$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: Z/PtGzouCG2dyOdPj4tEKieYGKCeUM4P/rUDT5+t7D0= Subject key identifier: 41:17:A0:7C:38:3E:16:D4:A3:BA:C6:4E:85:DD:8F:19:0D:DB:7C:D9 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 1402 Signing time: Tue 04 Nov 2025 19:20:03 +0000 Manifest this update: Tue 04 Nov 2025 19:20:03 +0000 Manifest next update: Tue 11 Nov 2025 19:20:03 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: Usgv1t/1vNYob5DPVyfuK3dd24JSLIooHf++KYUajhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2888 (0xb48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Nov 4 19:20:03 2025 GMT Not After : Nov 11 19:20:03 2025 GMT Subject: CN=690a51e3-12cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:80:2a:72:f5:91:07:99:cb:bc:63:bb:1a: 46:99:fb:ef:50:70:ef:ac:d9:53:6d:34:62:a9:66: 88:fd:34:01:00:81:e5:8a:5e:cd:04:04:33:62:77: 96:d2:95:6b:4e:70:d7:6b:d6:ae:38:59:16:4f:a2: d4:32:1e:c4:5d:10:1a:c9:7d:dc:ac:f8:b3:df:1e: 8c:05:47:d8:ad:d7:59:b9:27:d5:26:1b:d4:99:b9: 5a:93:46:33:35:3f:c3:00:1b:4b:91:62:18:62:bd: 1d:54:35:28:dd:6b:d2:0b:64:4f:4e:1f:3e:95:36: 40:ee:2c:26:79:a9:75:1a:a9:9b:72:29:e5:2b:d2: 3c:3d:4f:77:5f:63:9f:3c:28:75:ca:bf:a6:f7:f2: 42:c2:cc:b0:4e:52:e8:cf:90:77:47:78:35:74:62: 31:60:52:36:32:73:5f:e3:80:ff:d8:e8:35:70:be: 86:5f:6e:93:f5:ab:1f:1e:f3:12:38:80:75:5f:d0: 02:95:dd:4b:4b:5d:de:45:8d:4d:52:44:72:25:ed: 7a:51:33:75:01:dd:49:2c:97:9e:56:d8:07:cf:fc: 95:af:58:3d:f5:3a:13:9c:da:b5:16:d8:a5:fe:d3: 33:99:91:37:37:8d:38:1d:eb:48:ec:19:fe:b1:58: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:A0:7C:38:3E:16:D4:A3:BA:C6:4E:85:DD:8F:19:0D:DB:7C:D9 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:74:7a:43:a9:ed:1d:32:85:78:11:c9:20:2f:26:93:ab:a4: 6e:a2:58:61:4b:6a:08:b1:0a:d0:d4:6d:85:e1:11:d9:dd:2c: 1e:db:4c:f8:34:8d:e7:78:8e:a5:29:4b:76:33:68:fe:c8:28: b1:1a:29:21:8d:9c:16:c2:3f:05:fd:ff:22:9e:b9:9d:61:5d: ca:40:e6:72:88:99:13:a3:c6:4d:e8:12:b3:7b:3c:74:e8:c5: 58:e5:fc:87:e3:4e:11:22:76:8c:85:f7:35:6c:7d:97:03:a8: e8:00:6f:89:21:e5:05:f5:58:3a:22:e3:78:a0:11:40:7a:29: 21:66:f8:41:6f:bc:04:64:7f:2a:13:73:de:4f:34:13:c5:d4: a4:11:9a:2c:b6:7c:a3:6e:57:1b:58:ed:55:12:51:98:a4:79: 40:f8:65:5c:8a:ac:f6:4c:26:ed:f5:23:0a:db:08:b7:0e:4f: e5:aa:dc:25:92:57:3f:b1:95:41:c0:a0:f8:f0:d7:6d:f1:1c: dc:98:10:8f:d7:b3:5d:44:7e:9b:45:f7:bc:90:79:76:69:04: 08:91:2c:07:b1:6b:c7:a4:fd:8a:cf:04:ac:86:f5:28:6a:c5: 3f:0e:ee:59:08:19:70:c7:78:62:27:0e:16:12:04:a5:30:d0: c7:21:cf:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjUxMTA0MTkyMDAzWhcNMjUxMTExMTkyMDAzWjAYMRYwFAYD VQQDEw02OTBhNTFlMy0xMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvweAKnL1kQeZy7xjuxpGmfvvUHDvrNlTbTRiqWaI/TQBAIHlil7NBAQzYneW 0pVrTnDXa9auOFkWT6LUMh7EXRAayX3crPiz3x6MBUfYrddZuSfVJhvUmblak0Yz NT/DABtLkWIYYr0dVDUo3WvSC2RPTh8+lTZA7iwmeal1GqmbcinlK9I8PU93X2Of PCh1yr+m9/JCwsywTlLoz5B3R3g1dGIxYFI2MnNf44D/2Og1cL6GX26T9asfHvMS OIB1X9ACld1LS13eRY1NUkRyJe16UTN1Ad1JLJeeVtgHz/yVr1g99ToTnNq1Ftil /tMzmZE3N404HetI7Bn+sVgkGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEXoHw4 PhbUo7rGToXdjxkN23zZMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0dHpDqe0dMoV4EckgLyaTq6RuolhhS2oIsQrQ1G2F4RHZ3Swe20z4 NI3neI6lKUt2M2j+yCixGikhjZwWwj8F/f8inrmdYV3KQOZyiJkTo8ZN6BKzezx0 6MVY5fyH404RInaMhfc1bH2XA6joAG+JIeUF9Vg6IuN4oBFAeikhZvhBb7wEZH8q E3PeTzQTxdSkEZostnyjblcbWO1VElGYpHlA+GVciqz2TCbt9SMK2wi3Dk/lqtwl klc/sZVBwKD48Ndt8RzcmBCP17NdRH6bRfe8kHl2aQQIkSwHsWvHpP2KzwSshvUo asU/Du5ZCBlwx3hiJw4WEgSlMNDHIc/s -----END CERTIFICATE-----Generated at Wed Nov 5 04:12:41 2025 by rpki-client