$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: Fg4/nuHeF/bVnCx2+AuwUlPxkF5lbtjgc4L/wOYoVVU= Subject key identifier: F7:CE:00:67:FC:E6:CD:DF:9E:C7:A5:87:44:57:C4:5B:F0:3A:A2:AA Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: A4 Signing time: Sun 19 Oct 2025 08:17:40 +0000 Manifest this update: Sun 19 Oct 2025 08:17:39 +0000 Manifest next update: Sun 26 Oct 2025 08:17:39 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: FceiuzqVX0fFZsJSsVD51bp8wM4zQASCAWSRJldzphM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Oct 19 08:17:39 2025 GMT Not After : Oct 26 08:17:39 2025 GMT Subject: CN=68f49ea3-6d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:52:d3:d7:eb:13:10:4a:c4:10:3f:39:6b: 94:ef:5a:c5:fe:10:9e:1a:a7:a3:4f:c1:b5:b0:45: a0:a8:9b:47:b2:49:cd:69:e4:ae:92:bc:88:f6:6c: 6f:1e:b2:ac:5c:96:03:e2:33:12:d9:a9:e0:aa:8b: d5:41:52:92:d8:ca:4d:32:ac:82:b7:f7:c5:7b:39: 63:04:3b:a0:c0:75:25:09:be:1a:c0:fc:23:e4:d4: dd:4a:e9:16:a4:61:ed:94:5f:d1:95:f4:e3:dc:f6: 11:e7:74:73:01:4d:1a:d9:db:ac:f2:21:58:e3:0f: 1c:e9:9f:5c:af:7d:b1:9a:e2:20:93:b6:81:10:4a: 5a:bc:b3:85:95:e2:f2:9a:42:62:50:04:fe:87:e4: 39:08:16:23:c3:7d:e4:8c:df:e2:b7:73:2b:3e:24: 54:f7:a9:d3:22:ab:53:3d:c0:cd:9a:ee:62:b1:7d: 02:6a:1a:c5:24:bd:5c:16:e2:78:7d:2c:4f:88:42: 75:eb:4f:2f:d7:6a:1e:d5:3e:ae:cb:5c:00:75:1a: 62:22:11:c9:aa:89:d2:27:d0:9d:66:05:e9:dd:f0: cf:24:1e:f3:66:60:b8:22:e8:4d:fc:d9:a2:80:01: 26:98:13:ba:d0:2b:c3:70:25:15:e8:0b:3a:d1:15: be:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CE:00:67:FC:E6:CD:DF:9E:C7:A5:87:44:57:C4:5B:F0:3A:A2:AA X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:28:90:9b:b4:a9:52:8c:53:dc:63:26:54:e3:a6:a3:5a:c0: bd:92:66:c7:66:31:6b:29:e2:f4:be:21:d1:b4:e9:33:a7:ef: de:a6:30:df:27:b0:ab:38:c4:18:04:10:b6:31:61:24:00:94: 7e:d3:f2:6a:a0:4a:0b:15:25:5d:de:09:53:6d:37:f1:70:98: d1:2c:bf:4b:b0:ce:92:1d:60:06:f3:c2:70:28:c5:68:d9:74: b4:b8:36:9e:31:39:52:c5:4a:db:94:fc:6e:eb:16:36:54:2e: c4:98:2c:f7:f6:62:83:0a:0b:b0:df:86:67:8d:91:88:42:fc: 85:69:62:1c:98:c7:34:94:be:09:a3:d4:01:2c:78:3f:00:30: 24:ee:68:65:bc:13:5d:72:5c:a3:90:00:ba:75:08:ec:8e:35: 9f:f9:ad:ec:2e:56:f8:70:98:6d:c8:09:f1:bb:45:7c:d0:a5: a0:fd:27:90:6e:bc:a6:70:c9:b3:1a:eb:4e:5d:07:e3:5a:56: c3:23:fe:b0:ae:5a:49:9d:b7:81:b6:56:49:66:a5:b4:93:b1: 61:94:24:97:f2:fd:27:88:f3:1b:db:7e:f2:aa:d8:56:3f:35: 9a:f7:6c:e0:0a:b4:f2:4e:18:66:3c:63:45:9c:c4:bb:28:f8: eb:b2:91:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKDVFRjVFMUE1ODVDNDhFMkJDNDUwQkE3MkY0QzMxMzQ2 ODBFNTJCMEQwHhcNMjUxMDE5MDgxNzM5WhcNMjUxMDI2MDgxNzM5WjAYMRYwFAYD VQQDEw02OGY0OWVhMy02ZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtopS09frExBKxBA/OWuU71rF/hCeGqejT8G1sEWgqJtHsknNaeSukryI9mxv HrKsXJYD4jMS2angqovVQVKS2MpNMqyCt/fFezljBDugwHUlCb4awPwj5NTdSukW pGHtlF/RlfTj3PYR53RzAU0a2dus8iFY4w8c6Z9cr32xmuIgk7aBEEpavLOFleLy mkJiUAT+h+Q5CBYjw33kjN/it3MrPiRU96nTIqtTPcDNmu5isX0CahrFJL1cFuJ4 fSxPiEJ1608v12oe1T6uy1wAdRpiIhHJqonSJ9CdZgXp3fDPJB7zZmC4IuhN/Nmi gAEmmBO60CvDcCUV6As60RW+fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfOAGf8 5s3fnselh0RXxFvwOqKqMB8GA1UdIwQYMBaAFF714aWFxI4rxFC6cvTDE0aA5SsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS9FMUFFNTQ3Q0Ix MzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWppdkVVTHB5OU1NVFJvRGxL dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS9FMUFFNTQ3Q0IxMzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWpp dkVVTHB5OU1NVFJvRGxLdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOKJCbtKlSjFPcYyZU46ajWsC9kmbHZjFrKeL0viHRtOkzp+/epjDf J7CrOMQYBBC2MWEkAJR+0/JqoEoLFSVd3glTbTfxcJjRLL9LsM6SHWAG88JwKMVo 2XS0uDaeMTlSxUrblPxu6xY2VC7EmCz39mKDCguw34ZnjZGIQvyFaWIcmMc0lL4J o9QBLHg/ADAk7mhlvBNdclyjkAC6dQjsjjWf+a3sLlb4cJhtyAnxu0V80KWg/SeQ brymcMmzGutOXQfjWlbDI/6wrlpJnbeBtlZJZqW0k7FhlCSX8v0niPMb237yqthW PzWa92zgCrTyThhmPGNFnMS7KPjrspHm -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:41 2025 by rpki-client