$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: vELqFscTJ9FIT83m8HImqh/CrOmz+TAlt26l7u3uHHs= Subject key identifier: BC:8E:75:05:A5:7F:AF:83:5F:2A:BE:5D:29:C6:27:46:82:AA:FE:34 Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 0728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 0722 Signing time: Sun 02 Nov 2025 21:48:05 +0000 Manifest this update: Sun 02 Nov 2025 21:48:04 +0000 Manifest next update: Sun 09 Nov 2025 21:48:04 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: jbujGB/9hkY+aBxlc2PpOox3BETT2Z2a3QRgszdSKio=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: HlIyCnozTXmahx4OrgB34hXtStTSnVnLcqtp68+OH5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1832 (0x728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: Nov 2 21:48:04 2025 GMT Not After : Nov 9 21:48:04 2025 GMT Subject: CN=6907d194-246d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:8c:bf:24:13:e8:f3:24:3d:36:3b:19:8b:84: f1:d4:b1:41:d0:c7:ff:3f:b6:26:c3:7e:2a:d4:34: d0:8f:ac:da:b6:e7:57:41:48:bb:5d:75:24:c4:53: 0c:cf:6a:c4:2e:b7:15:c0:c7:37:03:ca:ff:23:38: 91:fc:f9:35:6a:7d:94:25:e3:36:cd:43:e0:db:d0: 4e:a2:f0:c7:79:72:8a:1c:ee:8d:1e:8a:89:6e:8f: 07:16:c7:65:a5:41:0a:a9:be:ed:19:f3:af:71:7b: 44:ef:cb:d3:f8:78:20:9c:e5:02:de:b3:77:15:db: b9:7d:62:31:6a:91:01:38:62:65:f5:94:34:56:c5: 8f:6f:fa:f8:33:a2:b7:f2:99:12:93:1e:31:aa:62: 50:2c:b1:88:82:ed:ca:84:bf:6c:39:00:5b:f9:75: b1:c7:b1:16:c1:dc:fa:83:21:17:ac:f3:a8:12:2f: 29:fa:d2:15:33:be:6a:d5:f3:ae:71:8d:14:b6:12: f3:97:48:f9:8f:b5:bd:09:54:ef:63:ba:9b:76:f4: 64:75:60:b0:cb:6c:99:27:a1:0f:e0:2f:9b:7b:77: e5:0b:f2:b1:39:3c:b3:aa:f1:7f:54:ee:3b:6e:2a: 02:ff:2e:0a:f0:59:73:c5:82:97:75:c7:02:86:70: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8E:75:05:A5:7F:AF:83:5F:2A:BE:5D:29:C6:27:46:82:AA:FE:34 X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c6:70:fb:24:dc:55:da:8e:d7:37:eb:e9:e2:67:8e:8b:40: 00:36:64:9b:3b:0b:5f:1d:7c:65:ce:ed:a1:f3:b2:76:f8:6e: 17:e5:2e:9b:96:95:e3:5c:50:35:c7:09:8b:c1:76:91:1a:65: 8b:a7:bd:ca:a9:85:22:04:df:a5:12:ae:a1:5d:6b:b4:a1:63: ee:23:8b:0d:4f:8e:cc:05:48:7e:23:79:20:2d:c1:7a:ea:a8: 89:9e:a4:5b:0c:01:4b:90:75:54:d8:b5:a4:1f:5b:fb:4a:f5: 56:02:22:66:67:67:db:1c:8d:fc:b9:1a:bd:05:f3:4b:ba:38: 7d:a9:87:e2:b2:b9:2e:cb:50:c1:77:66:58:a0:c3:fc:39:17: cb:5c:5f:c9:90:b3:a6:e0:5f:1c:03:58:3b:66:bb:d2:03:9a: 2d:f0:ce:80:fd:0a:b7:18:eb:80:5a:47:6e:0d:66:af:82:78: 85:84:06:a8:f3:70:f6:df:26:37:e2:ae:6b:52:b0:9f:85:0c: 80:db:fd:49:05:c4:d2:d8:7a:93:72:32:2e:ee:3b:8b:e3:9a: 84:af:7d:13:c1:ee:ec:57:c8:8f:d3:b7:2b:83:b1:82:64:10: ab:36:93:fe:19:17:49:38:e0:29:3f:bc:38:b4:9d:cd:7e:28: c1:c5:b1:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjUxMTAyMjE0ODA0WhcNMjUxMTA5MjE0ODA0WjAYMRYwFAYD VQQDEw02OTA3ZDE5NC0yNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Yy/JBPo8yQ9NjsZi4Tx1LFB0Mf/P7Ymw34q1DTQj6zatudXQUi7XXUkxFMM z2rELrcVwMc3A8r/IziR/Pk1an2UJeM2zUPg29BOovDHeXKKHO6NHoqJbo8HFsdl pUEKqb7tGfOvcXtE78vT+HggnOUC3rN3Fdu5fWIxapEBOGJl9ZQ0VsWPb/r4M6K3 8pkSkx4xqmJQLLGIgu3KhL9sOQBb+XWxx7EWwdz6gyEXrPOoEi8p+tIVM75q1fOu cY0UthLzl0j5j7W9CVTvY7qbdvRkdWCwy2yZJ6EP4C+be3flC/KxOTyzqvF/VO47 bioC/y4K8FlzxYKXdccChnBDcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyOdQWl f6+DXyq+XSnGJ0aCqv40MB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/xnD7JNxV2o7XN+vp4meOi0AANmSbOwtfHXxlzu2h87J2+G4X5S6b lpXjXFA1xwmLwXaRGmWLp73KqYUiBN+lEq6hXWu0oWPuI4sNT47MBUh+I3kgLcF6 6qiJnqRbDAFLkHVU2LWkH1v7SvVWAiJmZ2fbHI38uRq9BfNLujh9qYfisrkuy1DB d2ZYoMP8ORfLXF/JkLOm4F8cA1g7ZrvSA5ot8M6A/Qq3GOuAWkduDWavgniFhAao 83D23yY34q5rUrCfhQyA2/1JBcTS2HqTcjIu7juL45qEr30Twe7sV8iP07crg7GC ZBCrNpP+GRdJOOApP7w4tJ3NfijBxbHt -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:02 2025 by rpki-client