$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft File: XcAwMzGJiu_bheTZFABriTdr7-E.mft (raw, json) Hash identifier: BgXJzhP0nrF6LRAxnEMujx4pCoaY0y1GjvMbwmKNHSg= Subject key identifier: BB:82:19:09:87:AD:55:41:8C:74:2C:B5:C8:C4:38:67:F8:BC:01:23 Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft Manifest number: 06AD Signing time: Tue 04 Nov 2025 22:22:23 +0000 Manifest this update: Tue 04 Nov 2025 22:22:23 +0000 Manifest next update: Tue 11 Nov 2025 22:22:23 +0000 Files and hashes: 1: XcAwMzGJiu_bheTZFABriTdr7-E.crl (hash: jRzcjyqxervHNgsHYV1JLUD6e0Hic2dsQhAhFxbm+Zg=) 2: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (hash: 7yUDpuvZHp5QBz3hhy/vTUHq3B8un1JwIKUsswRBXgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Validity Not Before: Nov 4 22:22:23 2025 GMT Not After : Nov 11 22:22:23 2025 GMT Subject: CN=690a7c9f-f57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:77:77:b7:a7:ec:17:3a:2b:83:f3:25:13: 7b:e1:67:b0:a6:a0:5a:51:55:b7:8d:fc:4b:8d:3d: 1e:84:b1:57:ee:cb:b4:53:59:00:68:18:15:01:f5: 2f:22:c6:09:7c:83:3f:86:a6:b2:b2:9b:25:c5:d4: 2e:35:74:6e:c8:32:4b:60:20:f9:af:90:07:24:e5: 4f:48:96:8c:fb:ae:4b:c8:46:2f:dc:1c:14:df:01: 3e:53:0e:b9:c4:e5:f2:5a:70:82:ff:3c:e0:64:36: fc:da:c2:ed:29:94:e9:58:d8:bd:5e:ab:ae:7b:ff: b4:6b:6b:16:b8:26:e1:1b:d2:9b:dd:98:47:58:c4: 38:25:3c:95:fc:83:56:01:ed:86:88:f6:7d:27:49: 9c:6f:d2:a9:fc:35:b5:52:65:3b:40:a5:c7:8f:8d: cb:4c:3e:d6:d2:69:ef:28:86:38:62:c6:af:e0:14: 18:bb:50:c7:46:23:22:be:f0:c9:89:14:a4:44:b1: 5c:62:e4:d6:fc:5f:d2:a6:bd:fd:84:88:98:d2:4b: ec:62:13:2d:14:ca:6d:b2:ba:af:d9:4c:56:de:06: 1b:1d:ff:1a:d3:7a:5a:c5:30:71:1e:b3:d4:8c:61: fa:87:1d:bc:c4:7e:b9:d3:b4:ed:2f:58:14:0f:da: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:82:19:09:87:AD:55:41:8C:74:2C:B5:C8:C4:38:67:F8:BC:01:23 X509v3 Authority Key Identifier: keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:57:d1:77:11:46:64:da:52:e8:bb:03:cd:17:b6:bf:32:1b: 60:af:8c:8e:8a:ae:d6:e2:b7:d4:17:7e:a7:28:36:82:1f:d5: 7e:7a:d1:70:04:d1:f7:fc:40:7b:0b:04:a8:c7:64:fb:c2:b1: ce:3f:ee:9c:07:7f:34:e8:f8:53:fa:7f:78:24:14:61:40:cb: 96:f8:97:b9:5c:87:c3:b7:bb:55:21:0f:93:f9:84:ee:ef:b8: ab:c0:c3:91:03:64:be:d6:3b:2a:f5:74:0a:8e:ee:df:34:5f: ff:e0:64:e3:2a:7f:4a:7a:72:eb:bd:57:f5:0c:70:ec:4a:92: 0a:eb:be:e0:5f:7e:9d:11:3a:cf:dc:9f:16:38:b1:df:cd:0a: 17:a4:ef:01:3f:bc:b0:7a:30:49:7f:37:33:11:ac:7f:f2:f5: 53:fe:52:a5:30:fe:b0:0c:39:4b:95:38:6f:04:92:b0:ee:0a: fd:21:50:e4:f6:72:b0:fe:02:62:3f:55:85:fd:8c:fb:29:ee: 4e:fe:e2:df:74:96:b1:bc:89:d4:7b:85:ce:55:3a:26:f5:bf: 5f:8c:10:b4:3a:47:18:da:0d:f1:96:e2:35:88:33:3f:d1:76: 22:aa:79:ec:ab:aa:7a:8c:39:04:73:f8:ad:9d:ad:11:b1:d3: 64:2f:c1:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCRDQxMTAvBgNVBAUTKDVEQzAzMDMzMzE4OThBRUZEQjg1RTREOTE0MDA2Qjg5 Mzc2QkVGRTEwHhcNMjUxMTA0MjIyMjIzWhcNMjUxMTExMjIyMjIzWjAYMRYwFAYD VQQDEw02OTBhN2M5Zi1mNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQd3d7en7Bc6K4PzJRN74WewpqBaUVW3jfxLjT0ehLFX7su0U1kAaBgVAfUv IsYJfIM/hqayspslxdQuNXRuyDJLYCD5r5AHJOVPSJaM+65LyEYv3BwU3wE+Uw65 xOXyWnCC/zzgZDb82sLtKZTpWNi9Xquue/+0a2sWuCbhG9Kb3ZhHWMQ4JTyV/INW Ae2GiPZ9J0mcb9Kp/DW1UmU7QKXHj43LTD7W0mnvKIY4Ysav4BQYu1DHRiMivvDJ iRSkRLFcYuTW/F/Spr39hIiY0kvsYhMtFMptsrqv2UxW3gYbHf8a03paxTBxHrPU jGH6hx28xH6507TtL1gUD9pytQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuCGQmH rVVBjHQstcjEOGf4vAEjMB8GA1UdIwQYMBaAFF3AMDMxiYrv24Xk2RQAa4k3a+/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENC80RTg3QTQ2QTg2 QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1X2JoZVRaRkFCcmlUZHI3 LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjQXdNekdKaXVfYmhlVFpGQUJyaVRkcjctRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JENC80RTg3QTQ2QTg2QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1 X2JoZVRaRkFCcmlUZHI3LUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMV9F3EUZk2lLouwPNF7a/Mhtgr4yOiq7W4rfUF36nKDaCH9V+etFw BNH3/EB7CwSox2T7wrHOP+6cB3806PhT+n94JBRhQMuW+Je5XIfDt7tVIQ+T+YTu 77irwMORA2S+1jsq9XQKju7fNF//4GTjKn9KenLrvVf1DHDsSpIK677gX36dETrP 3J8WOLHfzQoXpO8BP7ywejBJfzczEax/8vVT/lKlMP6wDDlLlThvBJKw7gr9IVDk 9nKw/gJiP1WF/Yz7Ke5O/uLfdJaxvInUe4XOVTom9b9fjBC0OkcY2g3xluI1iDM/ 0XYiqnnsq6p6jDkEc/itna0RsdNkL8Fo -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:22 2025 by rpki-client