$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: 4XyCuHCdQRGYxec5Qx5JPO2505pCmBQlVkZjNZyNoBI= Subject key identifier: 61:7B:CD:47:DD:A2:64:4F:EC:03:54:03:1D:71:9D:95:BA:60:87:48 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 0164 Signing time: Sun 19 Oct 2025 07:10:23 +0000 Manifest this update: Sun 19 Oct 2025 07:10:22 +0000 Manifest next update: Sun 26 Oct 2025 07:10:22 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: dfJfw5VjzktcfmkAlLZ3pR715QiFFeeuNoMyKLCyXwo=) 2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Oct 19 07:10:22 2025 GMT Not After : Oct 26 07:10:22 2025 GMT Subject: CN=68f48edf-8299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:49:45:2a:4d:64:49:c1:53:7b:2a:e3:70: 7a:1a:7c:55:58:fc:2b:0d:9d:ac:41:ce:a2:0a:35: 08:50:22:b7:99:8b:fe:c0:d1:27:b1:47:67:3e:f2: 0e:98:89:f4:ed:a4:e7:8a:7e:b5:40:5e:ce:d7:94: f6:5b:65:4d:40:bb:ac:e3:58:c5:a7:44:7a:9d:b8: 2b:19:cd:1d:5b:48:c3:9f:55:29:dd:e1:d0:00:8e: e9:4d:46:fe:a1:8f:be:85:25:6e:d0:b7:54:0a:21: 84:b1:90:62:d4:97:c5:03:d9:84:c2:9a:22:54:cd: 71:b7:a1:87:84:94:a6:f3:95:a8:17:40:cd:50:27: 8f:21:31:39:b5:18:b3:f6:a2:8b:36:cb:24:57:5b: b8:d0:64:12:3a:bf:b5:af:a0:42:fb:91:f2:74:69: 8b:34:2f:3d:c7:30:04:c5:ea:74:a8:6a:12:9b:64: ed:a4:ac:21:22:b6:17:f3:4f:5d:b8:d0:25:4c:27: 74:a7:d9:e2:73:5a:ac:13:ba:ae:ca:b7:56:e9:9d: e1:f8:16:fa:41:dc:1e:4c:13:94:72:b4:e9:18:ac: 17:27:bb:5a:26:49:b6:15:38:2d:ca:fa:8a:2a:76: 43:b6:8c:9f:12:e5:01:59:0e:1a:52:64:a5:ab:85: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7B:CD:47:DD:A2:64:4F:EC:03:54:03:1D:71:9D:95:BA:60:87:48 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:b3:7e:73:04:22:60:3f:4e:f9:f0:b1:32:34:3c:5a:77:5c: 46:47:60:86:cd:e2:e4:4d:3a:b5:ce:8d:e1:57:9b:5a:fd:f6: 8d:93:42:d4:16:e0:63:91:e9:96:12:f8:c0:8a:90:1d:2d:c0: bb:13:70:e3:a3:84:f3:22:b9:82:65:44:62:c1:f1:4a:07:51: 19:b1:6e:56:fe:82:0c:0b:b0:c3:ce:f8:7c:3c:7f:f8:61:5e: e5:31:ac:47:9e:bb:22:7f:d1:cb:6e:2f:ba:6f:53:cc:94:6c: 6f:79:9d:c6:e8:a4:b2:26:c9:eb:08:65:78:fb:ec:fa:bf:a6: 02:86:3f:b4:49:42:2c:ce:b0:83:b1:95:5f:40:5d:5c:21:05: 28:b5:fe:13:03:9a:8f:fa:cf:dd:94:ea:45:89:21:17:b0:3c: 3c:0b:ce:69:73:8e:e7:fb:d4:47:d9:56:a8:8a:8e:c6:0c:96: 6a:fd:47:2f:71:63:f4:71:1d:22:00:9f:4f:11:da:8d:83:91: 55:71:db:64:89:23:4f:ba:a6:77:de:f3:d6:82:df:67:be:59: a4:76:89:17:a7:da:1a:bb:7c:7a:8c:5e:5a:b7:e5:5f:ae:e1: 06:2b:9e:06:95:ef:fb:7f:1b:d0:a9:9d:df:63:24:14:3c:fe: 5a:b1:16:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUxMDE5MDcxMDIyWhcNMjUxMDI2MDcxMDIyWjAYMRYwFAYD VQQDEw02OGY0OGVkZi04Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lhJRSpNZEnBU3sq43B6GnxVWPwrDZ2sQc6iCjUIUCK3mYv+wNEnsUdnPvIO mIn07aTnin61QF7O15T2W2VNQLus41jFp0R6nbgrGc0dW0jDn1Up3eHQAI7pTUb+ oY++hSVu0LdUCiGEsZBi1JfFA9mEwpoiVM1xt6GHhJSm85WoF0DNUCePITE5tRiz 9qKLNsskV1u40GQSOr+1r6BC+5HydGmLNC89xzAExep0qGoSm2TtpKwhIrYX809d uNAlTCd0p9nic1qsE7quyrdW6Z3h+Bb6QdweTBOUcrTpGKwXJ7taJkm2FTgtyvqK KnZDtoyfEuUBWQ4aUmSlq4X9gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF7zUfd omRP7ANUAx1xnZW6YIdIMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8s35zBCJgP0758LEyNDxad1xGR2CGzeLkTTq1zo3hV5ta/faNk0LU FuBjkemWEvjAipAdLcC7E3Djo4TzIrmCZURiwfFKB1EZsW5W/oIMC7DDzvh8PH/4 YV7lMaxHnrsif9HLbi+6b1PMlGxveZ3G6KSyJsnrCGV4++z6v6YChj+0SUIszrCD sZVfQF1cIQUotf4TA5qP+s/dlOpFiSEXsDw8C85pc47n+9RH2Vaoio7GDJZq/Ucv cWP0cR0iAJ9PEdqNg5FVcdtkiSNPuqZ33vPWgt9nvlmkdokXp9oau3x6jF5at+Vf ruEGK54Gle/7fxvQqZ3fYyQUPP5asRZJ -----END CERTIFICATE-----Generated at Tue Oct 21 02:11:42 2025 by rpki-client