$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: zeuMboGhnO4UCjw6LFnZvqkPv1RCTMkIP7GZePIMtwM= Subject key identifier: 34:E2:04:AA:D9:14:FB:06:B8:7C:77:C8:BC:89:D3:B5:4C:B6:33:27 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2336 Signing time: Sat 18 Oct 2025 16:05:26 +0000 Manifest this update: Sat 18 Oct 2025 16:05:25 +0000 Manifest next update: Sat 25 Oct 2025 16:05:25 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: mLi3PGUNBL59zjqPs2zLfhmCsvQSYR8Wyvgthtk+ixM=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ceQW0pBKYX0iNvGIXu+d5odgS50V86e35zycTc8Ud5M=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9064 (0x2368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Oct 18 16:05:25 2025 GMT Not After : Oct 25 16:05:25 2025 GMT Subject: CN=68f3bac6-e7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:fe:04:1b:c3:e0:4a:da:0b:6d:17:ab:05: 5c:28:5c:64:31:ab:25:0b:00:33:d4:63:ce:3f:e6: 4b:ad:fe:36:14:d0:93:e8:58:a7:98:45:db:09:a9: a4:3e:4c:7d:a0:68:15:96:83:ae:08:ab:5a:b4:ea: 67:dd:1c:1e:d7:a0:8d:86:0b:4a:6d:8d:1d:0a:d2: dd:62:ed:1a:fa:5c:87:db:36:2a:d5:b3:f2:d7:85: a0:de:5c:e2:1f:4d:79:b7:e3:d5:24:b2:61:de:7a: 2d:2c:2e:71:4b:ed:6a:0d:56:e2:53:94:3a:d6:cd: de:0d:03:06:29:52:1e:4e:a5:fb:6e:fa:a5:26:8f: 2e:e9:4e:8f:0a:60:dd:20:09:84:07:10:6e:c9:a7: 2b:d8:3d:cd:f3:5d:a3:4d:7e:8d:82:f9:3d:ae:47: b4:09:4d:00:8c:9d:67:e1:65:6f:e8:20:28:9a:b4: de:15:b2:b4:24:95:a4:e5:db:55:67:7e:d1:05:5e: 30:d7:6c:37:a6:29:87:89:8f:df:88:23:49:95:95: 32:dc:0d:9b:53:c8:d1:1f:7d:06:c3:2e:86:5b:da: 3f:f0:a1:f3:47:0a:76:c5:92:f3:e1:dc:9d:57:45: db:ef:8f:25:9c:d7:f4:ce:b3:79:45:a2:b1:3a:71: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E2:04:AA:D9:14:FB:06:B8:7C:77:C8:BC:89:D3:B5:4C:B6:33:27 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2e:3b:e8:5a:54:33:de:74:98:24:55:50:cb:39:2c:ff:b0: 1a:04:33:1a:05:28:36:d6:2e:57:8d:95:47:1a:c3:c2:90:dd: 8a:82:fa:73:f2:18:3b:f6:46:e7:12:d9:99:46:42:9e:c3:7a: be:dd:cf:2d:31:96:af:cb:6e:fc:f1:bd:7d:9d:b6:2d:6c:37: 68:3b:91:06:6b:83:9c:17:41:6b:ed:cc:22:11:61:62:3c:d6: a6:6b:84:74:5c:06:f6:95:6c:fe:23:55:cc:3b:d1:e1:eb:cf: 8f:b9:06:71:4b:13:dd:68:8d:d4:3c:5c:ff:54:e3:a5:2d:b2: 07:a3:17:0a:2f:a6:af:26:f0:c9:a2:bf:c5:cd:e8:15:5d:05: c7:52:4a:c8:47:f4:0e:8b:3d:db:4f:c5:d3:b0:43:63:94:48: 3f:8a:b1:01:c0:b0:55:1a:0d:a7:d5:42:db:2d:55:2d:01:f0: 2b:f1:b5:21:83:74:2e:ca:b7:ce:eb:ec:96:9b:3c:c0:7a:44: da:2a:a5:40:7b:19:d9:38:99:69:25:73:75:11:0c:1f:73:29: 60:4a:b2:33:8d:20:7c:ef:1f:92:60:53:ed:7d:1d:2c:a3:02: 4f:5e:f4:97:60:11:47:8c:c1:aa:02:4b:9d:fa:94:ea:1f:c6: 8b:6a:ff:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjUxMDE4MTYwNTI1WhcNMjUxMDI1MTYwNTI1WjAYMRYwFAYD VQQDEw02OGYzYmFjNi1lN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukj+BBvD4EraC20XqwVcKFxkMaslCwAz1GPOP+ZLrf42FNCT6FinmEXbCamk Pkx9oGgVloOuCKtatOpn3Rwe16CNhgtKbY0dCtLdYu0a+lyH2zYq1bPy14Wg3lzi H015t+PVJLJh3notLC5xS+1qDVbiU5Q61s3eDQMGKVIeTqX7bvqlJo8u6U6PCmDd IAmEBxBuyacr2D3N812jTX6Ngvk9rke0CU0AjJ1n4WVv6CAomrTeFbK0JJWk5dtV Z37RBV4w12w3pimHiY/fiCNJlZUy3A2bU8jRH30Gwy6GW9o/8KHzRwp2xZLz4dyd V0Xb748lnNf0zrN5RaKxOnFLwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTiBKrZ FPsGuHx3yLyJ07VMtjMnMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKLjvoWlQz3nSYJFVQyzks/7AaBDMaBSg21i5XjZVHGsPCkN2Kgvpz 8hg79kbnEtmZRkKew3q+3c8tMZavy2788b19nbYtbDdoO5EGa4OcF0Fr7cwiEWFi PNama4R0XAb2lWz+I1XMO9Hh68+PuQZxSxPdaI3UPFz/VOOlLbIHoxcKL6avJvDJ or/FzegVXQXHUkrIR/QOiz3bT8XTsENjlEg/irEBwLBVGg2n1ULbLVUtAfAr8bUh g3QuyrfO6+yWmzzAekTaKqVAexnZOJlpJXN1EQwfcylgSrIzjSB87x+SYFPtfR0s owJPXvSXYBFHjMGqAkud+pTqH8aLav/o -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:06 2025 by rpki-client