$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: eJHu6uT8p3Rkm5n5emgt//L7sRYkn0/5TIPCF8OiTw4= Subject key identifier: 6C:21:2D:AD:D7:00:4E:27:E2:80:AE:78:53:2D:F5:51:A9:0A:55:C6 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2337 Signing time: Mon 20 Oct 2025 16:03:27 +0000 Manifest this update: Mon 20 Oct 2025 16:03:27 +0000 Manifest next update: Mon 27 Oct 2025 16:03:27 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: Wb0U2knB8c9pJ8NNHQUKtH4mtAoun2KJusS5CWoU6pw=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ceQW0pBKYX0iNvGIXu+d5odgS50V86e35zycTc8Ud5M=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9065 (0x2369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Oct 20 16:03:27 2025 GMT Not After : Oct 27 16:03:27 2025 GMT Subject: CN=68f65d4f-a594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:58:b9:e7:92:14:35:56:ee:4f:58:d6:47: e1:4c:ff:04:c1:c3:ba:8a:52:bf:fa:7e:5b:bf:4f: 69:73:8e:bd:27:90:62:d7:fe:e7:7f:22:5e:da:0e: d9:3e:d4:c5:63:93:3f:9d:82:db:45:39:f5:59:c8: 9c:95:b5:86:67:32:58:6d:e4:94:d7:e6:1a:08:99: 84:be:66:0f:4e:86:2c:17:1f:1a:14:3b:12:d2:07: b0:c0:35:6b:d1:20:ea:7c:c4:29:45:20:f3:80:3c: 2d:58:86:a3:c5:e4:da:ad:9f:c9:07:52:29:35:23: 3e:f0:c9:e1:e6:5f:55:84:c9:07:e2:aa:da:09:1f: c9:6a:c7:3a:2b:64:10:1d:8c:7d:03:2e:1a:d7:f3: 35:01:09:1c:50:e5:cc:f7:f1:6b:a7:78:63:b2:ac: d9:31:42:d3:9a:11:df:5d:1b:2e:66:10:f8:6c:7f: 74:84:2a:a8:51:ec:f2:43:ef:3d:e3:6b:00:4b:36: e0:ff:f7:21:a3:be:01:2b:1a:d1:7e:26:17:61:c7: 28:8c:09:64:7a:bc:12:a2:48:ad:a1:48:fa:3f:c5: 06:48:31:a4:41:df:e9:f8:6a:d6:a5:17:0f:f9:a4: 22:2a:37:b3:3a:d7:e6:44:42:47:7b:ae:24:c4:d0: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:21:2D:AD:D7:00:4E:27:E2:80:AE:78:53:2D:F5:51:A9:0A:55:C6 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:2b:34:48:1d:5e:dc:ce:3e:54:53:cd:9a:02:9f:a8:25:f1: d4:c6:0e:60:67:26:80:a5:42:72:e2:6e:69:b9:02:12:65:7c: 23:dd:08:23:9c:ad:7d:33:7e:61:ac:e2:aa:e5:07:38:bd:9d: f5:c1:4c:2d:bc:f7:e9:e2:e4:63:08:f1:c5:48:93:06:4d:c5: a5:02:9e:40:be:af:86:fd:a2:02:79:81:d0:ab:73:3f:03:f7: 03:d4:14:93:1f:9a:fa:5a:42:5b:fb:eb:24:7c:bc:fe:0e:98: 82:8a:f2:ee:da:03:22:3e:9f:4e:19:2e:fc:3b:5e:a5:74:ae: c9:5f:8e:af:3f:86:dc:a5:59:f3:fe:c2:96:b0:8f:8a:fa:c1: b2:28:71:e4:d5:e9:73:dc:de:8b:46:48:7e:9a:9f:37:39:28: b4:a0:c9:b3:aa:bf:29:bc:9d:bf:aa:97:0a:bb:80:cf:1e:91: 1f:f2:f4:a0:02:70:39:2b:58:42:cb:4d:bd:f0:bd:25:31:0e: e4:d3:b3:c5:d2:1d:e7:3e:1f:87:f7:ec:84:6f:42:29:65:3d: a9:6c:47:18:26:8f:46:b6:b5:57:48:3b:ea:dd:98:cc:c1:3f: 33:3c:e7:a5:14:85:14:cb:38:57:db:95:01:94:5e:d1:03:52: d6:3a:cb:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjUxMDIwMTYwMzI3WhcNMjUxMDI3MTYwMzI3WjAYMRYwFAYD VQQDEw02OGY2NWQ0Zi1hNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOpYueeSFDVW7k9Y1kfhTP8EwcO6ilK/+n5bv09pc469J5Bi1/7nfyJe2g7Z PtTFY5M/nYLbRTn1WciclbWGZzJYbeSU1+YaCJmEvmYPToYsFx8aFDsS0gewwDVr 0SDqfMQpRSDzgDwtWIajxeTarZ/JB1IpNSM+8Mnh5l9VhMkH4qraCR/Jasc6K2QQ HYx9Ay4a1/M1AQkcUOXM9/Frp3hjsqzZMULTmhHfXRsuZhD4bH90hCqoUezyQ+89 42sASzbg//cho74BKxrRfiYXYccojAlkerwSokitoUj6P8UGSDGkQd/p+GrWpRcP +aQiKjezOtfmREJHe64kxNCbEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwhLa3X AE4n4oCueFMt9VGpClXGMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApKzRIHV7czj5UU82aAp+oJfHUxg5gZyaApUJy4m5puQISZXwj3Qgj nK19M35hrOKq5Qc4vZ31wUwtvPfp4uRjCPHFSJMGTcWlAp5Avq+G/aICeYHQq3M/ A/cD1BSTH5r6WkJb++skfLz+DpiCivLu2gMiPp9OGS78O16ldK7JX46vP4bcpVnz /sKWsI+K+sGyKHHk1elz3N6LRkh+mp83OSi0oMmzqr8pvJ2/qpcKu4DPHpEf8vSg AnA5K1hCy0298L0lMQ7k07PF0h3nPh+H9+yEb0IpZT2pbEcYJo9GtrVXSDvq3ZjM wT8zPOelFIUUyzhX25UBlF7RA1LWOssD -----END CERTIFICATE-----Generated at Mon Oct 20 21:40:42 2025 by rpki-client