$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json) Hash identifier: 71wP76jBRNa6lu3NIqU4H+fh7wWazBUQ19ZQHOcpqTw= Subject key identifier: EC:A8:91:31:80:14:1D:92:A2:97:85:FD:FE:29:94:37:7A:9A:5B:EF Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 16EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft Manifest number: 16DE Signing time: Sun 02 Nov 2025 16:39:04 +0000 Manifest this update: Sun 02 Nov 2025 16:39:03 +0000 Manifest next update: Sun 09 Nov 2025 16:39:03 +0000 Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: B5VpJOQyDVgE+RR1aubcDKQVvPSFRZP8/p0JImLVwwQ=) 2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: gDuc8ZWgCrliQXLxnNcUvIObZ9Jrt4XfymfNcicc4pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5867 (0x16eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: Nov 2 16:39:03 2025 GMT Not After : Nov 9 16:39:03 2025 GMT Subject: CN=69078928-b0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:1c:e8:5d:f2:36:3f:f6:ea:33:37:43:f2: cb:f0:bc:9b:c7:2f:ba:23:ee:22:a1:31:53:50:ce: 67:39:fb:2b:61:92:d4:03:e9:7a:b2:5c:cd:f6:79: e5:26:8a:1c:39:c3:3e:b1:53:bc:86:e1:58:93:dc: 3b:08:69:54:c1:55:23:74:ac:d0:80:a4:d4:e6:90: eb:bb:d1:9f:8b:fe:a9:b7:d9:54:23:26:b0:a4:d6: eb:2c:a0:c0:e3:a2:94:48:23:42:90:14:65:04:fd: aa:95:47:fa:f9:92:b1:30:9b:b7:5e:70:6a:3f:69: 99:ee:c6:fe:88:d7:0a:b1:d1:8e:d2:a5:aa:a2:5c: e8:c6:0b:e5:d8:08:68:0b:fb:63:c8:9d:57:38:54: c8:f6:5b:f3:b7:db:f3:6f:a1:22:09:5a:eb:9e:33: 77:ed:32:6c:f4:82:aa:62:cb:55:97:b2:92:b0:4e: b7:cd:dd:40:bc:77:a4:6d:97:c2:b6:6a:1c:fa:94: eb:03:1f:4d:5a:39:42:ec:e5:7a:3f:49:78:2b:72: f8:49:f3:21:6c:86:dd:25:71:3b:f2:9e:40:08:65: 27:cd:3d:21:f4:1b:6f:3b:dd:4b:97:bf:5b:c0:af: 94:5e:0e:39:4c:47:05:31:ba:cd:0f:36:f5:2a:09: cc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A8:91:31:80:14:1D:92:A2:97:85:FD:FE:29:94:37:7A:9A:5B:EF X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:db:a7:83:46:2b:b1:f6:71:60:13:77:82:40:7e:d1:b9:ce: 75:21:f6:af:b0:20:2b:e3:aa:0b:c4:84:d7:62:eb:e6:57:0f: 9e:73:66:e7:e5:82:89:7a:0e:e5:5f:d9:be:d5:14:91:2f:b5: 2b:f3:1f:0a:0d:ee:45:24:16:44:c4:98:bd:de:cd:69:65:9d: a0:17:55:2b:aa:93:51:c6:36:96:cc:05:67:71:92:18:73:54: 07:67:ed:06:ff:ea:14:f3:1c:14:17:b1:eb:f5:8a:ba:0a:d6: 75:74:fd:63:34:3e:4b:5c:d0:fe:10:f9:d8:a4:59:2c:a0:b3: 8e:a4:4e:db:cd:23:ac:fd:af:66:d2:29:6e:f2:e3:25:cc:0d: af:b0:93:e6:53:d3:84:45:36:ff:4d:58:ab:e8:3c:b0:dc:04: 4a:c8:cb:01:49:3b:e7:c0:e2:97:6a:9c:56:52:55:4b:25:db: d6:1f:1a:f3:a8:2b:9b:64:04:76:94:16:0e:95:fe:18:a0:f0: b2:aa:f3:a7:a3:54:7e:ce:54:4a:c3:72:ab:99:58:b6:8c:d1: ba:ee:9b:7d:5a:af:42:d6:7c:f3:9f:3f:68:b1:db:5b:6e:17: 1b:1f:e8:d4:66:cf:f8:30:cb:46:da:31:f8:96:dc:ed:7d:85: 7b:5e:ee:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjUxMTAyMTYzOTAzWhcNMjUxMTA5MTYzOTAzWjAYMRYwFAYD VQQDEw02OTA3ODkyOC1iMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrsc6F3yNj/26jM3Q/LL8Lybxy+6I+4ioTFTUM5nOfsrYZLUA+l6slzN9nnl JoocOcM+sVO8huFYk9w7CGlUwVUjdKzQgKTU5pDru9Gfi/6pt9lUIyawpNbrLKDA 46KUSCNCkBRlBP2qlUf6+ZKxMJu3XnBqP2mZ7sb+iNcKsdGO0qWqolzoxgvl2Aho C/tjyJ1XOFTI9lvzt9vzb6EiCVrrnjN37TJs9IKqYstVl7KSsE63zd1AvHekbZfC tmoc+pTrAx9NWjlC7OV6P0l4K3L4SfMhbIbdJXE78p5ACGUnzT0h9BtvO91Ll79b wK+UXg45TEcFMbrNDzb1KgnMNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyokTGA FB2SopeF/f4plDd6mlvvMB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzVFQS8xOURENDY3MDAwQUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZt NzFYdHF3NTBQX0JtdWZxR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo26eDRiux9nFgE3eCQH7Ruc51IfavsCAr46oLxITXYuvmVw+ec2bn 5YKJeg7lX9m+1RSRL7Ur8x8KDe5FJBZExJi93s1pZZ2gF1UrqpNRxjaWzAVncZIY c1QHZ+0G/+oU8xwUF7Hr9Yq6CtZ1dP1jND5LXND+EPnYpFksoLOOpE7bzSOs/a9m 0ilu8uMlzA2vsJPmU9OERTb/TVir6Dyw3ARKyMsBSTvnwOKXapxWUlVLJdvWHxrz qCubZAR2lBYOlf4YoPCyqvOno1R+zlRKw3KrmVi2jNG67pt9Wq9C1nzznz9osdtb bhcbH+jUZs/4MMtG2jH4ltztfYV7Xu5i -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:08 2025 by rpki-client