UCpwn1yGTXSkNjtu+eDem0lzl3PSKJ1lC+s= Subject key identifier: 54:15:96:51:5F:CC:79:A8:97:E5:92:88:AD:C4:B7:59:C3:4B:AC:C1 Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 09E6 Signing time: Tue 04 Nov 2025 19:59:36 +0000 Manifest this update: Tue 04 Nov 2025 19:59:35 +0000 Manifest next update: Tue 11 Nov 2025 19:59:35 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: p9f8MagmR+ZqiV1U1FLXx/qdgtXGthYNlfsgTrf93BM=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: 5OuJk3wuVixq/unKPrRmS/rEXR6rqWNJ7lk0q2nqJD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: Nov 4 19:59:35 2025 GMT Not After : Nov 11 19:59:35 2025 GMT Subject: CN=690a5b27-4c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:e9:ab:fc:9c:2c:e4:3b:f6:9f:70:e1:0f:ce: 7e:8e:6d:69:a4:66:d5:ee:c6:9b:d4:66:49:54:1e: 7d:15:ee:58:f7:8e:b4:e5:3a:f6:75:55:12:d0:b2: 8c:43:85:e0:a1:9a:05:2b:74:1d:cd:1d:a6:2f:e1: 13:6e:bf:35:a5:58:99:dc:70:0f:88:de:83:ef:e6: 5c:71:44:f5:14:e7:33:3c:79:bf:ab:f1:aa:73:40: 97:46:44:0f:fe:77:c1:b7:19:d7:93:47:ed:2a:48: 41:b6:f6:d2:22:da:4e:f1:a0:ce:5b:d9:4e:8e:ec: 3c:cc:4f:58:9b:d7:5c:3b:5d:74:6c:cb:fd:7e:a3: 58:ff:1d:e5:76:27:84:6d:24:40:1e:db:42:43:7e: e0:a0:1d:21:41:6d:9b:4b:6c:3c:ac:94:6c:55:a3: 1a:a4:69:e4:02:7d:7a:ca:28:d4:f9:95:f5:96:e2: 1d:61:ce:8f:21:5c:6a:c8:9c:ae:d5:80:16:7f:f6: 2a:25:6a:8d:0a:8d:f1:26:ef:71:3d:59:55:a5:33: 99:f7:8f:1f:2d:29:8e:a2:42:02:05:fa:e1:c1:22: 83:ea:6a:56:6f:2a:16:73:33:22:47:a6:25:29:7e: 3b:11:5f:36:80:30:5c:3f:5f:45:05:7d:d5:b2:48: 93:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:15:96:51:5F:CC:79:A8:97:E5:92:88:AD:C4:B7:59:C3:4B:AC:C1 X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:de:82:d2:fc:a4:46:06:85:21:7b:77:f7:aa:59:0e:9b:da: 8d:38:88:a4:bf:24:cd:44:e4:3c:cb:7a:1c:07:29:5e:d7:dc: 4f:7c:2f:65:d3:4b:03:a1:74:de:2e:57:eb:9a:a5:5a:3f:44: 39:30:c7:08:14:cb:6a:93:3e:69:d5:53:27:fd:a4:d7:2d:1d: eb:8e:52:1c:7d:c1:fb:13:9d:75:82:a3:04:ce:8f:30:5f:16: b1:85:69:8b:5b:fc:26:88:f6:79:5a:12:93:4d:eb:89:ef:44: 7a:c3:0c:70:fc:e0:9f:de:93:22:52:db:5c:92:80:75:8e:6d: db:a1:23:14:21:52:88:a9:d4:f9:60:e1:b5:00:03:68:35:1f: b2:d8:5f:b7:07:33:f5:96:ed:31:b7:c0:40:f0:22:61:78:e8: 35:9e:eb:7a:d2:e6:39:2d:2a:57:9f:53:8f:1d:01:fe:5c:cb: 4e:65:f2:01:42:e7:ff:3c:b4:a0:08:3f:bc:07:ea:23:38:d3: 00:62:7b:96:cd:0b:45:17:1d:89:5e:a8:6f:7c:8f:6f:e6:8c: 21:8a:44:74:63:3d:63:6a:eb:5e:7b:d1:2f:18:dd:51:32:2e: 13:6c:6a:ee:d9:66:df:d3:36:95:02:0a:c4:ca:ac:d4:06:b0: 58:4c:a6:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjUxMTA0MTk1OTM1WhcNMjUxMTExMTk1OTM1WjAYMRYwFAYD VQQDEw02OTBhNWIyNy00YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA++mr/Jws5Dv2n3DhD85+jm1ppGbV7sab1GZJVB59Fe5Y94605Tr2dVUS0LKM Q4XgoZoFK3QdzR2mL+ETbr81pViZ3HAPiN6D7+ZccUT1FOczPHm/q/Gqc0CXRkQP /nfBtxnXk0ftKkhBtvbSItpO8aDOW9lOjuw8zE9Ym9dcO110bMv9fqNY/x3ldieE bSRAHttCQ37goB0hQW2bS2w8rJRsVaMapGnkAn16yijU+ZX1luIdYc6PIVxqyJyu 1YAWf/YqJWqNCo3xJu9xPVlVpTOZ948fLSmOokICBfrhwSKD6mpWbyoWczMiR6Yl KX47EV82gDBcP19FBX3VskiTvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQVllFf zHmol+WSiK3Et1nDS6zBMB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC3oLS/KRGBoUhe3f3qlkOm9qNOIikvyTNROQ8y3ocByle19xPfC9l 00sDoXTeLlfrmqVaP0Q5MMcIFMtqkz5p1VMn/aTXLR3rjlIcfcH7E511gqMEzo8w XxaxhWmLW/wmiPZ5WhKTTeuJ70R6wwxw/OCf3pMiUttckoB1jm3boSMUIVKIqdT5 YOG1AANoNR+y2F+3BzP1lu0xt8BA8CJheOg1nut60uY5LSpXn1OPHQH+XMtOZfIB Quf/PLSgCD+8B+ojONMAYnuWzQtFFx2JXqhvfI9v5owhikR0Yz1jautee9EvGN1R Mi4TbGru2Wbf0zaVAgrEyqzUBrBYTKZk -----END CERTIFICATE-----Generated at Wed Nov 5 13:31:35 2025 by rpki-client