$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: saSRWkywa4Ov4hCMJWscVPqKpzyUBiLAp+cs8RfBIic= Subject key identifier: 2B:20:B1:C8:10:EA:55:5A:7A:57:60:70:1E:8E:2A:A3:BB:5D:C9:60 Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 2382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 2354 Signing time: Sun 02 Nov 2025 15:50:59 +0000 Manifest this update: Sun 02 Nov 2025 15:50:58 +0000 Manifest next update: Sun 09 Nov 2025 15:50:58 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: vM1UfJK1eB8ozP6hIO+Komzfi4mDd7tx4xtbC0Acpnk=) 2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=) 3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9090 (0x2382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Nov 2 15:50:58 2025 GMT Not After : Nov 9 15:50:58 2025 GMT Subject: CN=69077de3-88cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:ff:b5:f8:b6:a7:b5:ed:58:d3:03:88:69: c6:6e:2e:58:36:bc:4d:ab:f6:91:4f:57:9f:15:bb: 06:32:96:63:07:ce:f9:e7:a4:dc:a0:c1:4d:53:26: b1:aa:67:83:5a:29:ff:c1:17:6c:e0:e4:8b:65:fe: 3d:c0:26:98:43:e4:66:3a:ca:75:ac:62:cc:46:b7: cf:61:1f:e5:e5:df:91:95:fa:83:f2:2d:1c:fe:b7: 4e:3e:53:5f:94:d8:09:6c:36:20:5c:bf:ca:40:47: 3c:6a:8a:f7:76:1f:74:2c:05:88:ec:fd:d9:14:a6: 10:fe:14:d0:dd:75:33:66:b5:c0:53:94:e4:ec:07: 10:b1:d9:c3:02:6b:06:22:cf:cc:49:3e:18:c9:e2: 40:7b:bb:f1:02:c8:1a:36:27:43:ca:f0:50:83:b9: eb:c7:2e:d8:ca:ac:20:d6:66:60:5b:ef:b4:e8:6b: f0:05:55:a5:63:07:d2:01:d8:33:87:fe:9e:11:b6: cd:04:70:de:a4:11:97:4a:c4:1b:fa:01:f8:fe:68: e6:bf:f5:3d:08:97:24:d7:82:39:99:53:6a:07:bd: 57:25:a5:42:2b:43:56:96:8d:42:7e:c0:01:bc:bd: 3c:1c:d0:40:a1:ed:a2:ab:06:2d:7f:f2:54:24:ee: 74:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:20:B1:C8:10:EA:55:5A:7A:57:60:70:1E:8E:2A:A3:BB:5D:C9:60 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:78:4c:f2:55:0b:48:9c:da:38:36:bf:aa:9f:bd:3d:af:5d: 16:7a:fc:83:9c:a6:a7:fb:7a:60:6c:3d:f3:a0:76:cb:da:0c: 8f:35:18:9a:4b:b6:8e:b9:f7:3c:d3:94:39:4e:a1:a9:f1:c8: ef:8f:aa:30:6a:2b:9d:05:4a:63:1f:ba:c2:02:aa:a5:16:5d: dc:7b:0f:9d:e3:82:3c:c9:e6:02:99:ef:5d:ad:18:ff:93:e1: d2:5d:29:a8:38:c8:5c:b7:20:4e:1b:77:8a:b7:72:88:00:e8: 32:b0:17:df:20:46:23:98:8d:20:f5:7d:df:5c:2d:50:b1:c8: f2:72:55:29:30:64:d0:57:85:1a:93:ee:10:9d:52:e2:86:f7: 84:54:e9:42:6a:7b:83:a7:1c:92:99:5f:43:f8:13:aa:41:b7: 18:17:72:f6:6c:96:c1:8b:c8:ff:32:18:74:2b:4d:2e:41:6f: 69:7a:90:e2:93:9a:02:f3:4e:60:93:21:7a:c4:7f:d5:63:72: ba:14:c6:14:a0:18:1f:46:4e:69:38:b2:07:c9:8e:b1:4a:00: 4f:bc:2b:91:b4:6e:ee:34:77:b2:05:bf:5b:c7:1e:39:9a:b9: e1:3d:1c:ba:ca:4b:62:d4:59:cc:57:f9:d3:fd:02:09:68:da: e6:be:18:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjUxMTAyMTU1MDU4WhcNMjUxMTA5MTU1MDU4WjAYMRYwFAYD VQQDEw02OTA3N2RlMy04OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/T/tfi2p7XtWNMDiGnGbi5YNrxNq/aRT1efFbsGMpZjB87556TcoMFNUyax qmeDWin/wRds4OSLZf49wCaYQ+RmOsp1rGLMRrfPYR/l5d+RlfqD8i0c/rdOPlNf lNgJbDYgXL/KQEc8aor3dh90LAWI7P3ZFKYQ/hTQ3XUzZrXAU5Tk7AcQsdnDAmsG Is/MST4YyeJAe7vxAsgaNidDyvBQg7nrxy7Yyqwg1mZgW++06GvwBVWlYwfSAdgz h/6eEbbNBHDepBGXSsQb+gH4/mjmv/U9CJck14I5mVNqB71XJaVCK0NWlo1CfsAB vL08HNBAoe2iqwYtf/JUJO50EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsgscgQ 6lVaeldgcB6OKqO7XclgMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCreEzyVQtInNo4Nr+qn709r10WevyDnKan+3pgbD3zoHbL2gyPNRia S7aOufc805Q5TqGp8cjvj6owaiudBUpjH7rCAqqlFl3cew+d44I8yeYCme9drRj/ k+HSXSmoOMhctyBOG3eKt3KIAOgysBffIEYjmI0g9X3fXC1QscjyclUpMGTQV4Ua k+4QnVLihveEVOlCanuDpxySmV9D+BOqQbcYF3L2bJbBi8j/Mhh0K00uQW9pepDi k5oC805gkyF6xH/VY3K6FMYUoBgfRk5pOLIHyY6xSgBPvCuRtG7uNHeyBb9bxx45 mrnhPRy6ykti1FnMV/nT/QIJaNrmvhju -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:23 2025 by rpki-client