$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: JUAhTwAe3dFLk/MH1HlSPRnT5j6qcSIksCp9qoPlDTo= Subject key identifier: 7D:D8:D4:02:6A:BF:E1:A3:6F:F1:88:44:FC:1F:73:FA:78:4D:B5:12 Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: 5A Signing time: Wed 22 Oct 2025 18:07:09 +0000 Manifest this update: Wed 22 Oct 2025 18:07:08 +0000 Manifest next update: Wed 29 Oct 2025 18:07:08 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: JoB4xY6xG9hgPqVUD4+7zDVHzC8lJ05A+D+mg4m+w4Y=) 2: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: Je+up3kY6qu1B3So3Vnq/xOYjMIPNymqMCzCxvb8aL4=) 3: 87087F00267E11F09183092AC4F9AE02.roa (hash: vPD3MBlV+VYxtTk5npGCIsRmwvlSAFp0uTh8dXUbHV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Oct 22 18:07:08 2025 GMT Not After : Oct 29 18:07:08 2025 GMT Subject: CN=68f91d4c-7578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e5:02:20:f9:43:f2:77:3f:30:27:7c:44:08: 95:44:3e:ef:0f:87:aa:6b:be:2e:ae:bd:9b:04:2b: 00:ff:bf:e1:8a:3a:77:50:ca:b1:b9:d5:11:2a:a0: 90:4c:26:6c:17:bc:70:0b:31:04:d9:12:75:fa:bd: 5b:e1:00:6b:31:0e:df:01:49:89:88:ee:75:3c:5c: 66:b0:85:68:98:77:be:73:81:a6:2f:c0:f0:bb:c5: 5e:37:a5:d3:7d:86:50:ad:7f:bf:ab:e1:81:3f:47: bf:4e:fd:44:9e:f0:5d:87:99:c7:1c:a2:ee:2f:1c: 2d:e6:14:43:69:19:92:80:ef:ff:35:a2:01:83:59: ea:10:ae:c2:9c:c6:a9:f6:49:6b:5c:99:b4:f9:b5: 28:74:3f:48:3a:e5:3e:72:08:ab:e3:e0:05:2a:d0: 1d:07:49:c4:01:90:07:4d:bf:73:ab:26:34:8e:86: 1f:b5:66:ff:a5:bd:19:1e:6f:5c:98:46:86:33:53: ed:15:e0:06:2f:3d:30:1f:8e:f4:d2:04:df:f9:61: fe:52:41:86:f3:4c:04:67:8a:ca:fc:77:bd:67:63: af:56:f9:5d:fc:e5:c0:56:39:6c:50:27:14:ec:e5: 3f:db:0b:90:c8:18:67:3a:c6:4c:9c:69:b8:e7:33: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D8:D4:02:6A:BF:E1:A3:6F:F1:88:44:FC:1F:73:FA:78:4D:B5:12 X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:90:6d:ba:bb:90:e7:4d:c1:60:1e:26:35:5e:22:76:27:37: a6:c4:a2:4f:48:06:87:91:56:0b:9d:d4:c2:09:dd:c6:a1:dc: 29:91:a2:6e:0a:dd:19:f0:65:0c:2d:a0:bf:e3:ed:56:df:40: 26:b9:c4:51:cd:e3:55:fd:3e:b9:a1:59:6c:1b:d2:c3:72:77: ae:a8:43:e6:04:00:5f:5d:ef:84:9c:9f:6c:a1:68:98:95:77: 84:2b:9f:fa:26:31:01:13:99:4f:db:e5:9a:90:ef:ff:f1:72: e0:a8:12:b4:1a:84:45:87:21:8c:e3:91:28:c3:2e:cd:ac:b8: a5:79:50:f3:ce:4f:55:9d:14:f2:c0:8e:08:9d:24:89:c3:53: ea:48:ad:8f:0a:b7:11:d5:f9:2f:8a:15:33:b7:71:88:02:1c: 2e:4e:29:f2:bd:91:1c:62:27:b1:3d:87:9e:4f:3b:d3:25:c7: 25:21:2b:41:92:74:84:97:15:5c:f6:54:d7:11:32:fe:f5:e8: 69:4b:e4:58:dc:03:6d:76:29:76:85:bd:1f:39:9f:c8:c7:1a: a0:c5:b8:bb:19:35:b2:fa:cc:d6:e1:88:e5:6b:8e:ac:84:bd: 81:62:97:b8:c1:59:55:85:ee:b1:57:5e:b2:5f:ca:d3:2e:bd: 96:c3:07:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Njk4RTExMC8GA1UEBRMoNURCNzVCMkRGOTREMDQ0NzRBNkU1RTJENEI3OENDMDg0 QkZDMkE2QzAeFw0yNTEwMjIxODA3MDhaFw0yNTEwMjkxODA3MDhaMBgxFjAUBgNV BAMTDTY4ZjkxZDRjLTc1NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDk5QIg+UPydz8wJ3xECJVEPu8Ph6prvi6uvZsEKwD/v+GKOndQyrG51REqoJBM JmwXvHALMQTZEnX6vVvhAGsxDt8BSYmI7nU8XGawhWiYd75zgaYvwPC7xV43pdN9 hlCtf7+r4YE/R79O/USe8F2Hmcccou4vHC3mFENpGZKA7/81ogGDWeoQrsKcxqn2 SWtcmbT5tSh0P0g65T5yCKvj4AUq0B0HScQBkAdNv3OrJjSOhh+1Zv+lvRkeb1yY RoYzU+0V4AYvPTAfjvTSBN/5Yf5SQYbzTARnisr8d71nY69W+V385cBWOWxQJxTs 5T/bC5DIGGc6xkycabjnM2WfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfdjUAmq/ 4aNv8YhE/B9z+nhNtRIwHwYDVR0jBBgwFoAUXbdbLflNBEdKbl4tS3jMCEv8Kmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2OThFLzA5NUY2QzhDMjY3 QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEtt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGJkYkxmbE5CRWRLYmw0dFMzak1DRXY4S213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 OThFLzA5NUY2QzhDMjY3QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVk S2JsNHRTM2pNQ0V2OEttdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGSQbbq7kOdNwWAeJjVeInYnN6bEok9IBoeRVgud1MIJ3cah3CmRom4K 3RnwZQwtoL/j7VbfQCa5xFHN41X9PrmhWWwb0sNyd66oQ+YEAF9d74Scn2yhaJiV d4Qrn/omMQETmU/b5ZqQ7//xcuCoErQahEWHIYzjkSjDLs2suKV5UPPOT1WdFPLA jgidJInDU+pIrY8KtxHV+S+KFTO3cYgCHC5OKfK9kRxiJ7E9h55PO9MlxyUhK0GS dISXFVz2VNcRMv716GlL5FjcA212KXaFvR85n8jHGqDFuLsZNbL6zNbhiOVrjqyE vYFil7jBWVWF7rFXXrJfytMuvZbDB3Y= -----END CERTIFICATE-----Generated at Fri Oct 24 00:06:22 2025 by rpki-client