$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: okTdLyMjR4RaMCgQaMmyy0L1bjcyU1uUadYexeRZm7k= Subject key identifier: 42:0F:82:BB:F1:B1:CD:1B:EC:F0:D3:9C:83:4F:03:BE:66:65:73:49 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0B3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 13E7 Signing time: Sat 18 Oct 2025 20:09:21 +0000 Manifest this update: Sat 18 Oct 2025 20:09:21 +0000 Manifest next update: Sat 25 Oct 2025 20:09:21 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: 8wU4uLvvKkOdx0WZvqyWzqVMicKa/hv52V3QQJBzdJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Oct 18 20:09:21 2025 GMT Not After : Oct 25 20:09:21 2025 GMT Subject: CN=68f3f3f1-a101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:4d:e4:f6:ac:c7:ce:67:82:41:b1:a0:42: f1:29:0e:1e:d1:ca:de:06:34:87:ab:69:91:96:f3: 08:43:0c:cd:82:ac:36:ad:73:87:a5:72:c7:6d:2b: ea:da:25:ee:5f:08:f3:f0:cf:36:c1:d2:a1:50:c4: 6c:43:2b:db:dc:06:af:96:7a:33:db:81:9e:ee:f3: 4f:4a:73:3c:14:04:b0:05:2f:30:14:18:ab:56:91: 31:82:ed:d2:ac:a3:c7:c6:cd:5d:cc:25:9a:f4:6b: 79:1c:ab:50:43:0f:f4:40:40:b8:03:20:b7:a1:39: 0b:ac:d6:7c:77:2b:9a:52:5f:14:f3:22:9a:a7:64: e2:54:a5:92:a3:ec:e3:82:6b:36:de:71:28:6e:2d: 3b:9e:2b:01:e9:35:9a:b2:d1:8f:b2:ba:89:9c:c0: ce:8e:8d:6b:d2:f9:0d:15:72:66:39:34:2e:4b:cf: a9:34:b9:07:cb:51:c3:44:1d:b8:ec:90:b9:18:40: 74:04:42:38:5e:a8:35:5e:4a:20:44:d3:f4:2d:4d: da:b8:e2:87:bc:09:25:a8:9f:1f:c9:9d:0a:bf:08: f8:eb:10:6d:79:33:cc:1d:e5:19:67:1b:93:d5:e6: 0e:e5:3f:5d:e9:a6:68:e2:dc:e2:e5:45:80:42:4f: 1a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0F:82:BB:F1:B1:CD:1B:EC:F0:D3:9C:83:4F:03:BE:66:65:73:49 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:28:02:1a:c4:0c:3d:f9:ce:9d:f1:b9:1d:cd:3d:52:d7:1d: e1:3b:10:41:9f:df:04:0e:42:65:a3:e5:e5:59:cf:f3:76:3d: 79:c0:42:6e:1f:95:0b:1d:6a:0b:93:2c:a3:48:f9:5d:10:2b: fb:9a:d5:f8:ed:bd:67:b6:b7:61:0c:10:78:69:97:76:0a:fa: de:5f:96:7a:23:c0:52:a7:00:dc:87:18:39:79:80:e2:ac:1a: f1:53:d8:18:6d:93:84:14:a4:a0:8d:d7:ad:f3:83:11:f3:be: 52:04:73:5b:9a:ce:af:db:08:75:86:82:30:b9:77:ec:a1:07: 4e:3f:20:74:c7:46:98:49:f1:86:5f:ac:9c:0f:a5:b0:85:7c: ba:e9:61:39:fe:6e:64:c7:ff:c3:24:f4:18:7b:30:a1:a0:2c: d4:9a:ad:9f:76:e4:25:f5:d2:10:a6:c4:ad:07:f2:f8:7d:b6: 6a:9c:66:62:c9:9d:81:9e:ae:4b:6a:b7:3b:ad:b3:09:f2:d1: a2:8a:86:94:9f:56:d5:04:9e:ad:4b:27:0b:15:0d:9c:5f:95: 05:36:23:76:7b:aa:d3:f4:1e:b2:64:b9:71:17:02:11:4c:a2: 7f:d1:c9:62:4a:5f:61:86:0f:dd:d9:93:89:5d:ff:8d:9e:be: d6:e3:22:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjUxMDE4MjAwOTIxWhcNMjUxMDI1MjAwOTIxWjAYMRYwFAYD VQQDEw02OGYzZjNmMS1hMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIBN5Pasx85ngkGxoELxKQ4e0creBjSHq2mRlvMIQwzNgqw2rXOHpXLHbSvq 2iXuXwjz8M82wdKhUMRsQyvb3Aavlnoz24Ge7vNPSnM8FASwBS8wFBirVpExgu3S rKPHxs1dzCWa9Gt5HKtQQw/0QEC4AyC3oTkLrNZ8dyuaUl8U8yKap2TiVKWSo+zj gms23nEobi07nisB6TWastGPsrqJnMDOjo1r0vkNFXJmOTQuS8+pNLkHy1HDRB24 7JC5GEB0BEI4Xqg1XkogRNP0LU3auOKHvAklqJ8fyZ0Kvwj46xBteTPMHeUZZxuT 1eYO5T9d6aZo4tzi5UWAQk8alwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIPgrvx sc0b7PDTnINPA75mZXNJMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfKAIaxAw9+c6d8bkdzT1S1x3hOxBBn98EDkJlo+XlWc/zdj15wEJu H5ULHWoLkyyjSPldECv7mtX47b1ntrdhDBB4aZd2CvreX5Z6I8BSpwDchxg5eYDi rBrxU9gYbZOEFKSgjdet84MR875SBHNbms6v2wh1hoIwuXfsoQdOPyB0x0aYSfGG X6ycD6WwhXy66WE5/m5kx//DJPQYezChoCzUmq2fduQl9dIQpsStB/L4fbZqnGZi yZ2Bnq5Larc7rbMJ8tGiioaUn1bVBJ6tSycLFQ2cX5UFNiN2e6rT9B6yZLlxFwIR TKJ/0cliSl9hhg/d2ZOJXf+Nnr7W4yIB -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:38 2025 by rpki-client