$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: 3v6E2xyBn3/6W/a6Iu/IDQanbAVZSvMyCJrzkZAwJNg= Subject key identifier: 3F:CF:65:C2:94:51:BF:F8:E1:EA:92:29:ED:E2:87:05:9D:F3:40:59 Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 0953 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 0939 Signing time: Tue 04 Nov 2025 20:19:47 +0000 Manifest this update: Tue 04 Nov 2025 20:19:46 +0000 Manifest next update: Tue 11 Nov 2025 20:19:46 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: 60clJ4sMLlRIbxT/RM/chKhz9Bjgaz/Cvjen2sRAXso=) 2: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: Del+9YrkACA6yrhYJeSPVVuh01l/16gJ82iy69S9BRo=) 3: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: PnqDvM4vjQdsVy80UhznbWoKhp/dlqh33E+GG+RU+dk=) 4: 03706138786411EC8624EB12C4F9AE02.roa (hash: qKXv165pzdK/WBxXfxqKy/V+953i+G1rFbe37yvanHk=) 5: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: Ci305f1V47fRIRqmqjLy+EIi8DLnLoGCGpVVZ48v10E=) 6: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: lvX9qWs0U9FJpaiKhdFBFudNcs3mWD37dbOmEs33Njk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Nov 4 20:19:46 2025 GMT Not After : Nov 11 20:19:46 2025 GMT Subject: CN=690a5fe3-4c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:c4:19:c0:6c:07:7b:e8:d9:2b:92:f7:95: 47:1d:d9:a0:84:58:97:9b:73:bb:c5:3c:37:8d:75: fa:04:b2:84:1b:7d:98:fa:fa:c3:78:d4:7f:e6:b0: 3a:e0:c4:95:cc:58:c3:60:7d:62:dc:8b:8c:fe:cf: 8f:9c:b2:a9:15:c6:6f:56:50:76:11:0b:38:51:65: ce:ea:cb:e6:be:f2:8f:56:09:1e:37:cd:ca:a4:8e: 40:d2:84:22:a5:01:d7:c6:b8:fe:7f:20:6e:47:f8: 0c:ae:fd:80:ab:d9:92:32:8d:a0:56:99:70:87:58: f2:60:8e:9e:59:83:1e:14:95:64:69:11:4c:79:93: c5:5b:28:d3:af:b7:5e:76:0a:10:fc:20:0a:0f:15: 54:6e:2f:d8:ed:da:73:9b:1e:14:9b:ca:5c:bb:7a: e5:99:ee:1c:cc:fa:47:a4:1b:74:38:eb:20:54:18: 7d:4c:15:76:65:0c:97:95:ef:79:48:75:bc:2d:fc: d8:c6:ad:4c:3e:c5:eb:92:91:18:3a:cf:50:8a:1e: 30:10:ae:fb:16:c7:c2:41:b0:28:01:be:59:0a:0e: 97:8e:ec:06:d4:28:b4:4b:cd:76:e0:6c:2c:3b:97: 1e:de:0c:bd:5b:d9:5f:aa:86:9b:59:5c:75:cb:ba: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CF:65:C2:94:51:BF:F8:E1:EA:92:29:ED:E2:87:05:9D:F3:40:59 X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:2e:08:26:3d:ee:71:1c:54:c3:83:12:e4:3b:66:26:54:e5: ca:59:d0:3b:a6:e0:13:8e:38:2b:88:37:df:3e:e0:b3:7d:ff: 5b:fc:61:be:25:4a:1f:2b:52:33:cd:8d:da:fe:90:9b:e6:fe: f7:0e:1b:d2:e2:a1:9a:0c:03:20:78:7b:74:30:50:64:62:9a: fb:fe:df:da:8d:20:7c:b6:0b:38:7e:7c:46:16:d5:01:ac:e6: 69:b7:60:9c:f9:ac:6b:4f:49:3b:19:93:74:c5:5d:fe:c1:a2: 80:cf:d4:2d:c9:ac:ec:86:30:e5:15:85:a2:f8:2f:50:43:0e: 38:0e:87:35:d6:b7:50:fe:ad:e7:58:b8:df:be:38:b3:15:a6: 36:41:15:8a:dd:d8:19:4e:c6:f3:9d:1e:b5:a5:31:18:9d:6d: a2:30:a3:4d:e4:3f:98:1f:90:d4:53:c3:1d:ec:27:b4:9c:f0: b5:94:ef:4f:e7:68:94:f3:dc:25:f2:13:ef:e7:7c:a8:1c:5f: 71:8b:9b:5e:c0:86:af:55:79:70:17:57:3e:90:ec:0c:8e:5a: c1:84:62:c2:fb:ae:5a:cc:66:03:d4:d2:75:d2:4b:e2:71:c2: bd:3a:00:83:dc:a2:85:df:49:38:f6:bc:e5:91:60:d0:e9:a3: c8:c6:fd:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjUxMTA0MjAxOTQ2WhcNMjUxMTExMjAxOTQ2WjAYMRYwFAYD VQQDEw02OTBhNWZlMy00YzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmXEGcBsB3vo2SuS95VHHdmghFiXm3O7xTw3jXX6BLKEG32Y+vrDeNR/5rA6 4MSVzFjDYH1i3IuM/s+PnLKpFcZvVlB2EQs4UWXO6svmvvKPVgkeN83KpI5A0oQi pQHXxrj+fyBuR/gMrv2Aq9mSMo2gVplwh1jyYI6eWYMeFJVkaRFMeZPFWyjTr7de dgoQ/CAKDxVUbi/Y7dpzmx4Um8pcu3rlme4czPpHpBt0OOsgVBh9TBV2ZQyXle95 SHW8LfzYxq1MPsXrkpEYOs9Qih4wEK77FsfCQbAoAb5ZCg6XjuwG1Ci0S8124Gws O5ce3gy9W9lfqoabWVx1y7qwUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/PZcKU Ub/44eqSKe3ihwWd80BZMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiLggmPe5xHFTDgxLkO2YmVOXKWdA7puATjjgriDffPuCzff9b/GG+ JUofK1IzzY3a/pCb5v73DhvS4qGaDAMgeHt0MFBkYpr7/t/ajSB8tgs4fnxGFtUB rOZpt2Cc+axrT0k7GZN0xV3+waKAz9QtyazshjDlFYWi+C9QQw44Doc11rdQ/q3n WLjfvjizFaY2QRWK3dgZTsbznR61pTEYnW2iMKNN5D+YH5DUU8Md7Ce0nPC1lO9P 52iU89wl8hPv53yoHF9xi5tewIavVXlwF1c+kOwMjlrBhGLC+65azGYD1NJ10kvi ccK9OgCD3KKF30k49rzlkWDQ6aPIxv3K -----END CERTIFICATE-----Generated at Wed Nov 5 10:08:19 2025 by rpki-client