$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: 4SfPq2c9LRMQtwSSTDmtq8v22/8KN3TdFYNh3mN0ROI= Subject key identifier: B5:CD:E6:A1:58:E6:A6:EB:72:4E:0D:3D:D4:9E:94:73:D8:B1:CB:C8 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 194A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 16D1 Signing time: Tue 04 Nov 2025 16:59:01 +0000 Manifest this update: Tue 04 Nov 2025 16:59:00 +0000 Manifest next update: Tue 11 Nov 2025 16:59:00 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: 1YhSsVCkbtMDa6fyoALulFWRiTyFQFBycOTm/hKO2hQ=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: Ju8go9OBKML8ykj6qnfvaBG6KjObv0i9KK2dLnaHCbM=) 4: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 5: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 6: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 7: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 8: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 10: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 11: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 12: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 14: 4A1187B26E7811F09E744A82C4F9AE02.roa (hash: OQY4xPdf9rHdF59/a70j65T2nG8AtOe+ff57jJsTx9k=) 15: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 16: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 20: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: CMTbivAHiLt7IGuG9Zl/8u4+Wi8bG4wbS4CS9kYqibQ=) 21: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 22: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 23: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 24: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 25: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 26: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 27: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6474 (0x194a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Nov 4 16:59:00 2025 GMT Not After : Nov 11 16:59:00 2025 GMT Subject: CN=690a30d5-887a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7d:d3:96:2e:ec:03:3b:06:6c:58:60:78:3c: 6f:8b:78:93:b6:82:f7:5a:93:04:c3:58:e7:a4:76: de:4d:41:b1:a5:e9:d3:f3:fc:14:20:8a:aa:91:85: cc:d7:ec:ef:98:60:2f:2c:49:e9:2f:ca:a0:bc:36: 5c:3d:20:06:82:b6:cc:de:c1:01:83:9d:57:6c:76: 74:75:e6:1d:c2:4d:ac:1b:fb:26:11:8c:fa:6f:68: 3b:45:70:bb:89:9d:91:3a:bb:53:ae:d3:2e:08:fa: 18:bd:ea:a9:9f:86:67:cb:b1:4f:8f:f6:67:ce:df: c2:9b:a8:8e:1f:f5:0d:8f:27:df:4a:61:63:29:42: 6e:9b:2a:d6:f4:59:b8:e3:d4:25:79:fa:e7:fa:f4: f7:32:3f:1d:19:75:d2:c5:77:d9:04:8d:c7:ef:17: b3:c7:01:d7:1d:c4:84:17:5d:9e:2f:dc:a5:ff:31: 27:94:f9:a2:64:ab:47:9e:b3:26:48:06:7f:60:77: 24:4c:3c:88:e9:c0:d7:77:22:b6:bb:66:23:14:34: d2:b4:7d:f8:de:4c:49:ae:9d:17:40:48:20:81:36: 6a:1e:30:fb:a4:cb:0f:0b:31:09:4d:66:74:2d:36: 28:13:80:52:77:65:7a:86:33:73:5c:98:48:d6:8d: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CD:E6:A1:58:E6:A6:EB:72:4E:0D:3D:D4:9E:94:73:D8:B1:CB:C8 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:57:37:2b:bc:44:a3:15:65:d3:48:21:ac:d3:73:86:12:33: 05:a2:57:d0:7f:fd:d7:5c:e0:bd:cd:96:b9:54:0c:9e:b3:23: 61:bb:a3:dc:4b:8a:00:71:77:93:01:4e:23:73:89:4b:43:75: 59:79:b9:d2:05:92:2c:a0:15:da:82:7a:bb:9b:33:f7:04:d8: 89:a4:28:da:6a:cd:1a:27:99:29:c5:93:5a:f2:1c:99:25:a5: 3b:fb:2b:32:3a:0a:7b:58:ce:a8:5a:91:43:de:5f:b7:eb:7c: d6:8f:77:70:c8:0a:f4:29:d4:2a:f5:e6:cf:12:3a:9d:03:c7: 6c:be:a5:f2:ff:7f:3d:12:2a:13:de:02:8c:62:af:5d:84:77: 9d:a5:02:03:82:68:53:40:37:7f:13:b4:af:1d:84:58:08:07: 97:30:82:05:b8:2a:0f:34:85:c5:5d:ae:63:b5:33:68:ec:3c: ab:dd:82:ec:7e:ee:5c:1c:23:13:ed:11:74:6b:28:1a:0a:16: d8:0b:78:6c:d1:4e:a4:c5:f8:1c:56:ee:1f:76:da:34:09:ea: e0:aa:cf:dc:b5:34:56:dd:a6:e8:a0:96:7a:35:97:50:e6:af: 6d:88:fe:db:f5:e7:49:36:90:b0:1f:c7:61:9c:71:be:f0:58: 2d:52:66:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUxMTA0MTY1OTAwWhcNMjUxMTExMTY1OTAwWjAYMRYwFAYD VQQDEw02OTBhMzBkNS04ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA333Tli7sAzsGbFhgeDxvi3iTtoL3WpMEw1jnpHbeTUGxpenT8/wUIIqqkYXM 1+zvmGAvLEnpL8qgvDZcPSAGgrbM3sEBg51XbHZ0deYdwk2sG/smEYz6b2g7RXC7 iZ2ROrtTrtMuCPoYveqpn4Zny7FPj/Znzt/Cm6iOH/UNjyffSmFjKUJumyrW9Fm4 49Qlefrn+vT3Mj8dGXXSxXfZBI3H7xezxwHXHcSEF12eL9yl/zEnlPmiZKtHnrMm SAZ/YHckTDyI6cDXdyK2u2YjFDTStH343kxJrp0XQEgggTZqHjD7pMsPCzEJTWZ0 LTYoE4BSd2V6hjNzXJhI1o0xSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXN5qFY 5qbrck4NPdSelHPYscvIMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaVzcrvESjFWXTSCGs03OGEjMFolfQf/3XXOC9zZa5VAyesyNhu6Pc S4oAcXeTAU4jc4lLQ3VZebnSBZIsoBXagnq7mzP3BNiJpCjaas0aJ5kpxZNa8hyZ JaU7+ysyOgp7WM6oWpFD3l+363zWj3dwyAr0KdQq9ebPEjqdA8dsvqXy/389EioT 3gKMYq9dhHedpQIDgmhTQDd/E7SvHYRYCAeXMIIFuCoPNIXFXa5jtTNo7Dyr3YLs fu5cHCMT7RF0aygaChbYC3hs0U6kxfgcVu4fdto0Cergqs/ctTRW3abooJZ6NZdQ 5q9tiP7b9edJNpCwH8dhnHG+8FgtUmbl -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:40 2025 by rpki-client