$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: 7MA9mFypur151LkiYdRbTAVr5E+wPkapAfqiT/DE5ZY= Subject key identifier: 79:9F:F0:51:69:C9:08:29:99:CA:C5:B1:E8:34:A6:BD:A7:4F:4F:92 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2340 Signing time: Thu 06 Nov 2025 15:34:24 +0000 Manifest this update: Thu 06 Nov 2025 15:34:23 +0000 Manifest next update: Thu 13 Nov 2025 15:34:23 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: 4riwCWensyJndH4wQRgBz+XLRJHMvx3oksjLgVqHboo=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ceQW0pBKYX0iNvGIXu+d5odgS50V86e35zycTc8Ud5M=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 15:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9074 (0x2372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Nov 6 15:34:23 2025 GMT Not After : Nov 13 15:34:23 2025 GMT Subject: CN=690cc000-a721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1a:3f:d1:bd:bf:83:56:0c:75:e2:45:4e:4d: 7e:07:03:de:bb:89:f7:2d:22:18:8e:62:40:ff:ae: 1b:f8:0a:60:f2:e4:5d:65:44:67:ad:23:08:3c:d6: c1:86:e8:f4:f2:a8:6b:2f:3f:8c:ce:fa:85:f2:7a: 2c:29:6f:51:3d:ea:80:8b:6c:19:63:62:64:9e:d8: 3a:6f:f8:63:ca:fe:cd:c7:6c:a4:4e:59:0e:fa:15: 8d:c6:a2:dd:50:f0:64:11:69:84:6f:1e:f0:00:a4: 18:4f:e0:e4:53:83:89:8b:6a:e0:86:ff:06:79:cf: cf:7c:b2:3c:60:24:94:3b:96:58:20:5c:e6:23:d3: b8:65:bb:54:5f:a8:2a:63:80:d5:04:ec:4f:ae:8f: 3b:25:de:8d:c5:78:8e:e7:c9:a6:57:a0:71:23:eb: 0f:8e:fd:c2:a4:48:f6:78:bf:bf:f8:fa:dc:46:19: c7:4f:6c:81:58:dd:46:3d:43:97:5c:57:3c:35:e9: cf:e3:2c:f2:fd:3d:0b:b3:ff:a8:e1:80:cb:02:bd: 62:1c:6d:0e:5f:a6:bd:54:dd:0b:5d:f1:30:f4:13: e0:d1:f4:5a:45:bb:b7:9d:7e:c9:de:27:24:03:6e: 6a:96:0a:a2:d2:fb:0f:0b:b2:ab:b9:62:0e:c5:e3: 14:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9F:F0:51:69:C9:08:29:99:CA:C5:B1:E8:34:A6:BD:A7:4F:4F:92 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:38:2f:c5:7b:ea:28:f9:10:93:72:04:54:72:3f:10:62:41: 89:9c:5e:bb:8f:04:02:81:96:67:8a:a4:c4:5d:a7:26:14:c5: 8b:7a:96:6e:bf:3b:a9:da:4f:4a:db:89:20:ff:91:84:ba:0d: a8:f3:ca:2b:d9:ff:fe:ca:e6:03:6e:94:5e:b2:3c:d4:f0:b6: ae:69:e9:d7:13:b9:46:00:24:c3:21:b8:77:dd:18:21:27:5a: 7c:bf:c9:52:67:69:f4:e3:0d:e0:fe:59:87:0f:5b:3c:c3:30: cf:eb:df:a1:e4:24:aa:b7:ee:2d:fa:7e:1b:27:ff:49:f2:7f: d6:92:d6:af:a6:7a:df:14:6d:23:ea:d6:40:2c:22:c5:3b:59: 0c:e5:e2:21:f0:c3:00:e9:b5:57:64:a5:f0:ef:94:90:58:3a: cb:a3:d8:fd:f9:73:f4:21:78:82:af:58:e8:6f:e1:87:75:52: fc:6d:b5:92:5f:8e:0f:25:f5:24:4d:32:fa:86:99:b7:d6:c4: d4:3b:59:d2:5b:ed:5f:43:19:4f:e1:e8:f8:97:50:69:75:d3: 9a:a8:ce:bf:09:a5:e2:21:f7:16:6b:9c:a0:70:49:f5:6b:6a: af:f2:6f:d9:60:3f:87:ca:d5:f1:94:4b:e4:0f:af:90:31:6e: c4:10:45:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjUxMTA2MTUzNDIzWhcNMjUxMTEzMTUzNDIzWjAYMRYwFAYD VQQDEw02OTBjYzAwMC1hNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ho/0b2/g1YMdeJFTk1+BwPeu4n3LSIYjmJA/64b+Apg8uRdZURnrSMIPNbB huj08qhrLz+MzvqF8nosKW9RPeqAi2wZY2Jkntg6b/hjyv7Nx2ykTlkO+hWNxqLd UPBkEWmEbx7wAKQYT+DkU4OJi2rghv8Gec/PfLI8YCSUO5ZYIFzmI9O4ZbtUX6gq Y4DVBOxPro87Jd6NxXiO58mmV6BxI+sPjv3CpEj2eL+/+PrcRhnHT2yBWN1GPUOX XFc8NenP4yzy/T0Ls/+o4YDLAr1iHG0OX6a9VN0LXfEw9BPg0fRaRbu3nX7J3ick A25qlgqi0vsPC7KruWIOxeMUQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmf8FFp yQgpmcrFseg0pr2nT0+SMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmOC/Fe+oo+RCTcgRUcj8QYkGJnF67jwQCgZZniqTEXacmFMWLepZu vzup2k9K24kg/5GEug2o88or2f/+yuYDbpResjzU8LauaenXE7lGACTDIbh33Rgh J1p8v8lSZ2n04w3g/lmHD1s8wzDP69+h5CSqt+4t+n4bJ/9J8n/WktavpnrfFG0j 6tZALCLFO1kM5eIh8MMA6bVXZKXw75SQWDrLo9j9+XP0IXiCr1job+GHdVL8bbWS X44PJfUkTTL6hpm31sTUO1nSW+1fQxlP4ej4l1BpddOaqM6/CaXiIfcWa5ygcEn1 a2qv8m/ZYD+HytXxlEvkD6+QMW7EEEXS -----END CERTIFICATE-----Generated at Sat Nov 8 03:09:26 2025 by rpki-client