$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: kpnEnNfsdtVagcWPCzXYvURkUfwSMftPZcTWYqAWFdI= Subject key identifier: BC:FD:B3:58:4B:62:01:00:E9:E2:6D:D5:BE:99:1B:2E:9F:A4:9A:76 Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 01F4 Signing time: Sun 19 Oct 2025 01:09:00 +0000 Manifest this update: Sun 19 Oct 2025 01:08:59 +0000 Manifest next update: Sun 26 Oct 2025 01:08:59 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: rbcGwJLXP8WLYfbB+5Fv/eTQj4rCzSi6I21+7K3o8zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Oct 19 01:08:59 2025 GMT Not After : Oct 26 01:08:59 2025 GMT Subject: CN=68f43a2c-127d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:d8:d8:f7:d7:0c:e6:70:e2:1c:2f:bf:ec: 02:06:97:0c:c8:8a:ce:c4:d8:96:2a:7d:c8:a3:20: e2:3d:00:b2:09:1a:2c:e0:54:36:79:d3:db:fc:a8: 67:0c:5a:9f:bc:96:7f:5e:b5:30:73:38:11:ce:e9: be:c1:42:a9:9f:10:fb:79:c7:1b:dd:51:69:39:8c: ad:8c:b3:7a:0f:83:54:ac:09:bf:80:2e:f3:58:7f: 12:4f:89:52:1c:e9:d5:18:2a:58:4f:d1:b1:c5:3b: 7c:80:5f:5a:4f:c2:09:68:09:04:a7:8d:3c:22:e5: f0:49:99:c2:61:63:c2:7e:b0:89:0d:78:0a:99:0d: c8:26:6d:0b:e1:c7:27:a1:b0:53:9b:e6:a3:f7:e9: e1:9e:b1:ef:65:c6:ff:8a:90:47:db:1a:c8:42:ad: a4:5b:e9:c7:77:69:d4:25:7d:2b:b1:b4:6c:ad:8c: ea:9c:d4:3a:18:44:9f:9d:c1:20:1c:8f:c4:02:8e: 04:64:2f:41:88:43:6f:c5:13:de:1c:68:63:48:eb: 07:8a:26:e1:78:c7:15:af:4c:dc:22:41:70:f2:44: 17:57:e3:4c:86:be:7c:ae:fe:1b:ed:0d:3e:61:9f: a9:c1:a1:cb:10:81:95:15:2b:b5:ec:d8:81:ac:50: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FD:B3:58:4B:62:01:00:E9:E2:6D:D5:BE:99:1B:2E:9F:A4:9A:76 X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7c:06:c5:fb:8e:88:39:87:b3:6c:e9:04:29:da:00:6d:9e: 0f:35:1f:82:58:18:5d:07:54:1b:4b:99:08:c2:3b:d4:22:08: 4a:49:44:1d:a5:b5:03:a8:fa:dc:cc:58:1f:f7:47:10:58:0c: a6:58:80:74:ea:db:28:ca:58:a8:ab:84:ea:97:61:22:99:aa: 79:69:12:ad:29:44:ff:98:e1:da:4e:1b:f4:27:74:93:c1:ac: bb:7d:f6:47:59:91:28:ad:62:89:12:8d:81:51:ae:12:53:b8: a7:e5:5f:50:9c:09:e0:1a:30:4a:ed:e7:e9:94:a5:f7:62:58: 64:a2:fe:be:87:82:46:fa:4c:3c:62:14:50:1a:90:2f:30:19: a2:e3:69:c5:9b:40:c6:3b:6a:83:5e:25:95:d4:74:49:6b:51: 74:3d:35:3d:83:f8:70:e4:aa:ad:33:51:7c:af:17:3d:5e:cd: 71:2a:bd:7f:fc:ea:4d:97:91:4c:2e:0c:e9:5a:a5:08:c1:17: 6b:cd:5c:92:16:d2:3a:d3:9d:92:b3:f7:28:c5:fe:fd:17:fa: 0f:90:1e:d7:b1:95:03:10:a5:c4:9b:dd:2c:0d:91:60:34:8f: 8f:17:4b:46:67:c2:b5:f8:48:5d:a2:cd:82:3a:5a:93:aa:f0: 8d:13:e4:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjUxMDE5MDEwODU5WhcNMjUxMDI2MDEwODU5WjAYMRYwFAYD VQQDEw02OGY0M2EyYy0xMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06fY2PfXDOZw4hwvv+wCBpcMyIrOxNiWKn3IoyDiPQCyCRos4FQ2edPb/Khn DFqfvJZ/XrUwczgRzum+wUKpnxD7eccb3VFpOYytjLN6D4NUrAm/gC7zWH8ST4lS HOnVGCpYT9GxxTt8gF9aT8IJaAkEp408IuXwSZnCYWPCfrCJDXgKmQ3IJm0L4ccn obBTm+aj9+nhnrHvZcb/ipBH2xrIQq2kW+nHd2nUJX0rsbRsrYzqnNQ6GESfncEg HI/EAo4EZC9BiENvxRPeHGhjSOsHiibheMcVr0zcIkFw8kQXV+NMhr58rv4b7Q0+ YZ+pwaHLEIGVFSu17NiBrFBNJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLz9s1hL YgEA6eJt1b6ZGy6fpJp2MB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANfAbF+46IOYezbOkEKdoAbZ4PNR+CWBhdB1QbS5kIwjvUIghKSUQd pbUDqPrczFgf90cQWAymWIB06tsoylioq4Tql2Eimap5aRKtKUT/mOHaThv0J3ST way7ffZHWZEorWKJEo2BUa4SU7in5V9QnAngGjBK7efplKX3Ylhkov6+h4JG+kw8 YhRQGpAvMBmi42nFm0DGO2qDXiWV1HRJa1F0PTU9g/hw5KqtM1F8rxc9Xs1xKr1/ /OpNl5FMLgzpWqUIwRdrzVySFtI6052Ss/coxf79F/oPkB7XsZUDEKXEm90sDZFg NI+PF0tGZ8K1+Ehdos2COlqTqvCNE+Sr -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:41 2025 by rpki-client