$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: kY+1WR7XYe2NCOnlmoeeKPokYJkZ6VTui3V7n20ZSNc= Subject key identifier: 6A:72:77:08:C0:5B:23:C3:C8:62:AD:F6:E5:5D:D6:E6:A4:BC:F4:BD Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 015B Signing time: Sun 19 Oct 2025 06:49:24 +0000 Manifest this update: Sun 19 Oct 2025 06:49:23 +0000 Manifest next update: Sun 26 Oct 2025 06:49:23 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: QJLvIo1VUH2zYMk8a7ukte4aa1EIkppKgSME+tL57QU=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: W3PBLvmUcdE3zAX7FZy5vyT9kW67f//Ujbv+JZHmvZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: Oct 19 06:49:23 2025 GMT Not After : Oct 26 06:49:23 2025 GMT Subject: CN=68f489f4-c77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:03:32:76:59:22:fc:c4:5c:04:3b:f9:f1: a8:2c:2d:98:0b:73:3a:2e:c6:ba:42:4e:f7:79:bd: 45:ae:e8:76:c4:2a:19:56:04:20:ad:6c:ff:7d:5b: 18:67:40:05:99:d4:61:51:0f:0c:3e:ec:5a:17:c9: 61:57:fa:da:d9:12:2c:cb:f1:2e:71:b3:86:d0:5e: 6b:2c:02:84:5d:dd:76:fb:53:ce:d9:61:e3:7a:bd: a9:80:c2:61:0e:3a:57:cf:24:42:3b:31:aa:1d:44: 9f:18:f0:f9:02:d0:db:7c:bc:cc:dd:2f:15:3f:67: 2c:0f:44:ca:15:f6:a0:7d:c9:59:06:bf:1c:b4:de: 7f:42:62:ff:68:d1:66:9f:1e:77:07:54:a7:fd:19: c3:53:22:b2:27:cb:5d:5a:7d:1f:6a:a5:6f:d2:8d: 4a:e6:86:d4:08:3b:0f:9f:6f:3c:99:f8:21:ba:63: bf:08:53:92:58:8f:1f:33:67:57:ed:e1:12:aa:6d: 73:b0:f3:11:d6:7e:4e:49:39:b1:0f:2b:bb:9e:2b: 45:89:de:ea:2d:8d:6c:d5:f0:ff:c3:de:cf:e1:44: 9a:af:f6:0e:30:e7:d7:f8:87:7e:35:42:44:6a:c9: 5e:af:08:b2:b8:6d:c0:2e:8a:19:ce:81:6f:1e:a9: e0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:72:77:08:C0:5B:23:C3:C8:62:AD:F6:E5:5D:D6:E6:A4:BC:F4:BD X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:49:6d:bb:f9:8d:c6:99:a0:13:8a:2a:e9:a6:89:ca:53:08: 81:a1:89:90:2d:9e:95:eb:d5:1a:d6:de:da:b5:a1:af:61:2d: 8b:f4:99:90:72:40:5b:52:9e:bc:43:b0:29:cd:80:83:96:1c: 0e:be:27:b8:a6:c3:ba:09:c4:40:6a:44:94:bb:38:1c:ba:c5: 3f:a2:8f:32:51:28:47:c5:70:f6:fb:5c:2e:67:52:4c:3d:13: 13:93:31:98:8b:fb:11:45:43:b4:4b:a6:ed:69:8c:2f:e2:e4: ad:3e:84:92:c2:b3:94:66:de:cd:73:4b:c2:a9:79:ab:37:3d: a7:cc:20:b2:fa:62:8e:3c:73:04:2d:36:bc:1c:25:86:9f:57: 0e:4d:5a:f5:da:6b:39:21:a8:e5:80:c8:c7:5c:1f:13:86:23: c1:d9:51:66:ed:50:e8:d9:24:af:fe:ce:03:42:09:28:2a:01: ac:72:aa:cd:ef:d8:bf:46:0f:df:b8:65:3a:cf:79:28:c0:86: 6e:f9:29:13:49:9c:9d:52:5f:d6:19:a9:47:75:18:ca:4e:02: f0:e7:46:d4:06:5c:fa:fb:bb:38:e2:f4:f7:4d:d7:d7:f6:1a: 17:d7:68:f0:44:99:4e:fe:28:be:0f:6b:18:44:a4:b2:b2:8d: 5f:e7:6f:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjUxMDE5MDY0OTIzWhcNMjUxMDI2MDY0OTIzWjAYMRYwFAYD VQQDEw02OGY0ODlmNC1jNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWoDMnZZIvzEXAQ7+fGoLC2YC3M6Lsa6Qk73eb1Fruh2xCoZVgQgrWz/fVsY Z0AFmdRhUQ8MPuxaF8lhV/ra2RIsy/EucbOG0F5rLAKEXd12+1PO2WHjer2pgMJh DjpXzyRCOzGqHUSfGPD5AtDbfLzM3S8VP2csD0TKFfagfclZBr8ctN5/QmL/aNFm nx53B1Sn/RnDUyKyJ8tdWn0faqVv0o1K5obUCDsPn288mfghumO/CFOSWI8fM2dX 7eESqm1zsPMR1n5OSTmxDyu7nitFid7qLY1s1fD/w97P4USar/YOMOfX+Id+NUJE aslerwiyuG3ALooZzoFvHqngEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpydwjA WyPDyGKt9uVd1uakvPS9MB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTSW27+Y3GmaATiirpponKUwiBoYmQLZ6V69Ua1t7ataGvYS2L9JmQ ckBbUp68Q7ApzYCDlhwOvie4psO6CcRAakSUuzgcusU/oo8yUShHxXD2+1wuZ1JM PRMTkzGYi/sRRUO0S6btaYwv4uStPoSSwrOUZt7Nc0vCqXmrNz2nzCCy+mKOPHME LTa8HCWGn1cOTVr12ms5IajlgMjHXB8ThiPB2VFm7VDo2SSv/s4DQgkoKgGscqrN 79i/Rg/fuGU6z3kowIZu+SkTSZydUl/WGalHdRjKTgLw50bUBlz6+7s44vT3TdfX 9hoX12jwRJlO/ii+D2sYRKSyso1f52+d -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:54 2025 by rpki-client