$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: 87g+/gkMrV1TzzuEm7e7md+S03c5aEqt1dgYK8zE6Zw= Subject key identifier: 1D:1E:F3:64:5A:79:C9:EF:EF:4E:0B:C5:E7:DA:BA:D8:F9:5F:F5:C1 Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 01D3 Signing time: Wed 05 Nov 2025 03:00:09 +0000 Manifest this update: Wed 05 Nov 2025 03:00:09 +0000 Manifest next update: Wed 12 Nov 2025 03:00:09 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: /H3m2GqAR6eLxApJrpmDcMIKNUm4InwjUvPhO2u1RUg=) 2: 3474AD64FAD311ED9CEE0E29C4F9AE02.roa (hash: bZ3DvcSU67WmMaGW0gpbOJ7oihqEunDO2oztcjKXnww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Nov 5 03:00:09 2025 GMT Not After : Nov 12 03:00:09 2025 GMT Subject: CN=690abdb9-f0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:fc:71:59:90:31:47:93:12:5d:0b:c3:98: 32:a0:ef:e8:21:85:9d:4a:1e:2d:57:7f:39:04:dc: 05:b2:5c:ba:68:d9:50:e6:aa:21:10:b4:d2:1a:93: 6e:e5:86:db:30:48:99:bf:71:49:94:31:be:e4:3f: 15:7f:48:bd:82:61:cd:fd:24:77:35:fb:2c:48:76: db:89:90:42:f5:a1:3a:9d:12:25:7f:12:2b:13:11: b5:19:8a:a4:88:cf:1c:b2:6d:d1:75:14:e6:2a:e9: 60:74:93:a1:39:df:05:5f:d6:30:1f:8c:9e:bd:06: f0:f7:46:c9:8b:1c:2d:05:a7:f9:b6:d6:6f:49:8c: f9:7e:01:16:fd:5f:e4:36:42:fb:b8:d7:76:27:c9: 8b:ea:c2:7a:db:4b:40:7f:73:ec:c8:e1:7c:b9:f3: b6:38:73:12:d9:7c:46:76:ea:f3:0f:59:26:03:41: 3c:da:fd:dd:e7:23:b4:eb:c3:04:1b:ee:4c:a8:74: 9d:3b:bb:e7:54:e9:84:fc:fd:0d:43:70:76:64:64: d3:c1:6e:21:2b:12:c8:a8:e6:e4:60:6e:0e:09:60: f1:4a:5a:fe:3c:96:15:5b:5f:33:f4:e9:19:58:fb: 92:3c:29:26:a2:1a:26:30:36:35:ae:b4:e7:5a:6f: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1E:F3:64:5A:79:C9:EF:EF:4E:0B:C5:E7:DA:BA:D8:F9:5F:F5:C1 X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:44:fb:78:0c:e7:37:ba:f0:e8:26:7c:4e:5b:a0:63:31:d5: 93:45:69:c5:92:34:f5:a0:95:5b:70:ea:f2:0e:26:e7:34:a8: b8:34:0e:59:48:a9:8c:3c:f2:05:1b:f7:e1:73:c2:a3:cb:e5: 66:c1:7e:0a:bf:22:5d:69:63:bb:90:1f:c1:ad:d9:73:da:5d: 97:2f:cf:5a:c2:44:37:99:18:ec:17:45:3a:57:f3:1d:2e:d0: fb:f8:65:d6:f4:1b:e3:15:43:ca:76:07:e6:b8:84:05:04:42: 3e:a7:ce:14:72:5c:87:96:91:95:ee:f9:68:bb:c8:45:99:97: 6c:fe:36:7c:8d:44:40:40:d4:a9:df:ee:01:2f:b7:06:8d:14: 1a:e6:e3:24:e9:15:a0:1b:ee:d1:ca:02:fe:7e:d5:17:4e:19: 4b:84:3a:4d:69:3f:f9:a3:42:62:64:28:8c:5b:4e:d1:83:44: c3:71:31:87:0b:c6:70:bd:e1:ff:7c:df:df:77:be:3e:fc:0f: a8:e0:2c:ae:ec:cb:51:6e:97:53:64:52:94:88:2d:1c:20:42: 5f:15:a0:c3:cb:76:b7:b9:3f:6e:c0:eb:c9:76:cd:78:16:3a: 4c:58:5d:46:62:fc:d2:d7:2b:8e:34:70:2e:f0:0a:70:b6:df: 77:1c:83:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjUxMTA1MDMwMDA5WhcNMjUxMTEyMDMwMDA5WjAYMRYwFAYD VQQDEw02OTBhYmRiOS1mMGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsK78cVmQMUeTEl0Lw5gyoO/oIYWdSh4tV385BNwFsly6aNlQ5qohELTSGpNu 5YbbMEiZv3FJlDG+5D8Vf0i9gmHN/SR3NfssSHbbiZBC9aE6nRIlfxIrExG1GYqk iM8csm3RdRTmKulgdJOhOd8FX9YwH4yevQbw90bJixwtBaf5ttZvSYz5fgEW/V/k NkL7uNd2J8mL6sJ620tAf3PsyOF8ufO2OHMS2XxGdurzD1kmA0E82v3d5yO068ME G+5MqHSdO7vnVOmE/P0NQ3B2ZGTTwW4hKxLIqObkYG4OCWDxSlr+PJYVW18z9OkZ WPuSPCkmohomMDY1rrTnWm9WPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0e82Ra ecnv704Lxefautj5X/XBMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHRPt4DOc3uvDoJnxOW6BjMdWTRWnFkjT1oJVbcOryDibnNKi4NA5Z SKmMPPIFG/fhc8Kjy+VmwX4KvyJdaWO7kB/Brdlz2l2XL89awkQ3mRjsF0U6V/Md LtD7+GXW9BvjFUPKdgfmuIQFBEI+p84UclyHlpGV7vlou8hFmZds/jZ8jURAQNSp 3+4BL7cGjRQa5uMk6RWgG+7RygL+ftUXThlLhDpNaT/5o0JiZCiMW07Rg0TDcTGH C8ZwveH/fN/fd74+/A+o4Cyu7MtRbpdTZFKUiC0cIEJfFaDDy3a3uT9uwOvJds14 FjpMWF1GYvzS1yuONHAu8Apwtt93HIOK -----END CERTIFICATE-----Generated at Wed Nov 5 05:20:34 2025 by rpki-client