$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json) Hash identifier: BzlQo/2N/GNm9T0jtR234ER8XrX8dXrE8WQBQjljDPo= Subject key identifier: 71:E7:D2:26:93:22:A3:4A:C1:C7:0C:42:5D:62:6C:8D:8D:7F:B1:23 Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft Manifest number: 014B Signing time: Sun 19 Oct 2025 07:09:14 +0000 Manifest this update: Sun 19 Oct 2025 07:09:13 +0000 Manifest next update: Sun 26 Oct 2025 07:09:13 +0000 Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: 4g08YNgy0NoObz/0j5kH1WQ3I/n5Ext06f8FhGG+bBQ=) 2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: rFJbuDYL88Z9KeNowFp3y8pDODtibJ7P1KjjzQ7u73o=) 3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: qHX8rwWLzYwQ68AYEwJa6sYGgUw03regWlERxMTMTs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Validity Not Before: Oct 19 07:09:13 2025 GMT Not After : Oct 26 07:09:13 2025 GMT Subject: CN=68f48e99-9b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:4d:45:96:de:2f:86:d0:10:4a:f6:6f:46: 5c:29:00:26:7f:ef:9e:71:9e:d4:03:91:bc:2d:44: 1a:7c:21:1a:78:4a:fe:28:d5:ae:91:61:25:2c:20: e6:10:4a:d7:2d:ab:52:30:e9:35:c4:4c:64:8a:47: d2:b2:80:79:c3:86:1f:da:da:85:67:88:dd:3f:e6: 8d:ef:6d:f0:86:34:4c:cb:f8:68:0b:08:f2:b0:28: 91:17:d8:0a:0a:12:10:8c:63:12:fe:3d:bd:94:94: ad:6c:d6:da:07:c9:65:55:6c:19:84:45:63:35:4b: f4:d1:12:a0:0b:9c:33:b7:69:22:c5:9f:f4:e0:05: 93:7c:1f:63:a9:d0:d5:e6:ed:b2:4c:33:b2:fd:2e: da:f4:d8:22:02:47:fb:3e:5c:db:f2:20:ba:1a:e7: 0a:2b:94:b4:e5:cb:b6:eb:c5:2a:19:51:49:1f:50: 97:b3:68:84:3b:d4:48:f2:3f:14:14:db:2e:f8:da: 1f:68:6d:7b:dc:b4:b7:06:c7:3e:2a:ea:6e:bd:cb: 0a:29:e3:14:d4:21:86:ee:2b:68:6a:46:2e:59:14: 3a:90:65:0c:29:03:0c:44:12:cb:23:d8:b3:7c:e7: ad:f8:99:ce:6f:69:b3:ae:3f:cc:0d:04:b8:57:a1: 3c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E7:D2:26:93:22:A3:4A:C1:C7:0C:42:5D:62:6C:8D:8D:7F:B1:23 X509v3 Authority Key Identifier: keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:80:27:d0:60:57:71:df:82:44:45:91:8a:4b:fe:86:84:d3: 21:7d:ae:e9:6e:3d:dd:e5:78:f4:ee:0a:57:31:1d:7c:5f:3f: 10:c0:6d:26:81:ac:5e:37:51:ae:a6:d3:91:b2:71:c2:e7:a5: ab:a6:b5:5e:6e:86:82:03:84:3a:e0:cd:e9:98:51:31:e5:23: 87:3f:c4:9a:80:ec:80:e8:0f:78:7b:54:2d:6a:4c:02:49:0f: ab:ff:58:3a:bb:38:87:90:8f:bb:c0:2f:35:72:37:24:a2:82: 1a:7c:fe:13:00:c6:0d:6e:dd:ce:b0:ca:e2:b1:36:ea:01:ed: dd:9f:08:02:9c:0e:58:4a:d5:17:9a:bb:79:39:53:b5:a5:2f: 3b:06:da:45:29:ac:c4:09:66:f9:61:2f:f0:4a:b1:c3:0a:9b: a9:c6:7d:a8:9f:ec:f8:db:87:be:f4:3f:f7:30:c9:dc:97:61: d0:aa:53:29:7d:d0:5c:f9:79:18:25:10:e2:fc:4d:16:66:25: 52:9e:1f:fd:f0:8f:97:85:9e:05:38:f5:fe:73:c3:bb:23:74: d0:3d:dc:44:0c:37:cd:91:bd:cd:5d:b5:34:34:18:3b:41:1e: dc:ba:9c:cb:6f:83:58:af:3c:35:d7:d5:5b:d8:f2:42:27:80: 80:2a:e3:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF OENFNzg4QTcwHhcNMjUxMDE5MDcwOTEzWhcNMjUxMDI2MDcwOTEzWjAYMRYwFAYD VQQDEw02OGY0OGU5OS05YjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMBNRZbeL4bQEEr2b0ZcKQAmf++ecZ7UA5G8LUQafCEaeEr+KNWukWElLCDm EErXLatSMOk1xExkikfSsoB5w4Yf2tqFZ4jdP+aN723whjRMy/hoCwjysCiRF9gK ChIQjGMS/j29lJStbNbaB8llVWwZhEVjNUv00RKgC5wzt2kixZ/04AWTfB9jqdDV 5u2yTDOy/S7a9NgiAkf7Plzb8iC6GucKK5S05cu268UqGVFJH1CXs2iEO9RI8j8U FNsu+NofaG173LS3Bsc+KupuvcsKKeMU1CGG7itoakYuWRQ6kGUMKQMMRBLLI9iz fOet+JnOb2mzrj/MDQS4V6E8NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHn0iaT IqNKwccMQl1ibI2Nf7EjMB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNBNi84MDc5NEM5QUMwOEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0 a21JcjViZTR2dV9vem5pS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYgCfQYFdx34JERZGKS/6GhNMhfa7pbj3d5Xj07gpXMR18Xz8QwG0m gaxeN1GuptORsnHC56WrprVeboaCA4Q64M3pmFEx5SOHP8SagOyA6A94e1QtakwC SQ+r/1g6uziHkI+7wC81cjckooIafP4TAMYNbt3OsMrisTbqAe3dnwgCnA5YStUX mrt5OVO1pS87BtpFKazECWb5YS/wSrHDCpupxn2on+z424e+9D/3MMncl2HQqlMp fdBc+XkYJRDi/E0WZiVSnh/98I+XhZ4FOPX+c8O7I3TQPdxEDDfNkb3NXbU0NBg7 QR7cupzLb4NYrzw119Vb2PJCJ4CAKuOB -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:29 2025 by rpki-client