$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json) Hash identifier: CIUQyTeGLPV0msdvn+G68iCGLg3Y/DHPtRuqGrXgyhk= Subject key identifier: 03:10:99:EF:7C:4B:54:EB:14:3B:85:92:40:AD:CD:93:50:46:8A:5A Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft Manifest number: 0C Signing time: Sun 19 Oct 2025 06:15:45 +0000 Manifest this update: Sun 19 Oct 2025 06:15:45 +0000 Manifest next update: Sun 26 Oct 2025 06:15:45 +0000 Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: P+SlOcR3bjQ6yvvUNfniIIPPEDGpHIpOW87QowQqwUw=) 2: A4CC914E9EA011F0A7B92A1EC4F9AE02.roa (hash: juPGvBgA6sd3e+25RSGNC1Y9ZQiQHWaS+pRIRJtHwEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Oct 19 06:15:45 2025 GMT Not After : Oct 26 06:15:45 2025 GMT Subject: CN=68f48211-9e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:28:3f:c8:91:a1:d3:50:72:00:9b:58:ad: 74:95:4a:cd:69:a9:78:97:b3:06:4d:89:7f:4f:bf: 0b:e4:77:fa:7b:7b:2d:f8:45:d6:3a:ac:3b:a9:1e: f7:0f:a3:cf:be:09:6e:60:79:70:c3:77:d1:c7:14: 58:66:a0:60:94:54:a9:89:64:d7:0d:7b:9d:00:4b: 1f:8c:f5:09:97:43:dd:5b:62:8f:bb:17:ee:e7:f0: 71:8f:f4:78:f5:bd:ce:b2:9c:ce:d9:e0:2f:39:ee: e1:e2:1a:27:de:af:23:33:32:6f:fb:ec:7f:88:0d: b0:b8:36:8f:e0:d5:a4:1f:dd:16:78:fb:2e:fb:ef: 82:40:04:bb:21:2e:89:26:48:78:cc:fc:2f:fc:3a: 5b:21:b4:6d:73:f9:5a:5b:23:b0:a2:a8:bf:7b:a9: 2a:68:b7:6f:7b:bf:7c:ea:89:6c:c6:c0:07:6d:3e: 17:71:99:d7:3b:e6:f8:16:83:6f:26:a8:0f:61:14: 5b:9a:57:47:0f:eb:ca:d7:c9:e0:a7:1f:b1:ab:58: 0f:38:73:a3:04:74:06:9c:aa:2c:8b:45:4a:0a:de: 4f:c1:3d:cf:90:06:4a:bd:ce:c5:9f:3a:45:95:a9: 85:c0:56:e6:bd:f7:4d:17:9c:15:9d:b1:fb:f5:31: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:10:99:EF:7C:4B:54:EB:14:3B:85:92:40:AD:CD:93:50:46:8A:5A X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c8:d2:a5:e5:d4:15:8f:5c:93:85:99:e8:6e:5e:2d:cc:66: cd:5b:dd:e9:ab:20:ac:26:3d:b1:0d:a3:cb:3d:a5:a8:6f:9e: be:e7:b1:ae:94:99:92:d4:7a:ca:fa:07:0b:c6:6d:43:c6:2f: e1:78:68:09:2d:18:23:4f:e4:c9:3e:87:f4:15:d5:20:f2:f6: ba:d6:f4:4d:8e:37:a5:ab:52:30:47:1b:8d:c7:23:66:bc:0f: cb:5d:a5:e8:f6:e6:91:86:fc:45:15:6c:a8:51:19:b8:cc:00: de:9d:92:8f:21:8f:39:49:80:0d:2d:76:80:58:9f:55:30:95: 85:f0:b8:f6:3f:34:98:bf:73:2b:95:12:3e:2e:5c:b6:05:2a: cb:b9:1a:82:6e:84:7b:ac:28:4d:aa:8f:9f:48:37:be:3a:05: eb:34:05:9c:d3:b9:f3:da:a6:8b:08:d7:1a:7f:80:54:54:1e: 21:83:f1:87:42:07:95:3d:8c:78:73:e4:40:f0:19:53:73:20: 8e:8a:9d:c0:1b:af:29:fa:7c:ae:03:56:b4:e7:9f:6a:d2:bd: 23:8d:8f:fd:f2:05:2d:ad:b3:68:27:a3:10:30:0a:86:bc:fb: cf:45:f9:2d:29:8e:86:89:fb:13:aa:4d:0a:bc:50:2f:e7:b6: 20:91:1b:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0YzQzExMC8GA1UEBRMoMDk3MTBCNUI2Njc0OUUzMzlEMTI0Q0RFNkQ2NkNFMzY2 QUNDQUJCMDAeFw0yNTEwMTkwNjE1NDVaFw0yNTEwMjYwNjE1NDVaMBgxFjAUBgNV BAMTDTY4ZjQ4MjExLTllMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/FCg/yJGh01ByAJtYrXSVSs1pqXiXswZNiX9Pvwvkd/p7ey34RdY6rDupHvcP o8++CW5geXDDd9HHFFhmoGCUVKmJZNcNe50ASx+M9QmXQ91bYo+7F+7n8HGP9Hj1 vc6ynM7Z4C857uHiGiferyMzMm/77H+IDbC4No/g1aQf3RZ4+y7774JABLshLokm SHjM/C/8OlshtG1z+VpbI7CiqL97qSpot297v3zqiWzGwAdtPhdxmdc75vgWg28m qA9hFFuaV0cP68rXyeCnH7GrWA84c6MEdAacqiyLRUoK3k/BPc+QBkq9zsWfOkWV qYXAVua9900XnBWdsfv1MVvVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAxCZ73xL VOsUO4WSQK3Nk1BGilowHwYDVR0jBBgwFoAUCXELW2Z0njOdEkzebWbONmrMq7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRjNDL0EwRDQ5Q0M4OUU5 RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1hFTFcyWjBuak9kRWt6ZWJXYk9ObXJNcTdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RjNDL0EwRDQ5Q0M4OUU5RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpP ZEVremViV2JPTm1yTXE3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHzI0qXl1BWPXJOFmehuXi3MZs1b3emrIKwmPbENo8s9pahvnr7nsa6U mZLUesr6BwvGbUPGL+F4aAktGCNP5Mk+h/QV1SDy9rrW9E2ON6WrUjBHG43HI2a8 D8tdpej25pGG/EUVbKhRGbjMAN6dko8hjzlJgA0tdoBYn1UwlYXwuPY/NJi/cyuV Ej4uXLYFKsu5GoJuhHusKE2qj59IN746Bes0BZzTufPaposI1xp/gFRUHiGD8YdC B5U9jHhz5EDwGVNzII6KncAbryn6fK4DVrTnn2rSvSONj/3yBS2ts2gnoxAwCoa8 +89F+S0pjoaJ+xOqTQq8UC/ntiCRGxk= -----END CERTIFICATE-----Generated at Tue Oct 21 02:17:33 2025 by rpki-client