$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft File: XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json) Hash identifier: Xp/8WGUB2Ko/monmmeBTZmP6Qs+uM7ruSsS6DJTi+tE= Subject key identifier: 38:B2:B3:71:15:80:04:F8:6F:46:4B:17:71:55:26:74:47:1B:A4:A6 Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F Certificate issuer: /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft Manifest number: 0316 Signing time: Wed 05 Nov 2025 01:13:53 +0000 Manifest this update: Wed 05 Nov 2025 01:13:53 +0000 Manifest next update: Wed 12 Nov 2025 01:13:53 +0000 Files and hashes: 1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: oFklETS10dDZAUllzmUYgIWu+DIraN1WfaYE4+i4Wfk=) 2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: nZ6WbCIcnJ/FBBpCbBgjvy3HpKuHRhBq1WSGZ+ZBH8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Validity Not Before: Nov 5 01:13:53 2025 GMT Not After : Nov 12 01:13:53 2025 GMT Subject: CN=690aa4d1-47d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:1c:d4:42:d7:2d:66:bf:30:68:75:9f:3d: 70:da:b7:0a:9a:23:c2:57:e0:40:30:32:fc:a5:11: 56:39:87:14:0d:e6:40:b1:d0:5e:74:c7:57:16:e5: c5:60:eb:86:c1:00:fe:2c:1d:fb:ca:65:10:dc:8d: 84:63:56:af:4d:db:07:d8:bc:ab:17:26:b9:63:cc: d7:84:27:ef:7d:ed:87:e9:8b:b7:b3:37:4c:9f:5d: 3f:0a:ee:39:07:73:72:0b:9b:14:d9:40:ed:6b:ce: 18:44:71:ef:e6:6e:cb:9a:ec:93:90:e4:1a:46:43: 1f:3f:51:0c:15:36:83:85:9c:7a:82:24:e1:0f:19: 6f:43:2b:42:e8:03:00:c5:e2:6b:11:1e:95:0a:fc: eb:f3:d7:f8:66:61:87:0b:97:cd:87:13:67:4c:32: 01:2c:d6:f7:ff:3c:4f:53:cf:cc:81:36:fc:5a:c7: a3:90:d2:81:72:26:a7:7f:68:42:51:26:d9:ee:f8: e4:e6:8a:3d:e1:c8:f3:9d:d5:38:f7:2b:e3:f2:8b: 90:ea:35:ff:c2:f3:68:77:ee:12:1b:a6:19:f4:08: 05:72:50:97:3b:67:40:c9:47:68:66:da:10:82:f4: 98:b8:20:9f:b1:c3:33:d7:a2:a1:2c:2a:f2:6b:a1: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B2:B3:71:15:80:04:F8:6F:46:4B:17:71:55:26:74:47:1B:A4:A6 X509v3 Authority Key Identifier: keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b6:20:2a:6d:89:2a:12:b8:19:3d:32:b5:a5:ba:d6:de:14: 4b:40:46:a0:2c:12:4a:ae:a1:5e:e0:78:b2:6d:36:ed:97:aa: 74:95:c4:e9:79:b2:ea:56:ca:46:39:fb:b2:8c:a8:01:c4:fc: a7:0a:ac:ad:26:53:52:d6:13:01:ab:2b:1d:35:60:d4:ef:bb: 3f:61:49:8f:b5:45:f4:00:c6:f2:49:e0:6c:00:0e:9b:f8:e6: 4a:2b:0b:b5:0b:92:4e:9a:65:f9:c7:e8:6b:a5:d8:2f:b5:e2: dd:8e:d3:ff:9d:13:53:e4:47:15:48:dd:4b:2e:37:50:10:4e: 3b:be:81:1f:52:37:c3:2c:ad:66:bf:86:f3:58:63:1c:b8:7b: 12:db:78:da:7d:18:81:d1:54:4e:15:64:16:27:6b:95:2b:a5: e0:51:03:ad:43:74:cd:57:9d:1d:6c:36:74:12:b6:9c:3d:9c: f6:28:4b:ee:99:28:25:1a:88:51:da:20:c6:0c:5a:7f:f2:bd: e5:25:45:ba:7e:7c:69:e1:08:0f:85:96:d8:a9:45:d2:ad:78: 55:bd:ff:5b:8f:7d:9c:22:3c:64:15:45:8b:fb:60:d8:cc:75: 2f:92:e8:7d:5b:af:9c:1d:f2:5c:55:92:04:21:8f:ce:bc:fe: 99:36:b1:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNzMxMTAvBgNVBAUTKDVFNzA5OTQ5QkFBNDBBN0Q0N0Q0NEQyMTE2OTBCMzc3 RTA1MUM0NUYwHhcNMjUxMTA1MDExMzUzWhcNMjUxMTEyMDExMzUzWjAYMRYwFAYD VQQDEw02OTBhYTRkMS00N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxMc1ELXLWa/MGh1nz1w2rcKmiPCV+BAMDL8pRFWOYcUDeZAsdBedMdXFuXF YOuGwQD+LB37ymUQ3I2EY1avTdsH2LyrFya5Y8zXhCfvfe2H6Yu3szdMn10/Cu45 B3NyC5sU2UDta84YRHHv5m7LmuyTkOQaRkMfP1EMFTaDhZx6giThDxlvQytC6AMA xeJrER6VCvzr89f4ZmGHC5fNhxNnTDIBLNb3/zxPU8/MgTb8WsejkNKBcianf2hC USbZ7vjk5oo94cjzndU49yvj8ouQ6jX/wvNod+4SG6YZ9AgFclCXO2dAyUdoZtoQ gvSYuCCfscMz16KhLCrya6EeRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiys3EV gAT4b0ZLF3FVJnRHG6SmMB8GA1UdIwQYMBaAFF5wmUm6pAp9R9RNIRaQs3fgUcRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM3My84MjE0NTdEMkYx MzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0NuMUgxRTBoRnBDemQtQlJ4 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huQ1pTYnFrQ24xSDFFMGhGcEN6ZC1CUnhGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM3My84MjE0NTdEMkYxMzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0Nu MUgxRTBoRnBDemQtQlJ4RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmtiAqbYkqErgZPTK1pbrW3hRLQEagLBJKrqFe4HiybTbtl6p0lcTp ebLqVspGOfuyjKgBxPynCqytJlNS1hMBqysdNWDU77s/YUmPtUX0AMbySeBsAA6b +OZKKwu1C5JOmmX5x+hrpdgvteLdjtP/nRNT5EcVSN1LLjdQEE47voEfUjfDLK1m v4bzWGMcuHsS23jafRiB0VROFWQWJ2uVK6XgUQOtQ3TNV50dbDZ0EracPZz2KEvu mSglGohR2iDGDFp/8r3lJUW6fnxp4QgPhZbYqUXSrXhVvf9bj32cIjxkFUWL+2DY zHUvkuh9W6+cHfJcVZIEIY/OvP6ZNrHh -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:50 2025 by rpki-client