$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: oeWaHkyHeFTl4h8fHsB9kHMJqMhj3Bz6OPBRBBwdp5w= Subject key identifier: 99:22:70:11:1C:82:C6:39:62:6C:99:EF:D2:8B:34:F3:3F:56:07:91 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 06DD Signing time: Sat 18 Oct 2025 23:28:25 +0000 Manifest this update: Sat 18 Oct 2025 23:28:23 +0000 Manifest next update: Sat 25 Oct 2025 23:28:23 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: NnVxAtKhAB2A/Ms+vSlMKAqPbDXqNw+kxvYZiFjOBPM=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Oct 18 23:28:23 2025 GMT Not After : Oct 25 23:28:23 2025 GMT Subject: CN=68f42298-7968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:80:8e:73:ff:df:ef:6d:d6:6b:14:18:27: f0:c2:f0:5d:59:b6:f8:ab:6d:a4:c4:d4:ea:6d:77: 58:ef:55:80:bb:3d:18:5b:01:b1:ae:d2:af:22:14: b8:a0:d6:66:1f:57:f6:bf:8f:b9:a1:26:58:a6:e5: ec:92:fc:a8:5e:7b:a4:c7:ab:60:ee:e0:1c:72:ea: e2:85:89:12:bb:44:26:88:de:a9:ae:45:bb:ba:e1: 6d:05:8e:0f:53:19:da:2f:01:97:3f:53:fc:43:35: 1b:52:1b:b2:cd:49:dc:95:d3:d4:6f:d3:96:8a:22: 32:d8:28:4d:e4:4b:10:f0:3d:55:91:cf:02:6b:61: 71:d7:b5:f2:97:d6:49:41:8b:12:a2:42:e6:d4:63: b4:1e:7b:fa:84:20:7c:b9:bd:31:65:84:be:03:a0: 2e:8c:5e:d5:8b:81:94:79:85:08:8f:b9:59:c6:32: b2:34:08:dc:04:97:e8:4d:21:81:89:dd:eb:f4:7b: 2a:ff:9c:b9:2f:5e:9d:b0:56:b2:b7:1e:bc:82:10: e0:86:71:61:8d:c1:60:16:32:e9:4f:44:4e:ad:3a: cd:df:42:3c:40:b9:74:c8:fa:85:cf:92:38:e0:1c: 8f:40:58:b1:ff:3e:d7:15:6e:83:a4:b8:a7:a5:bb: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:22:70:11:1C:82:C6:39:62:6C:99:EF:D2:8B:34:F3:3F:56:07:91 X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a9:0c:4d:13:c8:fa:5a:d9:30:fc:82:fd:61:58:e2:56:59: bc:21:d3:fa:c2:39:76:55:c2:d2:c3:f9:06:40:e3:58:a4:13: 0a:cc:58:49:24:07:0a:ff:bc:45:e7:50:96:08:ad:98:12:0c: c0:d1:7d:5c:51:2e:e0:60:db:d4:f2:c8:ff:be:b0:e5:2f:cf: f5:08:17:af:5d:99:64:e0:86:6f:18:6c:a1:cb:77:b5:d3:51: c3:35:ec:40:c6:5d:3b:65:d8:0e:99:e4:57:1e:ba:cf:65:e9: 7d:c5:47:57:55:cc:41:b1:58:8a:2e:69:63:a7:ee:d2:d1:b1: c3:d5:44:d2:eb:20:b4:5c:a2:f4:41:9e:aa:ac:ae:6a:ae:5a: 8f:6c:02:d1:c1:24:c2:76:fb:c4:84:f8:86:10:20:76:79:4c: 13:37:d2:af:09:09:1a:b7:5c:94:27:f6:72:97:db:88:66:67: 44:03:30:0f:83:e7:d6:b3:61:18:47:f2:da:02:1e:8d:c4:cd: a8:9d:b8:91:59:5a:ac:32:e5:ac:e7:c8:8b:a9:9b:99:9b:c4: 96:e7:d2:01:47:f6:4c:3f:ca:9f:43:26:24:0d:3d:11:19:df: 60:3e:b6:f1:11:c8:d7:cb:0e:62:76:2a:d0:62:0a:c1:77:58: 42:1d:8b:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUxMDE4MjMyODIzWhcNMjUxMDI1MjMyODIzWjAYMRYwFAYD VQQDEw02OGY0MjI5OC03OTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8iAjnP/3+9t1msUGCfwwvBdWbb4q22kxNTqbXdY71WAuz0YWwGxrtKvIhS4 oNZmH1f2v4+5oSZYpuXskvyoXnukx6tg7uAccurihYkSu0QmiN6prkW7uuFtBY4P UxnaLwGXP1P8QzUbUhuyzUncldPUb9OWiiIy2ChN5EsQ8D1Vkc8Ca2Fx17Xyl9ZJ QYsSokLm1GO0Hnv6hCB8ub0xZYS+A6AujF7Vi4GUeYUIj7lZxjKyNAjcBJfoTSGB id3r9Hsq/5y5L16dsFaytx68ghDghnFhjcFgFjLpT0ROrTrN30I8QLl0yPqFz5I4 4ByPQFix/z7XFW6DpLinpbtt7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkicBEc gsY5YmyZ79KLNPM/VgeRMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuqQxNE8j6Wtkw/IL9YVjiVlm8IdP6wjl2VcLSw/kGQONYpBMKzFhJ JAcK/7xF51CWCK2YEgzA0X1cUS7gYNvU8sj/vrDlL8/1CBevXZlk4IZvGGyhy3e1 01HDNexAxl07ZdgOmeRXHrrPZel9xUdXVcxBsViKLmljp+7S0bHD1UTS6yC0XKL0 QZ6qrK5qrlqPbALRwSTCdvvEhPiGECB2eUwTN9KvCQkat1yUJ/Zyl9uIZmdEAzAP g+fWs2EYR/LaAh6NxM2onbiRWVqsMuWs58iLqZuZm8SW59IBR/ZMP8qfQyYkDT0R Gd9gPrbxEcjXyw5idirQYgrBd1hCHYsy -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:16 2025 by rpki-client