$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: UClO3tjw+ZKT/MYA3/rMlHvgz0F7U+XtTUwZ0IMSWTE= Subject key identifier: FC:36:26:D4:46:84:3C:46:3A:0C:B4:88:0A:8C:B9:57:00:D4:BA:46 Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2BF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2BF0 Signing time: Mon 20 Oct 2025 15:40:42 +0000 Manifest this update: Mon 20 Oct 2025 15:40:42 +0000 Manifest next update: Mon 27 Oct 2025 15:40:42 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: pBk260F5GPf8O/v3ie5MTIyiDMfej79d9uLnhc4RnD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11248 (0x2bf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Oct 20 15:40:42 2025 GMT Not After : Oct 27 15:40:42 2025 GMT Subject: CN=68f657fa-ae64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:2e:06:fb:60:b2:b3:c5:2c:db:09:50:0c: 5d:45:41:49:c8:58:86:e6:f4:da:dd:83:d2:3c:f9: fc:b2:be:67:52:1d:ab:41:79:b8:b8:c0:19:79:d1: 4b:9e:9d:f9:38:e9:68:07:56:da:bd:b8:d3:84:2a: 67:08:a8:f5:0b:30:17:bd:bd:0b:3a:aa:5a:95:87: c8:5c:6b:b2:22:9e:ae:6a:19:a6:34:58:60:dc:7d: 73:e6:1a:5b:5e:28:d8:15:e4:99:5a:43:38:b3:fa: 3b:4a:14:c1:8d:ee:1e:9a:aa:5a:35:de:b1:dc:8b: 68:cd:08:54:a8:e7:34:fc:d3:11:81:24:39:74:f6: d7:2a:76:da:be:6e:35:ee:6f:f0:6e:a1:e6:d1:35: 9a:d4:17:a1:ba:5d:0a:db:18:f2:db:2a:f0:7a:8f: 3f:e3:14:74:53:ca:4f:f6:35:a1:14:e2:fd:86:fa: eb:5c:9f:13:1d:74:90:68:f0:a6:78:1b:4d:2c:38: f6:e2:8e:dd:75:85:9e:f5:7f:5b:02:00:6c:ad:a1: 48:bf:76:d0:07:84:a3:dd:4c:6c:c3:a1:5e:3b:9d: f4:60:00:4c:56:06:ee:2d:5c:ea:59:3c:57:da:33: 57:e2:03:c6:9c:b7:11:ef:28:99:d7:a1:23:be:13: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:36:26:D4:46:84:3C:46:3A:0C:B4:88:0A:8C:B9:57:00:D4:BA:46 X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1d:27:48:fe:17:9b:89:a3:7c:15:e7:3b:af:9b:4e:e8:d2: 77:6a:fe:86:81:45:cb:48:f7:54:21:08:66:0c:70:f7:9b:98: 69:76:e6:a2:ce:a1:75:e0:dd:1c:73:57:a2:d3:ec:07:db:a3: 8a:87:56:12:42:2e:bd:81:70:26:10:f1:6b:4a:89:12:10:71: 7b:ce:90:ca:c6:c9:37:5a:05:42:84:e6:c0:51:0e:3c:79:2f: df:47:03:4d:cc:56:4d:bd:df:2b:43:a4:fe:e9:32:11:b5:1e: d3:05:7b:c0:c1:25:f4:a8:45:eb:41:89:1a:30:85:b4:c8:c8: 41:fa:77:17:b8:03:d5:ec:9f:34:de:b8:5c:a6:34:dc:82:eb: ec:57:db:8a:fc:90:eb:03:49:bc:d2:f3:ed:33:e0:07:54:b5: e9:e0:e2:4d:d8:e7:a3:e3:e7:6b:dd:88:84:da:a0:d2:b6:a3: 57:5c:20:6d:35:05:2e:3a:e0:d5:6c:f0:f1:45:dc:13:4a:af: e6:89:90:73:2f:f9:e3:b1:7d:bb:32:e6:5b:42:43:85:33:c4: d8:d2:4a:7f:94:a9:bc:41:4f:13:94:f8:ec:36:57:b6:f0:ac: d0:90:f7:01:e7:29:19:ff:03:f9:64:db:dc:ad:41:6d:ec:ac: 32:94:14:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUxMDIwMTU0MDQyWhcNMjUxMDI3MTU0MDQyWjAYMRYwFAYD VQQDEw02OGY2NTdmYS1hZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeouBvtgsrPFLNsJUAxdRUFJyFiG5vTa3YPSPPn8sr5nUh2rQXm4uMAZedFL np35OOloB1bavbjThCpnCKj1CzAXvb0LOqpalYfIXGuyIp6uahmmNFhg3H1z5hpb XijYFeSZWkM4s/o7ShTBje4emqpaNd6x3ItozQhUqOc0/NMRgSQ5dPbXKnbavm41 7m/wbqHm0TWa1Behul0K2xjy2yrweo8/4xR0U8pP9jWhFOL9hvrrXJ8THXSQaPCm eBtNLDj24o7ddYWe9X9bAgBsraFIv3bQB4Sj3Uxsw6FeO530YABMVgbuLVzqWTxX 2jNX4gPGnLcR7yiZ16EjvhOetwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw2JtRG hDxGOgy0iAqMuVcA1LpGMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqHSdI/hebiaN8Fec7r5tO6NJ3av6GgUXLSPdUIQhmDHD3m5hpduai zqF14N0cc1ei0+wH26OKh1YSQi69gXAmEPFrSokSEHF7zpDKxsk3WgVChObAUQ48 eS/fRwNNzFZNvd8rQ6T+6TIRtR7TBXvAwSX0qEXrQYkaMIW0yMhB+ncXuAPV7J80 3rhcpjTcguvsV9uK/JDrA0m80vPtM+AHVLXp4OJN2Oej4+dr3YiE2qDStqNXXCBt NQUuOuDVbPDxRdwTSq/miZBzL/njsX27MuZbQkOFM8TY0kp/lKm8QU8TlPjsNle2 8KzQkPcB5ykZ/wP5ZNvcrUFt7KwylBSF -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:39 2025 by rpki-client