$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: 3iSoWwL9GmfYE6tSpdYrdzGNb7IyR3n6j6vqtPt9eLM= Subject key identifier: E7:67:68:78:4E:A3:31:2A:64:6B:58:75:62:D8:01:9B:B7:EA:89:BA Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 09E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 09DD Signing time: Sat 18 Oct 2025 20:56:51 +0000 Manifest this update: Sat 18 Oct 2025 20:56:50 +0000 Manifest next update: Sat 25 Oct 2025 20:56:50 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: bMYN36VOPnNpz5pje6xJjPLgYiMgv+Mt5KvcMgu5eIU=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: 5OuJk3wuVixq/unKPrRmS/rEXR6rqWNJ7lk0q2nqJD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2532 (0x9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: Oct 18 20:56:50 2025 GMT Not After : Oct 25 20:56:50 2025 GMT Subject: CN=68f3ff13-a2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:ea:cc:d9:1e:08:bd:61:c5:43:51:b3:a5: 20:13:aa:f2:4b:27:bf:4f:8a:a9:89:a8:24:51:32: ce:d1:76:29:55:da:fd:25:08:25:ba:0d:5d:22:2c: 4d:76:08:b8:99:48:bc:6d:32:6d:48:9c:ae:7f:4b: 30:01:18:d6:f1:9c:d8:5f:c4:94:09:cf:9a:13:dc: af:91:e4:9b:77:c4:72:92:8e:9d:1e:bc:fa:ae:ad: 02:e8:2b:e9:88:9c:b5:5c:4a:a0:07:c0:cc:68:5b: d4:fc:b4:b3:b7:0f:dc:44:dd:ca:79:50:4f:47:67: d9:6b:3e:41:7f:1a:02:62:58:26:ba:8a:44:ba:00: 12:93:fe:ed:34:00:f5:e9:78:59:68:f7:9d:37:82: 90:8f:81:3e:c7:91:67:05:1d:32:02:0a:50:a2:11: 49:a0:35:04:a1:03:a0:e6:6c:17:e4:1e:c0:03:aa: 2e:34:b8:03:be:b0:20:5a:ce:d8:4b:73:28:53:13: cc:8d:5f:ba:a4:11:96:40:48:70:c9:f7:07:dd:f6: 15:35:ce:74:e2:3c:3b:0b:6b:bd:58:9e:02:36:0f: 0d:30:ee:93:3b:6c:bc:01:43:63:86:35:63:36:f9: 28:9a:dd:c0:81:37:50:db:bf:2b:ea:08:96:69:02: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:67:68:78:4E:A3:31:2A:64:6B:58:75:62:D8:01:9B:B7:EA:89:BA X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f3:40:21:44:2a:d9:2b:99:2e:df:83:de:49:2c:ee:e3:83: e7:6b:06:f9:dd:74:8a:c7:b6:31:63:2d:78:76:4d:5d:a9:7a: 83:53:70:dc:88:80:05:32:77:f8:13:a9:2a:17:3a:7d:10:37: d3:b6:ef:a3:75:eb:44:09:fb:66:c8:65:59:bb:ef:d9:4e:ae: 77:bd:6e:b9:d6:71:2c:9e:16:13:3a:db:48:cc:a5:1a:3c:ed: 74:12:a9:3d:e6:63:4b:89:48:0f:e3:3c:15:9e:27:7f:71:5a: 03:5f:93:f7:34:89:6a:87:3b:05:db:13:ad:34:08:70:1a:1c: f6:9e:ad:35:85:a8:4c:99:7e:b5:4e:d5:7b:e9:14:4b:6f:4b: a1:38:1a:1c:37:5d:fa:a4:ea:15:22:31:4f:4c:24:df:12:e9: 89:8f:56:25:9f:fd:89:ce:9f:e8:b1:98:a3:98:b4:06:07:9f: 25:93:88:76:c6:2b:82:0f:bc:a3:74:66:9f:94:29:dc:33:0a: e9:47:93:89:e1:b8:54:22:e9:14:5b:05:35:e8:f9:b8:87:03: f1:ff:c0:3d:d8:0b:e2:d2:94:9a:b7:3f:b9:6b:01:33:43:76: b8:e0:44:65:c8:99:bd:8f:79:55:71:3f:41:68:ac:c0:46:8b: e6:eb:4e:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjUxMDE4MjA1NjUwWhcNMjUxMDI1MjA1NjUwWjAYMRYwFAYD VQQDEw02OGYzZmYxMy1hMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzK3qzNkeCL1hxUNRs6UgE6rySye/T4qpiagkUTLO0XYpVdr9JQglug1dIixN dgi4mUi8bTJtSJyuf0swARjW8ZzYX8SUCc+aE9yvkeSbd8Ryko6dHrz6rq0C6Cvp iJy1XEqgB8DMaFvU/LSztw/cRN3KeVBPR2fZaz5BfxoCYlgmuopEugASk/7tNAD1 6XhZaPedN4KQj4E+x5FnBR0yAgpQohFJoDUEoQOg5mwX5B7AA6ouNLgDvrAgWs7Y S3MoUxPMjV+6pBGWQEhwyfcH3fYVNc504jw7C2u9WJ4CNg8NMO6TO2y8AUNjhjVj Nvkomt3AgTdQ278r6giWaQLWHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdnaHhO ozEqZGtYdWLYAZu36om6MB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh80AhRCrZK5ku34PeSSzu44Pnawb53XSKx7YxYy14dk1dqXqDU3Dc iIAFMnf4E6kqFzp9EDfTtu+jdetECftmyGVZu+/ZTq53vW651nEsnhYTOttIzKUa PO10Eqk95mNLiUgP4zwVnid/cVoDX5P3NIlqhzsF2xOtNAhwGhz2nq01hahMmX61 TtV76RRLb0uhOBocN136pOoVIjFPTCTfEumJj1Yln/2Jzp/osZijmLQGB58lk4h2 xiuCD7yjdGaflCncMwrpR5OJ4bhUIukUWwU16Pm4hwPx/8A92Avi0pSatz+5awEz Q3a44ERlyJm9j3lVcT9BaKzARovm6046 -----END CERTIFICATE-----Generated at Mon Oct 20 05:47:05 2025 by rpki-client