$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json) Hash identifier: NPjN7S2hXw9aJU8ECGE8A0XBorGIrOFIxDpuY8efCWQ= Subject key identifier: 69:84:37:63:7C:86:C4:6A:05:B0:72:CD:D1:97:6C:0D:86:8A:71:E2 Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 16E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft Manifest number: 16D6 Signing time: Sat 18 Oct 2025 17:04:09 +0000 Manifest this update: Sat 18 Oct 2025 17:04:08 +0000 Manifest next update: Sat 25 Oct 2025 17:04:08 +0000 Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: q/IuvCDLmWsV5a5YBpyqa73cEswSaEOAak8I3KPak68=) 2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: gDuc8ZWgCrliQXLxnNcUvIObZ9Jrt4XfymfNcicc4pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5859 (0x16e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: Oct 18 17:04:08 2025 GMT Not After : Oct 25 17:04:08 2025 GMT Subject: CN=68f3c889-88d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:5b:9d:f3:59:9e:68:54:2a:9d:9b:01:5a: ad:15:47:fb:01:2e:71:61:0b:e9:29:c0:1c:79:d8: 8a:cf:21:78:c2:41:42:d3:ef:1b:00:0f:8e:96:b9: 3c:ce:16:c0:f3:4c:36:3d:93:d6:92:8d:d9:e8:86: c7:cb:4c:23:ae:c1:d0:ef:43:2e:59:3a:1d:76:31: c4:9a:53:3b:22:bb:2a:21:6a:3b:38:58:71:f1:93: ee:b0:ff:ff:da:bf:3e:a2:5e:97:1a:08:ae:a1:bf: 5d:42:db:cc:07:ff:a8:28:d9:2e:3a:9e:7b:7a:70: c4:68:c4:3c:a7:a0:74:93:11:90:c2:27:af:ac:47: 1b:da:78:e4:21:18:e5:1b:3b:ef:0c:dd:11:3b:98: df:5a:58:8d:2f:5d:b7:e5:e7:6a:39:6b:ef:f3:80: 54:01:67:c4:87:99:81:1c:b4:e4:2b:a9:4a:3d:a1: 0a:7c:d9:51:5f:4a:85:42:2e:7b:8c:70:74:8b:6c: e2:36:fb:58:5a:00:be:17:90:01:cb:1a:ce:0b:8d: 1a:76:3a:b7:87:74:ec:c5:c5:b7:77:31:29:1f:2b: 1c:de:79:d1:51:2f:fe:9a:70:4b:d0:98:1c:12:4b: b8:d5:71:c6:dc:e6:21:0d:b2:1d:57:e8:99:77:1f: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:84:37:63:7C:86:C4:6A:05:B0:72:CD:D1:97:6C:0D:86:8A:71:E2 X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:07:3b:4b:9a:db:8b:bd:4d:79:e1:40:db:88:9a:40:66:c8: b1:47:28:37:24:fe:da:c1:48:c6:22:e0:cf:1f:7d:f8:ed:63: 70:25:a7:78:d8:5b:09:1c:57:19:78:85:0e:35:97:d7:fd:47: 87:ec:e7:08:41:78:73:ef:e1:2a:cd:a3:f4:52:53:c2:57:26: 49:08:e9:92:09:1d:c2:ce:71:2d:3e:42:42:45:7f:e2:53:65: 99:47:1b:c5:e5:72:8c:28:fd:11:6b:c7:7d:4d:30:a2:25:a9: 7a:17:c1:39:71:6a:ac:36:c9:4f:92:cb:e9:09:fb:e0:de:52: 3b:d5:2f:ef:03:00:7c:c7:9a:87:0d:de:5c:70:44:5f:6c:36: 1a:35:45:a1:07:69:a8:6b:7f:34:20:fe:6b:aa:e5:c3:d3:b3: 55:5b:5e:0d:e5:44:66:73:fa:33:7e:68:e0:3e:b6:5b:1c:40: 28:a0:57:04:a7:39:50:63:40:5e:02:95:72:e2:5a:8d:f6:b0: 1c:b3:a2:95:4a:61:14:95:68:06:d3:cd:5f:ad:a3:69:01:b5: 99:9f:47:a1:07:c7:c6:1d:4f:e8:c5:e7:35:8e:09:c1:ef:15: 38:d4:34:79:3d:b3:b5:79:8a:0f:26:a1:69:88:b0:17:12:66: 13:60:0c:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjUxMDE4MTcwNDA4WhcNMjUxMDI1MTcwNDA4WjAYMRYwFAYD VQQDEw02OGYzYzg4OS04OGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBpbnfNZnmhUKp2bAVqtFUf7AS5xYQvpKcAcediKzyF4wkFC0+8bAA+Olrk8 zhbA80w2PZPWko3Z6IbHy0wjrsHQ70MuWToddjHEmlM7IrsqIWo7OFhx8ZPusP// 2r8+ol6XGgiuob9dQtvMB/+oKNkuOp57enDEaMQ8p6B0kxGQwievrEcb2njkIRjl GzvvDN0RO5jfWliNL1235edqOWvv84BUAWfEh5mBHLTkK6lKPaEKfNlRX0qFQi57 jHB0i2ziNvtYWgC+F5AByxrOC40adjq3h3TsxcW3dzEpHysc3nnRUS/+mnBL0Jgc Eku41XHG3OYhDbIdV+iZdx+2KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmEN2N8 hsRqBbByzdGXbA2GinHiMB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzVFQS8xOURENDY3MDAwQUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZt NzFYdHF3NTBQX0JtdWZxR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2BztLmtuLvU154UDbiJpAZsixRyg3JP7awUjGIuDPH3347WNwJad4 2FsJHFcZeIUONZfX/UeH7OcIQXhz7+EqzaP0UlPCVyZJCOmSCR3CznEtPkJCRX/i U2WZRxvF5XKMKP0Ra8d9TTCiJal6F8E5cWqsNslPksvpCfvg3lI71S/vAwB8x5qH Dd5ccERfbDYaNUWhB2moa380IP5rquXD07NVW14N5URmc/ozfmjgPrZbHEAooFcE pzlQY0BeApVy4lqN9rAcs6KVSmEUlWgG081fraNpAbWZn0ehB8fGHU/oxec1jgnB 7xU41DR5PbO1eYoPJqFpiLAXEmYTYAzR -----END CERTIFICATE-----Generated at Mon Oct 20 14:02:17 2025 by rpki-client