$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: IcIZ7aO/X0cs4e/S+tqQRF+qQ9AQimQKBmr/z8WENj4= Subject key identifier: 5E:63:C1:A9:70:31:69:2C:91:70:CC:BC:E5:D2:55:15:D0:5C:F5:E7 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 4C Signing time: Sun 19 Oct 2025 10:45:25 +0000 Manifest this update: Sun 19 Oct 2025 10:45:25 +0000 Manifest next update: Sun 26 Oct 2025 10:45:25 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: 2R/OfZ8XzX/eVQw+gRoop8hlc4g7S8IUnpohS0GX3pc=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GaxzV7+DkMGpd57xnNkPMderTpqjXPXFd/uGzJlcq9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Oct 19 10:45:25 2025 GMT Not After : Oct 26 10:45:25 2025 GMT Subject: CN=68f4c145-5391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:f6:cb:03:d4:73:0e:e5:47:04:5a:fb:61: c1:da:24:a1:6a:d7:a9:ac:c4:fa:71:cd:90:28:50: 5b:59:aa:37:ce:1a:59:c6:c2:da:fb:2e:6a:26:dc: 93:47:8d:5b:f3:74:3c:be:3e:99:df:63:71:9c:46: e2:99:e1:df:95:82:c8:82:74:ea:17:43:7a:c3:d7: 52:96:d5:0a:28:d4:50:da:c0:2c:2e:b0:e6:0c:02: 92:d3:d5:04:7f:5b:ab:37:49:27:c7:ba:a3:c7:41: 8f:62:ca:20:13:56:65:1e:f8:64:cd:87:a7:59:6a: 28:ca:91:a4:64:23:ea:4e:9f:11:81:ea:e4:a0:41: 44:ae:c4:99:32:90:a4:ea:7b:83:38:3e:f7:eb:f8: 76:06:c5:b8:93:31:ff:e7:38:34:e9:e5:34:90:d9: c7:0c:71:f4:ca:9f:d0:e6:de:3a:c2:c1:83:08:ba: 38:e9:32:86:3c:ef:6d:b7:2b:ea:fd:3d:82:37:7e: d7:eb:7a:77:97:59:a3:3a:28:36:9a:76:2a:e0:e2: 1e:f4:4f:a7:41:2a:c8:09:dc:5f:8c:17:e7:ab:c1: e0:ad:e1:47:98:74:54:5e:05:31:cf:c1:1b:38:59: 54:a0:1a:98:f8:85:07:88:55:d2:7b:1a:4f:ec:37: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:63:C1:A9:70:31:69:2C:91:70:CC:BC:E5:D2:55:15:D0:5C:F5:E7 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:32:53:8f:92:75:d4:38:76:c8:29:25:0d:72:2a:86:4a:98: bf:ea:b6:dd:53:50:47:ea:7f:19:2a:01:15:71:c7:ef:c4:cc: a2:1c:f5:91:56:ef:2f:c9:7e:3b:6b:b2:be:d7:7a:89:d5:d9: 1c:55:6a:32:7b:30:53:32:48:0a:bb:cc:7c:fe:ea:11:17:4b: 07:60:b6:56:75:0d:d2:e1:ad:b1:1d:75:0d:a1:db:1e:f5:2c: b7:ec:fb:09:40:10:fd:1c:36:11:ed:76:f2:9b:70:86:2b:37: 81:2e:94:4b:70:20:e9:be:12:b9:2c:51:a6:89:13:e5:d3:d6: 32:fe:a7:86:40:9c:25:cc:d6:3a:e9:3e:61:46:55:63:85:db: e8:7a:2b:5d:70:4e:3f:04:29:b1:5b:6c:73:77:a1:6c:ea:a9: 99:ea:35:10:34:b3:16:cd:b2:23:ee:b4:fd:97:3e:ce:a3:84: 1c:f2:2c:8f:f3:8e:74:c0:de:f3:c7:f4:1e:bf:12:57:c8:c3: 8b:3e:f3:8f:54:c4:df:ee:e0:d7:55:19:76:25:41:8a:0b:3a: d4:15:74:fb:7f:e2:91:3d:34:ac:e7:5b:ad:11:8d:69:17:25: 73:17:1e:70:c3:3d:b8:36:37:69:60:20:f8:ac:39:91:28:58: 45:a3:df:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTEwMTkxMDQ1MjVaFw0yNTEwMjYxMDQ1MjVaMBgxFjAUBgNV BAMTDTY4ZjRjMTQ1LTUzOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4kfbLA9RzDuVHBFr7YcHaJKFq16msxPpxzZAoUFtZqjfOGlnGwtr7Lmom3JNH jVvzdDy+PpnfY3GcRuKZ4d+VgsiCdOoXQ3rD11KW1Qoo1FDawCwusOYMApLT1QR/ W6s3SSfHuqPHQY9iyiATVmUe+GTNh6dZaijKkaRkI+pOnxGB6uSgQUSuxJkykKTq e4M4Pvfr+HYGxbiTMf/nODTp5TSQ2ccMcfTKn9Dm3jrCwYMIujjpMoY87223K+r9 PYI3ftfreneXWaM6KDaadirg4h70T6dBKsgJ3F+MF+erweCt4UeYdFReBTHPwRs4 WVSgGpj4hQeIVdJ7Gk/sN3m/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXmPBqXAx aSyRcMy85dJVFdBc9ecwHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAoyU4+SddQ4dsgpJQ1yKoZKmL/qtt1TUEfqfxkqARVxx+/EzKIc9ZFW 7y/Jfjtrsr7XeonV2RxVajJ7MFMySAq7zHz+6hEXSwdgtlZ1DdLhrbEddQ2h2x71 LLfs+wlAEP0cNhHtdvKbcIYrN4EulEtwIOm+ErksUaaJE+XT1jL+p4ZAnCXM1jrp PmFGVWOF2+h6K11wTj8EKbFbbHN3oWzqqZnqNRA0sxbNsiPutP2XPs6jhBzyLI/z jnTA3vPH9B6/ElfIw4s+849UxN/u4NdVGXYlQYoLOtQVdPt/4pE9NKznW60RjWkX JXMXHnDDPbg2N2lgIPisOZEoWEWj3xI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:17 2025 by rpki-client