$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: RJ4rzXitTRModYAYUeAZn3NecI9s55YYAxY6+BapqMQ= Subject key identifier: E4:09:F4:62:CD:A3:85:2A:8C:05:C0:B2:57:2A:98:B0:F3:84:BE:27 Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 34D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 34D0 Signing time: Tue 04 Nov 2025 15:12:07 +0000 Manifest this update: Tue 04 Nov 2025 15:12:06 +0000 Manifest next update: Tue 11 Nov 2025 15:12:06 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: xlqbKRK5Uc/oVuB4NXAfqiwcSYJrcJkgH6dqnLVf/IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13522 (0x34d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Nov 4 15:12:06 2025 GMT Not After : Nov 11 15:12:06 2025 GMT Subject: CN=690a17c6-aced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:a1:8d:ce:73:02:ab:52:f2:a8:7b:1d:f1: 43:27:22:7b:48:12:60:8b:a5:58:93:19:ad:9a:8f: da:78:ef:21:1e:90:f4:8c:bd:1a:e7:04:6a:92:d9: e7:96:09:71:ca:3f:5a:7f:e9:c0:cb:c1:a5:78:1f: 86:3a:cb:fb:53:73:63:5a:e6:88:50:ae:b8:8c:da: 8c:5a:32:7d:26:ab:68:ca:71:44:be:a8:ab:d2:de: 40:69:a7:a2:88:a6:04:48:4a:49:7b:44:72:40:f2: ea:64:af:da:29:da:06:35:e4:bd:a0:89:47:0b:2a: 94:42:ae:da:a3:bf:d8:3e:17:59:72:3a:78:10:8d: e7:a6:ae:a8:be:f2:97:2a:53:3e:5d:55:8c:5f:71: e1:da:d4:e4:5e:7b:e1:cd:53:49:de:48:53:2f:f3: 21:25:00:9b:ec:c8:42:07:89:3c:9c:3c:b7:5f:22: fd:a6:10:25:42:e6:0a:b4:b3:56:58:11:52:a4:7e: 46:03:ef:8a:2b:30:d3:42:00:45:f0:92:a0:31:5c: a4:5f:16:cb:ee:c4:f2:b5:98:4a:53:45:64:ac:c3: 2b:ab:3a:61:b3:b5:6e:27:68:64:20:8d:dd:92:2e: 11:f1:ab:8f:f9:bf:82:f4:71:2c:0d:61:cd:77:6e: c2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:09:F4:62:CD:A3:85:2A:8C:05:C0:B2:57:2A:98:B0:F3:84:BE:27 X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d2:3b:6f:e5:29:5c:92:23:59:ee:43:d9:d7:e1:72:b8:c5: 0d:ac:e7:8f:b6:77:1e:23:46:ca:d6:8e:1d:1d:5f:7a:1b:d4: e9:62:29:0d:5f:56:04:ce:5a:31:3b:ef:22:99:9d:f0:ba:d0: c0:1d:03:b5:0f:17:ec:2e:3e:b0:80:c5:ad:67:0c:e2:51:5b: 2c:46:f1:6b:17:f7:12:7d:1c:34:16:b4:5b:d1:59:1a:d5:e7: c7:8b:67:b5:63:f6:d7:8e:97:a4:a8:91:1e:59:6f:52:ae:73: 11:41:be:00:76:fa:fb:72:3e:1c:12:15:9e:ea:70:6c:88:04: 4f:38:bc:6e:cb:13:c6:0e:99:34:d5:fc:19:68:54:26:cb:a3: 9c:33:2f:49:62:0e:6b:ac:5c:cb:17:b4:9e:a9:aa:7c:cc:d3: 63:a7:0e:37:e9:88:25:02:86:bc:e9:f4:a2:18:44:0a:c1:a6: de:30:06:14:dc:04:7d:17:f1:f9:c1:76:ca:d0:09:54:ca:40: 00:53:ad:6d:60:87:b4:24:46:dd:7d:19:f7:9a:0a:58:5f:c7: b2:fd:bc:1e:36:e9:81:2a:99:a2:56:2c:d3:4a:60:5c:44:54: 4c:01:46:0c:c8:b5:12:77:9d:28:b4:c8:85:2b:bd:1f:cc:66: db:8f:15:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjUxMTA0MTUxMjA2WhcNMjUxMTExMTUxMjA2WjAYMRYwFAYD VQQDEw02OTBhMTdjNi1hY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjGhjc5zAqtS8qh7HfFDJyJ7SBJgi6VYkxmtmo/aeO8hHpD0jL0a5wRqktnn lglxyj9af+nAy8GleB+GOsv7U3NjWuaIUK64jNqMWjJ9JqtoynFEvqir0t5Aaaei iKYESEpJe0RyQPLqZK/aKdoGNeS9oIlHCyqUQq7ao7/YPhdZcjp4EI3npq6ovvKX KlM+XVWMX3Hh2tTkXnvhzVNJ3khTL/MhJQCb7MhCB4k8nDy3XyL9phAlQuYKtLNW WBFSpH5GA++KKzDTQgBF8JKgMVykXxbL7sTytZhKU0VkrMMrqzphs7VuJ2hkII3d ki4R8auP+b+C9HEsDWHNd27C+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQJ9GLN o4UqjAXAslcqmLDzhL4nMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM0jtv5SlckiNZ7kPZ1+FyuMUNrOePtnceI0bK1o4dHV96G9TpYikN X1YEzloxO+8imZ3wutDAHQO1DxfsLj6wgMWtZwziUVssRvFrF/cSfRw0FrRb0Vka 1efHi2e1Y/bXjpekqJEeWW9SrnMRQb4Advr7cj4cEhWe6nBsiARPOLxuyxPGDpk0 1fwZaFQmy6OcMy9JYg5rrFzLF7Seqap8zNNjpw436YglAoa86fSiGEQKwabeMAYU 3AR9F/H5wXbK0AlUykAAU61tYIe0JEbdfRn3mgpYX8ey/bweNumBKpmiVizTSmBc RFRMAUYMyLUSd50otMiFK70fzGbbjxWZ -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:23 2025 by rpki-client