$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: y0dAc0lmqN9s5vBJx9TMIPSFKxO2Qz2IZJ7GsEqWWeE= Subject key identifier: 33:94:91:4F:B1:34:D4:9F:15:AC:79:97:47:C5:B5:A8:1A:9B:E2:48 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 089D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 0891 Signing time: Tue 04 Nov 2025 20:38:28 +0000 Manifest this update: Tue 04 Nov 2025 20:38:28 +0000 Manifest next update: Tue 11 Nov 2025 20:38:28 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: Tb1Q3I8fk1Dd4scnycp5lH28ikeb9jFuw0vRlRn/vIs=) 2: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: rDQvy+rn0SobEFslboEMqv4jyHrKq9kLuJT6gHMmCJY=) 3: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: TdVNysB3ntS2HR65IAfyKvgdlfFK4ozUli+BZdpaY/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2205 (0x89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Nov 4 20:38:28 2025 GMT Not After : Nov 11 20:38:28 2025 GMT Subject: CN=690a6444-e4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:07:67:8c:b0:2d:e8:f7:f2:fa:85:2a:c9: 55:fa:74:12:0c:9a:a8:5a:d0:0c:85:b7:2b:fc:9a: 70:87:14:cc:e8:a9:2a:a2:1b:9d:64:bd:10:90:08: a2:fb:7c:32:91:ef:4b:f2:9d:84:09:1f:b3:e3:fa: b7:83:e6:61:d3:94:7c:53:46:b5:3a:62:72:a0:9e: ff:43:07:39:87:35:d7:a2:bf:0f:53:33:72:68:d3: 79:2d:4f:93:6a:99:1f:26:77:c2:cb:e8:82:5a:31: 0e:46:bb:b7:f3:fe:bc:26:1f:2c:53:2c:d6:fa:85: 82:2e:df:dd:5b:77:a6:52:ae:27:28:7e:a8:7b:02: 43:d4:db:69:c9:a4:a5:a0:a4:30:33:8c:a3:70:bb: 71:b1:d9:46:85:6d:30:0e:97:11:dd:40:32:22:ae: 30:45:14:41:09:31:7b:c9:f2:0f:78:9b:88:4f:5f: bf:1b:23:2a:3f:20:97:96:38:5c:2d:cb:bb:0f:2a: a6:09:75:33:92:f4:8a:81:72:03:64:01:9a:db:7f: c7:ff:84:ad:d0:58:3c:bd:fe:af:d4:7d:bf:44:56: 6b:9e:24:32:2e:df:59:d0:4e:6e:34:bd:05:73:8d: db:f1:8e:55:d8:99:42:c2:77:4a:cd:83:fc:4b:10: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:94:91:4F:B1:34:D4:9F:15:AC:79:97:47:C5:B5:A8:1A:9B:E2:48 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:55:4a:ac:a7:51:a5:54:e5:36:cd:fc:1f:81:f3:c3:4b:25: 2b:6c:a0:cf:ee:d1:9e:35:d7:cd:48:21:3f:a8:43:63:4d:fa: bc:76:ac:05:9f:d2:57:3a:ce:19:ee:f3:3c:7d:7c:fe:03:ff: 55:49:fb:a6:06:48:5f:58:47:31:22:d1:bd:08:97:19:db:71: 77:27:6c:28:d6:7b:f6:65:08:e5:cf:3c:f3:05:90:cd:e3:67: 73:a0:01:db:13:ec:11:07:30:bd:a1:0c:13:b0:34:d4:6a:11: 96:b7:90:07:21:55:a2:40:56:14:ad:e8:fa:0e:3a:00:67:53: 4d:4a:e9:a3:3b:04:64:6a:f6:1f:ec:df:17:e0:a6:16:e3:a4: a3:12:5d:48:65:a4:b8:73:5f:78:bc:39:f6:4b:b3:ce:d8:ce: 0d:53:ed:41:16:66:27:8f:9b:25:bb:b3:d6:6a:63:3b:21:c0: bb:9e:98:03:32:b6:a3:84:f7:c9:fb:b2:71:39:21:6c:d1:50: 68:05:5e:b6:08:55:02:3d:ea:b8:c3:28:4c:91:02:7a:88:be: 60:90:40:a9:7a:8f:c6:18:0f:66:58:b7:32:46:92:0e:b3:b8: 82:d9:71:76:3f:1e:66:ee:a9:23:12:55:24:69:7c:94:94:ce: ef:ff:38:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjUxMTA0MjAzODI4WhcNMjUxMTExMjAzODI4WjAYMRYwFAYD VQQDEw02OTBhNjQ0NC1lNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kwHZ4ywLej38vqFKslV+nQSDJqoWtAMhbcr/JpwhxTM6KkqohudZL0QkAii +3wyke9L8p2ECR+z4/q3g+Zh05R8U0a1OmJyoJ7/Qwc5hzXXor8PUzNyaNN5LU+T apkfJnfCy+iCWjEORru38/68Jh8sUyzW+oWCLt/dW3emUq4nKH6oewJD1NtpyaSl oKQwM4yjcLtxsdlGhW0wDpcR3UAyIq4wRRRBCTF7yfIPeJuIT1+/GyMqPyCXljhc Lcu7DyqmCXUzkvSKgXIDZAGa23/H/4St0Fg8vf6v1H2/RFZrniQyLt9Z0E5uNL0F c43b8Y5V2JlCwndKzYP8SxC88wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOUkU+x NNSfFax5l0fFtagam+JIMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGVUqsp1GlVOU2zfwfgfPDSyUrbKDP7tGeNdfNSCE/qENjTfq8dqwF n9JXOs4Z7vM8fXz+A/9VSfumBkhfWEcxItG9CJcZ23F3J2wo1nv2ZQjlzzzzBZDN 42dzoAHbE+wRBzC9oQwTsDTUahGWt5AHIVWiQFYUrej6DjoAZ1NNSumjOwRkavYf 7N8X4KYW46SjEl1IZaS4c194vDn2S7PO2M4NU+1BFmYnj5slu7PWamM7IcC7npgD MrajhPfJ+7JxOSFs0VBoBV62CFUCPeq4wyhMkQJ6iL5gkECpeo/GGA9mWLcyRpIO s7iC2XF2Px5m7qkjElUkaXyUlM7v/zjF -----END CERTIFICATE-----Generated at Wed Nov 5 00:06:00 2025 by rpki-client