$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft File: xbajYOSK75Kf3CcpbR1S9b9umRY.mft (raw, json) Hash identifier: 4o1KIdw3KOHdjiMwn9pwL6F5Qahu7v9c3Y+LGniDCyU= Subject key identifier: 55:05:CD:00:BC:79:2C:AA:D3:5B:1B:21:8F:CE:43:8B:80:06:EF:91 Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16 Certificate issuer: /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916 Certificate serial: 080B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft Manifest number: 0804 Signing time: Tue 04 Nov 2025 21:02:39 +0000 Manifest this update: Tue 04 Nov 2025 21:02:38 +0000 Manifest next update: Tue 11 Nov 2025 21:02:38 +0000 Files and hashes: 1: xbajYOSK75Kf3CcpbR1S9b9umRY.crl (hash: HzcpdKPPe2f7+1evzWqAVRd53N7xokFWCz6HCUeM9Rg=) 2: 423EA4CC039B11EBB3C1465CC4F9AE02.roa (hash: LsVQKkTp9V5mDiVUJekj0bvUgPf5aQfKDpRqhhkjvWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD088, serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916 Validity Not Before: Nov 4 21:02:38 2025 GMT Not After : Nov 11 21:02:38 2025 GMT Subject: CN=690a69ef-cf22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:b9:19:be:05:ec:04:06:57:8a:84:a6:4c: b6:72:d5:c8:75:9d:c5:23:ce:74:63:e2:bf:d4:43: 26:2a:01:05:32:29:4d:8a:be:09:6b:83:d7:56:94: 5b:44:76:7b:91:f2:6a:69:c2:0b:f1:4c:6a:67:a2: f3:ad:a8:af:8d:8f:2b:8d:56:bd:ce:d0:d1:ee:02: ae:57:97:43:97:d6:f8:20:22:4a:0b:94:ce:2a:0f: e8:55:4f:a7:a9:73:97:57:4d:2c:87:12:20:2a:6c: 89:83:a8:16:1b:b8:34:fc:c2:8b:ac:d7:e5:9c:f4: 4c:0d:cd:3e:ae:a5:00:6d:e8:f3:63:13:ed:f8:76: d2:17:dc:4e:db:b4:d6:0b:6d:3c:65:10:bc:7e:fa: 13:b8:68:8c:80:88:93:0c:e2:e0:cd:5f:17:be:0f: d9:a8:c0:ce:e2:e7:79:8b:49:28:78:55:2d:81:cb: ad:66:c0:63:70:4c:f7:9b:ad:99:f9:68:de:c8:d9: 1f:bc:a1:8d:40:d1:a6:84:ff:a6:b0:6c:0f:4d:cb: 18:84:4d:98:85:22:2c:84:23:ef:ac:c2:e1:94:47: 92:1a:31:c0:05:87:de:dc:1f:ab:cb:6d:bb:61:96: 1d:17:21:d0:85:0e:6a:26:74:62:f9:5e:e0:eb:31: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:05:CD:00:BC:79:2C:AA:D3:5B:1B:21:8F:CE:43:8B:80:06:EF:91 X509v3 Authority Key Identifier: keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:8a:71:68:ea:cb:87:56:20:fe:49:83:cf:dd:73:ef:17:a6: cc:ef:39:e8:2b:2f:d5:1c:b7:89:d9:1d:16:db:77:e9:9a:70: c8:8f:4f:9d:34:97:17:39:d5:88:d5:48:ae:32:0f:eb:07:d6: eb:2f:77:6b:23:25:69:00:a7:03:3e:6f:cd:99:d5:9a:3b:1d: fd:b4:de:77:ec:2c:34:df:85:c6:29:43:bc:59:02:6b:a5:81: 2a:fa:3a:46:8e:ae:fa:f4:8a:cc:49:4a:3e:01:49:83:ec:39: ef:f8:14:f2:63:60:c7:03:72:8d:a4:cc:d9:48:3e:e7:e4:c4: 0b:0a:f6:40:66:69:37:f5:2e:e5:d3:dc:d5:4d:01:bd:09:ea: a1:26:dd:3b:10:70:0f:1f:31:b8:a7:95:12:3f:58:4c:b0:ce: 60:30:24:7b:ea:1b:dc:96:0f:02:3d:90:09:e1:0f:87:cd:37: 15:61:d9:aa:37:d1:3a:7b:e9:a7:02:dd:7b:05:b0:67:f6:b1: 4c:7a:01:5a:ab:3e:3b:0f:56:d8:21:fe:62:92:98:d9:8c:16: a1:bd:0a:36:c4:dc:29:16:6b:29:b7:de:d4:56:71:2f:b6:5d: e6:1c:49:79:c9:4b:82:29:fc:90:b6:5c:02:07:6a:f9:ef:af: 78:1f:7d:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQwODgxMTAvBgNVBAUTKEM1QjZBMzYwRTQ4QUVGOTI5RkRDMjcyOTZEMUQ1MkY1 QkY2RTk5MTYwHhcNMjUxMTA0MjEwMjM4WhcNMjUxMTExMjEwMjM4WjAYMRYwFAYD VQQDEw02OTBhNjllZi1jZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoO5Gb4F7AQGV4qEpky2ctXIdZ3FI850Y+K/1EMmKgEFMilNir4Ja4PXVpRb RHZ7kfJqacIL8UxqZ6LzraivjY8rjVa9ztDR7gKuV5dDl9b4ICJKC5TOKg/oVU+n qXOXV00shxIgKmyJg6gWG7g0/MKLrNflnPRMDc0+rqUAbejzYxPt+HbSF9xO27TW C208ZRC8fvoTuGiMgIiTDOLgzV8Xvg/ZqMDO4ud5i0koeFUtgcutZsBjcEz3m62Z +WjeyNkfvKGNQNGmhP+msGwPTcsYhE2YhSIshCPvrMLhlEeSGjHABYfe3B+ry227 YZYdFyHQhQ5qJnRi+V7g6zFwbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUFzQC8 eSyq01sbIY/OQ4uABu+RMB8GA1UdIwQYMBaAFMW2o2Dkiu+Sn9wnKW0dUvW/bpkW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDA4OC80NEJBN0NBMkZE OUQxMUVBQTA0RUI4N0RDNEY5QUUwMi94YmFqWU9TSzc1S2YzQ2NwYlIxUzliOXVt UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiYWpZT1NLNzVLZjNDY3BiUjFTOWI5dW1SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDA4OC80NEJBN0NBMkZEOUQxMUVBQTA0RUI4N0RDNEY5QUUwMi94YmFqWU9TSzc1 S2YzQ2NwYlIxUzliOXVtUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2inFo6suHViD+SYPP3XPvF6bM7znoKy/VHLeJ2R0W23fpmnDIj0+d NJcXOdWI1UiuMg/rB9brL3drIyVpAKcDPm/NmdWaOx39tN537Cw034XGKUO8WQJr pYEq+jpGjq769IrMSUo+AUmD7Dnv+BTyY2DHA3KNpMzZSD7n5MQLCvZAZmk39S7l 09zVTQG9CeqhJt07EHAPHzG4p5USP1hMsM5gMCR76hvclg8CPZAJ4Q+HzTcVYdmq N9E6e+mnAt17BbBn9rFMegFaqz47D1bYIf5ikpjZjBahvQo2xNwpFmspt97UVnEv tl3mHEl5yUuCKfyQtlwCB2r57694H31s -----END CERTIFICATE-----Generated at Tue Nov 4 23:51:21 2025 by rpki-client