$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: UKjdaRwa4toHZj8GOnKJ8QtCcGJVvK5QRJacXFZtZEQ= Subject key identifier: 9E:03:A0:92:32:C0:56:82:A6:AD:2D:DE:CA:32:32:E2:78:E0:61:78 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F5B Signing time: Sat 18 Oct 2025 16:17:21 +0000 Manifest this update: Sat 18 Oct 2025 16:17:21 +0000 Manifest next update: Sat 25 Oct 2025 16:17:20 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: ZsYUNThSYVNN89OclUsq1WwyIGzAvYolvqtAmtvBwW4=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: CYv9JY9hI0P702N3lQBz+p9YJHwSjBcG7pv4fPI19/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8040 (0x1f68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Oct 18 16:17:21 2025 GMT Not After : Oct 25 16:17:20 2025 GMT Subject: CN=68f3bd91-83d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f1:4c:84:58:f7:bd:7c:4e:60:aa:c4:f1:4e: d7:fe:28:6d:bc:fd:84:3a:59:21:40:10:fb:ef:c5: f6:d0:11:d7:94:3b:ab:68:c1:e3:a3:7c:86:0f:ee: ea:e8:20:b4:73:9c:3c:77:be:f1:8a:fd:b1:61:6a: 8d:1d:d3:a1:c4:09:ae:4d:9e:f9:fc:fe:1b:1d:bf: f4:76:85:2f:e8:ca:b6:76:bb:ba:b0:37:4c:53:5f: e7:a0:bd:77:f1:5d:5e:1c:f3:e0:df:b0:01:73:4e: ef:6e:94:be:a4:d2:19:f6:ad:cf:13:86:4f:6a:3f: d3:57:1a:3b:51:dd:13:f3:7e:b3:bf:9d:58:cd:bc: c5:ae:9f:ba:15:c1:32:48:0c:03:39:4b:cf:fe:2b: 97:a7:25:8b:6a:91:c5:82:3b:3a:29:14:7d:5c:63: 7d:0a:87:4e:e9:5a:0d:59:ee:c6:39:d1:bd:c1:37: de:00:f2:b5:1d:70:a2:bc:2f:f4:e7:bd:8b:f2:17: 6d:c5:1e:6b:d1:64:6e:ab:1e:24:85:61:88:30:09: 47:21:2e:d2:69:e7:de:bf:4a:29:37:5c:db:19:c4: ae:98:ca:dd:f4:07:4c:bb:ef:04:57:29:c7:e3:e5: 1a:c5:24:31:d8:58:fe:ff:b9:53:e5:4c:a2:1c:96: 78:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:03:A0:92:32:C0:56:82:A6:AD:2D:DE:CA:32:32:E2:78:E0:61:78 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:16:1e:3d:17:8c:52:98:d8:70:c3:d9:fd:68:f7:9c:da:27: 52:7b:93:4c:97:7a:f2:a3:51:58:a1:fe:93:04:ac:6d:6c:e9: 3e:c2:3a:5d:4e:56:59:18:a2:b8:05:1a:d5:fa:f2:de:e8:c4: 10:eb:12:f3:fd:a4:35:e0:32:c5:ef:3b:b3:42:a4:93:0c:0e: 3b:ae:14:98:eb:30:5f:0e:19:ca:84:47:c5:bc:b1:98:70:9b: f0:28:5b:44:e6:cf:fd:b9:70:ef:ac:aa:f8:33:33:ad:dc:ab: 41:03:dd:11:79:f4:b6:7a:0d:82:dc:48:a3:1e:b9:f2:70:6e: 9e:ee:e2:63:57:e0:d6:ff:64:a6:c3:d0:3a:f2:0b:93:8f:7f: 60:63:05:9b:c0:99:cf:97:87:65:1c:1d:51:1a:02:54:04:97: 33:18:25:f4:a8:60:0b:30:4a:8f:68:e1:45:a1:c8:d5:03:14: e6:b7:78:a4:5a:e1:56:9f:f0:6c:ff:24:de:87:90:07:3b:08: 1a:27:f9:58:6b:47:bc:7f:77:62:d6:02:89:33:4f:d1:84:e6: 31:42:2d:4c:44:80:4b:84:5e:3c:d5:e1:f5:f8:a3:41:0d:70: a2:49:d8:5c:1b:58:60:a7:46:e6:d1:7a:18:68:67:e9:bf:ec: 64:2a:87:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjUxMDE4MTYxNzIxWhcNMjUxMDI1MTYxNzIwWjAYMRYwFAYD VQQDEw02OGYzYmQ5MS04M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvFMhFj3vXxOYKrE8U7X/ihtvP2EOlkhQBD778X20BHXlDuraMHjo3yGD+7q 6CC0c5w8d77xiv2xYWqNHdOhxAmuTZ75/P4bHb/0doUv6Mq2dru6sDdMU1/noL13 8V1eHPPg37ABc07vbpS+pNIZ9q3PE4ZPaj/TVxo7Ud0T836zv51YzbzFrp+6FcEy SAwDOUvP/iuXpyWLapHFgjs6KRR9XGN9CodO6VoNWe7GOdG9wTfeAPK1HXCivC/0 572L8hdtxR5r0WRuqx4khWGIMAlHIS7Saefev0opN1zbGcSumMrd9AdMu+8EVynH 4+UaxSQx2Fj+/7lT5UyiHJZ4DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4DoJIy wFaCpq0t3soyMuJ44GF4MB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZFh49F4xSmNhww9n9aPec2idSe5NMl3ryo1FYof6TBKxtbOk+wjpd TlZZGKK4BRrV+vLe6MQQ6xLz/aQ14DLF7zuzQqSTDA47rhSY6zBfDhnKhEfFvLGY cJvwKFtE5s/9uXDvrKr4MzOt3KtBA90RefS2eg2C3EijHrnycG6e7uJjV+DW/2Sm w9A68guTj39gYwWbwJnPl4dlHB1RGgJUBJczGCX0qGALMEqPaOFFocjVAxTmt3ik WuFWn/Bs/yTeh5AHOwgaJ/lYa0e8f3di1gKJM0/RhOYxQi1MRIBLhF481eH1+KNB DXCiSdhcG1hgp0bm0XoYaGfpv+xkKoco -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:26 2025 by rpki-client