$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json) Hash identifier: +KbKEsYMWKiGqRqyNpumMFFNVQCDloDYKF7JlTLKbaY= Subject key identifier: 55:53:52:85:C0:32:6C:15:C8:F1:93:0C:F4:BB:6C:43:5B:CC:D2:5E Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 25F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft Manifest number: 25D9 Signing time: Sat 18 Oct 2025 15:56:54 +0000 Manifest this update: Sat 18 Oct 2025 15:56:53 +0000 Manifest next update: Sat 25 Oct 2025 15:56:53 +0000 Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: O5U5+zO5q+jJDVd4cZVfmDNnlNCJXKCFruhsJZS1o3w=) 2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: 41BdfwHnGG7Imzeq7lbaqU4+u/YDHu3w/vuTNhAYy2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9715 (0x25f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: Oct 18 15:56:53 2025 GMT Not After : Oct 25 15:56:53 2025 GMT Subject: CN=68f3b8c6-0825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:43:99:5b:a3:5f:9e:f6:6b:e7:0b:9f:3b: e2:e6:f0:45:5c:1d:08:01:7a:63:06:d2:74:9c:a7: 97:43:e5:44:0f:ec:82:07:91:db:c6:9c:a4:0a:df: 9b:12:b8:9d:18:74:1d:3f:70:26:86:c1:05:83:8d: 82:dc:1e:e2:b6:0b:c2:41:2c:77:c9:65:d2:89:bb: dd:76:c4:5f:7e:cf:bf:82:f2:1e:4c:79:00:1d:38: cb:3c:d5:b2:32:48:df:d7:f4:55:02:91:2c:e0:e2: 1d:96:30:18:c4:de:4b:a0:2f:71:fb:72:ae:ed:e9: af:5f:cf:65:e7:b3:3a:bf:00:9d:46:7f:ae:8c:24: 2e:a4:03:79:76:32:b0:e0:dc:f7:ec:84:c9:05:73: 31:bc:a6:3f:5c:ab:89:ce:ea:bb:5d:62:4e:d7:2b: 7b:92:4a:f9:ae:33:6c:f3:95:62:1b:9c:8b:e9:0c: d9:31:1c:ec:fb:6d:ca:2b:f5:92:be:37:e4:f0:48: e9:e0:c3:0c:b5:c5:0d:18:b7:11:f0:07:c1:bb:e4: fd:f8:a2:a7:6c:87:a6:1c:3f:44:c9:20:c1:a1:d1: 1c:3c:08:f1:c8:52:c3:0c:b1:3d:16:38:44:70:e6: f9:93:47:8e:4f:04:75:2f:eb:e3:cf:4c:41:3d:ab: 67:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:53:52:85:C0:32:6C:15:C8:F1:93:0C:F4:BB:6C:43:5B:CC:D2:5E X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e6:32:db:c1:96:1d:07:10:5a:46:6b:a0:d8:75:1f:e4:c6: 8a:95:33:4f:85:97:32:f8:a3:60:f8:7c:29:be:f5:34:24:a3: 1b:fb:53:18:48:50:d5:52:fa:52:b0:c8:93:e7:52:49:0b:f3: 9a:99:c5:21:9f:e8:df:2e:1e:9a:14:8c:c6:b7:d1:20:9e:66: 14:08:03:c2:f5:94:b7:64:7a:a8:33:28:50:68:b6:82:66:32: 02:2d:01:ee:59:86:22:d4:7c:7c:a0:8b:6b:bf:ec:f2:e6:51: b0:5d:b3:51:c8:19:ee:2b:16:a6:65:2f:1c:fc:49:51:19:fa: bb:66:17:a7:fd:e4:3c:94:d9:a5:0f:90:ae:44:c2:32:3d:3d: b5:39:7a:0b:83:28:63:28:39:4a:ce:78:45:ed:2a:5c:3d:70: 87:5e:4e:50:fa:e7:97:1e:50:41:39:1f:11:4a:6c:56:bb:86: 87:fb:a4:37:b7:83:16:ba:cb:7f:01:5f:c2:ad:f5:52:b5:b8: 2c:66:b8:f6:6a:66:d3:81:e0:8a:91:79:bd:55:4d:16:6b:cf: df:e1:aa:96:23:1d:0f:df:e4:d1:61:27:19:70:f0:19:c1:39: 8a:68:44:e0:80:8c:9e:d5:f6:f0:63:f3:d4:fb:63:71:9a:3b: 40:7b:47:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjUxMDE4MTU1NjUzWhcNMjUxMDI1MTU1NjUzWjAYMRYwFAYD VQQDEw02OGYzYjhjNi0wODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5BDmVujX572a+cLnzvi5vBFXB0IAXpjBtJ0nKeXQ+VED+yCB5HbxpykCt+b EridGHQdP3AmhsEFg42C3B7itgvCQSx3yWXSibvddsRffs+/gvIeTHkAHTjLPNWy Mkjf1/RVApEs4OIdljAYxN5LoC9x+3Ku7emvX89l57M6vwCdRn+ujCQupAN5djKw 4Nz37ITJBXMxvKY/XKuJzuq7XWJO1yt7kkr5rjNs85ViG5yL6QzZMRzs+23KK/WS vjfk8Ejp4MMMtcUNGLcR8AfBu+T9+KKnbIemHD9EySDBodEcPAjxyFLDDLE9FjhE cOb5k0eOTwR1L+vjz0xBPatnawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVTUoXA MmwVyPGTDPS7bENbzNJeMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly Mklia0M5cVNmMVhjYl9QbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU5jLbwZYdBxBaRmug2HUf5MaKlTNPhZcy+KNg+HwpvvU0JKMb+1MY SFDVUvpSsMiT51JJC/OamcUhn+jfLh6aFIzGt9EgnmYUCAPC9ZS3ZHqoMyhQaLaC ZjICLQHuWYYi1Hx8oItrv+zy5lGwXbNRyBnuKxamZS8c/ElRGfq7Zhen/eQ8lNml D5CuRMIyPT21OXoLgyhjKDlKznhF7SpcPXCHXk5Q+ueXHlBBOR8RSmxWu4aH+6Q3 t4MWust/AV/CrfVStbgsZrj2ambTgeCKkXm9VU0Wa8/f4aqWIx0P3+TRYScZcPAZ wTmKaETggIye1fbwY/PU+2NxmjtAe0cu -----END CERTIFICATE-----Generated at Mon Oct 20 08:00:41 2025 by rpki-client