$ rpki-client -vvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft File: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json) Hash identifier: DfEFaNl4gpiExkeHymGNXETr7JWouhGx1duMMb65zLU= Subject key identifier: 7F:A7:19:6F:5D:03:AD:D1:7F:E6:7B:26:78:58:08:E6:B4:84:C1:F4 Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 Certificate issuer: /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Certificate serial: 0B39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft Manifest number: 0B32 Signing time: Sun 02 Nov 2025 19:15:01 +0000 Manifest this update: Sun 02 Nov 2025 19:15:01 +0000 Manifest next update: Sun 09 Nov 2025 19:15:01 +0000 Files and hashes: 1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: evZHf7h9Ev5sh18LTMFCMrWeioDXwX0jdvRa5Sl8O5g=) 2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: ArNuSAGS500F2Au8BkBemb4Fqw5PMgC4H5tbUjnLNK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Validity Not Before: Nov 2 19:15:01 2025 GMT Not After : Nov 9 19:15:01 2025 GMT Subject: CN=6907adb5-9fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:5d:46:79:44:01:dd:41:c6:a3:08:97:25: 5e:06:96:c4:bc:b9:65:a4:8c:8d:b6:d3:0b:5a:7b: f5:17:8c:ac:a1:39:e9:40:32:65:41:e2:ec:a9:60: f6:b4:f7:13:d2:6e:ed:a3:3d:a7:c7:23:03:c0:f7: 35:8a:48:ed:84:3d:bd:b6:2c:83:ce:ea:62:8f:2a: 72:0c:eb:52:c7:f8:ab:8a:d5:3f:9b:4e:94:bc:bb: 9c:45:7e:9d:e2:ca:b1:d8:66:29:8f:bd:2b:79:10: cc:82:d3:9d:db:cb:ae:1d:dd:8a:8d:33:c9:fe:4e: 6c:06:5c:ec:be:c4:db:a7:8b:39:48:1a:12:b6:68: cb:c1:fa:37:c0:bf:e7:21:1e:cb:6c:ea:ee:f2:be: 30:3b:42:a8:63:62:2a:19:69:da:6e:77:df:56:01: f4:3b:70:b2:9e:36:d8:cf:54:a4:14:8b:95:9e:42: a4:34:41:60:31:60:e3:f3:d3:8c:ed:12:50:30:3e: 6e:aa:7e:43:6d:3d:a6:ea:1d:9b:b5:86:81:8d:17: 7d:0c:66:bc:41:1c:d7:8a:09:2c:8c:29:f9:93:78: 80:e7:7a:ad:f9:c2:33:02:71:6b:45:89:a1:fd:e5: 7a:e0:48:87:0c:fc:fe:fe:88:ff:46:4d:38:23:77: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A7:19:6F:5D:03:AD:D1:7F:E6:7B:26:78:58:08:E6:B4:84:C1:F4 X509v3 Authority Key Identifier: keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:d4:80:2f:35:25:94:06:02:9f:39:42:51:bb:ee:f7:0e:69: a9:34:fb:60:db:6b:fc:b3:a2:39:7a:99:ed:21:9f:6f:2d:58: 25:f4:38:e7:9c:74:02:56:d8:6e:f8:3d:aa:d9:ce:29:eb:87: 0c:70:fa:8e:cf:39:ad:3f:0b:48:9b:bf:de:57:1c:f3:54:95: 20:f3:45:4e:45:97:0a:0b:f0:6b:d6:90:60:c9:c7:f3:75:58: f6:80:aa:de:48:2a:e9:c4:50:0d:b6:ee:20:33:0a:6c:74:64: 49:e4:c8:be:93:84:b1:89:4e:69:29:8d:6f:7a:98:a4:55:ac: e8:f4:df:7e:a0:4e:5f:e6:10:aa:4c:55:f0:bf:4f:1f:d6:fc: ae:93:89:35:97:a7:59:60:03:fe:61:09:40:28:18:20:a0:c6: 2c:41:9e:9e:52:39:ab:3f:6c:51:4d:99:59:29:16:fd:9f:1f: d0:35:70:f7:0b:66:b3:ef:e7:f9:ca:d0:8c:3a:b1:4c:a2:e3: b6:35:6e:79:a7:af:7f:e6:bc:9a:09:56:ed:d9:eb:01:ce:ea: 87:1b:3d:0f:30:e8:5a:4a:e0:b8:38:d3:ae:79:6a:b8:58:42: 58:66:ae:e7:ad:32:8d:56:07:49:67:2e:21:77:1f:25:eb:13: d7:8f:b9:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2N0QxMTAvBgNVBAUTKDVGMUM1MzRBRUVGRjRFMzgwQ0U1QTA5QTEwODRCRjhG NTcwOUVEMDgwHhcNMjUxMTAyMTkxNTAxWhcNMjUxMTA5MTkxNTAxWjAYMRYwFAYD VQQDEw02OTA3YWRiNS05ZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVRdRnlEAd1BxqMIlyVeBpbEvLllpIyNttMLWnv1F4ysoTnpQDJlQeLsqWD2 tPcT0m7toz2nxyMDwPc1ikjthD29tiyDzupijypyDOtSx/iritU/m06UvLucRX6d 4sqx2GYpj70reRDMgtOd28uuHd2KjTPJ/k5sBlzsvsTbp4s5SBoStmjLwfo3wL/n IR7LbOru8r4wO0KoY2IqGWnabnffVgH0O3CynjbYz1SkFIuVnkKkNEFgMWDj89OM 7RJQMD5uqn5DbT2m6h2btYaBjRd9DGa8QRzXigksjCn5k3iA53qt+cIzAnFrRYmh /eV64EiHDPz+/oj/Rk04I3fFVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+nGW9d A63Rf+Z7JnhYCOa0hMH0MB8GA1UdIwQYMBaAFF8cU0ru/044DOWgmhCEv49XCe0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY3RC84NDhFN0QxODQ5 QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1RqZ001YUNhRUlTX2oxY0o3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4eFRTdTdfVGpnTTVhQ2FFSVNfajFjSjdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY3RC84NDhFN0QxODQ5QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1Rq Z001YUNhRUlTX2oxY0o3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDM1IAvNSWUBgKfOUJRu+73DmmpNPtg22v8s6I5epntIZ9vLVgl9Djn nHQCVthu+D2q2c4p64cMcPqOzzmtPwtIm7/eVxzzVJUg80VORZcKC/Br1pBgycfz dVj2gKreSCrpxFANtu4gMwpsdGRJ5Mi+k4SxiU5pKY1vepikVazo9N9+oE5f5hCq TFXwv08f1vyuk4k1l6dZYAP+YQlAKBggoMYsQZ6eUjmrP2xRTZlZKRb9nx/QNXD3 C2az7+f5ytCMOrFMouO2NW55p69/5ryaCVbt2esBzuqHGz0PMOhaSuC4ONOueWq4 WEJYZq7nrTKNVgdJZy4hdx8l6xPXj7mS -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:17 2025 by rpki-client