$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: dAM+0vs822o38f4pC14snNBo5vyKH40xTUOO5JVe+ik= Subject key identifier: E3:F4:66:3E:09:CB:C8:83:A0:82:4B:A1:E7:A1:59:8D:25:38:69:0D Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: BD Signing time: Mon 03 Nov 2025 05:59:13 +0000 Manifest this update: Mon 03 Nov 2025 05:59:13 +0000 Manifest next update: Mon 10 Nov 2025 05:59:13 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: Chv/ncv4Rl+7I+oZFhzm4aCwqxWiI7KywWfibnOl4rQ=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: Iqqm3XnZxAwHyLfxm5fiQ2PL3nIt3cAVFXF23TPN80A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Nov 3 05:59:13 2025 GMT Not After : Nov 10 05:59:13 2025 GMT Subject: CN=690844b1-2295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:ba:90:e8:e2:6b:ea:6c:24:da:2b:c6:6b: 78:3e:09:26:9c:57:86:63:41:71:99:6b:39:a0:5c: b2:fb:de:74:c0:f2:a1:6b:8d:c0:ff:37:f8:45:ea: 76:43:1d:05:a8:76:0f:6f:e9:bd:12:8b:b5:e1:19: 3d:87:97:b3:1c:11:e0:60:9f:c8:e9:c0:e7:2e:e2: 7e:5e:6c:bb:86:79:b6:26:1a:9c:21:ab:17:57:ee: ce:f9:16:a8:14:b6:fc:10:db:f2:db:a0:91:ed:07: fb:8b:e0:22:ee:e2:74:36:bd:23:c4:79:b2:46:45: 3d:0f:aa:d7:5b:4f:fc:46:08:62:b6:8e:c5:23:0b: 19:f9:76:2f:2e:90:a7:af:15:8e:4f:fd:c3:e4:c7: f0:48:a2:2d:1a:2e:2a:23:0a:a7:94:1e:24:7d:ab: 32:b2:d4:bf:97:8c:47:9b:66:ef:03:ca:d0:5c:64: b7:18:83:1a:46:ab:79:dc:d4:cc:50:94:54:06:59: 74:12:43:fc:92:be:ee:0d:c6:90:01:98:4d:47:d6: f4:26:26:46:19:dd:99:87:8d:1e:29:b2:de:a3:d7: 8b:4f:ff:0a:c9:e9:f9:41:f0:d9:f9:9d:0f:a8:36: 3a:63:20:5b:d6:e5:bc:9c:41:30:95:4a:7c:df:09: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F4:66:3E:09:CB:C8:83:A0:82:4B:A1:E7:A1:59:8D:25:38:69:0D X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d5:2b:4e:99:20:28:87:f9:c0:a8:3d:95:d2:1d:85:c9:91: a2:d2:1b:ec:45:88:e1:c2:08:14:33:64:fa:04:a1:50:fe:2b: 61:96:7c:d4:99:5b:03:36:84:82:4a:3b:a3:9e:20:ec:72:e4: 14:22:00:33:c9:02:91:b6:fb:24:67:1c:82:df:b2:37:ea:32: 0d:98:3d:62:1e:7b:b0:82:e0:fb:49:77:50:9b:11:6a:33:8b: fa:4b:65:de:e5:b8:60:86:a0:d2:9d:f9:5a:4e:ce:72:f1:de: 70:df:85:8e:48:d9:bf:63:8f:81:e8:a7:41:49:e3:d1:cc:cd: 1b:da:75:2b:2d:f7:d9:85:58:82:9d:23:59:b9:ff:10:c6:bb: 03:d6:bc:5a:26:67:64:97:94:60:0a:b5:a3:e6:13:02:ca:81: e9:07:c9:94:ab:c3:9c:64:f8:13:e8:c6:16:6d:6c:b0:9d:1e: 73:f9:76:20:6c:af:d4:f1:2b:88:1f:c5:0a:20:8f:02:06:e8: 98:1a:81:20:90:c8:35:25:a9:85:68:d2:4d:e9:ef:27:4a:1a: 8e:84:14:52:dd:d9:35:69:cc:3f:2a:73:b7:56:76:2f:92:f0: 08:26:dd:8b:aa:47:09:61:2a:09:6e:d1:eb:df:b0:8f:70:5a: 5c:15:67:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjUxMTAzMDU1OTEzWhcNMjUxMTEwMDU1OTEzWjAYMRYwFAYD VQQDEw02OTA4NDRiMS0yMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxS26kOjia+psJNorxmt4PgkmnFeGY0FxmWs5oFyy+950wPKha43A/zf4Rep2 Qx0FqHYPb+m9Eou14Rk9h5ezHBHgYJ/I6cDnLuJ+Xmy7hnm2JhqcIasXV+7O+Rao FLb8ENvy26CR7Qf7i+Ai7uJ0Nr0jxHmyRkU9D6rXW0/8Rghito7FIwsZ+XYvLpCn rxWOT/3D5MfwSKItGi4qIwqnlB4kfasystS/l4xHm2bvA8rQXGS3GIMaRqt53NTM UJRUBll0EkP8kr7uDcaQAZhNR9b0JiZGGd2Zh40eKbLeo9eLT/8Kyen5QfDZ+Z0P qDY6YyBb1uW8nEEwlUp83wnCFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP0Zj4J y8iDoIJLoeehWY0lOGkNMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS85NTZGNjYyQzlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlD Wnk1bTh3QmZaR20yS0pGeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy1StOmSAoh/nAqD2V0h2FyZGi0hvsRYjhwggUM2T6BKFQ/ithlnzU mVsDNoSCSjujniDscuQUIgAzyQKRtvskZxyC37I36jINmD1iHnuwguD7SXdQmxFq M4v6S2Xe5bhghqDSnflaTs5y8d5w34WOSNm/Y4+B6KdBSePRzM0b2nUrLffZhViC nSNZuf8QxrsD1rxaJmdkl5RgCrWj5hMCyoHpB8mUq8OcZPgT6MYWbWywnR5z+XYg bK/U8SuIH8UKII8CBuiYGoEgkMg1JamFaNJN6e8nShqOhBRS3dk1acw/KnO3VnYv kvAIJt2LqkcJYSoJbtHr37CPcFpcFWcN -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:02 2025 by rpki-client