$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: 85DXxyRyS2cKvQLYxs+EW50f7x2f9jpjQDXMgtrYkXU= Subject key identifier: 22:69:61:1B:AA:8D:58:A9:26:4B:C2:FE:01:D9:C6:1C:D1:73:C5:41 Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 0211 Signing time: Mon 03 Nov 2025 02:11:29 +0000 Manifest this update: Mon 03 Nov 2025 02:11:28 +0000 Manifest next update: Mon 10 Nov 2025 02:11:28 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: ERpjF724y14zHw2atYO29aw5wNIu269/+mNNHrcqSQc=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: fk3GNutu1Xl8jf9hzH4EWHosYGuy+JY1n5pgsTabR1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Nov 3 02:11:28 2025 GMT Not After : Nov 10 02:11:28 2025 GMT Subject: CN=69080f50-6419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:bb:80:46:93:14:ad:de:f2:13:8f:b3:a3: 31:08:cf:1f:15:67:6b:dd:f1:9d:e2:dd:c8:c9:18: 5f:0f:0c:e3:da:8d:46:dd:93:1a:18:41:8d:79:e5: 17:3b:93:31:d7:70:fc:54:5e:7e:10:73:8f:20:f2: 47:76:b8:87:2d:30:1f:ae:7b:f0:06:8e:15:42:41: 74:63:b5:e1:16:84:8a:a8:66:e1:f9:77:ae:bc:ed: 8e:0b:a8:d1:b1:e4:bb:e5:c0:83:6b:c5:7a:23:0f: 48:dd:1e:69:2d:2a:94:9f:d0:a1:64:db:85:80:4b: 4b:9a:eb:1f:2f:37:8e:b5:63:02:fc:cd:a7:ba:b2: 24:d0:3d:01:cb:bb:ac:67:64:89:12:a6:09:a3:8c: df:32:bb:12:f1:57:64:1d:61:d5:cf:bc:b5:6d:99: ec:40:6e:b4:2c:fd:d5:39:01:c4:5f:4d:0f:92:66: 1a:fb:03:6c:ab:f3:31:2c:ca:6f:f1:84:10:51:31: 90:f0:70:33:2d:a2:e4:3e:e2:23:0f:70:5b:1e:d9: b4:8c:86:df:70:86:6a:37:28:c0:5b:de:57:6d:f5: 55:c4:be:56:15:58:09:6d:57:e5:f9:fa:fa:fe:e1: 3d:ef:61:58:57:c8:54:f3:54:98:64:ac:3a:0a:b3: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:61:1B:AA:8D:58:A9:26:4B:C2:FE:01:D9:C6:1C:D1:73:C5:41 X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:13:e3:b5:96:52:75:43:96:e6:75:49:f8:42:53:cf:ae:96: 5d:2b:32:be:60:24:4b:84:3f:ee:60:8f:4d:be:98:ae:05:cf: b0:55:57:37:14:5c:93:23:74:33:b2:b6:45:78:6c:c0:bf:1b: cf:9b:6d:b2:cf:c1:34:8c:e2:b2:57:e4:9d:18:a5:c3:0d:84: 4e:2e:27:34:b3:0a:6f:d8:32:67:3a:01:6c:42:d8:6e:66:a4: 9a:28:7d:36:0e:22:0e:56:24:65:be:15:3f:77:76:0e:16:61: 36:22:bf:cc:a8:0f:50:4e:95:56:ed:ca:9e:04:ce:6e:b6:1a: 74:39:db:c0:18:80:bf:2f:23:29:c7:f4:f4:21:50:b4:c2:d8: 13:0a:59:dd:19:e8:00:e2:cd:0c:92:e1:38:3f:16:22:ca:25: 99:36:e5:f2:a2:72:12:55:05:5b:84:ad:27:b9:79:4b:83:d2: 9d:bc:7f:66:8b:ed:bc:86:73:59:2a:dc:e3:4c:41:a7:9d:0b: 8b:15:18:83:8a:39:13:bd:9f:36:88:9f:5c:9a:a9:c5:48:6b: 7a:79:b8:11:14:af:29:62:5d:af:75:09:f8:2c:2b:4c:db:fb: 5a:62:95:c9:5b:d0:99:92:61:76:b4:61:37:2b:d1:ef:3d:81: 4a:24:6d:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjUxMTAzMDIxMTI4WhcNMjUxMTEwMDIxMTI4WjAYMRYwFAYD VQQDEw02OTA4MGY1MC02NDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEy7gEaTFK3e8hOPs6MxCM8fFWdr3fGd4t3IyRhfDwzj2o1G3ZMaGEGNeeUX O5Mx13D8VF5+EHOPIPJHdriHLTAfrnvwBo4VQkF0Y7XhFoSKqGbh+XeuvO2OC6jR seS75cCDa8V6Iw9I3R5pLSqUn9ChZNuFgEtLmusfLzeOtWMC/M2nurIk0D0By7us Z2SJEqYJo4zfMrsS8VdkHWHVz7y1bZnsQG60LP3VOQHEX00PkmYa+wNsq/MxLMpv 8YQQUTGQ8HAzLaLkPuIjD3BbHtm0jIbfcIZqNyjAW95XbfVVxL5WFVgJbVfl+fr6 /uE972FYV8hU81SYZKw6CrMOyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJpYRuq jVipJkvC/gHZxhzRc8VBMB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFE+O1llJ1Q5bmdUn4QlPPrpZdKzK+YCRLhD/uYI9NvpiuBc+wVVc3 FFyTI3QzsrZFeGzAvxvPm22yz8E0jOKyV+SdGKXDDYROLic0swpv2DJnOgFsQthu ZqSaKH02DiIOViRlvhU/d3YOFmE2Ir/MqA9QTpVW7cqeBM5uthp0OdvAGIC/LyMp x/T0IVC0wtgTClndGegA4s0MkuE4PxYiyiWZNuXyonISVQVbhK0nuXlLg9KdvH9m i+28hnNZKtzjTEGnnQuLFRiDijkTvZ82iJ9cmqnFSGt6ebgRFK8pYl2vdQn4LCtM 2/taYpXJW9CZkmF2tGE3K9HvPYFKJG0y -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:12 2025 by rpki-client