$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: ojlljDLE266vukxQbxWHk7TmJaZxgyywIWrsqMXn9tA= Subject key identifier: F1:93:60:C8:5E:C7:68:53:35:EE:3E:C7:3E:9D:1B:B0:F5:42:1D:92 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 0705 Signing time: Sun 02 Nov 2025 21:54:09 +0000 Manifest this update: Sun 02 Nov 2025 21:54:08 +0000 Manifest next update: Sun 09 Nov 2025 21:54:08 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: GmC84Iz7oV5z5vYu6Y1Ok7JCiNs2loz4ADwXrs+Twew=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Nov 2 21:54:08 2025 GMT Not After : Nov 9 21:54:08 2025 GMT Subject: CN=6907d300-9722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:dc:d1:72:f8:21:3b:fa:56:6f:ba:2c:ac: 6e:bf:1f:db:c8:12:83:25:cf:14:91:94:3c:c1:b0: 74:99:21:8b:ec:1f:1a:6a:ec:81:f4:9a:f2:e9:d6: 2e:f6:e3:f7:0e:7a:58:9e:09:4e:2a:28:76:5f:24: 37:25:16:08:df:66:2b:b4:d1:eb:d9:7b:2e:5e:43: f1:12:99:74:64:24:85:a6:ee:c3:3f:4b:db:d6:8d: c9:35:5e:5a:0e:f4:9e:87:34:be:cc:44:87:90:9a: be:46:c6:24:21:6c:b5:99:90:85:11:56:a2:67:87: 5c:6f:33:ab:e8:69:4c:1d:82:35:b0:9d:7d:56:ed: 48:01:ba:e6:8e:a4:5b:f1:ee:a7:dd:7e:28:a2:af: c7:70:ee:08:77:25:61:ee:fc:9d:4e:a6:1c:84:7f: b8:b4:d2:da:71:5e:85:dd:20:9f:77:75:ec:6e:b5: 2b:3b:c1:eb:7e:27:ba:ff:60:6b:2d:31:24:99:06: 2a:60:27:be:59:32:d2:a9:1f:16:02:66:14:8c:88: c5:c5:d7:48:fc:7f:13:72:5c:48:9a:df:39:f0:bc: 0b:c7:c6:02:f5:39:8c:cc:69:11:0f:ed:69:6d:ea: 47:ec:72:50:03:36:f2:d7:0c:ff:fd:b5:23:16:01: 49:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:93:60:C8:5E:C7:68:53:35:EE:3E:C7:3E:9D:1B:B0:F5:42:1D:92 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2f:46:a1:1a:9b:b0:c7:8e:d9:fb:1c:bf:c5:68:16:1e:08: 4e:f0:01:48:13:20:34:37:52:ab:cb:8b:bd:78:9f:08:0b:e1: da:d9:85:11:0f:73:0e:ab:b1:23:99:27:fe:bd:b4:75:6e:a3: 36:5d:a4:85:0a:85:bd:6d:5e:d3:23:7e:45:94:1d:92:d2:17: 74:1d:99:8b:e8:47:b3:98:cb:cc:90:2a:1c:10:a1:a8:68:a1: e8:cc:f3:5f:32:f3:86:f9:25:d8:3c:47:43:94:ab:8c:33:09: c6:c5:54:57:2d:0a:d4:b6:bb:51:ca:4e:c6:10:ad:94:64:9a: 65:29:f8:d9:4f:07:d2:cd:c4:85:53:b4:fb:93:53:3a:41:2a: 48:af:d0:30:45:65:0d:24:46:8f:0f:d7:0c:fc:d8:ec:34:b9: c0:4f:0e:2b:3d:6a:3e:ec:ec:cb:fe:9b:97:4c:a1:b7:eb:32: 93:d8:4d:b8:2a:45:1e:06:cc:f7:bc:3f:53:7a:6e:3c:54:cf: bf:f4:54:cd:a3:7e:d1:46:9b:1a:99:bc:72:46:9e:19:7e:95: 97:43:ec:18:27:5a:e9:8c:16:62:1b:96:e9:71:fa:01:cd:d9: 25:b1:74:b5:31:1e:75:8c:af:68:06:64:c6:6f:56:bd:df:87: b9:f8:12:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjUxMTAyMjE1NDA4WhcNMjUxMTA5MjE1NDA4WjAYMRYwFAYD VQQDEw02OTA3ZDMwMC05NzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtTc0XL4ITv6Vm+6LKxuvx/byBKDJc8UkZQ8wbB0mSGL7B8aauyB9Jry6dYu 9uP3DnpYnglOKih2XyQ3JRYI32YrtNHr2XsuXkPxEpl0ZCSFpu7DP0vb1o3JNV5a DvSehzS+zESHkJq+RsYkIWy1mZCFEVaiZ4dcbzOr6GlMHYI1sJ19Vu1IAbrmjqRb 8e6n3X4ooq/HcO4IdyVh7vydTqYchH+4tNLacV6F3SCfd3XsbrUrO8Hrfie6/2Br LTEkmQYqYCe+WTLSqR8WAmYUjIjFxddI/H8TclxImt858LwLx8YC9TmMzGkRD+1p bepH7HJQAzby1wz//bUjFgFJQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGTYMhe x2hTNe4+xz6dG7D1Qh2SMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcL0ahGpuwx47Z+xy/xWgWHghO8AFIEyA0N1Kry4u9eJ8IC+Ha2YUR D3MOq7EjmSf+vbR1bqM2XaSFCoW9bV7TI35FlB2S0hd0HZmL6EezmMvMkCocEKGo aKHozPNfMvOG+SXYPEdDlKuMMwnGxVRXLQrUtrtRyk7GEK2UZJplKfjZTwfSzcSF U7T7k1M6QSpIr9AwRWUNJEaPD9cM/NjsNLnATw4rPWo+7OzL/puXTKG36zKT2E24 KkUeBsz3vD9Tem48VM+/9FTNo37RRpsambxyRp4ZfpWXQ+wYJ1rpjBZiG5bpcfoB zdklsXS1MR51jK9oBmTGb1a934e5+BLj -----END CERTIFICATE-----Generated at Mon Nov 3 16:00:51 2025 by rpki-client