$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft File: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft (raw, json) Hash identifier: O1E/6kzUjki6u9oskcRKRe+d+r461gPQTYQrtHXoRjI= Subject key identifier: D2:25:6A:BE:DC:DE:1B:E2:30:64:A4:B1:27:3A:B6:C6:DA:31:A1:15 Authority key identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 Certificate issuer: /CN=A91B4F01/serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft Manifest number: 04AE Signing time: Sun 19 Oct 2025 01:44:13 +0000 Manifest this update: Sun 19 Oct 2025 01:44:13 +0000 Manifest next update: Sun 26 Oct 2025 01:44:13 +0000 Files and hashes: 1: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl (hash: yaW/9a9yBdSoo5bTTMgDQ94MEj3E0dGsNtyJi9Bu0XQ=) 2: BD115AB24B7C11ECA63C0038C4F9AE02.roa (hash: IcEuGPt4GTNEbPQpjAanlaif3gO8wRzi48eufGxQr4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F01, serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Validity Not Before: Oct 19 01:44:13 2025 GMT Not After : Oct 26 01:44:13 2025 GMT Subject: CN=68f4426d-8f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:a1:f1:92:42:6e:76:73:f3:33:72:e3:68: a2:c5:95:7b:f0:8e:86:80:96:e7:b1:de:c8:ef:a2: fa:bc:42:01:5b:dc:e9:b4:2d:5f:b5:41:01:97:94: fe:15:ae:2d:a3:9d:6a:d7:25:c4:ff:4a:82:49:d2: 44:4a:6b:30:42:45:86:9d:60:f9:9a:e6:3c:26:5f: db:45:06:10:fa:bc:b6:87:e2:1a:a8:25:5b:52:71: 6c:7d:07:e7:6c:8d:c4:96:55:2f:ba:aa:5f:be:25: a0:b5:e0:53:1d:7a:34:8f:7c:e9:37:ba:ef:a6:08: 7a:7d:01:c1:f3:07:ea:ab:82:e0:3a:21:95:57:1c: 79:35:3d:d7:0f:9a:a5:a6:be:a6:03:3a:47:0a:66: 38:29:37:be:26:6e:4b:41:65:45:1a:0f:fd:1f:66: 1e:8d:76:4a:80:42:f1:56:10:2b:d9:4a:ee:18:77: f3:7d:d6:b9:d8:c1:97:db:52:3e:fc:95:a8:d9:11: 4f:3b:d4:a0:10:9b:5e:61:13:f7:9a:25:c5:cf:09: a3:4a:a4:b7:56:35:1e:3c:e9:d0:8e:1c:05:a9:29: 5d:8b:38:06:a9:9d:d8:f2:03:20:e6:72:01:fb:30: e7:a2:e3:74:c3:ba:ec:3e:3c:63:44:ff:54:06:b1: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:6A:BE:DC:DE:1B:E2:30:64:A4:B1:27:3A:B6:C6:DA:31:A1:15 X509v3 Authority Key Identifier: keyid:5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:46:ff:e3:3c:61:78:83:8b:16:87:4f:e9:8e:3a:3a:54:67: 57:70:05:28:c8:27:8f:7b:d4:eb:dc:de:55:dc:4a:81:22:75: 6e:fc:0b:44:c7:bf:89:49:8b:dc:f6:df:11:87:ba:15:aa:44: 9c:c5:7e:a3:0f:31:6f:98:ea:c4:24:da:dd:54:88:d4:52:92: a7:2e:b7:62:97:c2:86:3e:f6:da:51:8f:a8:5f:81:79:50:b5: ac:bc:2c:68:a8:e9:ae:d7:36:d5:15:6e:10:b9:cc:2f:c6:39: a9:81:c1:11:f1:c2:40:f6:c9:7d:b5:74:15:88:bf:37:1f:d0: 52:da:df:3f:d2:36:98:b4:1d:d8:6d:c0:d1:6b:cd:4e:e2:95: 2e:1c:65:36:d9:f7:1a:57:3e:61:fe:e2:cc:a8:0b:7d:ab:f3: de:69:06:32:ba:8e:15:14:eb:d0:8a:1e:bc:6e:06:49:47:42: b8:c4:02:be:ed:d5:3e:39:e1:08:cd:99:f9:4d:19:b2:f0:71: 26:a7:36:bf:09:64:7c:d6:dc:78:a4:d6:6d:4c:0d:d0:34:03: c9:ec:64:15:14:be:51:1d:a7:40:00:0f:9f:0d:e1:ba:5b:4b: e3:1b:d8:8b:cb:f2:dd:b9:5e:ff:65:94:87:71:c7:ee:39:78: 7d:da:bb:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGMDExMTAvBgNVBAUTKDVFQkRBN0ZBQTgwMUM1QTI3NERDMjNEMTcxRjg4QjQ2 QTExRTQxNTQwHhcNMjUxMDE5MDE0NDEzWhcNMjUxMDI2MDE0NDEzWjAYMRYwFAYD VQQDEw02OGY0NDI2ZC04ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21ah8ZJCbnZz8zNy42iixZV78I6GgJbnsd7I76L6vEIBW9zptC1ftUEBl5T+ Fa4to51q1yXE/0qCSdJESmswQkWGnWD5muY8Jl/bRQYQ+ry2h+IaqCVbUnFsfQfn bI3EllUvuqpfviWgteBTHXo0j3zpN7rvpgh6fQHB8wfqq4LgOiGVVxx5NT3XD5ql pr6mAzpHCmY4KTe+Jm5LQWVFGg/9H2YejXZKgELxVhAr2UruGHfzfda52MGX21I+ /JWo2RFPO9SgEJteYRP3miXFzwmjSqS3VjUePOnQjhwFqSldizgGqZ3Y8gMg5nIB +zDnouN0w7rsPjxjRP9UBrEp6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIlar7c 3hviMGSksSc6tsbaMaEVMB8GA1UdIwQYMBaAFF69p/qoAcWidNwj0XH4i0ahHkFU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYwMS9BNzAwQTg0NDRC NzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhhSjAzQ1BSY2ZpTFJxRWVR VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyMm4tcWdCeGFKMDNDUFJjZmlMUnFFZVFWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYwMS9BNzAwQTg0NDRCNzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhh SjAzQ1BSY2ZpTFJxRWVRVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZRv/jPGF4g4sWh0/pjjo6VGdXcAUoyCePe9Tr3N5V3EqBInVu/AtE x7+JSYvc9t8Rh7oVqkScxX6jDzFvmOrEJNrdVIjUUpKnLrdil8KGPvbaUY+oX4F5 ULWsvCxoqOmu1zbVFW4QucwvxjmpgcER8cJA9sl9tXQViL83H9BS2t8/0jaYtB3Y bcDRa81O4pUuHGU22fcaVz5h/uLMqAt9q/PeaQYyuo4VFOvQih68bgZJR0K4xAK+ 7dU+OeEIzZn5TRmy8HEmpza/CWR81tx4pNZtTA3QNAPJ7GQVFL5RHadAAA+fDeG6 W0vjG9iLy/LduV7/ZZSHccfuOXh92rtC -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:42 2025 by rpki-client