$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: Am8BWyCJyYCIlWNQocQlcbAiktT6PWs0k5IfV79zZqg= Subject key identifier: 06:28:D2:29:20:80:A0:49:19:B3:98:6B:B7:88:83:A0:9A:2A:4E:A5 Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 2580 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 2570 Signing time: Fri 31 Oct 2025 15:39:18 +0000 Manifest this update: Fri 31 Oct 2025 15:39:18 +0000 Manifest next update: Fri 07 Nov 2025 15:39:18 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: k6G7xg0ZnVZUgrJm/PLypfq251CWbfPK4naYGb9SuVw=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: xnMX5X2YJrVvWA8Z+ilrknMulrMIGU6wGg57HKZlkt0=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: f2BKC0SfvfCVZzewNCyKNQgaDwalvIHM6ibs4HCHEDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 15:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9600 (0x2580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: Oct 31 15:39:18 2025 GMT Not After : Nov 7 15:39:18 2025 GMT Subject: CN=6904d826-280e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:94:9b:09:68:b9:4c:c5:f8:4c:fe:d5:64: ab:bd:76:be:88:9d:79:a1:47:18:74:5f:79:f0:46: b3:49:b1:cd:a7:3f:56:08:b7:c7:d5:da:97:79:f5: be:68:df:b2:99:ab:c8:5b:75:ef:f6:fa:20:bb:c0: 6a:3a:4d:97:49:41:95:c5:da:27:89:7c:11:35:76: e4:10:1e:07:a5:30:61:1b:c2:1f:6e:3c:77:36:bd: 16:c0:cc:8a:99:e3:86:78:7e:eb:ed:d2:bc:1e:f9: c4:cf:b3:94:46:d4:1a:77:1e:16:2f:3b:69:a3:96: 12:ae:af:c9:96:9a:ed:23:4e:8f:d8:c4:aa:fd:b6: 8f:6f:37:e4:12:b7:b5:68:5b:81:50:7c:a7:41:4f: 52:8e:9b:b6:b8:95:41:3b:93:ff:3e:36:a1:36:60: cb:d4:2b:f9:c7:af:d5:1c:0d:52:6b:c0:ab:64:be: bf:5d:0d:21:d2:e2:e9:0d:bf:7d:be:c9:b6:c3:06: a7:13:26:d3:a9:12:82:7a:9b:c5:c8:68:6d:ac:81: 1d:8e:b9:11:18:3a:32:f3:0d:4f:44:6b:e1:dd:04: bb:4b:4b:c6:db:7a:a0:1b:26:56:e8:87:42:1d:04: c3:1b:ef:fa:bc:c5:1a:e4:42:2c:07:cc:b0:08:cb: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:28:D2:29:20:80:A0:49:19:B3:98:6B:B7:88:83:A0:9A:2A:4E:A5 X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:be:b5:11:67:4b:9f:c7:95:45:c3:1c:71:49:10:1a:9a:3c: 48:18:17:8a:02:72:7f:25:80:ab:30:93:ba:a0:5b:e2:05:19: b4:4a:c5:85:11:d4:44:8d:9b:b1:36:5a:9b:af:e4:42:43:a2: aa:ba:87:0f:da:19:29:56:ca:54:f7:68:fd:2e:9c:66:09:eb: 51:83:c4:0a:95:dc:4a:61:5b:01:e4:ab:b5:2c:a3:9e:a4:61: 57:f4:a2:c7:c7:2e:d9:df:b6:b7:d4:f8:6c:e2:6e:0c:c7:a9: 8b:07:4e:e4:6e:58:bd:ef:53:1d:c1:8b:e3:3b:75:a1:4e:1a: 69:b1:6b:0b:78:cf:12:11:2c:30:4e:b0:17:90:2f:4c:6c:29: 9f:e6:78:b6:2f:b0:93:fc:7c:1e:26:14:f7:0f:3e:b8:8c:be: 31:49:31:ba:a8:ce:e2:8a:eb:31:8f:52:32:12:e3:3f:dc:f6: ba:9a:47:da:2b:d9:79:00:a6:d0:6e:7c:b8:39:44:df:82:8e: 8e:d7:76:83:00:76:0b:86:c9:8d:00:5e:7d:e0:e1:36:01:84: 6a:2d:32:f0:ec:68:95:57:f2:35:4f:47:20:59:0a:17:61:e7: 95:09:27:27:ae:46:13:61:fc:48:49:e1:32:14:b4:cc:8c:e6: 33:3e:96:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUxMDMxMTUzOTE4WhcNMjUxMTA3MTUzOTE4WjAYMRYwFAYD VQQDEw02OTA0ZDgyNi0yODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLeUmwlouUzF+Ez+1WSrvXa+iJ15oUcYdF958EazSbHNpz9WCLfH1dqXefW+ aN+ymavIW3Xv9vogu8BqOk2XSUGVxdoniXwRNXbkEB4HpTBhG8Ifbjx3Nr0WwMyK meOGeH7r7dK8HvnEz7OURtQadx4WLztpo5YSrq/JlprtI06P2MSq/baPbzfkEre1 aFuBUHynQU9Sjpu2uJVBO5P/PjahNmDL1Cv5x6/VHA1Sa8CrZL6/XQ0h0uLpDb99 vsm2wwanEybTqRKCepvFyGhtrIEdjrkRGDoy8w1PRGvh3QS7S0vG23qgGyZW6IdC HQTDG+/6vMUa5EIsB8ywCMvN+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYo0ikg gKBJGbOYa7eIg6CaKk6lMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3vrURZ0ufx5VFwxxxSRAamjxIGBeKAnJ/JYCrMJO6oFviBRm0SsWF EdREjZuxNlqbr+RCQ6KquocP2hkpVspU92j9LpxmCetRg8QKldxKYVsB5Ku1LKOe pGFX9KLHxy7Z37a31Phs4m4Mx6mLB07kbli971MdwYvjO3WhThppsWsLeM8SESww TrAXkC9MbCmf5ni2L7CT/HweJhT3Dz64jL4xSTG6qM7iiusxj1IyEuM/3Pa6mkfa K9l5AKbQbny4OUTfgo6O13aDAHYLhsmNAF594OE2AYRqLTLw7GiVV/I1T0cgWQoX YeeVCScnrkYTYfxISeEyFLTMjOYzPpbQ -----END CERTIFICATE-----Generated at Sun Nov 2 12:53:45 2025 by rpki-client