$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft File: XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json) Hash identifier: il5425llBodCdEh2zM40zayNO8jDtsLVxXclxj1n6Oo= Subject key identifier: 0C:BC:CE:9C:45:4E:A6:B3:64:40:DD:05:A7:99:90:20:86:5D:20:44 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 2809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft Manifest number: 2579 Signing time: Tue 04 Nov 2025 15:53:31 +0000 Manifest this update: Tue 04 Nov 2025 15:53:31 +0000 Manifest next update: Tue 11 Nov 2025 15:53:31 +0000 Files and hashes: 1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: Rtgavvt1l7UOjKvK26cLuW+XIOHJCy8+mXSiGVFG328=) 2: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: JM3URqRB9lFjbjulP6HJXH0/nTZmKhp/VblyDepgmCA=) 3: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: L56JARs1lbyWfxDIMRSYK/QldVKbihzZgGIBK+gCvAE=) 4: F04860C28C5611E792848B4AC4F9AE02.roa (hash: OWjLebxJynytHvjgIP0SVIn8ZOFvLbt6j473I2eFdGg=) 5: F688FE388C5611E792848B4AC4F9AE02.roa (hash: lqz+b2mpZ7liApUeWmpk6Sxdz1MK1YVyI/nndtzOfc8=) 6: F1475E928C5611E792848B4AC4F9AE02.roa (hash: Azsul1kHuCMDc3vM/dyl3tkEbz4NHSW6BcHmreet4yc=) 7: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: arhZFiziS+sBDNkkd9ApjM4qRhUdC/BiQCxwPWquNA0=) 8: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: z8Txj1JKr5vAyHyXu3Q0JC83ZWN/Ombj0tuTCxlEaRY=) 9: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: nNfTdp4PUnPXPodCTbOjAsAWXgCW6bK0lHos7EHr9sI=) 10: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: VkOAhIa80kNaefVErpKRcJS1UUCVoa+4BpGDgLLqprQ=) 11: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: DsNdloDffNUf3moIjjEgjm54CfZxDdhXyzmCNd4A8iM=) 12: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: /ceuJ/WbnEGgNSZXAtMbOel5sgU4JUVf8lMbFmmrMek=) 13: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: zea1Z4utZ31hyYXYKPM+pLoUfd33/pFxc2Oz6L2A0xI=) 14: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: NQJGHd1cKyBqpoHctaUyw3dvZ0KuQOPSMwntjDFcg1A=) 15: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: 2JFPJBUaYhM0ytiq7e9eC6CYsDAt8wgMcc3SKiIFHsg=) 16: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: rMIZrcp78OdFGxAyj3EoE0LyB7/Lf2gRKvh+qENZ2aU=) 17: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: Xb63l3ZIQpud6T0SsIiJHA/1T9XjvXnyGqxkBm5CkQ0=) 18: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: g10juuqEsEAKzRtgsKTtEKp5BZovzdZezXJ/i6OnQX8=) 19: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: 8wMgBAimNVtvub961irO59NqQxJMZvEDQRKi+qZmzOM=) 20: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: HjDnuWYD2CM4eau1ngg0jQqOKxs9P1pY+POnRU8sW84=) 21: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: oci0lTgKFp7FiEncD15sU2Ngo6tK4eT2xuYmhT6iDlU=) 22: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: begcncLwYIJtBCQ6VJWY520RlYMTXNEWKkPpgmPjKb8=) 23: 543386248C5811E782F42951C4F9AE02.roa (hash: GlY/r205IC2OrqcOiTDslwqaWuBIkTf2ufwkodlMU14=) 24: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: Sottj9k4RXjczj3TRXwNeTc3keyEZnkoE9tmU2Bbb+s=) 25: 9B22F928BFE311EE949C2918C4F9AE02.roa (hash: rHfc038K7hZU+Vhyh8UrxdPg1RCOF3M80HQn+le/mCY=) 26: 14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (hash: xPXjL37oXeRRpPjLu0GM00DmOaXEa3PmK65wf2oESwE=) 27: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: ZQdD4QBAodxhPJDLvSXRmOQaG3cbzn75kTPxr7PdWwA=) 28: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: 3hdHgWnWw8iRZc3PLDAGckupDqE2yqREOxz6oL/nUl8=) 29: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 6KUaAZVDPkXTkOKZ5DbXYRghI5OIx+//6O9Z2SthviM=) 30: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: pP6QaZ6xCHzwaNezLWWh9N0zjLWnePhegpoh8w4BrFY=) 31: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: EnqXxHxizowT8zb+SHcbhbA09vXgZZGAE/YRBfr59Gc=) 32: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: X+/JRaBFSpU+csAjI62l5rVURr8ZUzb9qKYNdwDW88k=) 33: 5366509AC63511EAAC843455C4F9AE02.roa (hash: 4VfxlhXPt3Fli8QftF+Jbfr+B7PpkjZJjrN7R7UoFec=) 34: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: rNmuk0Zw99f4Kzt4k/QReGgYLjG+b50IvgI4wD110cw=) 35: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: cTr3m6jhSldGceNeNs9qUPTOBPhnI4QANoh1eGzuDWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10249 (0x2809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Nov 4 15:53:31 2025 GMT Not After : Nov 11 15:53:31 2025 GMT Subject: CN=690a217b-0ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:e9:3a:7c:4d:be:dd:50:98:53:0a:08:7f: 69:9b:81:17:12:70:1f:28:a1:c7:92:63:5d:ee:ca: c7:98:f1:e3:64:60:a9:d0:83:bb:39:8f:cb:85:b0: 84:1b:32:dc:d5:00:88:2e:af:cc:f4:ab:d5:83:2e: 6d:11:eb:6f:de:c4:19:08:61:3f:bf:b1:a2:09:aa: 6a:25:cf:21:0d:7c:6d:52:1c:f3:2a:5e:2e:71:18: 8e:a2:23:5e:9c:c6:8a:03:c0:e4:df:ed:a8:d1:c3: 6a:9a:4c:99:c6:72:f1:52:de:b4:84:18:7b:10:fa: 08:70:34:0e:ac:54:56:93:75:d0:93:77:e7:b7:91: ef:16:b1:f4:b3:2e:04:9a:91:a8:98:84:16:97:1a: 08:fa:83:21:dd:0b:83:8e:fc:6e:a0:48:50:6d:88: 83:c2:3e:c8:3f:eb:c2:d2:f9:d1:6a:36:93:d7:d8: fb:f5:01:8e:1b:57:c5:fa:24:01:99:ec:22:4a:33: 02:39:e5:25:66:19:b8:cf:b1:a4:be:9c:94:5a:cb: c1:07:56:f5:d1:7f:f1:c1:9a:f5:f4:ab:c1:05:30: ad:44:29:b6:9b:45:de:1d:6a:6f:a1:42:89:98:31: d9:2a:4a:b3:08:ec:a8:d9:53:39:05:28:1e:05:e0: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BC:CE:9C:45:4E:A6:B3:64:40:DD:05:A7:99:90:20:86:5D:20:44 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3a:03:20:2a:de:27:c4:40:10:4e:ed:aa:db:a9:32:66:42: f0:40:0a:bd:45:82:1c:26:da:38:32:30:ce:c0:88:2a:a4:25: 28:80:99:6a:ec:f9:36:1f:06:10:25:3b:17:3c:52:b8:b9:a0: 6e:8d:83:15:b6:c3:52:68:1f:f8:d6:d1:8e:57:9d:ee:64:03: 1d:b1:2f:11:a1:c6:e5:ab:17:d0:47:44:e9:2c:17:ad:4a:d4: 81:bf:42:cb:81:4f:2d:2d:ea:e9:a2:61:8f:17:00:c7:4c:01: 34:b8:9e:43:60:11:7a:e1:62:13:45:7a:d4:96:f7:6f:d7:43: 73:fa:8a:38:2f:93:b1:c2:f6:bb:50:6f:e0:63:14:5f:60:c4: 88:11:7a:70:01:2a:e2:f2:a6:b7:71:5e:55:cc:ea:97:13:0b: 6d:89:af:07:c8:e3:70:c8:d0:f3:0c:8d:13:c8:90:0a:ab:4d: 98:cd:e0:3c:15:20:3f:ba:47:47:57:f4:50:64:82:9f:f8:b8: cf:93:9a:79:0a:51:05:f2:c7:62:1f:7c:8a:76:09:cc:d1:1e: 50:35:87:9c:17:ed:81:60:ff:d4:8c:29:78:d6:04:fc:d4:32: 8f:1c:8f:39:9b:11:75:9a:23:38:3b:0f:c8:18:d9:47:5e:3a: 1d:2d:09:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUxMTA0MTU1MzMxWhcNMjUxMTExMTU1MzMxWjAYMRYwFAYD VQQDEw02OTBhMjE3Yi0wYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTzpOnxNvt1QmFMKCH9pm4EXEnAfKKHHkmNd7srHmPHjZGCp0IO7OY/LhbCE GzLc1QCILq/M9KvVgy5tEetv3sQZCGE/v7GiCapqJc8hDXxtUhzzKl4ucRiOoiNe nMaKA8Dk3+2o0cNqmkyZxnLxUt60hBh7EPoIcDQOrFRWk3XQk3fnt5HvFrH0sy4E mpGomIQWlxoI+oMh3QuDjvxuoEhQbYiDwj7IP+vC0vnRajaT19j79QGOG1fF+iQB mewiSjMCOeUlZhm4z7GkvpyUWsvBB1b10X/xwZr19KvBBTCtRCm2m0XeHWpvoUKJ mDHZKkqzCOyo2VM5BSgeBeAvTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy8zpxF TqazZEDdBaeZkCCGXSBEMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkI3MC8yOTgzNjQ3QzgzOEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRo LTNoc1VtMjk3eHNFV1NpcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqOgMgKt4nxEAQTu2q26kyZkLwQAq9RYIcJto4MjDOwIgqpCUogJlq 7Pk2HwYQJTsXPFK4uaBujYMVtsNSaB/41tGOV53uZAMdsS8RocblqxfQR0TpLBet StSBv0LLgU8tLerpomGPFwDHTAE0uJ5DYBF64WITRXrUlvdv10Nz+oo4L5Oxwva7 UG/gYxRfYMSIEXpwASri8qa3cV5VzOqXEwttia8HyONwyNDzDI0TyJAKq02YzeA8 FSA/ukdHV/RQZIKf+LjPk5p5ClEF8sdiH3yKdgnM0R5QNYecF+2BYP/UjCl41gT8 1DKPHI85mxF1miM4Ow/IGNlHXjodLQk4 -----END CERTIFICATE-----Generated at Wed Nov 5 04:27:51 2025 by rpki-client