$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: aAiqPP0bWP0hKJR6iRaVm+JLc3ScIE+KEksbvSBgSjo= Subject key identifier: 0C:5C:18:2D:B0:D5:59:FC:64:1E:79:CE:4C:0F:8B:04:1D:54:5E:60 Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: 82 Signing time: Sun 19 Oct 2025 10:07:49 +0000 Manifest this update: Sun 19 Oct 2025 10:07:48 +0000 Manifest next update: Sun 26 Oct 2025 10:07:48 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: aWf29RncJ4msUYu9i59uK+paT6fDMp/FmgN1K7dhZvQ=) 2: D2E899F86EB511F0A3A63A59C4F9AE02.roa (hash: 0dFbZ0ducL2EHPg1wlqAHlDGhzD129B1kp1qJTYRuTU=) 3: 2C0E544C6EB511F094E66857C4F9AE02.roa (hash: MFMadZ9hIQ4pKDfnggH43mNknioivrdN+SzVsH0zBtQ=) 4: 917D3A184BED11F0A2F7CC21C4F9AE02.roa (hash: IYpTiwoDdKk+DKwv65zZ7BTxOeFfDIMdePJWFd5JpGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: Oct 19 10:07:48 2025 GMT Not After : Oct 26 10:07:48 2025 GMT Subject: CN=68f4b875-8c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:e9:6c:0a:cc:38:04:ff:c3:ee:e9:35:b6: 39:5a:91:de:6a:8d:a4:af:a3:ab:31:df:df:e4:41: 61:26:b2:9a:61:b6:f1:7a:b0:aa:a7:b1:6d:26:03: 31:14:93:ec:c9:f9:a8:f3:09:87:3c:e0:91:85:4a: 81:05:83:1b:db:08:c7:ed:c1:86:ab:88:51:f9:f8: 0a:09:10:5a:80:3f:03:d7:30:76:41:e3:2a:f5:c3: d3:45:6f:92:4f:66:58:f8:86:63:c5:cb:88:1d:69: 12:3c:31:ae:ca:9d:c6:7f:81:11:c3:c3:dc:5e:1b: 99:9a:61:33:fd:5e:0a:2e:cb:f1:54:ea:a4:b7:11: 2e:88:f5:17:54:63:c5:1e:b1:e2:c2:69:7b:65:a2: 44:17:85:56:72:80:0d:56:6e:d9:a0:ea:d4:de:b7: 6b:6f:8f:e6:df:68:1d:6d:21:49:53:ab:6e:92:03: 5a:b6:c2:a1:cc:d8:b6:ec:4e:cb:74:66:7b:3f:57: 93:63:90:d6:e3:7f:fc:8b:85:09:d8:06:02:5e:97: 2c:5f:41:9a:f0:a8:04:f9:c5:6e:3f:e1:bf:b3:ac: 36:41:ae:18:fb:01:50:5c:64:1a:19:ee:5c:a2:fe: ce:f4:4f:b2:f4:6e:3a:d8:72:84:6b:36:8b:f6:1b: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:18:2D:B0:D5:59:FC:64:1E:79:CE:4C:0F:8B:04:1D:54:5E:60 X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:fe:0e:ae:14:bc:a0:ea:44:b1:bf:75:3f:be:82:58:32:91: 69:48:a3:76:b2:d4:22:ad:94:a0:59:40:f3:b9:97:7b:08:e3: 87:6e:b9:2b:2f:c9:7f:85:73:f9:07:bc:6e:56:b1:15:d3:4c: 1a:28:b8:09:c4:de:88:58:a7:f0:c4:0c:e9:a5:82:9e:ed:c3: 56:44:f8:78:fa:8d:75:36:ac:ad:cc:86:d3:df:e6:bf:2f:2a: 4c:14:8c:c9:ae:c2:eb:60:4a:15:65:7d:b0:00:5e:46:03:32: bb:b8:5c:0d:79:1c:25:9b:16:b6:54:0c:65:f6:d2:71:17:7a: d6:ce:a4:54:d8:6e:a4:be:25:11:80:33:42:4c:ca:5e:aa:7f: dd:bb:d5:67:be:3a:38:68:52:fe:fc:49:93:b4:c2:07:f9:d7: 68:50:55:74:44:0d:07:9f:78:28:42:c0:bb:79:97:49:67:f5: c4:df:a2:91:14:0d:62:69:25:e5:4d:fa:cd:05:f5:cb:10:d3: 50:4b:ca:aa:b6:3d:2d:20:37:53:d8:40:be:99:8f:53:dd:88: ba:7a:f2:19:73:22:e1:56:c6:1b:13:c9:16:e0:86:df:2c:06: f6:9d:6e:38:d0:0d:13:44:97:73:fe:0d:0c:8e:ab:a4:0b:94: dc:83:4f:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThERjUxMTAvBgNVBAUTKEM2Rjc1OEVDRERDNEM5QjBGNzJGMDY1QzM1QUQ1NDY5 NzQzMjcxMUIwHhcNMjUxMDE5MTAwNzQ4WhcNMjUxMDI2MTAwNzQ4WjAYMRYwFAYD VQQDEw02OGY0Yjg3NS04Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7/pbArMOAT/w+7pNbY5WpHeao2kr6OrMd/f5EFhJrKaYbbxerCqp7FtJgMx FJPsyfmo8wmHPOCRhUqBBYMb2wjH7cGGq4hR+fgKCRBagD8D1zB2QeMq9cPTRW+S T2ZY+IZjxcuIHWkSPDGuyp3Gf4ERw8PcXhuZmmEz/V4KLsvxVOqktxEuiPUXVGPF HrHiwml7ZaJEF4VWcoANVm7ZoOrU3rdrb4/m32gdbSFJU6tukgNatsKhzNi27E7L dGZ7P1eTY5DW43/8i4UJ2AYCXpcsX0Ga8KgE+cVuP+G/s6w2Qa4Y+wFQXGQaGe5c ov7O9E+y9G462HKEazaL9hvUOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxcGC2w 1Vn8ZB55zkwPiwQdVF5gMB8GA1UdIwQYMBaAFMb3WOzdxMmw9y8GXDWtVGl0MnEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOERGNS8zMUUwRjE2QUY5 NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi94dmRZN04zRXliRDNMd1pjTmExVWFYUXlj UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OERGNS8zMUUwRjE2QUY5NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi94dmRZN04zRXli RDNMd1pjTmExVWFYUXljUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy/g6uFLyg6kSxv3U/voJYMpFpSKN2stQirZSgWUDzuZd7COOHbrkr L8l/hXP5B7xuVrEV00waKLgJxN6IWKfwxAzppYKe7cNWRPh4+o11NqytzIbT3+a/ LypMFIzJrsLrYEoVZX2wAF5GAzK7uFwNeRwlmxa2VAxl9tJxF3rWzqRU2G6kviUR gDNCTMpeqn/du9Vnvjo4aFL+/EmTtMIH+ddoUFV0RA0Hn3goQsC7eZdJZ/XE36KR FA1iaSXlTfrNBfXLENNQS8qqtj0tIDdT2EC+mY9T3Yi6evIZcyLhVsYbE8kW4Ibf LAb2nW440A0TRJdz/g0MjqukC5Tcg0+i -----END CERTIFICATE-----Generated at Mon Oct 20 09:34:52 2025 by rpki-client