$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: wm4fKFSBGlv/CFagevDFHG6ubKiYeOFMBB56aCYqcf4= Subject key identifier: D1:3D:F2:5E:94:EF:43:83:E2:E1:A8:08:3C:C1:39:08:53:F2:89:7B Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: F9 Signing time: Sun 19 Oct 2025 08:08:48 +0000 Manifest this update: Sun 19 Oct 2025 08:08:48 +0000 Manifest next update: Sun 26 Oct 2025 08:08:48 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: 7gU6g0WSh3bPPgokdv+5fVjZutx67JTZSYQKRwWio2w=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Oct 19 08:08:48 2025 GMT Not After : Oct 26 08:08:48 2025 GMT Subject: CN=68f49c90-a580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:92:57:d4:4c:0e:7b:d5:ae:16:8f:11:cb: bd:12:28:33:f6:6c:2d:0e:f0:7b:83:39:0a:5a:b0: 85:07:e0:b1:90:e4:33:65:4e:67:df:d9:5d:9f:b5: 38:30:1c:d4:32:21:fd:2e:32:50:d6:d8:e0:69:92: 44:26:65:10:8d:dc:36:2f:b4:c2:08:08:83:71:bd: de:07:fc:92:93:c6:81:dd:25:80:78:37:87:f6:dd: 32:ed:d0:4c:aa:d8:68:63:3c:5b:56:f4:10:48:9e: b0:99:12:79:eb:66:13:a3:35:b1:79:72:2d:dd:19: 3b:ed:5f:bd:e5:3e:84:08:0d:ef:bb:95:48:3b:af: 31:a5:fe:89:e2:33:82:99:cd:58:6d:c5:68:a3:51: 2e:fe:e8:ad:40:1d:37:45:06:73:9e:59:b8:2e:d4: 46:b9:4d:41:26:3b:fb:60:31:f9:e9:17:86:cd:e4: 21:3c:b4:6c:ce:54:62:53:08:f5:d0:c8:47:23:97: 5a:5d:69:76:5e:a4:83:26:65:37:9c:9a:5c:75:14: bb:53:66:45:0b:eb:94:f2:69:7d:84:5a:e3:06:7e: b8:71:e4:cb:58:1f:3b:1a:aa:92:20:2b:39:aa:28: 88:15:83:42:af:64:d5:f8:2c:7e:c5:e7:69:1f:42: e1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3D:F2:5E:94:EF:43:83:E2:E1:A8:08:3C:C1:39:08:53:F2:89:7B X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3a:72:70:14:c3:49:c6:20:51:76:4a:e4:c4:94:0c:dd:6c: a0:76:23:9f:09:e9:96:e3:2f:06:48:b6:70:d8:12:ae:f3:3b: ab:2d:c9:34:69:1f:64:bd:f8:3f:1e:63:61:0e:9d:d9:b1:da: 73:d0:ed:ac:31:46:35:d3:49:dc:7a:a2:96:07:3b:2b:51:6d: e5:76:b5:f7:4a:d3:c9:79:bb:87:fa:a1:0d:30:31:46:fb:ac: 61:e5:61:40:09:bf:0d:36:05:e4:41:aa:fd:db:ed:41:86:b8: 17:4d:ce:fb:ec:a2:d3:59:1d:4e:92:fd:48:86:4c:92:12:52: 93:f0:23:18:f7:98:d5:ba:48:be:40:5b:24:5a:0d:fe:1a:ee: e3:d6:d7:a0:cf:65:05:4d:a5:bc:74:2c:31:7b:43:4e:05:9f: 2d:da:e1:fd:40:65:06:e0:64:9b:4a:01:16:cb:29:89:f8:1f: 42:e5:37:ba:43:28:c6:a4:0b:65:27:35:ad:4e:22:c7:84:4a: 3a:a0:51:12:69:40:73:73:eb:ac:f5:a6:f7:86:4a:3d:7d:90: e7:aa:ea:d3:26:d1:d5:f0:f3:c2:b2:63:8e:35:cd:94:a1:98: 8a:cd:17:49:db:9f:1b:41:31:5c:1c:92:91:f2:f8:14:51:ac: da:49:13:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUxMDE5MDgwODQ4WhcNMjUxMDI2MDgwODQ4WjAYMRYwFAYD VQQDEw02OGY0OWM5MC1hNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4ySV9RMDnvVrhaPEcu9Eigz9mwtDvB7gzkKWrCFB+CxkOQzZU5n39ldn7U4 MBzUMiH9LjJQ1tjgaZJEJmUQjdw2L7TCCAiDcb3eB/ySk8aB3SWAeDeH9t0y7dBM qthoYzxbVvQQSJ6wmRJ562YTozWxeXIt3Rk77V+95T6ECA3vu5VIO68xpf6J4jOC mc1YbcVoo1Eu/uitQB03RQZznlm4LtRGuU1BJjv7YDH56ReGzeQhPLRszlRiUwj1 0MhHI5daXWl2XqSDJmU3nJpcdRS7U2ZFC+uU8ml9hFrjBn64ceTLWB87GqqSICs5 qiiIFYNCr2TV+Cx+xedpH0Lh/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNE98l6U 70OD4uGoCDzBOQhT8ol7MB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkOnJwFMNJxiBRdkrkxJQM3WygdiOfCemW4y8GSLZw2BKu8zurLck0 aR9kvfg/HmNhDp3Zsdpz0O2sMUY100nceqKWBzsrUW3ldrX3StPJebuH+qENMDFG +6xh5WFACb8NNgXkQar92+1BhrgXTc777KLTWR1Okv1IhkySElKT8CMY95jVuki+ QFskWg3+Gu7j1tegz2UFTaW8dCwxe0NOBZ8t2uH9QGUG4GSbSgEWyymJ+B9C5Te6 QyjGpAtlJzWtTiLHhEo6oFESaUBzc+us9ab3hko9fZDnqurTJtHV8PPCsmOONc2U oZiKzRdJ258bQTFcHJKR8vgUUazaSRPY -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:15 2025 by rpki-client