$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: esiQS6DB1L5yhQPaMCamQP2XsHUG0giFaRRypKLxU/I= Subject key identifier: 1C:5C:7B:1B:8B:17:60:9B:51:9E:44:E4:75:11:92:54:ED:5D:49:57 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 1940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 16C7 Signing time: Sat 18 Oct 2025 17:21:53 +0000 Manifest this update: Sat 18 Oct 2025 17:21:52 +0000 Manifest next update: Sat 25 Oct 2025 17:21:52 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: SSsW3iUlmnGAgGQdbXDvYEqQvUPf7GnSX72V17spXv8=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: Ju8go9OBKML8ykj6qnfvaBG6KjObv0i9KK2dLnaHCbM=) 4: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 5: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 6: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 7: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 8: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 10: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 11: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 12: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 14: 4A1187B26E7811F09E744A82C4F9AE02.roa (hash: OQY4xPdf9rHdF59/a70j65T2nG8AtOe+ff57jJsTx9k=) 15: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 16: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 20: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: CMTbivAHiLt7IGuG9Zl/8u4+Wi8bG4wbS4CS9kYqibQ=) 21: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 22: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 23: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 24: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 25: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 26: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 27: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6464 (0x1940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Oct 18 17:21:52 2025 GMT Not After : Oct 25 17:21:52 2025 GMT Subject: CN=68f3ccb0-0db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4f:1b:e4:35:02:2a:48:0c:b7:f3:5a:a9:25: 17:9e:77:8e:03:03:7e:e0:88:1f:86:8d:d1:3a:7c: 78:ef:6d:20:41:66:ee:f9:9c:75:42:73:e1:9e:ae: f9:49:84:90:89:9a:f3:7b:7b:85:36:5a:4c:ad:c1: 15:1c:28:20:f2:1f:90:28:76:71:70:ee:5c:ef:b4: d0:98:71:b0:91:69:fc:5c:1b:d2:ab:de:4e:76:67: 2b:4e:19:ac:14:40:c8:86:e2:a7:b9:f1:f8:13:c8: d1:c9:e1:f9:c2:94:92:68:24:9a:d3:94:ad:f7:60: c4:10:94:17:2a:c0:f5:da:e0:24:19:9d:4e:a0:ce: c5:52:2b:ce:2d:1c:23:12:86:74:66:29:d4:46:fe: 80:06:07:44:42:c9:92:45:4b:66:19:fd:ea:bd:f9: b6:b0:ba:ae:c9:c2:45:90:66:49:04:ae:bd:b3:00: e3:5a:3e:d3:5b:d8:10:2a:4a:cb:2f:90:ee:96:6c: a7:25:b6:2b:bf:82:6a:bc:b8:fe:09:00:c2:01:96: 3d:7d:37:d2:15:a6:98:6c:1e:b3:aa:dc:05:f6:2a: 6c:d2:be:bd:de:55:6f:99:5b:8c:f5:a4:69:b6:76: fa:f5:f5:06:b5:e6:04:c3:0f:bd:7b:05:ab:38:e3: 8f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5C:7B:1B:8B:17:60:9B:51:9E:44:E4:75:11:92:54:ED:5D:49:57 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:de:4c:6c:4e:08:e0:9c:cb:28:ba:08:7a:52:69:1e:69:ce: a3:89:7a:03:ba:96:91:8e:a4:a5:29:af:86:7c:f3:e4:3b:ca: be:96:12:e5:74:7a:62:2e:b2:ab:e0:18:4b:ce:b1:eb:b5:ce: 4e:a2:e9:4a:39:14:4a:28:67:90:07:68:76:ef:39:30:2a:18: de:3f:f3:47:6a:50:ea:3b:d8:74:b8:c3:da:fb:8f:f5:08:d2: 9e:e6:1b:ff:9e:e6:4b:58:85:52:2c:be:61:d7:a6:64:9e:d8: d8:bb:cf:55:3c:be:ec:1d:31:d0:4d:5b:b3:93:f6:01:63:5c: c1:c0:38:a9:bf:44:3e:6f:d4:16:1a:5a:26:35:f9:78:dd:ac: 3f:49:36:6d:6b:32:c9:5c:6b:27:9e:9d:c7:a1:ee:c8:3d:28: ce:1d:f3:23:b8:16:14:f8:22:54:2d:49:a1:5b:fe:cc:db:9b: c7:29:79:02:d6:f5:cb:fd:9d:c5:34:0d:c4:78:25:fd:38:04: 62:ee:83:dd:68:71:c1:87:25:96:9f:29:f8:a6:ce:51:c8:fa: 8c:d4:23:02:05:ba:88:0b:9b:46:6c:94:21:9c:5f:18:7a:49: 15:ed:80:ae:07:a3:a2:3e:de:da:bc:43:cf:d3:d0:60:70:a8: 1c:91:6c:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUxMDE4MTcyMTUyWhcNMjUxMDI1MTcyMTUyWjAYMRYwFAYD VQQDEw02OGYzY2NiMC0wZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6k8b5DUCKkgMt/NaqSUXnneOAwN+4Igfho3ROnx4720gQWbu+Zx1QnPhnq75 SYSQiZrze3uFNlpMrcEVHCgg8h+QKHZxcO5c77TQmHGwkWn8XBvSq95OdmcrThms FEDIhuKnufH4E8jRyeH5wpSSaCSa05St92DEEJQXKsD12uAkGZ1OoM7FUivOLRwj EoZ0ZinURv6ABgdEQsmSRUtmGf3qvfm2sLquycJFkGZJBK69swDjWj7TW9gQKkrL L5DulmynJbYrv4JqvLj+CQDCAZY9fTfSFaaYbB6zqtwF9ips0r693lVvmVuM9aRp tnb69fUGteYEww+9ewWrOOOPoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxcexuL F2CbUZ5E5HURklTtXUlXMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI3kxsTgjgnMsough6Umkeac6jiXoDupaRjqSlKa+GfPPkO8q+lhLl dHpiLrKr4BhLzrHrtc5OoulKORRKKGeQB2h27zkwKhjeP/NHalDqO9h0uMPa+4/1 CNKe5hv/nuZLWIVSLL5h16ZkntjYu89VPL7sHTHQTVuzk/YBY1zBwDipv0Q+b9QW GlomNfl43aw/STZtazLJXGsnnp3Hoe7IPSjOHfMjuBYU+CJULUmhW/7M25vHKXkC 1vXL/Z3FNA3EeCX9OARi7oPdaHHBhyWWnyn4ps5RyPqM1CMCBbqIC5tGbJQhnF8Y ekkV7YCuB6OiPt7avEPP09BgcKgckWwO -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:40 2025 by rpki-client