$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json) Hash identifier: RsI1odun4GKcTgHv32p1A3imgAttvzaa6sNg4mSaOZw= Subject key identifier: 40:57:90:01:0A:7C:72:ED:95:33:E8:05:6C:EE:F9:01:2B:83:F9:A2 Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 1326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft Manifest number: 4848 Signing time: Mon 03 Nov 2025 08:26:51 +0000 Manifest this update: Mon 03 Nov 2025 08:26:50 +0000 Manifest next update: Mon 10 Nov 2025 08:26:50 +0000 Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: /6JFvUdumObvkpjA2nmPqZwAXrNz5SVP7ZKhJD2ucn8=) 2: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: hei/cgFAUZIGCHaatDAW34u7WoWx8+SizsC0TsbKAW0=) 3: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: GOy9OboZpKQbKQnVi7OFhab7NMhnYhuV2h2uNtdNUpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4902 (0x1326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Nov 3 08:26:50 2025 GMT Not After : Nov 10 08:26:50 2025 GMT Subject: CN=6908674b-76bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:06:3c:95:e0:45:67:bf:3b:84:6f:e9:85:46: 05:7d:3d:3c:bc:4e:5f:ec:16:60:88:d6:08:26:b8: 4d:14:1b:7a:6f:4c:a7:a2:0a:97:c0:50:4a:0c:e4: e5:45:11:3e:7c:91:54:9d:96:bb:a0:30:fc:94:a3: 20:bf:e6:a1:37:1a:0f:ce:1c:da:e3:7b:25:2c:ad: a3:7a:b5:ad:86:47:19:61:10:18:45:ae:06:1e:18: 1b:e7:5b:82:96:92:41:e5:0f:3b:92:92:e8:bc:db: d7:71:6b:83:0d:d9:85:3f:4b:d9:e3:4a:51:63:07: b9:63:b2:f2:01:8b:86:de:94:ae:b9:ef:e3:46:60: 72:aa:6d:a9:10:32:f5:72:39:25:d0:e3:bf:31:6a: 23:88:9f:99:ff:9e:be:a4:3d:9a:d2:20:ff:7b:f4: ae:61:7c:b9:58:78:84:b2:09:a9:b6:ae:7e:2a:f6: ca:cc:08:87:dd:f9:4f:75:60:9b:62:2c:10:40:85: a3:7f:e2:4a:0a:35:00:ff:1f:31:f7:e6:aa:a3:d1: b8:ba:57:a5:6f:4d:97:5f:5e:3d:f4:0e:10:54:4c: 44:51:0d:9c:bb:2f:2d:11:59:02:c7:9b:0d:e0:9d: a8:40:91:41:37:ad:a6:12:2f:df:b6:fa:65:42:d9: a5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:57:90:01:0A:7C:72:ED:95:33:E8:05:6C:EE:F9:01:2B:83:F9:A2 X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8a:1a:aa:e0:76:02:f2:26:fb:ce:85:3c:0b:82:be:56:a0: c8:11:df:f2:8b:4f:19:af:d8:36:c1:75:18:e5:bd:ad:5c:e5: da:ba:6f:97:21:fa:5f:0c:49:e1:79:ca:70:36:11:c3:9e:76: 48:5e:5a:c6:4f:77:06:83:8f:a0:7c:34:f3:70:9a:4d:8a:8d: 8b:68:91:f4:8e:b4:f6:d8:8d:3d:b7:3d:2b:0e:ad:1f:b6:2e: 93:a0:12:19:93:c7:7a:ed:d3:ff:cf:8b:1c:33:47:95:c5:af: 30:42:c1:f4:33:36:35:3b:8c:5b:95:f1:d2:8c:4a:e9:9f:a7: 34:5c:1e:77:ec:96:b5:44:20:d7:48:e6:c9:c0:0f:22:4b:a7: e8:8b:24:a4:79:f7:74:c1:02:32:25:95:85:f8:33:c0:a0:80: 14:40:d2:67:bf:36:1f:5b:bd:c6:8f:94:6e:e2:58:76:5d:37: ba:42:06:21:dd:ee:18:fb:6c:3c:ce:6b:6f:42:f9:71:2e:70: dc:15:a4:bd:e9:cb:33:71:ad:37:7b:f3:3f:5b:63:fc:32:33: 32:9f:72:c0:87:97:14:aa:3f:0b:4e:01:c8:f0:23:7d:27:40: 60:1e:96:7b:87:8d:f9:27:60:df:dc:2d:b4:9f:3f:24:f3:34: b3:66:fe:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjUxMTAzMDgyNjUwWhcNMjUxMTEwMDgyNjUwWjAYMRYwFAYD VQQDEw02OTA4Njc0Yi03NmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wY8leBFZ787hG/phUYFfT08vE5f7BZgiNYIJrhNFBt6b0ynogqXwFBKDOTl RRE+fJFUnZa7oDD8lKMgv+ahNxoPzhza43slLK2jerWthkcZYRAYRa4GHhgb51uC lpJB5Q87kpLovNvXcWuDDdmFP0vZ40pRYwe5Y7LyAYuG3pSuue/jRmByqm2pEDL1 cjkl0OO/MWojiJ+Z/56+pD2a0iD/e/SuYXy5WHiEsgmptq5+KvbKzAiH3flPdWCb YiwQQIWjf+JKCjUA/x8x9+aqo9G4ulelb02XX1499A4QVExEUQ2cuy8tEVkCx5sN 4J2oQJFBN62mEi/ftvplQtmlAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBXkAEK fHLtlTPoBWzu+QErg/miMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB eTc0T1ExbW5lQnBHSkxuODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgihqq4HYC8ib7zoU8C4K+VqDIEd/yi08Zr9g2wXUY5b2tXOXaum+X IfpfDEnhecpwNhHDnnZIXlrGT3cGg4+gfDTzcJpNio2LaJH0jrT22I09tz0rDq0f ti6ToBIZk8d67dP/z4scM0eVxa8wQsH0MzY1O4xblfHSjErpn6c0XB537Ja1RCDX SObJwA8iS6foiySkefd0wQIyJZWF+DPAoIAUQNJnvzYfW73Gj5Ru4lh2XTe6QgYh 3e4Y+2w8zmtvQvlxLnDcFaS96cszca03e/M/W2P8MjMyn3LAh5cUqj8LTgHI8CN9 J0BgHpZ7h435J2Df3C20nz8k8zSzZv4Q -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:58 2025 by rpki-client