$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: o6aBDlzqC4HoTrI66ufDF+jcpLfED3csibx8aclMDZQ= Subject key identifier: 12:A9:F9:84:12:AD:12:99:84:96:4A:54:9A:4D:C7:03:A2:11:BA:CF Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 01E1 Signing time: Sun 19 Oct 2025 05:06:17 +0000 Manifest this update: Sun 19 Oct 2025 05:06:17 +0000 Manifest next update: Sun 26 Oct 2025 05:06:17 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: XUnJydwXP5rBig9zOvbl8kzb1fZqCyh+60LUsXDQ5dI=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Oct 19 05:06:17 2025 GMT Not After : Oct 26 05:06:17 2025 GMT Subject: CN=68f471c9-aacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:91:0e:f5:9f:43:e8:37:c0:eb:0e:bb:ec: cc:6b:78:f0:21:3e:40:ab:dc:dc:35:71:05:9a:b4: d6:60:d7:c2:b0:0e:4d:93:dc:1c:0b:17:7d:9b:34: c6:08:9b:79:95:91:ac:3c:e8:b4:1e:90:04:b3:68: f0:b5:5b:98:55:5f:90:c9:1d:91:22:62:45:d8:f3: 35:ea:97:6a:e8:d3:dc:27:fb:a2:c7:7e:d0:db:08: 3f:e0:e8:c8:df:e1:b5:81:9b:75:01:74:2d:a0:39: 21:d7:04:6f:a8:ad:7a:f8:d9:7d:8e:a8:51:f1:7f: 9a:75:07:2f:ae:a9:35:d6:21:8f:ab:42:7f:e5:be: c5:3b:f0:c6:7f:aa:ad:df:68:11:5b:fd:7a:f2:20: 9e:05:55:2e:e1:13:b1:d0:36:87:e3:06:48:df:a1: 9c:c1:49:26:1b:a5:a3:d0:38:ec:c0:46:3a:ed:5f: 53:14:61:15:b7:b5:0f:f5:fc:12:d1:6d:ef:9c:fc: 14:ce:7d:88:8d:8f:32:46:b4:83:e2:f3:0b:30:63: 5d:9f:32:fa:1c:0d:db:0a:36:6d:e6:61:9f:a2:9c: 6a:f8:5f:85:d6:04:93:ce:19:a8:9f:72:7b:b2:1a: 9b:0e:18:9f:55:c9:ad:a3:2b:2d:b7:6f:6c:a2:08: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A9:F9:84:12:AD:12:99:84:96:4A:54:9A:4D:C7:03:A2:11:BA:CF X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b2:b5:cb:cd:ed:9b:97:2e:42:93:f0:05:03:b1:18:98:6b: 7e:5e:02:94:27:99:8e:0a:46:70:d7:e5:cd:17:be:49:3a:56: 96:31:d9:1c:78:63:b8:14:b8:f3:79:cd:b3:a8:87:61:9b:58: 22:e6:70:e7:7c:32:c2:ca:b0:41:68:61:88:1d:dd:3d:7d:91: 70:16:e2:b5:e4:71:3c:62:c0:24:12:7a:13:4f:18:0b:d8:3c: d5:41:77:71:16:f4:52:26:d3:96:e5:8e:10:fb:22:6a:44:f2: 31:96:25:b2:28:1d:8e:5b:74:03:9c:7b:be:7c:49:e6:1c:64: e3:0a:7f:7d:7f:01:74:c3:1a:a3:cf:9e:4b:69:1c:9c:41:fb: 73:90:a2:bf:88:96:52:fd:5c:a8:8c:c3:19:bd:79:74:aa:3b: 67:c6:22:0a:ea:76:d6:06:e0:ff:06:57:ab:fb:d3:c8:15:4c: 42:1c:9d:10:c4:97:ae:8f:26:eb:1a:9e:a6:70:85:f7:4f:9d: 66:ba:3b:27:b7:01:f4:d7:3b:23:81:6e:65:e4:f2:5e:01:85: dd:18:f5:1d:f1:cd:d2:35:9b:69:81:83:fc:69:12:b4:ec:05: bc:49:aa:4f:3e:79:dd:4a:e8:c6:77:8e:e1:11:38:f6:37:0e: 2e:85:ce:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjUxMDE5MDUwNjE3WhcNMjUxMDI2MDUwNjE3WjAYMRYwFAYD VQQDEw02OGY0NzFjOS1hYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIKRDvWfQ+g3wOsOu+zMa3jwIT5Aq9zcNXEFmrTWYNfCsA5Nk9wcCxd9mzTG CJt5lZGsPOi0HpAEs2jwtVuYVV+QyR2RImJF2PM16pdq6NPcJ/uix37Q2wg/4OjI 3+G1gZt1AXQtoDkh1wRvqK16+Nl9jqhR8X+adQcvrqk11iGPq0J/5b7FO/DGf6qt 32gRW/168iCeBVUu4ROx0DaH4wZI36GcwUkmG6Wj0DjswEY67V9TFGEVt7UP9fwS 0W3vnPwUzn2IjY8yRrSD4vMLMGNdnzL6HA3bCjZt5mGfopxq+F+F1gSTzhmon3J7 shqbDhifVcmtoystt29soggAjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKp+YQS rRKZhJZKVJpNxwOiEbrPMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYsrXLze2bly5Ck/AFA7EYmGt+XgKUJ5mOCkZw1+XNF75JOlaWMdkc eGO4FLjzec2zqIdhm1gi5nDnfDLCyrBBaGGIHd09fZFwFuK15HE8YsAkEnoTTxgL 2DzVQXdxFvRSJtOW5Y4Q+yJqRPIxliWyKB2OW3QDnHu+fEnmHGTjCn99fwF0wxqj z55LaRycQftzkKK/iJZS/VyojMMZvXl0qjtnxiIK6nbWBuD/Bler+9PIFUxCHJ0Q xJeujybrGp6mcIX3T51mujsntwH01zsjgW5l5PJeAYXdGPUd8c3SNZtpgYP8aRK0 7AW8SapPPnndSujGd47hETj2Nw4uhc5i -----END CERTIFICATE-----Generated at Mon Oct 20 05:57:25 2025 by rpki-client