$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json) Hash identifier: kWk1L7xcH8q4MzAmCZHLJcts+BpPxG9QhAzEmplFUGI= Subject key identifier: 26:6C:B8:75:52:F8:46:7E:3B:0F:38:70:B0:42:08:52:7B:5C:CD:05 Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft Manifest number: 01D1 Signing time: Sun 19 Oct 2025 05:14:59 +0000 Manifest this update: Sun 19 Oct 2025 05:14:58 +0000 Manifest next update: Sun 26 Oct 2025 05:14:58 +0000 Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: 5/LBjn3lAexvSZueH8RUntrSHoaUbt7U11RbB9P4qrk=) 2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: 0JcJhlyjlF7wNse9vwSRpqDIz9jgkXs09QG/XtA+FYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Validity Not Before: Oct 19 05:14:58 2025 GMT Not After : Oct 26 05:14:58 2025 GMT Subject: CN=68f473d3-4025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:15:b0:93:7d:72:1b:d9:31:8f:03:d3:4c: d2:cd:af:6a:e4:cb:a7:81:3b:07:18:72:8f:48:47: 23:0e:0a:a3:ae:fe:c1:0a:21:ed:a6:2c:5a:d4:5c: 78:97:cc:f3:23:d4:fc:93:5d:b6:eb:d7:17:8b:90: 68:65:68:9a:88:0e:33:42:af:5f:39:9a:8f:24:5f: 54:11:28:72:9b:e3:a5:e7:4b:6b:24:8c:43:ee:32: d8:e9:3a:54:71:6f:50:ca:76:c5:9d:94:18:a9:fb: 91:d4:ee:81:00:8a:26:b1:54:7a:25:bb:44:3a:d0: 98:24:9e:e9:4b:1b:a5:29:f8:fe:5c:0e:03:2c:a6: fd:ee:35:b3:c8:fb:fd:cb:18:b3:df:5c:ae:84:68: 9a:4f:b3:6f:39:48:5c:a2:62:a1:4b:86:84:79:cb: 3a:b9:60:56:44:fe:4a:99:d4:c3:88:63:ef:10:ba: ed:d2:97:55:d1:85:8b:d0:2a:22:44:85:21:62:a9: 68:91:bc:02:7d:ac:44:70:6a:01:01:16:65:8f:8a: b3:b8:78:1d:be:ea:96:9b:37:05:55:6e:6c:b8:7e: 9e:bb:e6:9b:be:a6:6a:61:96:59:a5:d4:69:fd:fd: 21:e5:8c:67:c1:e9:fc:90:40:ba:bb:e9:14:fc:8d: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6C:B8:75:52:F8:46:7E:3B:0F:38:70:B0:42:08:52:7B:5C:CD:05 X509v3 Authority Key Identifier: keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:7c:b4:f8:a3:9c:02:20:f3:6d:f0:bf:1f:f5:6e:a8:e6:6a: 0d:ee:56:e8:86:06:31:bb:61:8d:e1:2d:e1:09:27:91:c9:0a: 05:8c:e3:1e:bb:95:62:38:45:72:b8:6c:03:e4:26:0d:ed:8b: 29:9d:92:cd:c2:7b:1e:59:3a:38:6e:6c:99:10:7f:c4:0d:06: ca:e4:ea:22:00:34:b7:bd:b4:f8:19:e8:cf:fe:24:ee:72:93: ea:10:0e:c5:2d:88:4d:5e:88:f7:ec:b6:80:88:27:7e:ec:20: b1:95:63:0b:c9:ca:14:37:bc:3a:9e:f5:ad:63:b3:ef:9d:4d: 67:77:d1:bb:c5:8e:68:06:24:c9:74:40:78:d6:59:e3:bc:21: 17:4a:2f:8e:bd:2a:23:ac:23:0f:df:11:af:1e:ff:10:8b:42: 57:94:42:6d:6b:46:fc:58:5f:0f:6c:5f:52:8d:57:88:c2:fc: 54:20:18:7e:f1:8e:35:25:1f:c3:80:41:25:0d:75:da:3b:c0: c7:0a:e3:4a:e8:65:92:71:cb:46:36:f7:e0:bc:2f:3a:6c:c2: fc:8b:fa:18:62:6b:61:03:fe:0a:3e:b6:b4:8b:10:e1:0f:6a: 33:58:e8:31:4d:32:f8:8a:33:5b:bd:ee:c8:1b:66:08:ef:01: 4c:a8:f6:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3RDExMTAvBgNVBAUTKEM1QkQ4QTUwQ0FENUEwNUVGRTU3N0M0OUM0NzE0RTVE OUFCQjdGRUYwHhcNMjUxMDE5MDUxNDU4WhcNMjUxMDI2MDUxNDU4WjAYMRYwFAYD VQQDEw02OGY0NzNkMy00MDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3N8VsJN9chvZMY8D00zSza9q5MungTsHGHKPSEcjDgqjrv7BCiHtpixa1Fx4 l8zzI9T8k12269cXi5BoZWiaiA4zQq9fOZqPJF9UEShym+Ol50trJIxD7jLY6TpU cW9QynbFnZQYqfuR1O6BAIomsVR6JbtEOtCYJJ7pSxulKfj+XA4DLKb97jWzyPv9 yxiz31yuhGiaT7NvOUhcomKhS4aEecs6uWBWRP5KmdTDiGPvELrt0pdV0YWL0Coi RIUhYqlokbwCfaxEcGoBARZlj4qzuHgdvuqWmzcFVW5suH6eu+abvqZqYZZZpdRp /f0h5Yxnwen8kEC6u+kU/I3yWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZsuHVS +EZ+Ow84cLBCCFJ7XM0FMB8GA1UdIwQYMBaAFMW9ilDK1aBe/ld8ScRxTl2au3/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzdEMS8wNUE5OEYwRUUz QjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9GNy1WM3hKeEhGT1hacTdm LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiMktVTXJWb0Y3LVYzeEp4SEZPWFpxN2YtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzdEMS8wNUE5OEYwRUUzQjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9G Ny1WM3hKeEhGT1hacTdmLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHfLT4o5wCIPNt8L8f9W6o5moN7lbohgYxu2GN4S3hCSeRyQoFjOMe u5ViOEVyuGwD5CYN7YspnZLNwnseWTo4bmyZEH/EDQbK5OoiADS3vbT4GejP/iTu cpPqEA7FLYhNXoj37LaAiCd+7CCxlWMLycoUN7w6nvWtY7PvnU1nd9G7xY5oBiTJ dEB41lnjvCEXSi+OvSojrCMP3xGvHv8Qi0JXlEJta0b8WF8PbF9SjVeIwvxUIBh+ 8Y41JR/DgEElDXXaO8DHCuNK6GWScctGNvfgvC86bML8i/oYYmthA/4KPra0ixDh D2ozWOgxTTL4ijNbve7IG2YI7wFMqPYv -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:21 2025 by rpki-client