$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: n5R6wnfklQylsXngwYm20/Cm4fD0rqJiPtd8U0VzYj8= Subject key identifier: 49:6E:6E:E7:6C:1F:74:58:39:FA:3B:A6:E3:AB:1B:52:4D:D4:89:6D Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 08BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 08B3 Signing time: Sun 02 Nov 2025 20:26:51 +0000 Manifest this update: Sun 02 Nov 2025 20:26:50 +0000 Manifest next update: Sun 09 Nov 2025 20:26:50 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: SDQA9wn+cKTf2uWIeiDvoxEYQCQCVIvmpO0rPLRrTtU=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: uyDMO7ckw/0z5jl/cntcgb/65TbIdBVdA1r68qbPTT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Nov 2 20:26:50 2025 GMT Not After : Nov 9 20:26:50 2025 GMT Subject: CN=6907be8a-006d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:b4:3e:fe:d6:e8:c1:46:9a:33:80:e2:04: 9a:68:c9:a8:dd:3a:82:d0:02:8c:43:1a:8d:b1:63: fb:23:78:f9:10:d1:45:c2:60:44:48:ce:6b:04:73: 89:3e:2f:9f:fb:9b:2f:58:7c:87:e6:68:65:73:c0: da:b6:d6:69:af:1f:f1:41:5a:eb:a4:1b:a0:8a:1e: ba:9c:59:e7:f3:13:05:61:2a:52:ce:9a:b9:77:fe: 48:d0:19:71:e1:d4:50:c3:0a:2e:fb:35:6a:e6:5d: 15:76:52:96:94:9f:d1:84:91:4c:23:bc:25:af:1e: 9e:ee:b5:c4:04:8f:d9:86:58:81:a7:f6:85:83:1d: 82:fe:98:2c:71:10:7e:b6:f3:3c:df:b4:f8:35:6a: 10:50:bc:c3:90:79:e3:63:d2:a1:e0:76:c2:51:a1: 39:04:ec:4e:a5:f3:42:65:02:d3:db:b8:7a:85:40: 17:63:65:1f:5e:cf:b2:09:5e:7b:ee:96:30:9a:80: b9:0b:f6:18:ec:32:f8:ae:63:43:77:1b:13:1a:15: 53:bb:98:12:fa:86:8b:dd:70:02:6a:4f:72:ed:43: cd:d9:e1:62:cf:8f:7a:7a:19:07:6b:07:8e:3c:c6: e1:bf:70:1d:83:6d:92:bb:96:96:ad:3f:b5:70:89: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6E:6E:E7:6C:1F:74:58:39:FA:3B:A6:E3:AB:1B:52:4D:D4:89:6D X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:06:04:ff:6f:a1:88:15:dc:e2:86:b7:a1:ca:e0:42:1f:be: 15:0a:3f:ca:7c:dc:51:77:af:72:4e:b8:7e:a2:11:c6:c0:e7: 02:6e:c9:f9:3b:a0:59:bd:21:6b:43:89:c4:ec:70:f8:4f:2a: f7:ed:83:18:b3:03:5c:cb:78:46:5c:0f:eb:fa:b8:d7:33:42: f3:ca:af:0c:0c:60:e5:d9:8a:ea:56:8f:19:7e:c3:b5:82:1f: 77:6d:ec:09:df:b8:a3:88:37:69:f9:a3:e7:03:2d:fd:af:81: 4a:01:a8:ac:fa:6c:5a:b3:21:7c:6e:7e:71:e7:b3:b6:7a:b3: 6b:19:87:5e:6e:f9:73:0c:7c:92:83:f7:0b:b0:43:77:5d:ab: a7:b2:96:92:a6:4e:a0:e3:83:8d:65:71:5a:c1:c3:b9:90:b3: a2:ff:7a:37:d1:ce:dc:18:a2:1a:89:23:ae:d1:ec:a1:ba:f9: 3a:ed:2c:cd:07:7f:99:9e:0a:01:3b:4d:56:a9:cb:73:54:1b: bf:7c:8a:3f:ed:db:00:b6:7c:00:9d:a8:6c:4c:8f:f6:91:3f: 31:0f:48:6d:63:95:6f:f8:57:4f:0f:ed:7f:e3:20:3c:f0:14: 67:4a:c9:50:73:29:02:44:69:05:dd:32:6a:30:bb:22:ce:dc: 34:0b:b5:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjUxMTAyMjAyNjUwWhcNMjUxMTA5MjAyNjUwWjAYMRYwFAYD VQQDEw02OTA3YmU4YS0wMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7i0Pv7W6MFGmjOA4gSaaMmo3TqC0AKMQxqNsWP7I3j5ENFFwmBESM5rBHOJ Pi+f+5svWHyH5mhlc8DattZprx/xQVrrpBugih66nFnn8xMFYSpSzpq5d/5I0Blx 4dRQwwou+zVq5l0VdlKWlJ/RhJFMI7wlrx6e7rXEBI/ZhliBp/aFgx2C/pgscRB+ tvM837T4NWoQULzDkHnjY9Kh4HbCUaE5BOxOpfNCZQLT27h6hUAXY2UfXs+yCV57 7pYwmoC5C/YY7DL4rmNDdxsTGhVTu5gS+oaL3XACak9y7UPN2eFiz496ehkHaweO PMbhv3Adg22Su5aWrT+1cIkgzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElubuds H3RYOfo7puOrG1JN1IltMB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNBgT/b6GIFdzihrehyuBCH74VCj/KfNxRd69yTrh+ohHGwOcCbsn5 O6BZvSFrQ4nE7HD4Tyr37YMYswNcy3hGXA/r+rjXM0Lzyq8MDGDl2YrqVo8ZfsO1 gh93bewJ37ijiDdp+aPnAy39r4FKAais+mxasyF8bn5x57O2erNrGYdebvlzDHyS g/cLsEN3XaunspaSpk6g44ONZXFawcO5kLOi/3o30c7cGKIaiSOu0eyhuvk67SzN B3+ZngoBO01WqctzVBu/fIo/7dsAtnwAnahsTI/2kT8xD0htY5Vv+FdPD+1/4yA8 8BRnSslQcykCRGkF3TJqMLsiztw0C7Xw -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:10 2025 by rpki-client