$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json) Hash identifier: Id+91ImpyX9GgBDPjcKKtKTxC6UGWPqZueoGyqX7mlI= Subject key identifier: 50:97:E9:F1:23:04:53:CD:DA:46:9D:8F:5B:2C:A6:DA:EC:41:CF:82 Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft Manifest number: 0685 Signing time: Sat 18 Oct 2025 23:58:20 +0000 Manifest this update: Sat 18 Oct 2025 23:58:20 +0000 Manifest next update: Sat 25 Oct 2025 23:58:20 +0000 Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: SAB+53Xl9th2nSrnET96CDZiWL+ovEdXUzZ2i8rQ97w=) 2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: NSWzyjE2HPsrPxuhTouX2YNe98sTsio9BMgnAVmwnyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: Oct 18 23:58:20 2025 GMT Not After : Oct 25 23:58:20 2025 GMT Subject: CN=68f4299c-0d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a4:10:61:49:c4:a7:b2:e1:97:66:4b:a4:3f: d8:14:9b:09:40:c9:67:b8:54:5e:03:b8:ba:f7:22: c6:81:25:40:f6:39:0a:87:c8:34:23:69:e5:4e:08: 01:9b:64:a7:4d:bc:3b:ed:ff:87:aa:5d:ca:dc:3e: a6:d1:07:45:a8:6c:48:8e:53:9e:f6:79:4c:c6:02: 58:f6:84:b8:92:32:20:c8:40:7e:c8:fb:dc:e0:01: f0:49:dd:23:d0:b6:0a:26:50:be:1a:f9:8e:7d:4a: 60:55:1f:bc:7e:25:04:e1:66:68:fe:97:cf:76:83: 5a:ae:ef:37:78:9e:dd:b6:1e:ab:82:74:1a:48:39: e6:d6:42:f0:17:63:82:0d:4e:cf:a5:35:ca:ef:ff: 7f:f7:b5:4f:3f:3c:96:a3:94:cf:82:a1:f5:37:2e: 9d:41:73:aa:10:be:c1:bc:56:ad:8d:c8:5a:4e:de: 6f:1d:79:75:1d:d1:8a:f6:c1:89:8c:93:21:5a:ad: c3:03:c7:a1:3b:47:a0:f9:48:b5:b0:75:d7:ed:4a: 71:b5:d5:9e:a6:35:e6:ee:85:9d:87:9d:7d:d3:85: 22:bb:8d:3b:1f:5a:8d:7d:ca:ed:a3:3e:d2:3c:c4: d2:b7:a2:07:8c:3f:96:b3:bd:d7:5a:47:2a:35:91: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:97:E9:F1:23:04:53:CD:DA:46:9D:8F:5B:2C:A6:DA:EC:41:CF:82 X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:15:e1:02:1a:05:03:74:7a:0a:1a:e6:5c:a3:68:32:65:88: 1f:27:c9:5e:ab:ce:eb:6e:0a:29:05:5f:64:dc:4f:d5:4a:01: 3c:0a:54:78:1d:ce:c0:b4:55:61:45:fa:9f:0c:fe:e0:2a:4c: fa:43:39:ed:88:8f:30:3f:69:19:a7:0a:ce:f5:98:ea:92:14: f6:4e:7f:b0:3b:48:48:88:42:d2:dc:ca:bd:51:81:12:e7:00: 20:0e:d9:28:ca:b4:a1:b2:05:55:f9:4a:60:18:89:1a:ea:09: ef:07:85:34:c3:7f:e4:1b:9b:28:b3:3d:01:1a:90:be:5f:1c: 91:5e:4f:9b:18:d1:8c:a6:0b:b4:31:a6:e1:e9:75:13:51:9d: f9:96:8d:9f:86:88:49:ec:6b:01:bb:fe:ba:62:ca:7a:70:78: 74:a2:61:05:9a:03:fd:8f:81:21:2e:b8:7b:83:f8:1a:b1:b0: f5:e8:9d:2a:00:5a:bd:8d:71:9e:07:a4:fe:65:10:ca:e9:5b: 13:79:41:df:30:0a:da:b6:ba:56:2b:80:f7:03:9b:b0:37:0b: 66:ae:64:d0:80:c0:ac:a1:f9:8c:a9:16:f9:2e:41:28:52:d9: c4:76:61:fe:3a:ac:8a:4f:cd:a2:a8:ae:be:49:f3:a6:29:e4: 74:b3:93:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjUxMDE4MjM1ODIwWhcNMjUxMDI1MjM1ODIwWjAYMRYwFAYD VQQDEw02OGY0Mjk5Yy0wZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66QQYUnEp7Lhl2ZLpD/YFJsJQMlnuFReA7i69yLGgSVA9jkKh8g0I2nlTggB m2SnTbw77f+Hql3K3D6m0QdFqGxIjlOe9nlMxgJY9oS4kjIgyEB+yPvc4AHwSd0j 0LYKJlC+GvmOfUpgVR+8fiUE4WZo/pfPdoNaru83eJ7dth6rgnQaSDnm1kLwF2OC DU7PpTXK7/9/97VPPzyWo5TPgqH1Ny6dQXOqEL7BvFatjchaTt5vHXl1HdGK9sGJ jJMhWq3DA8ehO0eg+Ui1sHXX7UpxtdWepjXm7oWdh51904Uiu407H1qNfcrtoz7S PMTSt6IHjD+Ws73XWkcqNZFOpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCX6fEj BFPN2kadj1ssptrsQc+CMB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR eEJGa281SHVrRHRONVUzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmFeECGgUDdHoKGuZco2gyZYgfJ8leq87rbgopBV9k3E/VSgE8ClR4 Hc7AtFVhRfqfDP7gKkz6QzntiI8wP2kZpwrO9ZjqkhT2Tn+wO0hIiELS3Mq9UYES 5wAgDtkoyrShsgVV+UpgGIka6gnvB4U0w3/kG5sosz0BGpC+XxyRXk+bGNGMpgu0 Mabh6XUTUZ35lo2fhohJ7GsBu/66Ysp6cHh0omEFmgP9j4EhLrh7g/gasbD16J0q AFq9jXGeB6T+ZRDK6VsTeUHfMAratrpWK4D3A5uwNwtmrmTQgMCsofmMqRb5LkEo UtnEdmH+OqyKT82iqK6+SfOmKeR0s5Nt -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:59 2025 by rpki-client