$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft File: xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json) Hash identifier: D4y0ssedgGqgsSJaG6A+ORT5N1OS+ahua1zfQvaepco= Subject key identifier: 9F:76:FB:70:91:8C:35:B2:CD:EB:FE:4E:4E:E2:D9:13:9C:3B:21:EB Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0 Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0 Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft Manifest number: 02D6 Signing time: Mon 03 Nov 2025 01:20:26 +0000 Manifest this update: Mon 03 Nov 2025 01:20:26 +0000 Manifest next update: Mon 10 Nov 2025 01:20:26 +0000 Files and hashes: 1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: eJIcjHrrLJjRE/Q2Y52eHKaHco5dkV1XIlloiufNq8w=) 2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: le7JEqoYvZIMl+uq0wwq/akdNhi0QtrKh8LNnkVREXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0 Validity Not Before: Nov 3 01:20:26 2025 GMT Not After : Nov 10 01:20:26 2025 GMT Subject: CN=6908035a-c1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:69:11:8b:32:e6:3f:7e:5f:f7:95:ca:e1: 88:61:be:5c:09:d8:22:42:3d:8a:a2:08:54:dc:7a: 38:34:a2:c0:84:a9:73:5c:d8:1d:25:26:af:67:2e: ff:02:03:c5:d7:c4:9f:eb:47:10:8a:41:7a:2a:51: ab:9c:cc:e8:66:a3:41:31:d0:3c:75:22:9d:ac:aa: 92:ee:af:f8:f5:d9:5a:79:30:57:0c:dc:48:c5:44: f5:38:df:78:6a:c1:f2:1b:08:4c:e7:94:7a:b6:6f: ff:7c:c8:94:d5:fe:af:9b:53:6c:ed:e1:3d:23:93: f3:30:fb:5e:93:6c:13:1f:96:79:53:cb:62:94:fe: 83:e9:ef:a8:64:6b:d1:fa:9d:e3:a5:91:0d:26:8e: 88:06:4b:77:5c:ff:ea:8b:ca:d7:7a:56:97:c7:84: 01:4c:30:13:c2:0c:ec:4e:75:1f:91:2a:69:8d:4e: 32:8f:f6:23:6e:ca:8c:26:75:62:4c:fa:21:da:87: 29:48:88:3a:1e:b7:d4:3c:6d:b3:69:8c:d7:06:70: 32:fe:90:49:9e:46:eb:3a:9d:61:ee:d3:82:2b:77: ce:84:d5:83:52:50:ca:ef:67:36:23:d3:aa:bc:fd: 2e:73:51:d4:f4:08:41:0e:3b:fa:c6:96:0f:bd:f8: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:76:FB:70:91:8C:35:B2:CD:EB:FE:4E:4E:E2:D9:13:9C:3B:21:EB X509v3 Authority Key Identifier: keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:79:15:e3:25:8a:d3:69:22:c0:7d:a9:85:12:d7:48:5e:82: 33:0e:dd:77:14:c5:3b:fe:b0:4b:46:60:ba:7f:29:56:d2:e9: e9:eb:bb:1d:4c:ff:fe:0b:5b:79:b5:6c:d6:a8:76:7f:f8:0b: e8:82:08:e8:24:ab:8b:3e:e0:df:67:6c:cc:37:c2:56:1b:24: cc:1e:a4:88:fd:37:4b:91:51:4c:5f:9f:69:50:91:d2:79:9c: ae:df:c5:35:f3:0d:40:ad:c1:7b:31:e9:dd:13:8d:c1:6b:c5: d6:ba:6e:56:cb:37:56:ac:4e:bc:e9:4d:96:04:f8:cb:f8:42: 5b:36:dd:e0:e4:15:76:99:9f:58:77:8c:03:53:e0:6d:0c:f9: d4:fd:1f:07:60:14:5c:57:23:6e:11:56:54:8a:16:02:bd:c6: 75:58:4a:18:99:e4:e4:74:86:09:3c:57:cd:fe:06:03:74:c2: 72:db:4d:4a:ac:ce:7d:39:eb:42:37:d1:52:01:9d:53:a4:88: a9:de:10:4e:04:a7:9d:0c:3e:6d:23:aa:c2:d9:dc:f2:6b:5f: 06:a6:4b:cd:3a:60:20:4a:c8:89:2b:3b:df:6e:60:f4:a7:56: 6f:64:b3:d9:e1:50:a1:4d:b1:a1:85:04:2b:35:94:31:f8:bd: f3:d3:a8:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyRTIxMTAvBgNVBAUTKEM2NUZGQ0ZCMkNGQ0Q5QkNENjhEQUVCMDY5N0QzMTZD RjM1QjIzRjAwHhcNMjUxMTAzMDEyMDI2WhcNMjUxMTEwMDEyMDI2WjAYMRYwFAYD VQQDEw02OTA4MDM1YS1jMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+5pEYsy5j9+X/eVyuGIYb5cCdgiQj2KoghU3Ho4NKLAhKlzXNgdJSavZy7/ AgPF18Sf60cQikF6KlGrnMzoZqNBMdA8dSKdrKqS7q/49dlaeTBXDNxIxUT1ON94 asHyGwhM55R6tm//fMiU1f6vm1Ns7eE9I5PzMPtek2wTH5Z5U8tilP6D6e+oZGvR +p3jpZENJo6IBkt3XP/qi8rXelaXx4QBTDATwgzsTnUfkSppjU4yj/YjbsqMJnVi TPoh2ocpSIg6HrfUPG2zaYzXBnAy/pBJnkbrOp1h7tOCK3fOhNWDUlDK72c2I9Oq vP0uc1HU9AhBDjv6xpYPvfhkvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ92+3CR jDWyzev+Tk7i2ROcOyHrMB8GA1UdIwQYMBaAFMZf/Pss/Nm81o2usGl9MWzzWyPw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzJFMi8yRjE5NTM1QzBD QjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6ODJieldqYTZ3YVgweGJQTmJJ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsXzgteXo4MmJ6V2phNndhWDB4YlBOYklfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzJFMi8yRjE5NTM1QzBDQjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6ODJi eldqYTZ3YVgweGJQTmJJX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7eRXjJYrTaSLAfamFEtdIXoIzDt13FMU7/rBLRmC6fylW0unp67sd TP/+C1t5tWzWqHZ/+AvoggjoJKuLPuDfZ2zMN8JWGyTMHqSI/TdLkVFMX59pUJHS eZyu38U18w1ArcF7MendE43Ba8XWum5WyzdWrE686U2WBPjL+EJbNt3g5BV2mZ9Y d4wDU+BtDPnU/R8HYBRcVyNuEVZUihYCvcZ1WEoYmeTkdIYJPFfN/gYDdMJy201K rM59OetCN9FSAZ1TpIip3hBOBKedDD5tI6rC2dzya18GpkvNOmAgSsiJKzvfbmD0 p1ZvZLPZ4VChTbGhhQQrNZQx+L3z06hj -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:35 2025 by rpki-client