$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: rNCcJALisKh+ZdaeK4PljOtrD75bKchNz8sRJ37dXyQ= Subject key identifier: 14:21:88:A5:E4:4E:D2:BD:6A:00:93:B3:F9:6D:59:D9:AD:8F:79:94 Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 34C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 34C7 Signing time: Sat 18 Oct 2025 15:18:09 +0000 Manifest this update: Sat 18 Oct 2025 15:18:09 +0000 Manifest next update: Sat 25 Oct 2025 15:18:09 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: 56HZvVXWxaxpymRisF8rupiUal4veDktmEKMJZhM2wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13513 (0x34c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Oct 18 15:18:09 2025 GMT Not After : Oct 25 15:18:09 2025 GMT Subject: CN=68f3afb1-5d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:55:82:3b:31:9f:21:99:c8:5b:82:18:90: 1c:90:f0:32:52:33:23:55:fc:57:64:47:8c:07:89: 88:7b:f9:2b:01:1d:ab:b9:97:50:15:1a:f4:e7:1a: 6e:16:b0:ef:37:73:e8:d0:da:23:aa:1d:ce:fa:21: f7:26:02:35:f4:0f:d3:a6:19:1c:8a:42:d7:1e:46: 7f:a7:d4:e6:19:be:e1:95:84:6d:a8:e4:75:d9:90: 8c:6d:6b:f3:d3:aa:81:68:83:9f:2f:ba:ac:d2:fc: d9:58:0f:d0:fa:71:32:50:a7:27:af:65:21:1f:e6: 98:78:60:95:92:4d:3d:30:b9:3b:ce:92:25:90:b9: c8:5e:5b:54:81:78:14:a3:f4:f1:f3:e2:69:f8:b6: 6a:ef:c7:bf:37:9f:cf:c6:a7:85:c3:cb:a3:49:03: 65:39:c8:d5:67:d8:7c:f7:df:d7:c1:ee:ef:80:37: e8:3c:38:e0:4f:51:37:19:60:95:25:fa:22:ac:6b: bd:0e:12:5e:b1:97:d4:b9:23:c7:e2:cb:d1:6d:c4: 8e:ee:c0:3c:e9:01:02:ee:da:f4:18:11:63:3f:70: d6:65:8b:e4:42:da:d6:ce:aa:3e:da:41:81:d0:28: 3a:12:1f:bb:1c:5d:89:dc:5d:86:8e:e6:3b:b8:ec: bd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:21:88:A5:E4:4E:D2:BD:6A:00:93:B3:F9:6D:59:D9:AD:8F:79:94 X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:db:63:78:1e:b1:44:22:9e:ff:7a:49:8c:bd:b0:47:01:15: f1:b4:49:7e:ea:13:6d:af:a0:51:dd:e9:d3:bd:ef:74:d3:bf: bf:61:8c:94:60:81:54:ce:62:22:c0:37:0b:06:02:9b:8b:c3: 78:f9:60:33:82:e5:5f:a5:2e:f8:60:33:66:2b:84:49:d6:45: b4:e4:6f:d0:b9:12:69:ec:b2:e0:9e:cb:2b:6c:dd:b6:d6:f7: 68:21:ae:cb:a1:90:40:d5:95:a2:7b:65:8b:bd:5e:49:7d:5f: 05:2d:1c:25:17:84:51:ff:a6:33:75:34:4d:9d:f7:ba:86:ca: fa:99:0f:32:51:47:24:98:8e:77:81:04:c9:b9:7c:68:4c:71: dd:9b:aa:5a:8a:a7:ea:c6:d3:d0:1f:77:28:f3:c5:99:b2:f0: 48:58:7a:b2:e5:a3:a3:95:d9:5a:3d:45:a9:d1:e9:d2:e7:49: 1d:38:2b:0f:0c:20:24:50:0d:07:11:e5:8b:3c:ea:61:4a:09: f0:21:e7:88:14:77:13:b4:e7:c3:4f:67:1f:91:d1:d3:c0:18: 34:bf:c8:43:0b:39:cb:83:88:d1:00:06:b1:b8:1f:5e:47:f7: 48:2e:85:87:ad:65:2f:03:e9:f6:5d:6b:c0:68:e7:90:99:0a: 50:01:45:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjUxMDE4MTUxODA5WhcNMjUxMDI1MTUxODA5WjAYMRYwFAYD VQQDEw02OGYzYWZiMS01ZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunxVgjsxnyGZyFuCGJAckPAyUjMjVfxXZEeMB4mIe/krAR2ruZdQFRr05xpu FrDvN3Po0Nojqh3O+iH3JgI19A/TphkcikLXHkZ/p9TmGb7hlYRtqOR12ZCMbWvz 06qBaIOfL7qs0vzZWA/Q+nEyUKcnr2UhH+aYeGCVkk09MLk7zpIlkLnIXltUgXgU o/Tx8+Jp+LZq78e/N5/PxqeFw8ujSQNlOcjVZ9h899/Xwe7vgDfoPDjgT1E3GWCV JfoirGu9DhJesZfUuSPH4svRbcSO7sA86QEC7tr0GBFjP3DWZYvkQtrWzqo+2kGB 0Cg6Eh+7HF2J3F2GjuY7uOy9NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQhiKXk TtK9agCTs/ltWdmtj3mUMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI22N4HrFEIp7/ekmMvbBHARXxtEl+6hNtr6BR3enTve9007+/YYyU YIFUzmIiwDcLBgKbi8N4+WAzguVfpS74YDNmK4RJ1kW05G/QuRJp7LLgnssrbN22 1vdoIa7LoZBA1ZWie2WLvV5JfV8FLRwlF4RR/6YzdTRNnfe6hsr6mQ8yUUckmI53 gQTJuXxoTHHdm6paiqfqxtPQH3co88WZsvBIWHqy5aOjldlaPUWp0enS50kdOCsP DCAkUA0HEeWLPOphSgnwIeeIFHcTtOfDT2cfkdHTwBg0v8hDCznLg4jRAAaxuB9e R/dILoWHrWUvA+n2XWvAaOeQmQpQAUW7 -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:46 2025 by rpki-client