$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: Q1clpYcEi0zP3haRknvdSWyWnDYW2lV4rN6gN91fy3U= Subject key identifier: 4F:C0:EC:0C:94:FA:64:96:4D:66:48:8B:5F:FF:2C:69:1D:12:05:D1 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F64 Signing time: Tue 04 Nov 2025 16:06:17 +0000 Manifest this update: Tue 04 Nov 2025 16:06:16 +0000 Manifest next update: Tue 11 Nov 2025 16:06:16 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: 5YDnuJ8io6AW7i8JvJJJjNWgpzDe3NpNBrFFhYh4fLw=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: CYv9JY9hI0P702N3lQBz+p9YJHwSjBcG7pv4fPI19/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8049 (0x1f71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Nov 4 16:06:16 2025 GMT Not After : Nov 11 16:06:16 2025 GMT Subject: CN=690a2478-e046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:31:54:84:bf:a6:2b:f1:32:3d:b1:7f:22: ad:2e:d0:08:34:20:b5:ff:73:9a:4d:95:91:a0:3f: 49:9f:e2:49:8f:98:b3:b3:e9:c2:dc:35:22:20:b2: 23:48:67:f7:ff:6f:ed:f8:f5:c5:7c:ed:e6:45:83: f6:9a:cb:c4:11:8a:b2:45:6a:e2:76:42:54:22:ec: 26:c6:86:b7:e4:37:68:4f:a2:98:a1:dd:5d:08:34: e4:98:a2:fa:ea:3a:1d:b6:b9:e5:13:3c:c7:da:67: 18:d3:e0:40:65:fa:d9:9c:d9:28:5c:c0:16:3d:29: 1a:bb:83:51:d1:72:76:e3:53:ca:46:5e:8c:d7:8f: 65:5d:e0:0b:ba:77:de:de:72:a8:1a:d7:de:ab:34: e7:45:f0:7f:9d:bf:b3:99:53:32:14:57:83:6f:70: aa:c5:d8:d4:f5:56:12:20:bd:c8:b3:eb:65:b6:62: 59:2e:5b:76:4e:fc:dd:74:23:72:96:e3:75:da:7e: f3:49:ed:95:6f:86:bf:c0:60:28:f7:19:35:ea:29: 2f:63:8f:70:e3:94:86:a7:b8:b3:86:88:0a:0f:b4: 64:ff:af:57:8c:97:f3:f2:b8:94:c0:d7:8e:05:3a: 0e:3a:ac:46:56:6d:ec:5e:9c:2f:b5:12:66:de:cd: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C0:EC:0C:94:FA:64:96:4D:66:48:8B:5F:FF:2C:69:1D:12:05:D1 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0e:21:d8:b4:8d:26:86:eb:7c:c9:eb:28:33:b3:fa:09:15: 9f:b9:3f:f7:59:98:53:f0:63:92:ab:7b:be:bb:d0:71:b1:59: d8:af:7f:5a:15:42:49:53:f0:29:d6:73:7f:8f:91:f5:ec:b9: 41:14:d3:9e:50:6b:58:5b:9b:78:82:17:7c:d1:17:09:02:61: 7d:c0:b4:4b:3c:7c:85:1a:aa:64:92:69:5d:a9:93:4f:2e:15: bb:4a:65:a1:4a:6d:1e:ea:59:41:0c:78:e2:ab:3e:18:2a:9b: 4e:af:1c:cd:07:f6:0f:0b:94:16:82:21:88:72:b8:16:ea:06: f7:62:8a:0d:b0:59:6e:2c:38:81:d4:d0:a3:f4:b1:1f:a8:0d: b3:67:a0:dc:a1:ca:e9:a0:81:0e:14:a1:11:e4:87:59:a5:2a: 95:ca:a2:06:5c:1c:a1:f1:e8:e9:95:3d:2a:97:b9:73:24:15: aa:ee:45:06:b9:1f:43:11:00:f9:6d:1d:6e:c2:ed:94:a3:36: 3a:c9:3a:28:f7:6c:ec:62:b2:ef:22:cb:61:80:60:ed:4a:f9: 53:29:25:03:0a:f0:f1:9c:d9:fd:11:f6:90:b0:44:10:d0:78: 68:c3:98:be:3b:c1:f6:00:c7:62:92:3d:0a:cb:ee:c1:51:21: a2:97:a8:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjUxMTA0MTYwNjE2WhcNMjUxMTExMTYwNjE2WjAYMRYwFAYD VQQDEw02OTBhMjQ3OC1lMDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqAxVIS/pivxMj2xfyKtLtAINCC1/3OaTZWRoD9Jn+JJj5izs+nC3DUiILIj SGf3/2/t+PXFfO3mRYP2msvEEYqyRWridkJUIuwmxoa35DdoT6KYod1dCDTkmKL6 6jodtrnlEzzH2mcY0+BAZfrZnNkoXMAWPSkau4NR0XJ241PKRl6M149lXeALunfe 3nKoGtfeqzTnRfB/nb+zmVMyFFeDb3CqxdjU9VYSIL3Is+tltmJZLlt2TvzddCNy luN12n7zSe2Vb4a/wGAo9xk16ikvY49w45SGp7izhogKD7Rk/69XjJfz8riUwNeO BToOOqxGVm3sXpwvtRJm3s3f4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/A7AyU +mSWTWZIi1//LGkdEgXRMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+DiHYtI0mhut8yesoM7P6CRWfuT/3WZhT8GOSq3u+u9BxsVnYr39a FUJJU/Ap1nN/j5H17LlBFNOeUGtYW5t4ghd80RcJAmF9wLRLPHyFGqpkkmldqZNP LhW7SmWhSm0e6llBDHjiqz4YKptOrxzNB/YPC5QWgiGIcrgW6gb3YooNsFluLDiB 1NCj9LEfqA2zZ6DcocrpoIEOFKER5IdZpSqVyqIGXByh8ejplT0ql7lzJBWq7kUG uR9DEQD5bR1uwu2UozY6yToo92zsYrLvIsthgGDtSvlTKSUDCvDxnNn9EfaQsEQQ 0Hhow5i+O8H2AMdikj0Ky+7BUSGil6g4 -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:12 2025 by rpki-client