$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: uQfzdjOC+3RBdTRqa2BhqR9htTwAjdVCawO3zo4G+1M= Subject key identifier: B8:40:89:4F:9B:B6:11:8E:91:29:53:BF:60:9B:02:32:43:84:37:61 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 013F Signing time: Sun 19 Oct 2025 07:09:02 +0000 Manifest this update: Sun 19 Oct 2025 07:09:01 +0000 Manifest next update: Sun 26 Oct 2025 07:09:01 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: dZSYndra+9XqUdNeuhYxD5vq1OIbqklQ7IxD76Mn1X0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Oct 19 07:09:01 2025 GMT Not After : Oct 26 07:09:01 2025 GMT Subject: CN=68f48e8d-00bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:ff:9e:f8:1e:82:4f:cb:a0:26:c8:de:13: e7:a6:13:f7:21:61:6e:84:f0:96:d4:06:af:08:78: 2a:22:f8:6a:fa:f8:28:a9:15:6b:f3:01:84:1f:12: a5:1b:41:fb:70:37:c3:bf:f1:22:b6:6f:88:52:62: de:0c:07:7f:09:7d:6e:34:6c:1c:71:40:36:94:e8: 67:10:9b:99:29:2b:30:a5:27:ad:41:cf:a8:24:58: f0:f9:a9:69:08:9c:37:a4:8b:fd:96:93:83:a3:46: e2:0a:48:7a:bb:ad:b7:88:e0:d2:66:c0:3a:c5:8c: ed:4b:70:99:1a:58:bf:73:1f:07:b5:5c:df:fa:9c: 40:13:cf:8a:3c:68:0b:c2:e0:dc:aa:86:63:80:9a: 47:a3:38:b0:a2:5e:29:17:bc:70:c5:29:c6:ad:2e: 3a:01:5b:31:6b:32:a1:8b:67:ef:96:d9:af:bc:a2: ae:84:e9:a7:7c:e7:9f:a9:06:d7:92:8b:1f:ff:10: 8a:4f:5c:e5:3f:0a:71:28:ea:ea:db:93:60:de:96: ea:0b:37:44:c9:70:de:48:b6:41:18:01:60:05:03: 3f:32:a3:c3:95:63:2b:0b:b4:2f:20:9f:2e:43:bf: 34:0a:38:d7:82:fc:7c:7e:98:70:3d:85:87:6c:dd: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:40:89:4F:9B:B6:11:8E:91:29:53:BF:60:9B:02:32:43:84:37:61 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:54:6e:51:d4:10:fd:f5:10:44:36:64:d1:fe:02:2e:36:cd: 42:20:df:ea:56:1c:58:2e:34:a2:31:71:37:65:a9:af:34:98: 63:b2:21:82:92:27:07:d9:5a:d4:0f:2e:a7:83:fe:e1:02:b4: 14:ca:d1:23:8f:1e:17:63:a8:f0:b3:76:42:e5:a8:25:31:ec: a6:0d:47:d4:7d:3b:03:67:4f:33:83:5d:a1:72:a2:19:ed:92: af:5f:00:87:bf:28:8a:29:7c:94:06:2d:fd:91:be:21:dc:2b: 1a:32:85:c4:1c:e5:97:3a:a5:ff:39:80:75:9b:bf:a3:56:52: 87:c1:3d:86:a3:78:79:1e:35:21:ba:f9:f6:c8:28:46:b4:01: 44:92:a0:09:0f:29:d3:1e:16:63:5d:e7:15:86:09:da:14:05: 46:a2:31:65:db:09:de:a8:9f:78:79:7d:3a:17:4a:36:db:f2: e0:25:d4:db:54:ad:6a:fa:a5:02:6b:31:fc:b9:61:9e:52:f4: af:bc:fd:75:97:1e:1e:d1:0f:fc:4b:51:f0:5a:c1:cb:c3:bf: fc:47:7e:14:d2:a8:85:f7:8b:7f:64:c8:0c:78:d7:38:c2:61: 13:8d:1a:2d:b3:9c:88:d7:5e:02:17:b0:d6:92:87:ab:03:01: 78:3b:36:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUxMDE5MDcwOTAxWhcNMjUxMDI2MDcwOTAxWjAYMRYwFAYD VQQDEw02OGY0OGU4ZC0wMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oD/nvgegk/LoCbI3hPnphP3IWFuhPCW1AavCHgqIvhq+vgoqRVr8wGEHxKl G0H7cDfDv/Eitm+IUmLeDAd/CX1uNGwccUA2lOhnEJuZKSswpSetQc+oJFjw+alp CJw3pIv9lpODo0biCkh6u623iODSZsA6xYztS3CZGli/cx8HtVzf+pxAE8+KPGgL wuDcqoZjgJpHoziwol4pF7xwxSnGrS46AVsxazKhi2fvltmvvKKuhOmnfOefqQbX kosf/xCKT1zlPwpxKOrq25Ng3pbqCzdEyXDeSLZBGAFgBQM/MqPDlWMrC7QvIJ8u Q780CjjXgvx8fphwPYWHbN38iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhAiU+b thGOkSlTv2CbAjJDhDdhMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzVG5R1BD99RBENmTR/gIuNs1CIN/qVhxYLjSiMXE3ZamvNJhjsiGC kicH2VrUDy6ng/7hArQUytEjjx4XY6jws3ZC5aglMeymDUfUfTsDZ08zg12hcqIZ 7ZKvXwCHvyiKKXyUBi39kb4h3CsaMoXEHOWXOqX/OYB1m7+jVlKHwT2Go3h5HjUh uvn2yChGtAFEkqAJDynTHhZjXecVhgnaFAVGojFl2wneqJ94eX06F0o22/LgJdTb VK1q+qUCazH8uWGeUvSvvP11lx4e0Q/8S1HwWsHLw7/8R34U0qiF94t/ZMgMeNc4 wmETjRots5yI114CF7DWkoerAwF4OzaT -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:35 2025 by rpki-client