$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: PEIj+BCLFWCps7uIQ6u/qGmJoVVLXUwXOHTnWrbIg3g= Subject key identifier: 65:76:CE:26:5B:A6:8F:AB:B8:4C:CB:B4:11:DD:E9:8A:24:A8:7A:51 Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 30FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 308D Signing time: Mon 20 Oct 2025 15:35:24 +0000 Manifest this update: Mon 20 Oct 2025 15:35:23 +0000 Manifest next update: Mon 27 Oct 2025 15:35:23 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: NqyQsyxdUXuiZWIrtw3a/FYDHOXmUWHFD7l+JOF1BbY=) 2: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: VA85W2DwFcltrLQso3iWrGCK1p8MpteiBw4nv3k0XAA=) 3: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wLLmVC0SWl0ZV8inkOYwu+rXfwtuFkyqT9a9NHg4fsQ=) 4: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: u9Tgdh2mj51OfGhJuvlQ1Gy4m51DMyrbUiBF/Y8Vkj0=) 5: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: 7Dey0JGvmlqmWqhli9F4C8bTHZAZtymVOQxhxzYVfX4=) 6: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: aQNQHDH++NuHPMuhQ++m65fQNUDwylkPh47sY3kbEIs=) 7: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: yOrqaE9NockE6FGEvsKt1/X3bfnUWyv76Yj9yl2GGVQ=) 8: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: e7Dy/yrmu0hcKMxT0huel1vNg0CC7+GJucCX8fymY2o=) 9: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: AE5EIx4+Tp7/f50+D6PpmR05HTKi7X3OlU7mCpH4y7o=) 10: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: S5yp4tMLnbSyML+bu0OdmFYzHfjyLDv16/Xr3BO1cSA=) 11: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: egr/0pi0LBVzAfSriSf0oLVb0kHzcxRy+vyO59CHJ/Y=) 12: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: hoEdWJgd+iSbkEJxwwEB2OfxtCPHdbL8GJWAjTC4NaI=) 13: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: 4+IsQGE9DpxrqXHaGDjhfyFcaRugPanxx+iKmCYBXD4=) 14: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: Ak9ulSCBepvFHHWrtvRX78jK7UjLDTIXpbZCAO4ELzg=) 15: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: U9tQePLnZPrszhMNvs/YV6XDVfsxC3+GK3UJVlQgINc=) 16: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: ADGrwVjYVax00+B1Ntoo1NH+4zxjH9qwLNY0BDM8s3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12538 (0x30fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Oct 20 15:35:23 2025 GMT Not After : Oct 27 15:35:23 2025 GMT Subject: CN=68f656bb-6284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:73:d0:97:5d:8c:03:70:0d:3f:32:77:4f:25: 10:aa:ac:4a:a2:a1:5e:b7:13:5f:e8:d8:5a:07:42: 39:87:50:fa:99:1f:2f:22:fc:09:68:99:6b:44:f5: 18:bd:d5:c7:68:fb:62:cb:c8:d2:97:cc:7d:34:af: 6a:d3:dc:6e:d4:d6:59:74:e3:31:5f:b5:11:12:43: 92:f3:42:68:8b:e8:52:4a:64:7e:b8:48:71:4a:0b: 5b:64:44:89:20:b7:fe:9e:67:1d:23:63:78:a8:c6: f4:7b:9a:fd:67:b4:9d:a6:31:08:4d:a3:8c:65:8c: 44:35:9f:36:e8:24:81:cd:26:17:70:fd:5e:89:fe: e4:3e:90:e4:ad:6a:b4:c8:50:61:3f:04:e8:0c:d2: 06:54:81:ba:c5:2c:a0:12:ff:d7:2c:b7:91:f6:ea: 33:73:4f:0a:a2:85:c5:80:dc:95:21:12:e4:a1:a8: f8:2f:17:73:83:c2:cc:55:a5:6d:5d:6c:0e:7a:01: 01:54:5d:de:d8:51:3e:81:61:95:28:52:0f:86:1a: 85:1e:9a:21:ef:b7:75:ef:ed:64:67:d5:bd:ae:49: 3f:db:87:bd:5e:89:a4:09:52:bc:fe:ee:2f:01:18: cd:31:ef:b9:e6:6f:c8:2b:bf:df:57:19:87:d4:e4: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:76:CE:26:5B:A6:8F:AB:B8:4C:CB:B4:11:DD:E9:8A:24:A8:7A:51 X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:01:4d:98:18:76:91:9a:9f:fa:7f:0b:b9:13:2f:c4:91:44: c7:c2:f8:c5:6d:e1:d6:0d:83:d6:be:f0:1f:1a:b7:ce:7a:49: e8:09:96:54:13:56:51:17:c0:a3:df:38:2e:3a:24:6d:8a:87: d7:b5:80:1b:44:4a:27:c5:12:2b:6d:db:6b:54:04:9d:fc:fd: eb:17:ae:24:4a:83:1b:ba:ef:89:bf:4f:7d:1a:47:38:74:7d: fa:f5:0d:e5:39:a9:ed:44:63:b2:07:11:b1:75:a5:41:90:c1: 24:ab:80:7e:e4:71:bb:d1:13:d0:61:5d:c1:20:6c:c9:71:f2: 28:3f:ce:7b:5d:d3:d6:d3:cb:f4:b7:20:5a:18:8a:46:80:95: 4e:e0:3e:44:de:48:f9:bd:82:0e:fc:79:a3:ef:50:d4:57:68: ff:6a:30:4b:38:17:a8:bd:c8:b0:3f:e2:8e:38:41:e1:d2:c4: 50:81:83:8d:04:eb:54:74:4c:b5:f7:64:8f:d1:09:36:a7:23: c9:ac:ac:25:90:5d:b1:9a:1c:03:15:33:d8:d0:7d:ad:07:dc: 15:68:c3:95:a7:d7:27:4c:62:47:22:11:01:ed:88:82:0f:6c: a7:e8:a5:c7:5d:69:aa:39:5c:ce:9c:f4:21:6c:67:c8:3e:a8: 07:c5:be:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjUxMDIwMTUzNTIzWhcNMjUxMDI3MTUzNTIzWjAYMRYwFAYD VQQDEw02OGY2NTZiYi02Mjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43PQl12MA3ANPzJ3TyUQqqxKoqFetxNf6NhaB0I5h1D6mR8vIvwJaJlrRPUY vdXHaPtiy8jSl8x9NK9q09xu1NZZdOMxX7UREkOS80Joi+hSSmR+uEhxSgtbZESJ ILf+nmcdI2N4qMb0e5r9Z7SdpjEITaOMZYxENZ826CSBzSYXcP1eif7kPpDkrWq0 yFBhPwToDNIGVIG6xSygEv/XLLeR9uozc08KooXFgNyVIRLkoaj4Lxdzg8LMVaVt XWwOegEBVF3e2FE+gWGVKFIPhhqFHpoh77d17+1kZ9W9rkk/24e9XomkCVK8/u4v ARjNMe+55m/IK7/fVxmH1OR/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGV2ziZb po+ruEzLtBHd6YokqHpRMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSAU2YGHaRmp/6fwu5Ey/EkUTHwvjFbeHWDYPWvvAfGrfOeknoCZZU E1ZRF8Cj3zguOiRtiofXtYAbREonxRIrbdtrVASd/P3rF64kSoMbuu+Jv099Gkc4 dH369Q3lOantRGOyBxGxdaVBkMEkq4B+5HG70RPQYV3BIGzJcfIoP857XdPW08v0 tyBaGIpGgJVO4D5E3kj5vYIO/Hmj71DUV2j/ajBLOBeovciwP+KOOEHh0sRQgYON BOtUdEy192SP0Qk2pyPJrKwlkF2xmhwDFTPY0H2tB9wVaMOVp9cnTGJHIhEB7YiC D2yn6KXHXWmqOVzOnPQhbGfIPqgHxb4U -----END CERTIFICATE-----Generated at Wed Oct 22 15:11:25 2025 by rpki-client