$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json) Hash identifier: ElE/4+IMYL27F0q+/rz1ESM6pRfkf0WMy1DaEZsWm18= Subject key identifier: 0C:DB:86:5D:A4:15:6A:AF:CC:F1:F0:F0:A1:6E:BD:D4:5F:A9:16:28 Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft Manifest number: B3 Signing time: Sun 19 Oct 2025 09:15:31 +0000 Manifest this update: Sun 19 Oct 2025 09:15:30 +0000 Manifest next update: Sun 26 Oct 2025 09:15:30 +0000 Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: b4VDSSjOcCjgLZcEdcIHdJj9FPVDyCvq7lidmsyHlk4=) 2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: hQ884t+I5StX9TWBv4SYubO1nFPYJpeoarqEYGTcC7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Validity Not Before: Oct 19 09:15:30 2025 GMT Not After : Oct 26 09:15:30 2025 GMT Subject: CN=68f4ac32-5d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:55:1d:b5:75:a0:fe:c0:85:6f:1d:c8:ee: d2:c3:4e:3b:1d:d7:5e:5e:d5:e6:d5:4e:00:63:b3: 79:3e:d4:ed:de:f2:a8:e9:93:36:a2:87:72:62:63: 20:15:ae:8f:a9:96:ef:86:5a:0d:7a:24:e3:10:b0: 07:cb:aa:fc:45:6d:18:1a:4e:8f:a4:ed:43:b9:27: 67:15:78:83:1c:4e:b4:cb:68:67:07:10:5c:cc:a6: e9:57:fc:93:ff:2f:64:5d:d0:66:83:04:4f:bd:3c: 27:b0:3d:93:73:90:16:78:58:0d:c2:6a:d3:51:15: 2e:04:8d:ba:95:6c:4f:d9:aa:fb:35:e9:71:4e:ea: 05:81:30:6f:bf:07:d2:ea:94:0c:b1:a1:db:91:2a: 76:a5:fb:91:f2:71:18:7e:8c:f7:39:ed:5f:17:0f: c0:78:66:d0:03:70:59:a3:3e:dc:28:4f:58:88:78: a4:34:4a:16:44:bc:62:28:4b:0b:d7:e1:36:75:fe: 3e:5a:fa:73:ed:d3:88:b3:e0:1e:10:6c:a1:14:f4: bd:3e:3b:e6:98:4b:e5:98:7a:b7:76:30:79:e0:45: be:f9:43:ca:6c:bd:12:7f:46:ff:6d:f3:52:7c:cb: 0a:90:c0:12:2a:66:14:70:3c:db:1f:92:b0:da:fe: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DB:86:5D:A4:15:6A:AF:CC:F1:F0:F0:A1:6E:BD:D4:5F:A9:16:28 X509v3 Authority Key Identifier: keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:46:76:7b:3e:c4:7f:6b:91:12:6b:d5:23:a7:f9:d7:21:22: f0:40:3d:b3:4e:d6:ed:3a:1f:35:5e:29:ee:e6:4d:c4:f6:f4: 3a:49:99:3b:0e:5e:e8:00:f6:01:66:48:7a:29:3e:39:38:57: d1:99:15:44:32:dd:68:db:91:c1:f8:c2:c8:59:83:64:68:25: 63:2b:ca:2e:5a:21:e5:0a:fe:a2:19:e5:a7:19:a1:5d:0f:8b: a2:b9:df:fb:e6:57:e7:df:1c:c4:73:ea:57:6d:a4:ba:2b:b6: 60:f8:8a:5f:85:01:34:f1:88:bc:50:2b:9c:a9:0b:ff:f7:11: ef:72:a1:56:35:5d:84:f8:32:11:d3:6d:89:58:ee:79:1c:61: 8e:db:15:40:17:0c:40:cc:f9:58:46:ca:14:ba:b4:64:74:62: 4c:fe:1d:e0:af:59:3c:64:47:69:51:13:8a:7d:88:d8:a9:10: 26:0d:3e:b7:80:c2:23:e7:d2:40:31:48:a8:17:7d:9d:75:36: 40:94:c6:f0:d9:f2:15:5d:ed:25:bc:25:b7:0b:fd:05:56:8f: 80:de:0a:8e:ce:e9:14:14:c8:d7:57:41:af:63:ac:71:62:eb: 88:ba:56:b1:52:f4:fc:eb:79:ea:1d:8f:15:34:5b:b5:19:f7: 39:7a:40:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5NDExMTAvBgNVBAUTKDczMTdENzc3QkRBQTYzMzNDRDk2QTgxMDRCOTRERTBG QTQ3NTIxMTMwHhcNMjUxMDE5MDkxNTMwWhcNMjUxMDI2MDkxNTMwWjAYMRYwFAYD VQQDEw02OGY0YWMzMi01ZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhdVHbV1oP7AhW8dyO7Sw047HddeXtXm1U4AY7N5PtTt3vKo6ZM2oodyYmMg Fa6PqZbvhloNeiTjELAHy6r8RW0YGk6PpO1DuSdnFXiDHE60y2hnBxBczKbpV/yT /y9kXdBmgwRPvTwnsD2Tc5AWeFgNwmrTURUuBI26lWxP2ar7NelxTuoFgTBvvwfS 6pQMsaHbkSp2pfuR8nEYfoz3Oe1fFw/AeGbQA3BZoz7cKE9YiHikNEoWRLxiKEsL 1+E2df4+Wvpz7dOIs+AeEGyhFPS9PjvmmEvlmHq3djB54EW++UPKbL0Sf0b/bfNS fMsKkMASKmYUcDzbH5Kw2v5VxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzbhl2k FWqvzPHw8KFuvdRfqRYoMB8GA1UdIwQYMBaAFHMX13e9qmMzzZaoEEuU3g+kdSET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85QjNEMjU0OEEw QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6UE5scWdRUzVUZUQ2UjFJ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4ZlhkNzJxWXpQTmxxZ1FTNVRlRDZSMUlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTk0MS85QjNEMjU0OEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6 UE5scWdRUzVUZUQ2UjFJUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzRnZ7PsR/a5ESa9Ujp/nXISLwQD2zTtbtOh81Xinu5k3E9vQ6SZk7 Dl7oAPYBZkh6KT45OFfRmRVEMt1o25HB+MLIWYNkaCVjK8ouWiHlCv6iGeWnGaFd D4uiud/75lfn3xzEc+pXbaS6K7Zg+IpfhQE08Yi8UCucqQv/9xHvcqFWNV2E+DIR 022JWO55HGGO2xVAFwxAzPlYRsoUurRkdGJM/h3gr1k8ZEdpUROKfYjYqRAmDT63 gMIj59JAMUioF32ddTZAlMbw2fIVXe0lvCW3C/0FVo+A3gqOzukUFMjXV0GvY6xx YuuIulaxUvT863nqHY8VNFu1Gfc5ekCu -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:43 2025 by rpki-client