$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json) Hash identifier: sYmst2CRDzUG5MyEfq1vi2jpZiv+P1fGoatgLHjjGVc= Subject key identifier: E1:13:1C:41:31:3E:5E:5A:38:63:BB:C5:89:EE:A4:EA:C6:B0:88:2B Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft Manifest number: 012C Signing time: Sun 19 Oct 2025 07:24:55 +0000 Manifest this update: Sun 19 Oct 2025 07:24:54 +0000 Manifest next update: Sun 26 Oct 2025 07:24:54 +0000 Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: SmskH2fJ63kA+GsIxFe1P5PYbinY6RZxBNs0Qs57laU=) 2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: osmG47ejUnqAfJKuMkDqKj8NyV5CxVCxx93M/mU6AGU=) 3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: tXFOS4K6NP0mWp2yqDrG4Mk0xH2TKVaPDDMjLQ6peHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Validity Not Before: Oct 19 07:24:54 2025 GMT Not After : Oct 26 07:24:54 2025 GMT Subject: CN=68f49247-705b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:f1:1f:3d:c2:87:14:f0:1d:61:b1:11:32: 21:48:f9:1c:5c:f7:e1:9e:b8:4b:ea:3d:e9:61:8a: 30:e3:fe:f1:fd:01:66:be:7c:1f:84:4d:89:74:99: c7:64:64:22:3b:e6:c0:42:ba:33:ec:19:a6:c4:5d: 6b:46:13:f3:7a:bd:3b:17:3d:53:94:69:f9:e2:67: 3d:58:95:c1:7f:f9:f3:db:52:eb:9e:ba:b1:ea:70: 4e:79:a4:61:84:e8:eb:93:88:71:28:05:0e:dd:8a: 29:1f:af:40:39:3d:ce:9c:0e:03:91:a4:9c:9b:0a: 6a:c5:8a:af:52:85:2f:fa:a5:a2:7f:7f:df:20:4c: 0c:26:e9:34:4d:50:eb:c4:ee:c8:91:0e:88:6e:93: 7c:5e:84:30:a6:21:12:99:82:5e:43:f6:e4:13:ce: 5d:6c:7b:21:64:d8:23:04:c4:d3:43:fc:38:41:31: a7:85:90:5b:a9:68:55:bc:2b:37:61:e8:e4:7c:0a: 4f:09:f4:99:76:69:0d:11:50:ab:ca:90:d8:21:ce: 09:df:47:a6:2a:60:13:60:ad:14:b1:14:b7:33:8d: fe:8c:16:5a:e6:a7:f0:c0:63:2a:58:b9:e0:02:31: 08:b6:06:f7:5d:69:02:99:4f:e0:ac:6d:d1:12:9d: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:13:1C:41:31:3E:5E:5A:38:63:BB:C5:89:EE:A4:EA:C6:B0:88:2B X509v3 Authority Key Identifier: keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ba:5e:91:8b:83:92:d1:64:69:0f:95:a7:ce:d8:d6:ee:e6: d7:72:26:e7:d0:99:c3:1f:47:8c:d1:5a:af:43:df:65:a2:f5: 3e:1b:f4:0c:ac:ed:9e:27:6c:89:58:b6:6f:f4:0b:a2:2b:c0: 7b:b1:5f:0c:64:60:fd:87:75:9c:36:e4:6b:d9:98:d3:e4:ba: c4:85:5e:eb:52:2d:54:cb:fe:af:6a:15:b9:95:2e:46:65:9f: 41:da:6d:4b:77:23:50:26:74:0f:b9:0e:5f:f9:f3:7f:61:b7: c6:71:f1:47:b0:f7:18:6e:f7:f1:64:a6:6e:0c:c3:34:18:af: ca:83:e7:6d:d9:c1:fc:49:89:f0:cd:59:2a:13:2d:3e:75:7c: 71:52:60:97:16:e9:fb:31:10:06:4a:f6:3f:25:f6:eb:c0:8e: cc:c4:0b:6c:ec:ad:19:38:b8:47:b8:e7:a5:ba:11:40:24:38: c7:6e:74:a7:51:5b:7d:35:e2:d7:92:af:66:1c:67:b1:86:cb: ea:27:33:63:f1:17:81:e2:93:90:96:d8:f2:c9:95:26:48:92: d3:7c:46:9d:34:72:70:17:1e:d0:96:4f:61:a3:aa:e2:bb:51: 49:3a:c4:e7:56:cb:2b:3d:77:79:8c:de:5f:d7:f2:2d:e9:ee: a0:e5:12:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy OTFDNDdCQUYwHhcNMjUxMDE5MDcyNDU0WhcNMjUxMDI2MDcyNDU0WjAYMRYwFAYD VQQDEw02OGY0OTI0Ny03MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte7xHz3ChxTwHWGxETIhSPkcXPfhnrhL6j3pYYow4/7x/QFmvnwfhE2JdJnH ZGQiO+bAQroz7BmmxF1rRhPzer07Fz1TlGn54mc9WJXBf/nz21Lrnrqx6nBOeaRh hOjrk4hxKAUO3YopH69AOT3OnA4DkaScmwpqxYqvUoUv+qWif3/fIEwMJuk0TVDr xO7IkQ6IbpN8XoQwpiESmYJeQ/bkE85dbHshZNgjBMTTQ/w4QTGnhZBbqWhVvCs3 YejkfApPCfSZdmkNEVCrypDYIc4J30emKmATYK0UsRS3M43+jBZa5qfwwGMqWLng AjEItgb3XWkCmU/grG3REp1r8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOETHEEx Pl5aOGO7xYnupOrGsIgrMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChul6Ri4OS0WRpD5WnztjW7ubXcibn0JnDH0eM0VqvQ99lovU+G/QM rO2eJ2yJWLZv9AuiK8B7sV8MZGD9h3WcNuRr2ZjT5LrEhV7rUi1Uy/6vahW5lS5G ZZ9B2m1LdyNQJnQPuQ5f+fN/YbfGcfFHsPcYbvfxZKZuDMM0GK/Kg+dt2cH8SYnw zVkqEy0+dXxxUmCXFun7MRAGSvY/JfbrwI7MxAts7K0ZOLhHuOeluhFAJDjHbnSn UVt9NeLXkq9mHGexhsvqJzNj8ReB4pOQltjyyZUmSJLTfEadNHJwFx7Qlk9ho6ri u1FJOsTnVssrPXd5jN5f1/It6e6g5RKM -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:17 2025 by rpki-client