$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft File: XUofz1MBwCdZyE7qVZFeJcFxpz8.mft (raw, json) Hash identifier: 6DKjSIJuk+q8CJttEcUprI9Y3rATPmD/J8Yh1eaCWo8= Subject key identifier: 57:0B:29:09:3B:1A:0D:79:87:92:9D:7E:A5:59:25:9B:CB:5A:54:5C Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Certificate serial: 02DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft Manifest number: 02D6 Signing time: Sun 19 Oct 2025 03:28:45 +0000 Manifest this update: Sun 19 Oct 2025 03:28:44 +0000 Manifest next update: Sun 26 Oct 2025 03:28:44 +0000 Files and hashes: 1: XUofz1MBwCdZyE7qVZFeJcFxpz8.crl (hash: fiP3CqQDGOdgcTisiGdQgULmqLBl5Tk31lZNx4Oq9Sg=) 2: 388802BC067711EDA1DEB529C4F9AE02.roa (hash: jv+C3MRRv1S8VzgzhjdRwbO8r25GoT/B3n+TeYBfeTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 732 (0x2dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Validity Not Before: Oct 19 03:28:44 2025 GMT Not After : Oct 26 03:28:44 2025 GMT Subject: CN=68f45aec-fc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:70:05:84:0b:ff:06:69:1f:80:27:e2:25: 6f:d2:fb:35:30:90:b7:61:a5:eb:a8:bb:cb:26:c0: 8d:ae:20:3f:94:1a:9c:77:0c:e2:61:a2:1b:66:4b: a2:d4:1a:ae:29:94:10:9c:e6:02:b9:49:f0:71:06: bb:ca:de:77:08:e9:c7:d1:fc:cc:c0:b7:35:23:cd: 1a:5d:a1:24:fb:79:a1:0a:1f:e9:b6:6a:ae:07:f1: 5f:af:e1:44:2e:31:38:34:7d:96:6f:ff:73:f9:88: 2e:01:0e:fb:da:9a:32:bc:c8:2d:57:f7:c8:93:ca: 82:20:2a:13:6a:20:f6:af:c2:83:0f:16:53:35:23: 72:b0:36:a7:c6:38:60:12:d2:ab:89:99:fc:f9:59: 6d:31:d8:d2:e0:26:c7:c3:ca:9f:81:66:51:ad:dd: c5:4e:6d:cc:93:73:5d:08:b0:06:f5:01:c8:39:cc: ea:ba:75:d3:ae:d5:5f:87:e9:bb:57:a6:b7:e2:86: 37:f9:ee:01:54:5f:57:1f:0c:9c:53:e0:2b:3a:d5: ad:b1:d1:bb:4a:71:ee:88:6b:ce:01:36:1c:90:e1: 47:5a:0d:d7:e5:5d:44:54:ca:f4:b3:62:59:b6:99: fe:d5:6d:bd:c1:c7:70:c8:e2:88:2a:45:f7:9e:a2: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0B:29:09:3B:1A:0D:79:87:92:9D:7E:A5:59:25:9B:CB:5A:54:5C X509v3 Authority Key Identifier: keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:d2:c8:32:7f:57:59:d3:b6:30:9d:ac:5a:3c:98:b2:56:74: 81:fb:93:ec:c7:99:86:ab:20:93:61:6d:fd:11:b7:83:00:11: a5:0a:be:72:93:71:e4:3f:76:e4:63:b3:c4:0f:7f:82:ac:97: 9a:8c:18:b4:25:43:4e:8f:bb:aa:24:09:e4:82:03:67:28:36: 45:0a:7a:0c:04:1a:c0:0a:9d:a3:70:49:54:0a:29:9e:21:82: 77:64:f0:8e:36:ee:f1:f7:ba:07:ee:f2:e9:26:4b:b3:8d:e9: a0:a8:ed:c2:80:d3:a7:54:e3:33:10:a2:4d:d9:38:b9:63:e4: 10:3f:af:fa:5d:06:04:fa:47:83:ba:6d:79:9a:98:d9:11:d7: 0d:56:1b:c1:ed:88:06:ed:7c:7c:af:a1:cc:9c:b9:87:a9:8d: 52:10:d4:fa:d9:af:34:c6:29:77:4e:57:5d:01:68:cd:0b:b1: 10:96:36:e2:95:f7:cb:50:1a:00:80:a3:c2:f9:d7:1c:c8:70: 34:e8:1a:96:6e:de:c9:2e:2b:0d:b6:7c:bb:12:94:e9:57:77: ff:c0:de:bb:35:37:2e:63:6e:2b:b1:7e:61:b7:80:51:97:d6: 23:91:c4:a2:45:00:55:78:c9:3d:7b:84:bc:ef:f1:d0:5c:70: 5d:fd:23:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0RTkxMTAvBgNVBAUTKDVENEExRkNGNTMwMUMwMjc1OUM4NEVFQTU1OTE1RTI1 QzE3MUE3M0YwHhcNMjUxMDE5MDMyODQ0WhcNMjUxMDI2MDMyODQ0WjAYMRYwFAYD VQQDEw02OGY0NWFlYy1mYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3FwBYQL/wZpH4An4iVv0vs1MJC3YaXrqLvLJsCNriA/lBqcdwziYaIbZkui 1BquKZQQnOYCuUnwcQa7yt53COnH0fzMwLc1I80aXaEk+3mhCh/ptmquB/Ffr+FE LjE4NH2Wb/9z+YguAQ772poyvMgtV/fIk8qCICoTaiD2r8KDDxZTNSNysDanxjhg EtKriZn8+VltMdjS4CbHw8qfgWZRrd3FTm3Mk3NdCLAG9QHIOczqunXTrtVfh+m7 V6a34oY3+e4BVF9XHwycU+ArOtWtsdG7SnHuiGvOATYckOFHWg3X5V1EVMr0s2JZ tpn+1W29wcdwyOKIKkX3nqLEnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcLKQk7 Gg15h5KdfqVZJZvLWlRcMB8GA1UdIwQYMBaAFF1KH89TAcAnWchO6lWRXiXBcac/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTRFOS9DNUQ1RTRDQTA2 NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndDZFp5RTdxVlpGZUpjRnhw ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVb2Z6MU1Cd0NkWnlFN3FWWkZlSmNGeHB6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTRFOS9DNUQ1RTRDQTA2NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndD ZFp5RTdxVlpGZUpjRnhwejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH0sgyf1dZ07YwnaxaPJiyVnSB+5Psx5mGqyCTYW39EbeDABGlCr5y k3HkP3bkY7PED3+CrJeajBi0JUNOj7uqJAnkggNnKDZFCnoMBBrACp2jcElUCime IYJ3ZPCONu7x97oH7vLpJkuzjemgqO3CgNOnVOMzEKJN2Ti5Y+QQP6/6XQYE+keD um15mpjZEdcNVhvB7YgG7Xx8r6HMnLmHqY1SENT62a80xil3TlddAWjNC7EQljbi lffLUBoAgKPC+dccyHA06BqWbt7JLisNtny7EpTpV3f/wN67NTcuY24rsX5ht4BR l9YjkcSiRQBVeMk9e4S87/HQXHBd/SNH -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:36 2025 by rpki-client