$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: 1zHe/6TmjyfhOr3G2SfjEIv0giIY7S1PYTEd39dPLV0= Subject key identifier: AF:CE:58:38:F4:92:4A:D2:30:69:89:33:53:12:45:4E:3D:E3:A6:AD Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 01E8 Signing time: Mon 03 Nov 2025 02:35:51 +0000 Manifest this update: Mon 03 Nov 2025 02:35:51 +0000 Manifest next update: Mon 10 Nov 2025 02:35:51 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: Ge1F3dG3RydX6HwD2s3ScBr5ckebpum3mlkwS1sS1Vs=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Nov 3 02:35:51 2025 GMT Not After : Nov 10 02:35:51 2025 GMT Subject: CN=69081507-72c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:ef:86:34:5d:66:92:4f:02:d8:60:a7:12: 73:c3:4a:ee:6b:c9:55:c1:c0:eb:e7:d2:1e:40:ee: 15:76:c0:27:b7:f9:fc:27:9f:aa:64:89:d2:79:83: 7f:4d:5b:e1:c3:b8:d5:b5:d4:17:5b:ad:8b:f9:69: 5b:d7:e4:eb:2b:e7:87:bd:02:9b:65:1b:24:63:79: c6:76:60:3a:2e:1a:ac:07:f9:d4:b6:17:19:0f:7e: bd:2a:6e:00:7b:85:65:eb:4f:3c:90:a8:bb:f6:ae: 75:dc:39:1d:b7:00:db:fc:80:ff:d9:af:87:56:55: 8c:04:49:51:3b:aa:15:2a:a6:33:65:60:7a:6b:a4: a7:14:73:81:12:e1:c0:62:10:c3:c1:d7:d6:17:ea: d0:ee:d8:0c:66:63:68:7a:20:29:aa:f8:f2:03:54: 11:b5:ea:37:d3:76:6f:7d:8e:c9:1d:de:2b:b9:de: 9f:11:bc:ef:a3:ba:40:04:84:7a:c1:9e:36:0a:6e: 4e:58:7f:b6:f2:bf:6f:0f:aa:86:e7:ac:4f:23:c0: 49:33:f0:15:5f:5b:14:cd:19:b5:78:2d:f8:d2:64: 0c:3c:79:bb:a7:73:9d:03:20:c0:4c:0e:45:21:05: 91:16:cd:28:34:f2:ea:ec:96:cd:81:d2:95:49:87: 73:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CE:58:38:F4:92:4A:D2:30:69:89:33:53:12:45:4E:3D:E3:A6:AD X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:35:f2:57:f7:f1:5b:c6:25:cc:51:db:d4:e6:34:b3:fe:69: 9d:45:be:34:ae:b4:0c:b0:40:39:d1:54:82:92:1a:c5:02:49: ca:79:1d:2d:8a:18:9d:6a:78:6a:14:c2:2e:4f:77:be:c5:32: 71:a1:1b:bb:1e:7e:da:61:52:70:5a:52:be:c6:36:78:4e:07: 6d:0e:c3:bf:3f:de:6a:34:91:5d:36:06:51:cf:38:1f:43:b3: 3f:b8:f6:b0:a5:a5:9c:65:97:b8:20:30:62:e2:c9:df:1c:6e: 95:65:cc:4a:c9:56:fd:04:b3:3f:10:42:52:2d:19:11:3d:96: 04:4e:d1:e4:2e:6f:78:92:88:ee:a4:16:88:d3:f5:4d:75:6d: 08:b8:33:2c:f6:5c:90:7c:b1:7e:56:be:e8:4f:50:14:53:bd: 60:4e:2d:35:23:b7:5a:4c:ee:8c:20:5a:4b:71:22:9d:28:9d: 75:64:87:05:39:93:18:80:d6:be:37:86:11:0d:d9:f6:34:67: fb:fc:37:6f:e6:1c:51:db:e2:a3:53:72:35:fb:b5:bf:59:18: 64:a3:b3:ba:45:f8:5c:f2:3d:19:f9:1c:a5:3e:76:55:19:6f: f7:31:95:2e:50:e4:ca:b6:8a:d6:34:98:2c:62:4a:f4:d8:87: 91:06:2e:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjUxMTAzMDIzNTUxWhcNMjUxMTEwMDIzNTUxWjAYMRYwFAYD VQQDEw02OTA4MTUwNy03MmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVrvhjRdZpJPAthgpxJzw0rua8lVwcDr59IeQO4VdsAnt/n8J5+qZInSeYN/ TVvhw7jVtdQXW62L+Wlb1+TrK+eHvQKbZRskY3nGdmA6LhqsB/nUthcZD369Km4A e4Vl6088kKi79q513DkdtwDb/ID/2a+HVlWMBElRO6oVKqYzZWB6a6SnFHOBEuHA YhDDwdfWF+rQ7tgMZmNoeiApqvjyA1QRteo303ZvfY7JHd4rud6fEbzvo7pABIR6 wZ42Cm5OWH+28r9vD6qG56xPI8BJM/AVX1sUzRm1eC340mQMPHm7p3OdAyDATA5F IQWRFs0oNPLq7JbNgdKVSYdzrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/OWDj0 kkrSMGmJM1MSRU4946atMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABNfJX9/FbxiXMUdvU5jSz/mmdRb40rrQMsEA50VSCkhrFAknKeR0t ihidanhqFMIuT3e+xTJxoRu7Hn7aYVJwWlK+xjZ4TgdtDsO/P95qNJFdNgZRzzgf Q7M/uPawpaWcZZe4IDBi4snfHG6VZcxKyVb9BLM/EEJSLRkRPZYETtHkLm94koju pBaI0/VNdW0IuDMs9lyQfLF+Vr7oT1AUU71gTi01I7daTO6MIFpLcSKdKJ11ZIcF OZMYgNa+N4YRDdn2NGf7/Ddv5hxR2+KjU3I1+7W/WRhko7O6Rfhc8j0Z+RylPnZV GW/3MZUuUOTKtorWNJgsYkr02IeRBi58 -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:00 2025 by rpki-client