$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft File: XucUYNY3KKxeq5GKVB0NcFFXfU0.mft (raw, json) Hash identifier: WahDtU2RzvINtjdhW2YneLZKk8rv0vbhTdBxPI8YJoI= Subject key identifier: 6D:57:B7:C0:F8:0C:4C:7F:2C:50:9A:C0:B5:EC:86:B0:4B:82:A2:E4 Authority key identifier: 5E:E7:14:60:D6:37:28:AC:5E:AB:91:8A:54:1D:0D:70:51:57:7D:4D Certificate issuer: /CN=A91B758E/serialNumber=5EE71460D63728AC5EAB918A541D0D7051577D4D Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft Manifest number: 0132 Signing time: Sun 19 Oct 2025 07:20:21 +0000 Manifest this update: Sun 19 Oct 2025 07:20:21 +0000 Manifest next update: Sun 26 Oct 2025 07:20:21 +0000 Files and hashes: 1: XucUYNY3KKxeq5GKVB0NcFFXfU0.crl (hash: ryRqCt9AjuyhRWdYp7vEeAcSamLlrxeVRDw8ynaIGYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.crl rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=5EE71460D63728AC5EAB918A541D0D7051577D4D Validity Not Before: Oct 19 07:20:21 2025 GMT Not After : Oct 26 07:20:21 2025 GMT Subject: CN=68f49135-7042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:a7:a6:a8:fd:e5:36:42:7d:87:08:d3:a0: 1a:8d:76:ed:ee:21:9f:ee:d4:95:28:3d:30:a4:d1: 8d:71:be:c5:8a:d2:7e:80:c1:2d:9b:36:09:39:b2: 6a:2a:cb:4f:4c:44:84:5a:27:bf:d6:36:d8:e4:4e: dc:2c:80:d9:d5:9f:2a:b7:da:95:b1:c3:91:ea:56: 5e:e8:2b:9e:b7:b0:6b:b6:58:20:04:19:f7:45:0e: ab:5b:40:ac:08:45:3b:bd:a3:82:db:d3:70:fc:e8: 58:b1:3f:16:bc:95:03:bd:49:74:84:1a:6c:b9:39: eb:db:a8:47:85:80:a8:4e:65:b6:50:6e:c3:4b:87: f7:4b:3b:9d:75:16:fd:e6:e4:63:60:ff:79:eb:62: 82:64:a4:96:cf:7b:6a:b3:fd:f5:d5:23:4d:bd:60: 75:85:a5:76:75:f8:d9:34:60:95:04:df:fd:cd:5e: 26:b8:98:e6:53:f9:7d:ec:21:ac:0c:2e:82:81:60: 7b:82:55:fc:e6:60:9f:92:c8:82:ce:19:9a:8a:5f: 61:9b:a4:6b:a8:86:8b:de:92:cc:84:14:41:f7:dd: 02:a6:22:e0:e5:05:dd:db:95:6e:d2:23:78:90:6c: f1:56:4c:55:e7:96:0c:24:aa:34:8d:88:16:d2:16: e7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:57:B7:C0:F8:0C:4C:7F:2C:50:9A:C0:B5:EC:86:B0:4B:82:A2:E4 X509v3 Authority Key Identifier: keyid:5E:E7:14:60:D6:37:28:AC:5E:AB:91:8A:54:1D:0D:70:51:57:7D:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:fb:8b:bd:15:c7:91:f9:eb:1d:c8:c7:cd:e0:81:19:0c:b6: fa:58:6d:be:3e:cb:ab:9c:52:3c:82:bb:93:a3:93:2a:f0:f1: cf:e7:07:b7:ce:74:c3:29:5a:6c:c5:80:d6:e3:08:c4:64:fb: 67:7e:0d:a4:71:2c:1d:e9:aa:76:ea:93:6c:f2:7d:4a:e8:3b: 10:7e:9f:75:6e:15:74:2d:a4:79:a7:d7:53:26:bc:89:41:af: 72:6b:86:ae:6b:fb:7e:b4:f6:a7:b8:7e:5f:42:3b:42:14:c2: f1:2c:88:31:0a:38:29:0d:55:2f:e7:6b:7c:87:9b:3f:76:a1: 0a:75:d6:d3:75:b1:74:3f:ea:52:80:3c:2e:a9:85:ac:05:d2: 77:02:a6:0e:a9:8c:f6:b6:96:06:31:69:13:76:ab:f5:be:ce: f8:c9:c9:3b:1c:f0:75:0f:b2:35:ba:aa:3d:ab:a8:6b:8d:5f: 10:17:0f:3f:a9:1d:20:26:c0:94:d8:28:bb:bb:46:64:64:93: fe:ee:8b:9c:2b:07:0a:4a:6b:4c:5d:9d:d9:f0:e0:b4:91:c8: 7d:83:a2:05:a9:ae:ea:43:3c:70:5e:25:f3:e4:62:a3:51:d1: 7d:4b:f6:64:4b:0f:45:8c:05:3a:7d:e6:c4:03:c2:49:02:53: 9e:fc:e8:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKDVFRTcxNDYwRDYzNzI4QUM1RUFCOTE4QTU0MUQwRDcw NTE1NzdENEQwHhcNMjUxMDE5MDcyMDIxWhcNMjUxMDI2MDcyMDIxWjAYMRYwFAYD VQQDEw02OGY0OTEzNS03MDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5qnpqj95TZCfYcI06AajXbt7iGf7tSVKD0wpNGNcb7FitJ+gMEtmzYJObJq KstPTESEWie/1jbY5E7cLIDZ1Z8qt9qVscOR6lZe6Cuet7BrtlggBBn3RQ6rW0Cs CEU7vaOC29Nw/OhYsT8WvJUDvUl0hBpsuTnr26hHhYCoTmW2UG7DS4f3SzuddRb9 5uRjYP9562KCZKSWz3tqs/311SNNvWB1haV2dfjZNGCVBN/9zV4muJjmU/l97CGs DC6CgWB7glX85mCfksiCzhmail9hm6RrqIaL3pLMhBRB990CpiLg5QXd25Vu0iN4 kGzxVkxV55YMJKo0jYgW0hbnoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1Xt8D4 DEx/LFCawLXshrBLgqLkMB8GA1UdIwQYMBaAFF7nFGDWNyisXquRilQdDXBRV31N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9FNzk5RjkyMkQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi9YdWNVWU5ZM0tLeGVxNUdLVkIwTmNGRlhm VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1Y1VZTlkzS0t4ZXE1R0tWQjBOY0ZGWGZVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9FNzk5RjkyMkQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi9YdWNVWU5ZM0tL eGVxNUdLVkIwTmNGRlhmVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi+4u9FceR+esdyMfN4IEZDLb6WG2+PsurnFI8gruTo5Mq8PHP5we3 znTDKVpsxYDW4wjEZPtnfg2kcSwd6ap26pNs8n1K6DsQfp91bhV0LaR5p9dTJryJ Qa9ya4aua/t+tPanuH5fQjtCFMLxLIgxCjgpDVUv52t8h5s/dqEKddbTdbF0P+pS gDwuqYWsBdJ3AqYOqYz2tpYGMWkTdqv1vs74yck7HPB1D7I1uqo9q6hrjV8QFw8/ qR0gJsCU2Ci7u0ZkZJP+7oucKwcKSmtMXZ3Z8OC0kch9g6IFqa7qQzxwXiXz5GKj UdF9S/ZkSw9FjAU6febEA8JJAlOe/Og0 -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:19 2025 by rpki-client