$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: rj99Rcc/YSosHuS7B0fG6rz1VjT9AjSkPjJb3WSO3F8= Subject key identifier: F8:C9:D9:07:89:54:72:95:57:D7:D9:A9:B5:17:73:67:2C:1E:E6:7C Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 257A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 256A Signing time: Mon 20 Oct 2025 15:51:59 +0000 Manifest this update: Mon 20 Oct 2025 15:51:59 +0000 Manifest next update: Mon 27 Oct 2025 15:51:59 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: WCCJ19glNQ6XGQnNZhn6n8M7FSjnnTbDQBjZN8wjkCo=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: xnMX5X2YJrVvWA8Z+ilrknMulrMIGU6wGg57HKZlkt0=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: f2BKC0SfvfCVZzewNCyKNQgaDwalvIHM6ibs4HCHEDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9594 (0x257a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: Oct 20 15:51:59 2025 GMT Not After : Oct 27 15:51:59 2025 GMT Subject: CN=68f65a9f-90fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:12:7e:e2:ed:4d:29:b2:45:a5:29:cb:6b: 9c:ab:8a:73:6a:90:09:9d:18:34:4b:ba:5b:84:8e: f4:3f:5a:db:91:1a:6a:4c:51:ea:9e:e1:56:87:cd: 0a:2e:7f:5e:c4:84:8c:b9:04:cd:2d:ce:22:29:75: c1:fb:7a:9a:3c:44:41:8f:41:a6:2f:d4:3f:d7:44: 0e:f7:0e:51:2f:03:c5:33:13:3d:e9:96:3a:1b:49: 50:0a:26:8a:01:70:68:f7:0e:e4:0d:d4:6d:29:cb: fa:4c:41:c1:93:18:1e:7e:b6:0c:a8:e2:62:65:e4: ba:c1:97:ee:f5:68:4c:ba:d3:0c:5e:69:00:22:ec: e8:be:07:43:a4:9b:6e:8e:34:58:b7:98:b7:aa:63: 5a:e9:d5:56:4d:92:f9:22:e8:80:c4:e2:f5:1d:4b: 11:69:3d:be:d4:51:41:0a:49:33:ad:e7:2f:c5:43: f1:77:22:c4:3e:47:e4:93:4c:5a:3b:35:30:1f:f1: 5e:c7:4e:a8:45:5a:bf:c2:11:83:13:65:cb:6d:f9: e4:a2:6d:24:58:06:db:bc:f4:41:77:bd:90:f0:5e: 64:2f:91:42:b1:f2:98:5b:66:04:0a:f5:fa:f9:29: b4:c2:4e:3b:7a:76:1d:67:16:69:61:cf:e2:f5:e9: 5d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C9:D9:07:89:54:72:95:57:D7:D9:A9:B5:17:73:67:2C:1E:E6:7C X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:86:ff:2a:f9:14:c1:ce:3d:59:de:58:83:c6:e4:45:84:90: 7b:e7:23:37:bf:3a:bf:bc:b6:49:d9:f2:ad:6e:7a:19:1d:39: 4d:cd:db:21:63:e3:da:43:14:9f:49:dd:eb:2d:69:97:ec:74: 15:81:a1:8e:63:64:1b:d9:4b:f5:a1:34:88:d9:cc:61:48:5c: 92:70:42:58:46:03:1b:1e:51:c2:23:5c:ad:21:6b:bd:b1:ef: f4:16:5c:c3:af:45:97:bb:b5:a8:fb:f5:41:fa:d5:8e:89:4e: fe:d2:3c:f1:e8:d0:1c:55:a0:27:2f:73:89:4f:42:62:62:9b: d8:f7:0d:d4:d4:3f:58:06:c1:36:9f:bc:c1:65:02:77:21:a7: 36:45:81:38:bf:b0:21:d6:61:4c:c5:14:ac:85:02:b1:2d:57: bc:16:e0:77:3b:97:73:be:b7:09:61:60:5a:74:13:58:60:01: 95:8d:65:49:e3:d2:e5:d7:68:ae:d3:d8:a1:74:10:8b:06:d2: 15:30:d9:1c:b6:70:06:56:f4:f2:f6:8d:d5:25:c0:27:0d:d0: c6:26:2d:78:d0:7b:3a:a5:b2:af:ae:80:d3:d6:88:fb:73:23: 08:bd:d0:3e:b9:4c:18:c1:c0:e3:55:6b:04:d6:6a:d6:9b:ad: 82:02:3f:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUxMDIwMTU1MTU5WhcNMjUxMDI3MTU1MTU5WjAYMRYwFAYD VQQDEw02OGY2NWE5Zi05MGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgUSfuLtTSmyRaUpy2ucq4pzapAJnRg0S7pbhI70P1rbkRpqTFHqnuFWh80K Ln9exISMuQTNLc4iKXXB+3qaPERBj0GmL9Q/10QO9w5RLwPFMxM96ZY6G0lQCiaK AXBo9w7kDdRtKcv6TEHBkxgefrYMqOJiZeS6wZfu9WhMutMMXmkAIuzovgdDpJtu jjRYt5i3qmNa6dVWTZL5IuiAxOL1HUsRaT2+1FFBCkkzrecvxUPxdyLEPkfkk0xa OzUwH/Fex06oRVq/whGDE2XLbfnkom0kWAbbvPRBd72Q8F5kL5FCsfKYW2YECvX6 +Sm0wk47enYdZxZpYc/i9eldswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjJ2QeJ VHKVV9fZqbUXc2csHuZ8MB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKhv8q+RTBzj1Z3liDxuRFhJB75yM3vzq/vLZJ2fKtbnoZHTlNzdsh Y+PaQxSfSd3rLWmX7HQVgaGOY2Qb2Uv1oTSI2cxhSFyScEJYRgMbHlHCI1ytIWu9 se/0FlzDr0WXu7Wo+/VB+tWOiU7+0jzx6NAcVaAnL3OJT0JiYpvY9w3U1D9YBsE2 n7zBZQJ3Iac2RYE4v7Ah1mFMxRSshQKxLVe8FuB3O5dzvrcJYWBadBNYYAGVjWVJ 49Ll12iu09ihdBCLBtIVMNkctnAGVvTy9o3VJcAnDdDGJi140Hs6pbKvroDT1oj7 cyMIvdA+uUwYwcDjVWsE1mrWm62CAj/7 -----END CERTIFICATE-----Generated at Tue Oct 21 08:15:14 2025 by rpki-client