$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: vc/1XujnER+5T1rRdY3YGpm1pdC8jaXEXQYn4S/VKGk= Subject key identifier: D9:B4:41:46:E2:9E:98:D4:D8:29:FE:7A:9A:61:37:65:26:52:1B:60 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 54 Signing time: Wed 05 Nov 2025 07:25:42 +0000 Manifest this update: Wed 05 Nov 2025 07:25:42 +0000 Manifest next update: Wed 12 Nov 2025 07:25:42 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: Dse+xtSYBYxGsOz0ijaa1oB64k64x6mEfGafSzydYkc=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GaxzV7+DkMGpd57xnNkPMderTpqjXPXFd/uGzJlcq9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Nov 5 07:25:42 2025 GMT Not After : Nov 12 07:25:42 2025 GMT Subject: CN=690afbf6-cd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:69:ab:51:36:29:71:c2:a4:41:f9:58:57:9b: 16:d7:d7:9f:1c:f3:e6:a0:0f:b9:66:d2:71:ce:9a: b5:29:f7:1f:70:b2:44:cb:8c:55:c0:e5:c3:20:34: 50:3c:95:26:d0:34:47:c2:76:1c:28:34:4e:1c:4e: e8:33:2d:be:7d:68:90:89:83:20:94:82:09:1a:3b: 6c:7a:fc:b7:33:ce:3b:44:8a:f2:b9:01:26:8d:93: 6b:53:c2:76:2e:42:28:79:ab:6c:1e:5b:28:05:e2: d4:87:04:4b:88:33:b5:43:d6:e6:09:cd:ce:99:ae: ee:16:65:e9:1c:4e:3a:6d:ab:db:12:3c:e5:ea:29: 7f:c0:55:79:ec:1f:00:3e:4f:39:5e:34:78:5d:d9: 03:c7:22:84:48:a9:df:ce:c9:31:74:ba:db:b3:0c: ec:ad:d7:55:1a:a4:6c:21:a8:fb:1d:f7:a7:ca:b2: df:6b:10:0f:05:33:ba:b0:60:18:d2:60:ec:ec:ac: 6f:08:ef:dc:d4:89:ea:d9:75:e9:53:b9:a5:07:ca: e5:9b:85:91:07:46:f9:e9:80:f6:32:a9:a0:07:ca: 41:bd:7f:f7:ca:cc:fe:4e:b8:25:99:e7:22:19:ce: 3f:26:b9:8c:e5:a8:5f:1c:5f:5c:a2:fc:76:34:5f: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B4:41:46:E2:9E:98:D4:D8:29:FE:7A:9A:61:37:65:26:52:1B:60 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:fa:10:fd:3b:6a:e0:d2:5a:ab:af:87:33:a6:10:1c:3f:ae: 01:bc:11:ab:69:be:89:96:b7:7e:5e:b6:1e:c3:54:32:28:9d: ec:c2:a4:21:cd:39:b9:1d:26:fd:c5:2e:08:3f:57:3b:34:20: 56:6a:1b:c3:18:42:59:93:79:04:6b:f9:fd:bd:ff:3e:49:fe: eb:bc:c1:a5:64:0a:6c:4d:92:2f:5a:cf:c0:f0:0a:81:cb:2e: 46:92:0c:75:be:8c:45:61:76:9c:d3:26:e9:81:2d:0b:63:eb: 27:84:8b:09:04:db:a4:a4:6c:a3:3c:89:96:c6:71:19:1b:e7: ed:8b:0a:c4:10:8d:25:f3:8f:99:5b:8f:c5:d5:5d:ff:d1:17: df:e8:2e:e4:29:93:9e:a7:d9:58:b0:bd:c3:d6:90:17:bf:a9: bc:1c:2e:27:2e:74:1f:4a:3d:ca:5a:99:d8:a3:43:61:de:30: 68:ba:97:2e:61:6f:3d:76:04:5f:5b:bd:04:9d:91:81:14:7f: a9:a5:07:c2:ad:99:79:2e:85:01:50:30:58:b8:5a:f8:80:57: 81:99:74:1c:3b:aa:7f:a2:c6:2b:d0:80:51:14:5b:a1:aa:6d: 3f:35:ea:e6:a8:1c:47:04:da:7c:00:ae:b2:33:e8:71:48:19: 8f:5c:6d:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTExMDUwNzI1NDJaFw0yNTExMTIwNzI1NDJaMBgxFjAUBgNV BAMTDTY5MGFmYmY2LWNkNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPaatRNilxwqRB+VhXmxbX158c8+agD7lm0nHOmrUp9x9wskTLjFXA5cMgNFA8 lSbQNEfCdhwoNE4cTugzLb59aJCJgyCUggkaO2x6/LczzjtEivK5ASaNk2tTwnYu Qih5q2weWygF4tSHBEuIM7VD1uYJzc6Zru4WZekcTjptq9sSPOXqKX/AVXnsHwA+ TzleNHhd2QPHIoRIqd/OyTF0utuzDOyt11UapGwhqPsd96fKst9rEA8FM7qwYBjS YOzsrG8I79zUierZdelTuaUHyuWbhZEHRvnpgPYyqaAHykG9f/fKzP5OuCWZ5yIZ zj8muYzlqF8cX1yi/HY0X81FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2bRBRuKe mNTYKf56mmE3ZSZSG2AwHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOb6EP07auDSWquvhzOmEBw/rgG8EatpvomWt35eth7DVDIonezCpCHN ObkdJv3FLgg/Vzs0IFZqG8MYQlmTeQRr+f29/z5J/uu8waVkCmxNki9az8DwCoHL LkaSDHW+jEVhdpzTJumBLQtj6yeEiwkE26SkbKM8iZbGcRkb5+2LCsQQjSXzj5lb j8XVXf/RF9/oLuQpk56n2ViwvcPWkBe/qbwcLicudB9KPcpamdijQ2HeMGi6ly5h bz12BF9bvQSdkYEUf6mlB8KtmXkuhQFQMFi4WviAV4GZdBw7qn+ixivQgFEUW6Gq bT816uaoHEcE2nwArrIz6HFIGY9cbac= -----END CERTIFICATE-----Generated at Wed Nov 5 10:27:47 2025 by rpki-client