$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: 4QpxjvYcTDprlNwK4Jaev08NTfzuBb/xR7XXwflh+do= Subject key identifier: CC:B5:4D:F7:75:B8:8D:45:2E:89:D7:FD:D0:7C:45:BB:E2:7F:7C:88 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 0167 Signing time: Mon 27 Oct 2025 06:22:54 +0000 Manifest this update: Mon 27 Oct 2025 06:22:53 +0000 Manifest next update: Mon 03 Nov 2025 06:22:53 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: b0cSSmClbHtebQj4MZzQKn0N5IHV8SmOz5HwQsxC4hY=) 2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 06:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Oct 27 06:22:53 2025 GMT Not After : Nov 3 06:22:53 2025 GMT Subject: CN=68ff0fbd-727b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:9b:7e:76:a7:71:29:14:93:b5:92:28:2f: f4:fc:3f:38:bd:ce:c2:c8:3b:fe:13:a4:10:91:6c: e2:34:82:d6:9c:38:88:9e:51:ae:ea:6b:08:11:66: 00:71:85:a2:6c:60:48:20:02:26:be:e2:56:46:24: 8a:60:cd:18:e4:1c:ee:32:ea:4b:63:5c:59:ab:93: d9:4b:6a:9c:8f:3b:82:81:e5:79:4b:67:9a:4a:39: d1:d0:f6:d1:e8:ca:14:d1:db:aa:99:33:a1:a5:e4: ce:4d:09:90:27:86:4f:d0:ea:52:d1:ac:d8:ab:21: 30:0e:4c:15:1d:a3:ae:df:c6:6a:b0:07:4a:8b:21: 4d:7e:b8:5f:7a:59:bf:38:a4:f6:5e:13:9f:44:70: cd:2e:de:12:da:04:ac:98:f3:81:81:a7:e1:5f:5a: 26:c0:5b:29:ab:cc:d0:2e:5f:a5:5b:e2:d5:68:a4: 12:cb:ad:cb:61:e6:7f:60:c8:42:47:a8:8b:f7:bf: 02:99:a1:c5:1e:b2:82:14:90:ed:49:2a:06:73:70: a7:de:85:07:e6:5a:c0:f4:31:cc:c0:ae:3f:ca:06: 1a:74:19:b3:f4:fb:18:d5:f9:2e:c6:05:61:64:25: e4:dc:db:6c:05:56:36:ec:d6:52:de:87:89:35:28: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B5:4D:F7:75:B8:8D:45:2E:89:D7:FD:D0:7C:45:BB:E2:7F:7C:88 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:47:4c:66:7e:fd:3d:52:74:e6:4e:b0:97:76:9d:f4:a5:ce: 9f:d9:3a:fa:42:64:a0:82:c2:76:3e:56:10:fc:b8:d1:5e:a1: 67:4e:16:35:d5:1c:e4:58:70:34:d2:83:dd:57:2d:4d:16:66: 96:f7:90:72:52:62:ba:ce:3b:7a:15:6e:12:83:57:c4:80:86: f8:59:13:30:f0:de:de:1b:69:47:1d:a2:b2:b9:26:50:ee:cc: b9:f7:b0:4e:bc:72:ca:53:97:c9:19:89:34:23:a8:0d:bd:4a: bc:84:59:61:44:c7:66:6d:63:90:cc:95:69:2c:a6:a7:73:14: 99:51:78:95:2a:e4:8a:f6:9d:41:aa:90:1c:27:20:89:1f:b2: 9f:8c:87:90:f4:be:77:19:b7:72:80:4b:cc:41:df:2c:7b:4a: f9:95:6b:24:b0:5b:e6:90:46:84:12:b3:36:b4:bc:7a:eb:c5: 90:fb:51:24:29:40:2a:c5:f9:b3:82:e2:1a:93:a4:79:31:11: 10:63:0f:42:f3:a5:f7:11:8e:4a:3d:1c:9b:58:c2:25:13:a1: 09:0a:fe:06:cd:3d:4d:e0:9e:61:85:1c:6d:9f:d7:06:99:ba: 6b:b0:7a:dc:b0:f6:8a:12:f8:4d:43:e5:92:1e:fe:6f:46:a2: e6:26:18:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUxMDI3MDYyMjUzWhcNMjUxMTAzMDYyMjUzWjAYMRYwFAYD VQQDEw02OGZmMGZiZC03MjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXabfnancSkUk7WSKC/0/D84vc7CyDv+E6QQkWziNILWnDiInlGu6msIEWYA cYWibGBIIAImvuJWRiSKYM0Y5BzuMupLY1xZq5PZS2qcjzuCgeV5S2eaSjnR0PbR 6MoU0duqmTOhpeTOTQmQJ4ZP0OpS0azYqyEwDkwVHaOu38ZqsAdKiyFNfrhfelm/ OKT2XhOfRHDNLt4S2gSsmPOBgafhX1omwFspq8zQLl+lW+LVaKQSy63LYeZ/YMhC R6iL978CmaHFHrKCFJDtSSoGc3Cn3oUH5lrA9DHMwK4/ygYadBmz9PsY1fkuxgVh ZCXk3NtsBVY27NZS3oeJNSgD/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMy1Tfd1 uI1FLonX/dB8Rbvif3yIMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPR0xmfv09UnTmTrCXdp30pc6f2Tr6QmSggsJ2PlYQ/LjRXqFnThY1 1RzkWHA00oPdVy1NFmaW95ByUmK6zjt6FW4Sg1fEgIb4WRMw8N7eG2lHHaKyuSZQ 7sy597BOvHLKU5fJGYk0I6gNvUq8hFlhRMdmbWOQzJVpLKancxSZUXiVKuSK9p1B qpAcJyCJH7KfjIeQ9L53GbdygEvMQd8se0r5lWsksFvmkEaEErM2tLx668WQ+1Ek KUAqxfmzguIak6R5MREQYw9C86X3EY5KPRybWMIlE6EJCv4GzT1N4J5hhRxtn9cG mbprsHrcsPaKEvhNQ+WSHv5vRqLmJhix -----END CERTIFICATE-----Generated at Mon Oct 27 15:08:58 2025 by rpki-client