$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json) Hash identifier: eY+Dfk/dh7icttnKVWcwDCf/u7HymMHVIGC6nmly5e8= Subject key identifier: 72:83:50:B1:25:22:6C:D1:8E:4F:EF:CD:AD:00:E6:C6:0B:DE:28:6E Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft Manifest number: 018E Signing time: Sun 19 Oct 2025 06:05:14 +0000 Manifest this update: Sun 19 Oct 2025 06:05:13 +0000 Manifest next update: Sun 26 Oct 2025 06:05:13 +0000 Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: It/6iJjW6F1VzxIfeAPmnzj7KKw3bfvW//yJ3ew7uXQ=) 2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: yfGsvyhYqLz0xE6IXfI7E9U3FSonAVaSuKA3zKUE4Zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Validity Not Before: Oct 19 06:05:13 2025 GMT Not After : Oct 26 06:05:13 2025 GMT Subject: CN=68f47f9a-1e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:83:0a:05:f8:ef:9b:01:00:7e:ff:95:87: 32:51:9e:80:95:86:1e:f6:e5:ef:84:f0:32:55:21: e7:95:6e:dd:26:d6:83:4a:b9:85:31:db:57:39:68: d5:54:f8:d5:82:53:eb:34:86:99:b8:6d:d6:7e:71: 40:dc:8b:4e:71:c9:3e:1b:99:8b:8c:e1:8c:8e:05: 92:a0:e1:4b:9f:2a:c9:8e:06:c3:f5:9e:5b:3f:59: bc:ba:34:86:33:86:4d:23:f5:d7:6c:d2:11:65:1e: b5:a7:76:fc:3d:9c:47:5b:eb:28:81:29:33:e1:d6: f5:67:1e:2d:3b:f7:4d:ce:8e:42:7c:88:fd:8a:65: 97:81:92:db:2b:80:5f:c7:5b:23:72:7b:11:59:b1: f9:73:d7:f6:51:ac:a2:a5:21:3a:a0:d9:a1:79:6b: e5:c2:89:3b:cd:e6:e9:52:34:60:08:a0:60:af:99: 57:f6:1d:51:d4:c2:29:a2:d8:ba:67:ed:08:30:77: 6e:c8:f6:99:0f:6a:70:94:d2:44:84:df:bf:ae:c5: 8e:e9:fe:c9:1f:d6:58:5a:02:b5:b5:c2:84:21:8f: 7e:e4:f8:c1:65:ba:b7:0c:84:42:c2:2c:b6:68:33: d5:3c:d3:09:df:5a:2f:78:8f:09:d4:ed:7e:18:99: 98:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:83:50:B1:25:22:6C:D1:8E:4F:EF:CD:AD:00:E6:C6:0B:DE:28:6E X509v3 Authority Key Identifier: keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b9:cc:0a:ae:df:dd:61:4a:cb:f9:84:1d:8f:7f:12:f2:88: d7:46:81:4d:22:cb:73:89:4c:93:3a:61:79:27:28:55:11:5f: bf:64:8f:98:05:92:1d:08:91:03:fe:1e:ba:64:41:a2:8b:92: df:2a:9d:d6:a5:6e:4e:89:23:95:90:f1:31:0e:da:aa:70:c6: 8c:58:10:86:e4:a7:f4:7c:63:98:5c:4f:ed:75:8b:df:13:74: 9a:ba:91:4a:c4:cf:09:51:66:0b:1b:be:67:fa:47:6e:33:f8: a8:a2:22:43:36:69:f8:1d:e1:b1:52:46:f3:cf:21:c8:35:44: 5b:f3:4f:67:85:04:64:a9:63:09:aa:f8:a1:11:1a:24:cc:7b: 1e:4e:bb:49:8a:73:99:a8:24:6d:45:80:3a:a2:78:25:b7:f6: 3d:5e:41:4f:19:5f:75:76:c6:bc:9c:d8:1f:70:fd:c7:89:35: 52:02:57:29:10:6d:4a:2d:e5:9b:bb:9d:5d:85:c1:0a:0a:f0: 8a:68:1a:16:de:b7:5c:b9:31:76:3f:9c:65:82:38:9f:51:9d: fa:b1:de:f5:9c:fb:86:3e:9b:6b:14:69:5a:7f:bd:43:ea:58: 46:73:91:55:3d:ab:c0:d8:bb:c4:36:9c:40:ea:32:3e:1b:5e: 5c:68:4a:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC MDU5MTFCOUMwHhcNMjUxMDE5MDYwNTEzWhcNMjUxMDI2MDYwNTEzWjAYMRYwFAYD VQQDEw02OGY0N2Y5YS0xZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTuDCgX475sBAH7/lYcyUZ6AlYYe9uXvhPAyVSHnlW7dJtaDSrmFMdtXOWjV VPjVglPrNIaZuG3WfnFA3ItOcck+G5mLjOGMjgWSoOFLnyrJjgbD9Z5bP1m8ujSG M4ZNI/XXbNIRZR61p3b8PZxHW+sogSkz4db1Zx4tO/dNzo5CfIj9imWXgZLbK4Bf x1sjcnsRWbH5c9f2UayipSE6oNmheWvlwok7zebpUjRgCKBgr5lX9h1R1MIpoti6 Z+0IMHduyPaZD2pwlNJEhN+/rsWO6f7JH9ZYWgK1tcKEIY9+5PjBZbq3DIRCwiy2 aDPVPNMJ31oveI8J1O1+GJmYuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKDULEl ImzRjk/vza0A5sYL3ihuMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6 NnAzWmRRTzhuU2l3V1JHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOucwKrt/dYUrL+YQdj38S8ojXRoFNIstziUyTOmF5JyhVEV+/ZI+Y BZIdCJED/h66ZEGii5LfKp3WpW5OiSOVkPExDtqqcMaMWBCG5Kf0fGOYXE/tdYvf E3SaupFKxM8JUWYLG75n+kduM/iooiJDNmn4HeGxUkbzzyHINURb809nhQRkqWMJ qvihERokzHseTrtJinOZqCRtRYA6onglt/Y9XkFPGV91dsa8nNgfcP3HiTVSAlcp EG1KLeWbu51dhcEKCvCKaBoW3rdcuTF2P5xlgjifUZ36sd71nPuGPptrFGlaf71D 6lhGc5FVPavA2LvENpxA6jI+G15caEo4 -----END CERTIFICATE-----Generated at Mon Oct 20 00:23:50 2025 by rpki-client