$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json) Hash identifier: 3UgOk6L9Cqg/lxg44f1f6bb/p5cY9gFX7ms6YRexD5I= Subject key identifier: C1:31:DF:B4:25:B7:7C:B4:98:CE:A8:49:C2:CC:9B:9D:4E:4A:1B:3F Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft Manifest number: 053A Signing time: Sun 19 Oct 2025 01:14:17 +0000 Manifest this update: Sun 19 Oct 2025 01:14:16 +0000 Manifest next update: Sun 26 Oct 2025 01:14:16 +0000 Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: GZfCX5N5y1G1hNzAOdNbhJv/MHvGZtoEX/EIQT/BN3g=) 2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: UZdEVBj/lgoItLYURJapVrEERSSdanijwOdvoutuuW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F60, serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Validity Not Before: Oct 19 01:14:16 2025 GMT Not After : Oct 26 01:14:16 2025 GMT Subject: CN=68f43b68-ae3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:06:46:80:46:6a:3e:cf:93:27:6d:3b:f3:cf: ba:66:50:49:31:8b:cf:ad:cb:8b:b4:18:19:71:cb: e7:ac:ec:e3:da:77:92:e2:a0:a3:18:47:23:29:86: a6:19:01:4e:b6:5d:74:ab:6d:15:44:c6:02:4b:11: c7:7f:74:ce:32:9c:16:f8:ea:67:6d:42:cb:5e:42: 0d:c2:e1:0b:4f:be:1d:09:e9:77:ec:f0:09:93:51: b2:ad:4f:3a:be:93:f0:c6:71:d6:59:27:8d:56:82: 15:31:3f:72:32:01:7e:2b:ea:3c:40:27:fb:40:c1: 9d:ec:d3:87:e0:13:cc:19:30:af:f2:a4:ad:ff:66: 28:d1:8e:1a:3c:e7:53:73:b1:7c:3a:9e:3d:58:04: 75:59:d4:14:90:8e:0d:7c:61:ea:40:ca:9e:78:48: ec:ef:07:9c:a0:ec:6d:d0:41:28:a6:51:db:a5:63: 32:0d:09:37:33:76:a7:41:e8:1b:b6:88:61:e8:68: 6a:94:74:dd:5f:d1:7e:8e:df:0c:82:a3:d4:20:41: 75:f8:37:fb:8e:d3:a1:3e:19:b0:73:73:ac:47:62: f4:99:13:c2:43:5a:34:dd:53:ac:3f:7f:6e:62:65: 85:d6:40:a5:58:80:ed:ec:c2:45:b3:1a:5a:55:51: ef:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:31:DF:B4:25:B7:7C:B4:98:CE:A8:49:C2:CC:9B:9D:4E:4A:1B:3F X509v3 Authority Key Identifier: keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:fd:8e:cb:ba:6d:cb:e5:0f:7d:7a:11:34:1f:1a:be:66:1b: 37:ac:72:38:27:56:e8:76:2e:df:78:68:8a:da:59:f0:05:9c: 62:34:fe:5c:08:fd:e8:09:f8:f9:0b:7c:24:c4:5e:4e:09:d0: 04:be:46:44:ff:0d:cb:d7:9f:4b:84:80:78:90:d5:3c:90:37: ba:82:38:c4:dc:86:01:a6:6f:23:3b:b9:d9:76:ba:ad:e4:2d: b2:9f:92:56:85:f1:61:ea:65:a5:97:af:08:36:35:c8:28:fc: 52:6e:6e:eb:a7:e5:25:9e:b8:5f:5b:fa:68:34:e4:41:db:6c: 8d:3b:f0:92:6f:75:1a:a7:0e:93:35:01:5b:94:b1:57:06:6a: 19:ac:9e:ca:e7:eb:f0:03:36:81:d9:f9:6d:c1:51:18:7b:09: de:69:aa:80:00:4f:3a:2c:3f:c3:f5:ca:c0:09:27:a2:94:c7: 9c:d3:83:3c:88:42:e7:e5:15:2f:06:b1:c3:c8:0a:8c:e4:bb: 3d:13:ea:15:13:a5:91:a4:de:44:fc:3b:73:ec:b0:57:8c:16: 5b:bc:ff:ea:d7:49:11:2e:d8:54:06:fa:a2:85:ce:0a:36:8d: 8f:8b:c1:db:f3:06:3b:3b:9f:95:4c:34:b2:8a:cd:a0:a8:30: ad:2e:f6:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNjAxMTAvBgNVBAUTKEM0MTFDMkQ3MjQwMUY1M0VDQTAxNjM1Nzg4OUQ3RUJB M0JDQ0ZEQ0QwHhcNMjUxMDE5MDExNDE2WhcNMjUxMDI2MDExNDE2WjAYMRYwFAYD VQQDEw02OGY0M2I2OC1hZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wZGgEZqPs+TJ20788+6ZlBJMYvPrcuLtBgZccvnrOzj2neS4qCjGEcjKYam GQFOtl10q20VRMYCSxHHf3TOMpwW+OpnbULLXkINwuELT74dCel37PAJk1GyrU86 vpPwxnHWWSeNVoIVMT9yMgF+K+o8QCf7QMGd7NOH4BPMGTCv8qSt/2Yo0Y4aPOdT c7F8Op49WAR1WdQUkI4NfGHqQMqeeEjs7wecoOxt0EEoplHbpWMyDQk3M3anQegb tohh6GhqlHTdX9F+jt8MgqPUIEF1+Df7jtOhPhmwc3OsR2L0mRPCQ1o03VOsP39u YmWF1kClWIDt7MJFsxpaVVHvrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEx37Ql t3y0mM6oScLMm51OShs/MB8GA1UdIwQYMBaAFMQRwtckAfU+ygFjV4idfro7zP3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY2MC85NDkzMkJFQzE1 MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlUN0tBV05YaUoxLXVqdk1f YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCSEMxeVFCOVQ3S0FXTlhpSjEtdWp2TV9jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY2MC85NDkzMkJFQzE1MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlU N0tBV05YaUoxLXVqdk1fYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY/Y7Lum3L5Q99ehE0Hxq+Zhs3rHI4J1bodi7feGiK2lnwBZxiNP5c CP3oCfj5C3wkxF5OCdAEvkZE/w3L159LhIB4kNU8kDe6gjjE3IYBpm8jO7nZdrqt 5C2yn5JWhfFh6mWll68INjXIKPxSbm7rp+UlnrhfW/poNORB22yNO/CSb3Uapw6T NQFblLFXBmoZrJ7K5+vwAzaB2fltwVEYewneaaqAAE86LD/D9crACSeilMec04M8 iELn5RUvBrHDyAqM5Ls9E+oVE6WRpN5E/Dtz7LBXjBZbvP/q10kRLthUBvqihc4K No2Pi8Hb8wY7O5+VTDSyis2gqDCtLvZe -----END CERTIFICATE-----Generated at Mon Oct 20 15:21:56 2025 by rpki-client