$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: wAMd4ASszk5CVuLvTxyGbOvkfmBY05431489LAlyt4U= Subject key identifier: BF:D3:A6:CC:14:49:0E:94:AA:4C:54:F6:D3:5E:78:4A:2B:67:FC:79 Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2BF7 Signing time: Sun 02 Nov 2025 15:31:50 +0000 Manifest this update: Sun 02 Nov 2025 15:31:50 +0000 Manifest next update: Sun 09 Nov 2025 15:31:50 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: +ar4y8cWLZjbQkBy1r4EwEIGj7JV+A6VBZlygAnGNKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11255 (0x2bf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Nov 2 15:31:50 2025 GMT Not After : Nov 9 15:31:50 2025 GMT Subject: CN=69077966-880d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:58:5c:4a:8b:91:f1:f6:22:5d:c7:54:5f: 6e:22:94:a9:98:d0:ae:f3:51:48:d4:b1:f5:a6:a5: 0a:ff:bd:e7:0c:0f:ab:7f:c5:dc:47:ac:d5:f6:a2: 80:67:70:6d:c3:02:9f:87:9c:1e:41:a7:f5:42:3b: bc:4e:10:d0:62:69:46:c1:97:91:cd:4d:24:8c:65: 45:14:a5:68:11:55:23:11:bb:1c:50:7a:fe:6f:e6: cf:53:4f:ec:e4:29:7a:76:b3:03:48:48:17:26:23: 5f:9f:14:aa:63:63:98:32:59:eb:d4:22:92:bd:44: 87:c0:29:9e:ef:78:b9:c3:05:6f:de:e0:7a:3e:33: ba:6f:71:75:12:a3:b1:ad:33:36:f0:f0:11:89:1f: 09:23:7b:8e:2f:ab:47:50:98:ea:85:cb:6e:ef:de: 9a:18:3f:6c:1e:32:79:62:ac:72:01:d5:42:2e:07: f5:f1:0c:56:7e:1e:79:16:78:24:44:96:d1:55:17: 60:dd:6f:9a:a0:da:7c:61:79:47:5f:13:0a:a4:c2: c7:7a:d9:5b:ad:ad:66:46:8a:b4:49:1b:77:9e:d1: 6e:72:cf:49:9c:b9:be:21:5f:e1:42:47:3b:0f:25: 58:6e:da:8a:b4:74:fa:fa:9e:a2:c3:fb:09:db:14: 4d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D3:A6:CC:14:49:0E:94:AA:4C:54:F6:D3:5E:78:4A:2B:67:FC:79 X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ab:bb:7d:83:0e:f1:7d:ac:ae:cd:d1:b8:2f:d8:7b:9b:48: 89:97:39:35:b7:0d:d1:03:83:60:24:0e:7a:81:89:4c:d1:ac: 37:2a:e3:5a:5b:87:7b:8f:c8:0d:60:4b:43:11:07:85:fb:17: ca:de:30:ef:09:6f:f8:97:24:41:65:a6:48:fb:d6:87:05:07: bc:fa:93:0d:65:da:1c:7e:5c:bc:a9:e1:a8:5f:34:de:9b:6d: cc:97:35:49:09:84:d6:fe:1e:ee:db:c6:1d:64:56:3c:14:1e: e4:53:e8:11:ca:5a:64:fc:16:7a:c1:23:48:7c:68:c2:86:46: a8:bb:96:26:79:98:cd:e9:7f:2e:4b:70:db:31:c2:08:48:18: d2:29:10:12:c9:30:9d:03:2c:7b:fa:57:42:30:9c:d2:21:30: a9:b5:d8:82:c4:41:ee:69:43:05:86:16:f5:d7:a6:7b:60:16: 3a:15:5c:bf:ab:4e:31:60:99:8d:91:9b:98:98:5c:2f:72:9f: 41:d3:a4:3a:47:75:e7:18:98:54:53:52:43:71:c6:b4:93:9c: 72:70:8b:ec:63:32:36:5a:3b:29:68:10:2e:a4:f9:9c:28:4a: 28:93:ac:79:5c:e3:9f:aa:73:ca:09:d8:0f:f9:52:da:71:37: 24:c0:8d:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUxMTAyMTUzMTUwWhcNMjUxMTA5MTUzMTUwWjAYMRYwFAYD VQQDEw02OTA3Nzk2Ni04ODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAtYXEqLkfH2Il3HVF9uIpSpmNCu81FI1LH1pqUK/73nDA+rf8XcR6zV9qKA Z3BtwwKfh5weQaf1Qju8ThDQYmlGwZeRzU0kjGVFFKVoEVUjEbscUHr+b+bPU0/s 5Cl6drMDSEgXJiNfnxSqY2OYMlnr1CKSvUSHwCme73i5wwVv3uB6PjO6b3F1EqOx rTM28PARiR8JI3uOL6tHUJjqhctu796aGD9sHjJ5YqxyAdVCLgf18QxWfh55Fngk RJbRVRdg3W+aoNp8YXlHXxMKpMLHetlbra1mRoq0SRt3ntFucs9JnLm+IV/hQkc7 DyVYbtqKtHT6+p6iw/sJ2xRNSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/TpswU SQ6UqkxU9tNeeEorZ/x5MB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYq7t9gw7xfayuzdG4L9h7m0iJlzk1tw3RA4NgJA56gYlM0aw3KuNa W4d7j8gNYEtDEQeF+xfK3jDvCW/4lyRBZaZI+9aHBQe8+pMNZdocfly8qeGoXzTe m23MlzVJCYTW/h7u28YdZFY8FB7kU+gRylpk/BZ6wSNIfGjChkaou5YmeZjN6X8u S3DbMcIISBjSKRASyTCdAyx7+ldCMJzSITCptdiCxEHuaUMFhhb116Z7YBY6FVy/ q04xYJmNkZuYmFwvcp9B06Q6R3XnGJhUU1JDcca0k5xycIvsYzI2WjspaBAupPmc KEook6x5XOOfqnPKCdgP+VLacTckwI3Q -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:24 2025 by rpki-client