$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json) Hash identifier: nFPh1kVfh5X585rsqeWXmb/E3Rtu9D2GXF+AkZ1HEmQ= Subject key identifier: A8:7D:16:D0:A8:3B:00:C2:8A:90:AB:92:60:A2:8C:B7:06:B9:91:D0 Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Certificate serial: 10A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft Manifest number: 1097 Signing time: Wed 22 Oct 2025 17:46:19 +0000 Manifest this update: Wed 22 Oct 2025 17:46:18 +0000 Manifest next update: Wed 29 Oct 2025 17:46:18 +0000 Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: PTgo4Tf8ByCcqwe9rHxNRJP0oCms00CZvamKBTZ3KAs=) 2: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: zI34h0FmFtZZLolHCnykLI2wVD3iOXp1eKhUZqTjA48=) 3: 691023063A8311E99AF5572DC4F9AE02.roa (hash: Uy8f9hnHu5ZNhfoO9b7+eo6ci2jsbvNnSUlZAZd6nGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4259 (0x10a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Validity Not Before: Oct 22 17:46:18 2025 GMT Not After : Oct 29 17:46:18 2025 GMT Subject: CN=68f9186a-925a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:91:26:3c:b9:43:4a:7c:dd:8e:b9:fa:d0: a6:b6:88:dc:96:3e:dd:2e:ba:45:54:f0:c0:4e:1d: 3d:60:30:e8:d2:d6:b1:bc:e1:64:1f:72:41:87:66: b4:4a:e2:eb:77:66:36:37:78:52:b7:28:0e:10:08: d4:9b:a5:f0:16:97:90:45:3c:05:3c:2b:4c:37:99: a2:4b:a5:8f:fe:ac:d1:fd:56:c8:1e:ad:37:02:59: f1:e6:f7:7d:02:54:6e:7b:72:82:fc:cc:74:c2:0a: ae:8c:fa:75:2d:fb:b0:70:89:da:b7:d2:1e:ce:63: eb:14:c2:2d:d4:7c:12:a2:fa:bd:df:51:88:45:72: 2f:e6:0c:71:a8:12:50:96:da:e4:6c:3d:f4:1d:a5: 62:0c:07:16:cf:42:f4:ad:50:81:57:e8:bd:2e:a5: 4e:fa:a6:59:12:9a:7d:d5:06:fc:b7:3d:59:37:55: f0:08:8d:e4:76:c3:06:23:79:e2:d7:65:b5:e6:b5: 37:58:25:91:97:ca:2b:b5:0e:0b:13:00:45:d6:a8: 4b:27:61:b9:31:ad:3e:d8:b1:85:ab:36:84:64:b1: d3:6e:51:44:b4:be:0e:9f:2f:35:88:aa:e7:89:81: f5:f5:be:62:09:4c:20:40:d3:60:a7:6e:a4:13:ca: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7D:16:D0:A8:3B:00:C2:8A:90:AB:92:60:A2:8C:B7:06:B9:91:D0 X509v3 Authority Key Identifier: keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ef:64:e8:f6:ad:83:f9:03:c1:c6:87:41:86:09:87:50:64: d0:8c:33:79:8f:5f:94:68:81:1a:24:39:2f:fd:35:a8:67:2f: 29:58:ea:0a:23:c3:be:3b:e2:6b:a9:91:37:e6:a7:a7:1b:da: c0:ec:9b:4c:9f:12:dc:02:54:af:87:04:d1:05:23:6b:0a:8c: 58:7c:ff:d9:50:52:f5:89:ed:56:26:5e:d6:fc:59:8c:46:ca: a0:0a:ce:b1:8b:6d:87:ab:c4:10:4e:b3:50:94:5b:a3:68:63: 62:86:6b:25:fa:08:9e:9d:42:f0:8e:8a:ef:24:ff:73:35:cb: ce:5b:d4:c6:db:ce:1e:dc:9d:cd:ed:8d:ec:f7:45:d1:3b:93: ca:ff:c3:19:8f:1d:65:80:1a:d7:a0:e3:be:77:a4:68:c4:8e: a6:5d:d4:20:a0:66:9f:28:ce:47:05:e6:bd:7d:66:6c:9d:2f: 15:1c:d2:8f:74:c3:46:89:22:76:51:52:d9:63:0c:a7:a9:8b: 62:9e:d6:8d:0c:7b:16:33:69:da:09:12:c1:5b:f3:0e:f5:f3: 48:ff:59:73:8b:ff:59:8b:3f:d7:06:b3:41:24:22:18:8a:51: 05:8a:67:e2:4c:e5:07:52:36:b8:22:12:2d:80:3f:ce:02:b1: 26:64:aa:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1 MUEyMzUwQUYwHhcNMjUxMDIyMTc0NjE4WhcNMjUxMDI5MTc0NjE4WjAYMRYwFAYD VQQDEw02OGY5MTg2YS05MjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFeRJjy5Q0p83Y65+tCmtojclj7dLrpFVPDATh09YDDo0taxvOFkH3JBh2a0 SuLrd2Y2N3hStygOEAjUm6XwFpeQRTwFPCtMN5miS6WP/qzR/VbIHq03Alnx5vd9 AlRue3KC/Mx0wgqujPp1LfuwcInat9IezmPrFMIt1HwSovq931GIRXIv5gxxqBJQ ltrkbD30HaViDAcWz0L0rVCBV+i9LqVO+qZZEpp91Qb8tz1ZN1XwCI3kdsMGI3ni 12W15rU3WCWRl8ortQ4LEwBF1qhLJ2G5Ma0+2LGFqzaEZLHTblFEtL4Ony81iKrn iYH19b5iCUwgQNNgp26kE8oqbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh9FtCo OwDCipCrkmCijLcGuZHQMB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjEwQS9BNTM4QURCODNBODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1 cVIxejAyUTg2N3RSb2pVSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ72To9q2D+QPBxodBhgmHUGTQjDN5j1+UaIEaJDkv/TWoZy8pWOoK I8O+O+JrqZE35qenG9rA7JtMnxLcAlSvhwTRBSNrCoxYfP/ZUFL1ie1WJl7W/FmM RsqgCs6xi22Hq8QQTrNQlFujaGNihmsl+gienULwjorvJP9zNcvOW9TG284e3J3N 7Y3s90XRO5PK/8MZjx1lgBrXoOO+d6RoxI6mXdQgoGafKM5HBea9fWZsnS8VHNKP dMNGiSJ2UVLZYwynqYtintaNDHsWM2naCRLBW/MO9fNI/1lzi/9Ziz/XBrNBJCIY ilEFimfiTOUHUja4IhItgD/OArEmZKqd -----END CERTIFICATE-----Generated at Thu Oct 23 05:55:52 2025 by rpki-client