$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft File: XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json) Hash identifier: TFZkx64eMhIWSh799/OGXJ//a3o9JIf+dNIWQvv0pXI= Subject key identifier: 8A:F1:5F:E2:32:E1:75:15:B9:62:A6:0E:15:62:89:FA:73:4B:17:CF Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 Certificate issuer: /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft Manifest number: CF Signing time: Mon 03 Nov 2025 05:41:30 +0000 Manifest this update: Mon 03 Nov 2025 05:41:30 +0000 Manifest next update: Mon 10 Nov 2025 05:41:29 +0000 Files and hashes: 1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: +JXSIvRfrtG5fC+1aHWAkowLKiWgRVqMjwoaBKrW7eY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Validity Not Before: Nov 3 05:41:30 2025 GMT Not After : Nov 10 05:41:29 2025 GMT Subject: CN=6908408a-41f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:a5:b2:f5:ea:91:08:43:f4:a8:9b:60:6a: 8f:12:92:40:49:1e:f7:5b:d3:0e:36:b8:b7:c2:d5: a9:6d:0a:8c:95:5f:ec:43:f9:3c:00:eb:ac:94:35: 71:e7:32:47:8b:7d:e0:da:18:2a:2b:d4:8c:9e:8b: f0:fe:5b:4e:9a:35:10:41:a4:56:1a:47:94:48:be: e9:73:62:9e:fb:41:6e:39:ed:7a:0c:f4:6b:d3:8a: 5e:ad:aa:8a:06:4b:45:af:63:08:a1:c2:6c:27:46: 8a:ea:c3:6a:a8:cc:01:49:f1:95:c9:e9:65:6d:15: a9:38:20:b6:0b:d1:5f:73:3f:6b:ba:5f:19:7a:28: 79:2e:cc:27:a2:33:84:ec:a6:84:33:62:c4:59:e0: bd:2d:b7:1f:8b:e9:86:af:08:50:85:79:a4:f9:f8: f4:01:f1:7a:b6:62:86:74:7d:3d:71:4e:48:56:3b: 71:40:0f:4e:3e:a4:01:85:7b:d1:9a:cf:f3:49:df: 60:ec:d0:29:45:72:52:66:4a:54:7c:c7:39:37:e4: 1f:c8:d4:89:bf:74:35:a0:53:ea:ce:ae:f6:9c:d8: 78:62:a5:93:77:24:de:b4:c7:ec:14:04:cd:40:8c: a4:cc:0e:62:37:34:01:80:3e:e7:ed:0c:99:c9:fe: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F1:5F:E2:32:E1:75:15:B9:62:A6:0E:15:62:89:FA:73:4B:17:CF X509v3 Authority Key Identifier: keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:50:54:92:92:e3:fe:cc:92:3e:e7:12:e1:e6:73:b0:97:ae: 8c:11:09:d3:5c:bd:4a:d2:70:d4:a7:0b:e4:12:12:40:0f:c5: 86:fb:c4:1d:91:28:90:ba:59:fc:d8:8e:58:1f:57:1b:94:d1: 24:3e:07:5f:f7:ef:6a:ec:83:75:43:cd:c8:a5:cd:73:01:c5: 09:ed:63:6f:f0:9c:9e:ed:b4:7f:be:1f:a0:bd:a0:06:46:48: 95:db:cd:95:09:41:f1:56:36:57:6e:8e:37:b7:d8:ea:50:2d: 95:0b:d9:ca:20:34:39:75:6d:6c:f1:df:6c:f9:04:09:23:c4: a2:45:8b:e0:15:4c:f3:4b:e0:f1:27:7e:6a:06:40:86:02:2b: 19:c5:27:bb:b6:4d:51:f3:89:f9:02:64:7c:df:bf:f1:48:9f: e9:4c:88:54:4e:86:4f:8f:1e:9a:86:00:70:7e:08:f6:42:cb: ed:b2:ac:c9:54:d7:c0:52:d1:69:9f:b6:00:16:03:94:65:63: 0a:8b:16:0d:97:87:83:0a:d6:75:a4:2e:24:aa:20:f0:1c:cd: 62:92:cb:c6:b7:01:ec:ca:76:40:12:3e:7a:c3:0e:92:2d:0e: e7:44:9e:f6:b6:2e:f2:fe:1d:0d:ee:f9:5d:80:d7:2a:81:f4: c2:4a:ec:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDVFOTYwRDUxODhGMDM2Rjc5RUFBNzk0MTU1MkNDRjQ2 Qjg3QUJGMDcwHhcNMjUxMTAzMDU0MTMwWhcNMjUxMTEwMDU0MTI5WjAYMRYwFAYD VQQDEw02OTA4NDA4YS00MWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGClsvXqkQhD9KibYGqPEpJASR73W9MONri3wtWpbQqMlV/sQ/k8AOuslDVx 5zJHi33g2hgqK9SMnovw/ltOmjUQQaRWGkeUSL7pc2Ke+0FuOe16DPRr04peraqK BktFr2MIocJsJ0aK6sNqqMwBSfGVyellbRWpOCC2C9Ffcz9rul8Zeih5LswnojOE 7KaEM2LEWeC9Lbcfi+mGrwhQhXmk+fj0AfF6tmKGdH09cU5IVjtxQA9OPqQBhXvR ms/zSd9g7NApRXJSZkpUfMc5N+QfyNSJv3Q1oFPqzq72nNh4YqWTdyTetMfsFATN QIykzA5iNzQBgD7n7QyZyf58PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrxX+Iy 4XUVuWKmDhViifpzSxfPMB8GA1UdIwQYMBaAFF6WDVGI8Db3nqp5QVUsz0a4er8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9DODVCQTEyQzdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9YcFlOVVlqd052ZWVxbmxCVlN6UFJyaDZ2 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hwWU5VWWp3TnZlZXFubEJWU3pQUnJoNnZ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9DODVCQTEyQzdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9YcFlOVVlqd052 ZWVxbmxCVlN6UFJyaDZ2d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXUFSSkuP+zJI+5xLh5nOwl66MEQnTXL1K0nDUpwvkEhJAD8WG+8Qd kSiQuln82I5YH1cblNEkPgdf9+9q7IN1Q83Ipc1zAcUJ7WNv8Jye7bR/vh+gvaAG RkiV282VCUHxVjZXbo43t9jqUC2VC9nKIDQ5dW1s8d9s+QQJI8SiRYvgFUzzS+Dx J35qBkCGAisZxSe7tk1R84n5AmR837/xSJ/pTIhUToZPjx6ahgBwfgj2QsvtsqzJ VNfAUtFpn7YAFgOUZWMKixYNl4eDCtZ1pC4kqiDwHM1iksvGtwHsynZAEj56ww6S LQ7nRJ72ti7y/h0N7vldgNcqgfTCSuzX -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:25 2025 by rpki-client