$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: H9PUb2GIT/0DTjFSVKUbXgKoqgh4aAGlBknfRHpV5d0= Subject key identifier: E0:0F:5E:C6:21:79:C7:E2:70:79:CD:FA:3E:B4:F2:8D:5F:A1:B0:3E Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0C26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0AE7 Signing time: Sat 18 Oct 2025 21:01:58 +0000 Manifest this update: Sat 18 Oct 2025 21:01:57 +0000 Manifest next update: Sat 25 Oct 2025 21:01:57 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: +UoU4tvsc+Brw14x0TidpM+firitdfsvosY0qg2+Ih8=) 2: CED9053CE35211EDB7F6B44EC4F9AE02.roa (hash: xTtZn9aZIB/fSzr6F1pFXv9qqXV1JjTBS40WClRRCIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3110 (0xc26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Oct 18 21:01:57 2025 GMT Not After : Oct 25 21:01:57 2025 GMT Subject: CN=68f40046-015a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:35:93:72:6d:14:db:b5:f2:b9:01:1f:0d: 47:bd:74:22:db:c0:57:2c:4d:78:72:3b:cb:c9:d6: c1:ba:9a:8e:5f:ba:61:4d:5f:d9:28:a6:d6:4d:75: 2a:6c:a3:3c:4c:49:f3:e2:d3:3c:11:cd:29:5b:cb: 77:07:7f:38:c8:00:18:d6:b3:4c:4f:ce:72:9f:2e: d6:f3:d6:7e:64:6a:ba:85:7d:53:c2:da:46:fd:8d: dd:e2:c8:9c:7c:9f:37:e1:75:c7:34:2e:48:37:57: 92:9e:df:f8:5a:4c:64:8a:03:80:6e:1d:47:68:a6: ee:47:22:c7:07:6f:b9:18:97:f9:3a:be:db:2a:69: 03:48:e2:29:6a:ac:dd:62:e9:a2:2c:7c:16:4a:37: d7:3f:c4:17:d1:4e:1f:50:a6:a2:f4:5f:2c:68:f3: 76:04:7c:80:65:91:c5:a7:52:ad:b9:88:46:47:9b: 8d:7c:20:b4:8d:48:a7:27:0c:6f:a2:31:e4:c7:bc: f6:f0:ae:77:7e:29:8e:71:b2:85:1e:8b:e9:38:69: 33:1f:2b:db:4e:b7:4f:2a:9b:a3:55:ba:41:3f:60: 69:34:a6:ad:c8:ae:f7:08:ab:a9:b0:a5:d0:33:27: 23:f2:35:57:c9:b4:1a:77:c1:7e:5c:24:b7:af:db: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0F:5E:C6:21:79:C7:E2:70:79:CD:FA:3E:B4:F2:8D:5F:A1:B0:3E X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:51:11:4d:9c:2f:67:17:b3:c9:9e:64:1a:43:e1:e4:03:39: d4:52:16:66:fa:4a:64:6e:9f:7d:d0:e9:1a:c9:40:a2:c2:5b: 9a:32:89:43:e4:73:ac:09:71:f0:e9:2a:0e:e7:9d:02:d8:99: 2c:e2:75:36:5d:fb:a1:d2:7c:68:bd:51:59:9d:09:2b:de:39: 15:b0:35:a9:e2:9f:8f:10:4e:0a:1b:6f:d9:18:c0:59:33:d9: 1a:21:8b:ad:34:e5:cf:df:3d:2c:da:ba:50:72:d1:d9:76:fc: 81:10:47:a4:55:f6:d8:a5:4c:c0:60:18:07:aa:58:92:4b:e9: 55:49:fd:3a:dd:b6:f2:b8:a5:e5:58:f7:5f:a9:99:06:53:46: a6:93:af:c3:a4:9b:5b:36:9e:66:cd:a0:5d:07:29:c3:4e:a0: 09:32:be:d4:74:4e:fd:65:f1:f3:db:99:3d:ec:b5:d1:81:a8: e6:93:bd:d7:c0:ee:6d:89:5f:2c:57:75:0d:51:d2:a0:2a:f9: fe:93:b7:9c:1f:25:01:74:e3:02:a0:ce:3b:d8:dd:bc:ae:c9: 15:c9:a5:9c:7d:80:56:f0:53:f7:98:c3:92:f3:1e:5d:9a:5e: 9c:38:b8:0c:12:5d:60:0e:11:d7:0b:be:2c:45:d5:a6:6e:89: d1:a4:9e:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjUxMDE4MjEwMTU3WhcNMjUxMDI1MjEwMTU3WjAYMRYwFAYD VQQDEw02OGY0MDA0Ni0wMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhw1k3JtFNu18rkBHw1HvXQi28BXLE14cjvLydbBupqOX7phTV/ZKKbWTXUq bKM8TEnz4tM8Ec0pW8t3B384yAAY1rNMT85yny7W89Z+ZGq6hX1TwtpG/Y3d4sic fJ834XXHNC5IN1eSnt/4WkxkigOAbh1HaKbuRyLHB2+5GJf5Or7bKmkDSOIpaqzd YumiLHwWSjfXP8QX0U4fUKai9F8saPN2BHyAZZHFp1KtuYhGR5uNfCC0jUinJwxv ojHkx7z28K53fimOcbKFHovpOGkzHyvbTrdPKpujVbpBP2BpNKatyK73CKupsKXQ Mycj8jVXybQad8F+XCS3r9uLQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAPXsYh ecficHnN+j608o1fobA+MB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSURFNnC9nF7PJnmQaQ+HkAznUUhZm+kpkbp990OkayUCiwluaMolD 5HOsCXHw6SoO550C2Jks4nU2Xfuh0nxovVFZnQkr3jkVsDWp4p+PEE4KG2/ZGMBZ M9kaIYutNOXP3z0s2rpQctHZdvyBEEekVfbYpUzAYBgHqliSS+lVSf063bbyuKXl WPdfqZkGU0amk6/DpJtbNp5mzaBdBynDTqAJMr7UdE79ZfHz25k97LXRgajmk73X wO5tiV8sV3UNUdKgKvn+k7ecHyUBdOMCoM472N28rskVyaWcfYBW8FP3mMOS8x5d ml6cOLgMEl1gDhHXC74sRdWmbonRpJ6i -----END CERTIFICATE-----Generated at Mon Oct 20 05:38:38 2025 by rpki-client