$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: wV3TwukmzYLtinG9HME4DENeoMU7x6ckTp8cbDq3dUU= Subject key identifier: A3:D7:A8:E3:39:9E:1A:0E:65:B6:6A:44:13:57:67:E8:CA:0C:5B:DB Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 098A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 0982 Signing time: Tue 04 Nov 2025 20:10:31 +0000 Manifest this update: Tue 04 Nov 2025 20:10:31 +0000 Manifest next update: Tue 11 Nov 2025 20:10:31 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: HGyIP9ms2UYFtzarpM2sXfk2Y6ISrHijAs7YOhezc2E=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: UPW2zn+2qw+0Yqrrnh/8eodDuScZl7h14KT7X1Bf96E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2442 (0x98a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Nov 4 20:10:31 2025 GMT Not After : Nov 11 20:10:31 2025 GMT Subject: CN=690a5db7-d346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:21:0c:70:04:c8:c1:92:76:e6:da:60:86: 46:29:43:d9:6d:42:94:32:a0:3e:77:68:e5:1d:16: 06:e6:28:c2:0e:0a:e2:fe:9b:99:ad:e0:3e:69:90: 63:69:e0:d6:0d:40:51:45:1b:05:c1:eb:f6:41:19: 4c:ff:72:b3:3a:73:f8:39:72:72:eb:be:e1:25:67: ec:78:6e:a7:89:a6:d8:8d:00:ac:23:cb:f1:8c:a0: b4:c6:17:df:18:16:7d:13:5f:2d:e0:82:49:e9:96: 5c:6b:1e:ff:c9:a6:1b:f3:7d:9e:5c:f2:5f:5b:44: c1:0a:00:f3:68:07:3e:8e:81:0e:48:7a:ee:d0:a0: d3:3b:0b:ba:32:4b:db:a3:16:08:0f:fc:a8:ce:20: d2:77:54:f0:30:80:a2:15:cd:34:29:51:9c:09:78: a8:e7:85:33:e2:06:bf:3a:10:e0:51:ab:e0:aa:32: e0:59:c1:8c:3e:4d:e5:70:13:b4:b1:69:08:05:29: 1a:6c:f6:75:7d:f7:ed:72:85:50:da:78:1f:41:b7: d2:a5:ac:62:73:a3:72:4d:19:2a:54:3f:42:1a:8c: 60:35:c5:99:71:b3:fa:47:35:75:92:07:52:6d:02: fd:da:8c:aa:85:87:38:d1:9a:e7:9a:e1:0e:93:19: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D7:A8:E3:39:9E:1A:0E:65:B6:6A:44:13:57:67:E8:CA:0C:5B:DB X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:91:3f:72:3a:ac:e7:be:a4:69:7a:2c:f7:1a:07:7c:03:15: 9d:57:88:ae:d8:c5:c9:2b:9f:37:3c:38:ac:29:dc:d8:71:b4: 31:5d:94:a1:cf:9d:51:b7:93:47:be:62:59:61:2f:3e:cf:f5: 49:d8:f6:52:a4:5f:1a:49:42:ea:35:e0:10:b6:37:1e:cc:29: c1:20:ae:72:81:eb:ef:70:ba:35:31:74:5b:27:90:11:63:86: df:5d:44:42:4e:8c:35:f6:28:fe:f6:f3:bf:8a:7e:d9:98:db: 7c:af:c8:39:b4:96:4b:c5:fe:f5:9b:33:46:55:86:ad:61:f7: 10:8e:e9:cb:f1:ae:13:60:0a:67:8c:24:82:2c:c9:39:58:ac: f0:98:1c:8a:5a:2a:42:f7:8d:ff:85:ee:e9:bc:30:c9:82:0b: bd:cd:e3:f2:15:84:30:7e:d7:a7:3a:fb:3d:72:82:ea:67:f7: d3:b6:86:a0:91:55:5c:3c:7b:f6:1c:27:74:4b:93:6e:fb:ef: 6c:f0:f5:2d:8c:aa:35:e3:6e:fc:ea:e9:89:e7:0a:51:d7:ff: 5b:31:bd:f1:81:1b:4a:a8:af:b6:8e:d6:16:c3:c1:86:05:2b: b7:85:d3:5c:65:ab:84:c7:c2:d9:be:46:2d:b7:0f:58:8d:03: 00:99:77:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUxMTA0MjAxMDMxWhcNMjUxMTExMjAxMDMxWjAYMRYwFAYD VQQDEw02OTBhNWRiNy1kMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvshDHAEyMGSdubaYIZGKUPZbUKUMqA+d2jlHRYG5ijCDgri/puZreA+aZBj aeDWDUBRRRsFwev2QRlM/3KzOnP4OXJy677hJWfseG6niabYjQCsI8vxjKC0xhff GBZ9E18t4IJJ6ZZcax7/yaYb832eXPJfW0TBCgDzaAc+joEOSHru0KDTOwu6Mkvb oxYID/yoziDSd1TwMICiFc00KVGcCXio54Uz4ga/OhDgUavgqjLgWcGMPk3lcBO0 sWkIBSkabPZ1ffftcoVQ2ngfQbfSpaxic6NyTRkqVD9CGoxgNcWZcbP6RzV1kgdS bQL92oyqhYc40ZrnmuEOkxn3xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPXqOM5 nhoOZbZqRBNXZ+jKDFvbMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkkT9yOqznvqRpeiz3Ggd8AxWdV4iu2MXJK583PDisKdzYcbQxXZSh z51Rt5NHvmJZYS8+z/VJ2PZSpF8aSULqNeAQtjcezCnBIK5ygevvcLo1MXRbJ5AR Y4bfXURCTow19ij+9vO/in7ZmNt8r8g5tJZLxf71mzNGVYatYfcQjunL8a4TYApn jCSCLMk5WKzwmByKWipC943/he7pvDDJggu9zePyFYQwftenOvs9coLqZ/fTtoag kVVcPHv2HCd0S5Nu++9s8PUtjKo142786umJ5wpR1/9bMb3xgRtKqK+2jtYWw8GG BSu3hdNcZauEx8LZvkYttw9YjQMAmXe9 -----END CERTIFICATE-----Generated at Wed Nov 5 13:46:26 2025 by rpki-client