$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft File: XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft (raw, json) Hash identifier: xV0LcUEC2nMGzeZITVkeUUO7i6YC+lfIqx2/z/RA8IQ= Subject key identifier: C3:EE:4F:C9:DD:17:AB:28:E5:D9:70:E9:02:B2:4F:3B:DD:FE:67:32 Authority key identifier: 5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 Certificate issuer: /CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Certificate serial: 0A27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft Manifest number: 0A19 Signing time: Sat 18 Oct 2025 20:49:21 +0000 Manifest this update: Sat 18 Oct 2025 20:49:21 +0000 Manifest next update: Sat 25 Oct 2025 20:49:21 +0000 Files and hashes: 1: XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl (hash: c5XOEXX4U77Jk8FAtc/gvMvy8ZaAOLVjzMsGnDfmQmA=) 2: 97E61FE46F2111EB85D19531C4F9AE02.roa (hash: fE6v1X9dI3K/+qxRJDUFWVWwmGPbKxLQXrNQBGm5pPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2599 (0xa27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B34, serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Validity Not Before: Oct 18 20:49:21 2025 GMT Not After : Oct 25 20:49:21 2025 GMT Subject: CN=68f3fd51-9327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:24:58:ba:e0:2f:5d:6e:b5:d5:e4:36:1a:ec: e5:80:a6:fd:d6:ef:e3:bd:52:f8:95:f7:99:f4:c4: 1a:c0:95:25:9c:ab:81:b8:bb:77:95:21:38:0b:7a: 84:f8:c9:57:49:bc:37:70:38:51:fd:dd:4b:9e:17: 7b:b8:cf:09:8a:b7:ea:40:19:7d:7e:73:20:a6:4f: 04:49:fb:a7:e1:8d:c6:99:60:6c:43:f2:f4:01:95: 5c:3e:d2:55:0c:93:4a:04:e9:72:8e:00:d3:c4:74: 25:9d:fc:16:df:b1:d5:17:4e:ef:d2:4b:70:aa:72: b0:94:c8:2f:63:ec:5e:29:fc:91:e1:d1:c5:bd:bb: 79:5d:5b:86:10:d5:47:43:9b:67:eb:85:dc:29:1d: 11:23:d2:bd:f7:be:dd:21:aa:a1:eb:1d:d4:85:06: 58:2b:0a:c2:1f:c5:3b:aa:5c:16:0d:8c:68:19:b3: 39:df:90:d8:44:df:d4:43:9e:a2:1b:57:15:8e:36: ed:e9:ea:45:1b:94:c5:5c:c6:c3:e2:a6:8a:ca:ee: c7:98:41:bd:f6:c5:d9:35:ce:94:9a:cf:6f:87:5e: e5:ec:9c:b9:06:f7:4d:03:d0:7d:e6:ee:9c:58:3b: 2b:22:92:51:a2:71:79:bf:f6:5f:92:16:22:ed:36: 25:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EE:4F:C9:DD:17:AB:28:E5:D9:70:E9:02:B2:4F:3B:DD:FE:67:32 X509v3 Authority Key Identifier: keyid:5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d7:66:28:3e:bb:68:55:d2:68:db:7c:3a:d6:25:2a:09:c5: cd:67:fc:b0:d5:9e:56:18:59:1f:b8:40:ed:20:29:f6:62:76: df:1c:6b:6b:e6:d6:38:31:73:e6:98:5e:82:92:3f:89:79:5b: de:13:c7:cf:69:23:a1:2f:80:57:8d:17:79:3a:63:91:82:01: 44:4f:2f:67:80:42:49:ad:0f:9b:0b:b0:9a:d3:55:45:8b:ff: 0e:ea:33:fb:79:2e:e0:37:14:be:8b:25:0a:79:b0:b4:24:9d: 2c:aa:94:fe:3e:ab:65:19:a0:b9:65:6f:21:c6:3b:15:45:e1: 0f:68:8d:1e:7e:47:6b:5b:e1:33:5d:d1:78:f9:03:a1:22:03: d2:2f:c8:44:4a:09:1d:94:58:eb:c3:c4:94:07:28:e9:44:60: b7:fc:ca:f8:5e:fc:bd:a1:6e:68:79:ea:0f:97:3d:89:62:0d: 31:d0:fb:e0:09:8e:43:b2:80:68:11:a9:16:db:7b:27:cf:72: 2a:fa:f2:d8:e5:87:d8:70:85:fc:ad:d7:90:e0:b6:7c:71:ce: f3:be:87:5f:84:b4:08:ca:fe:e3:27:d8:ca:3e:f1:1b:ae:32: c8:f0:4b:04:6e:81:ec:ee:fb:1b:3e:45:32:22:a0:5c:12:1e: f7:5d:64:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMzQxMTAvBgNVBAUTKDVERjEwMkUyQTVFNzM2NzcyMUMxMThEQkVDREE2MDJB ODAyOUVFOTQwHhcNMjUxMDE4MjA0OTIxWhcNMjUxMDI1MjA0OTIxWjAYMRYwFAYD VQQDEw02OGYzZmQ1MS05MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CRYuuAvXW611eQ2GuzlgKb91u/jvVL4lfeZ9MQawJUlnKuBuLt3lSE4C3qE +MlXSbw3cDhR/d1Lnhd7uM8JirfqQBl9fnMgpk8ESfun4Y3GmWBsQ/L0AZVcPtJV DJNKBOlyjgDTxHQlnfwW37HVF07v0ktwqnKwlMgvY+xeKfyR4dHFvbt5XVuGENVH Q5tn64XcKR0RI9K9977dIaqh6x3UhQZYKwrCH8U7qlwWDYxoGbM535DYRN/UQ56i G1cVjjbt6epFG5TFXMbD4qaKyu7HmEG99sXZNc6Ums9vh17l7Jy5BvdNA9B95u6c WDsrIpJRonF5v/ZfkhYi7TYl4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPuT8nd F6so5dlw6QKyTzvd/mcyMB8GA1UdIwQYMBaAFF3xAuKl5zZ3IcEY2+zaYCqAKe6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIzNC82MDM3RDVEQzgy QTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5uY2h3UmpiN05wZ0tvQXA3 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmRUM0cVhuTm5jaHdSamI3TnBnS29BcDdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIzNC82MDM3RDVEQzgyQTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5u Y2h3UmpiN05wZ0tvQXA3cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB112YoPrtoVdJo23w61iUqCcXNZ/yw1Z5WGFkfuEDtICn2YnbfHGtr 5tY4MXPmmF6Ckj+JeVveE8fPaSOhL4BXjRd5OmORggFETy9ngEJJrQ+bC7Ca01VF i/8O6jP7eS7gNxS+iyUKebC0JJ0sqpT+PqtlGaC5ZW8hxjsVReEPaI0efkdrW+Ez XdF4+QOhIgPSL8hESgkdlFjrw8SUByjpRGC3/Mr4Xvy9oW5oeeoPlz2JYg0x0Pvg CY5DsoBoEakW23snz3Iq+vLY5YfYcIX8rdeQ4LZ8cc7zvodfhLQIyv7jJ9jKPvEb rjLI8EsEboHs7vsbPkUyIqBcEh73XWRi -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:30 2025 by rpki-client