$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: epK3dX0g5rmHUpyapx212TBuLilO2/yDT26WFLMlA88= Subject key identifier: 33:16:A4:31:D6:1C:D9:66:0D:D5:77:BF:0C:EE:69:0A:83:61:32:3D Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 06EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 06E4 Signing time: Sun 02 Nov 2025 21:58:48 +0000 Manifest this update: Sun 02 Nov 2025 21:58:47 +0000 Manifest next update: Sun 09 Nov 2025 21:58:47 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: i/VFNAfPy9cLtt8FzesLYo7Ejg+JD6OFUnsQa6iVVz4=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1772 (0x6ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Nov 2 21:58:47 2025 GMT Not After : Nov 9 21:58:47 2025 GMT Subject: CN=6907d417-5b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:03:18:60:f9:6f:36:9d:99:d3:a6:4f:4c: 68:74:1b:c1:35:03:bb:12:85:4b:16:e5:51:b1:3c: f0:e0:b4:1f:81:f8:bd:23:64:41:88:7f:3b:76:f4: 80:d7:b3:04:52:40:49:1b:89:1a:87:d6:a5:82:c1: 9f:64:0b:e0:b4:29:67:60:9f:ea:e1:80:23:a1:41: 11:c5:7e:df:79:30:20:f9:34:fe:bb:69:4b:fa:ec: f1:32:8c:1b:31:e5:f8:28:f0:5d:da:6a:22:ef:cf: 5e:48:39:c6:8e:15:4b:62:1d:73:aa:12:c1:aa:ce: 56:8a:64:26:d1:46:af:10:c9:f2:b9:a5:59:7c:5b: e6:ac:c2:c8:85:a4:ae:55:1c:fe:02:a4:6d:bd:cd: 8c:7d:46:4b:6a:22:de:9c:34:ef:e8:11:d8:9e:a6: 48:f1:d8:2e:09:4a:6a:7f:f8:e1:9f:5d:be:ef:b4: d5:d4:4f:c8:e0:cb:08:55:b1:7f:e9:a6:f2:12:f0: 06:f4:94:eb:0d:8e:12:72:d3:0a:a8:ee:1e:b4:f4: 1d:1f:2c:3d:51:c0:a6:a0:ab:a2:c7:cb:93:08:d8: 75:6a:bf:6e:2e:04:8b:8b:c2:48:c3:b3:ac:40:94: fc:f1:d1:f5:61:38:41:f7:0c:df:fe:ff:f2:ee:0c: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:16:A4:31:D6:1C:D9:66:0D:D5:77:BF:0C:EE:69:0A:83:61:32:3D X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a8:42:1f:08:79:32:89:ef:16:df:a3:b7:d7:3d:69:01:e5: bd:0f:e9:ed:94:82:dd:ca:57:34:9e:70:b2:65:67:b8:03:64: 54:ad:18:6f:b5:ce:44:99:a9:fd:b8:d1:8d:ce:56:e2:39:04: f1:57:6f:8e:72:4c:5c:dc:11:49:62:86:c4:0b:30:f9:96:ca: 52:aa:e4:f6:0e:10:5f:e8:e1:76:10:c2:04:90:8e:d3:4e:94: b1:ec:25:c7:e1:83:0e:43:99:bf:5f:02:58:08:55:69:a2:e7: 19:6e:2d:b2:5a:a8:f4:dd:18:9a:a0:0a:42:62:2e:d3:1b:c8: d0:3e:15:7c:f4:44:71:d4:e1:8c:87:cc:a6:d9:01:27:65:89: 5b:f9:a5:22:94:f4:f6:1a:06:66:5c:e5:bf:3c:6b:62:83:49: 8f:e1:7e:4e:af:7c:89:82:27:5b:1b:42:9e:5d:52:eb:52:94: 91:22:a8:65:69:a1:8c:db:36:b0:ae:25:61:6f:7a:f7:64:1a: bc:9a:c8:d5:65:07:b8:cc:ae:4a:94:20:e4:5e:84:57:24:8f: 04:db:99:b3:c3:da:58:75:3d:0d:f7:bb:42:0f:ed:38:e4:8c: 97:b6:c9:93:05:89:46:c6:e5:a9:5a:a9:8c:dc:de:bd:f9:d9: 48:c9:55:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUxMTAyMjE1ODQ3WhcNMjUxMTA5MjE1ODQ3WjAYMRYwFAYD VQQDEw02OTA3ZDQxNy01YjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdYDGGD5bzadmdOmT0xodBvBNQO7EoVLFuVRsTzw4LQfgfi9I2RBiH87dvSA 17MEUkBJG4kah9algsGfZAvgtClnYJ/q4YAjoUERxX7feTAg+TT+u2lL+uzxMowb MeX4KPBd2moi789eSDnGjhVLYh1zqhLBqs5WimQm0UavEMnyuaVZfFvmrMLIhaSu VRz+AqRtvc2MfUZLaiLenDTv6BHYnqZI8dguCUpqf/jhn12+77TV1E/I4MsIVbF/ 6abyEvAG9JTrDY4SctMKqO4etPQdHyw9UcCmoKuix8uTCNh1ar9uLgSLi8JIw7Os QJT88dH1YThB9wzf/v/y7gyayQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMWpDHW HNlmDdV3vwzuaQqDYTI9MB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvqEIfCHkyie8W36O31z1pAeW9D+ntlILdylc0nnCyZWe4A2RUrRhv tc5Eman9uNGNzlbiOQTxV2+Ockxc3BFJYobECzD5lspSquT2DhBf6OF2EMIEkI7T TpSx7CXH4YMOQ5m/XwJYCFVpoucZbi2yWqj03RiaoApCYi7TG8jQPhV89ERx1OGM h8ym2QEnZYlb+aUilPT2GgZmXOW/PGtig0mP4X5Or3yJgidbG0KeXVLrUpSRIqhl aaGM2zawriVhb3r3ZBq8msjVZQe4zK5KlCDkXoRXJI8E25mzw9pYdT0N97tCD+04 5IyXtsmTBYlGxuWpWqmM3N69+dlIyVWm -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:01 2025 by rpki-client