$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json) Hash identifier: NNVbmaw0ejykAlKJTxMV/080fBkQ1AL/k9QDzeFaoeQ= Subject key identifier: BC:6D:94:1D:75:19:C1:1B:A5:3C:3C:32:5F:DA:83:9A:73:93:AC:FD Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft Manifest number: 0784 Signing time: Sat 18 Oct 2025 22:53:18 +0000 Manifest this update: Sat 18 Oct 2025 22:53:17 +0000 Manifest next update: Sat 25 Oct 2025 22:53:17 +0000 Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: VUSJkYLxiwoOXS5TL4QHjFq2dIeOTxfX0NxAUhhlm4g=) 2: 4D12DEAE2E9311EBB9FC5259C4F9AE02.roa (hash: 7nAwvijUmnaIMOxevk905gWR2HOoFSC7V0ZEJzsRaVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Validity Not Before: Oct 18 22:53:17 2025 GMT Not After : Oct 25 22:53:17 2025 GMT Subject: CN=68f41a5d-550a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:90:62:03:29:60:15:a2:00:4d:bb:1c:7e: 26:61:a7:e9:09:ed:76:f3:51:ca:5d:fe:d2:d3:4c: e7:e1:85:fb:14:b0:5c:0d:6a:e2:c8:47:a4:a7:75: d8:f9:90:8a:d4:44:54:17:1e:b6:b7:96:1f:b8:9a: 86:d3:4b:fc:c7:d1:42:8e:a3:5f:c4:91:17:72:21: af:d0:ea:a6:b8:33:bb:83:a1:e1:04:c2:dd:93:6b: ad:99:97:5a:1e:cc:48:20:15:ac:e9:d5:74:bc:b9: b7:11:d0:7f:df:91:c9:1a:da:a2:65:0c:30:af:22: 40:d8:fe:2e:54:39:7d:c5:50:a6:48:c7:fa:e9:43: 0f:e1:41:c1:d2:50:39:30:9a:ca:09:f1:07:c3:44: c5:88:45:4f:3e:1f:67:80:e2:0b:f5:69:3e:ad:3d: 9f:0e:0b:dd:26:17:44:cd:6b:f3:a0:83:58:3e:f2: 15:e6:a4:ca:57:3b:e5:25:4a:3c:4c:b2:ee:e2:3e: 63:d2:6e:ad:26:67:84:54:34:72:0f:c5:70:93:8f: c8:f8:ac:94:7b:49:1a:d0:f6:6d:b8:d2:0a:b5:67: 55:69:ce:22:51:55:8b:93:d0:57:b7:fc:71:41:48: 7c:85:a1:16:38:28:7f:da:76:ff:3b:fa:f9:02:b2: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6D:94:1D:75:19:C1:1B:A5:3C:3C:32:5F:DA:83:9A:73:93:AC:FD X509v3 Authority Key Identifier: keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:8f:a6:c0:22:5a:22:17:a7:37:45:44:76:0c:d5:5c:cd:a0: e1:21:79:44:e0:7a:11:6f:78:6b:8a:d0:0d:04:39:91:66:34: 3f:bc:be:05:94:3b:bd:1a:f8:c3:b8:cc:3e:0a:9f:5f:9b:42: b0:f8:29:7b:23:8a:9b:be:5b:51:e5:98:c2:df:28:24:cd:be: 35:67:d5:29:00:6a:3c:f1:39:c8:0d:1e:87:2e:b5:d2:4c:d9: 29:ee:f2:56:8f:a1:85:c5:ca:58:ec:88:1a:89:88:01:e0:72: 24:ff:bf:a9:ec:3f:79:96:aa:af:d8:dd:c0:91:97:62:9d:8e: 58:d2:a5:22:4a:ca:d3:70:44:2e:a2:73:2f:dd:0d:ce:e1:8d: db:c8:54:55:ca:94:a6:cb:cf:64:ee:64:0e:0e:02:5c:27:d9: a2:f5:30:7d:c6:05:0a:f6:4c:64:c5:0f:a1:9a:6e:31:26:f8: ff:c2:ee:83:d0:cc:c5:e0:ce:3b:21:21:58:7e:82:e0:98:ac: c4:7e:a4:b0:b2:7f:39:05:9a:11:96:47:5c:e3:7b:a9:ae:bc: 27:27:1a:75:93:a0:a1:49:de:d9:49:b9:35:25:b4:fd:0e:39: c4:75:c6:5b:43:e2:6f:54:a9:91:a2:72:6a:b3:9e:e3:37:ec: 17:72:03:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD MjdDNDA0MDcwHhcNMjUxMDE4MjI1MzE3WhcNMjUxMDI1MjI1MzE3WjAYMRYwFAYD VQQDEw02OGY0MWE1ZC01NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5WQYgMpYBWiAE27HH4mYafpCe1281HKXf7S00zn4YX7FLBcDWriyEekp3XY +ZCK1ERUFx62t5YfuJqG00v8x9FCjqNfxJEXciGv0OqmuDO7g6HhBMLdk2utmZda HsxIIBWs6dV0vLm3EdB/35HJGtqiZQwwryJA2P4uVDl9xVCmSMf66UMP4UHB0lA5 MJrKCfEHw0TFiEVPPh9ngOIL9Wk+rT2fDgvdJhdEzWvzoINYPvIV5qTKVzvlJUo8 TLLu4j5j0m6tJmeEVDRyD8Vwk4/I+KyUe0ka0PZtuNIKtWdVac4iUVWLk9BXt/xx QUh8haEWOCh/2nb/O/r5ArJSMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxtlB11 GcEbpTw8Ml/ag5pzk6z9MB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFj6bAIloiF6c3RUR2DNVczaDhIXlE4HoRb3hritANBDmRZjQ/vL4F lDu9GvjDuMw+Cp9fm0Kw+Cl7I4qbvltR5ZjC3ygkzb41Z9UpAGo88TnIDR6HLrXS TNkp7vJWj6GFxcpY7IgaiYgB4HIk/7+p7D95lqqv2N3AkZdinY5Y0qUiSsrTcEQu onMv3Q3O4Y3byFRVypSmy89k7mQODgJcJ9mi9TB9xgUK9kxkxQ+hmm4xJvj/wu6D 0MzF4M47ISFYfoLgmKzEfqSwsn85BZoRlkdc43uprrwnJxp1k6ChSd7ZSbk1JbT9 DjnEdcZbQ+JvVKmRonJqs57jN+wXcgOz -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:03 2025 by rpki-client