$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json) Hash identifier: CUXRSG7a1rTCuDZqRsMpFzkN4VvoETP8969hY7/9Vm8= Subject key identifier: F8:8B:5F:96:58:27:37:F8:2B:41:B7:61:24:95:01:02:A8:C1:AE:FB Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft Manifest number: 068C Signing time: Sun 02 Nov 2025 22:24:35 +0000 Manifest this update: Sun 02 Nov 2025 22:24:35 +0000 Manifest next update: Sun 09 Nov 2025 22:24:35 +0000 Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: wwb6eZlbsA8OTK5mKFbHKheMM4tca2TDu1voHN63Y4I=) 2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: NSWzyjE2HPsrPxuhTouX2YNe98sTsio9BMgnAVmwnyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: Nov 2 22:24:35 2025 GMT Not After : Nov 9 22:24:35 2025 GMT Subject: CN=6907da23-6d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:50:74:ff:73:18:5b:2d:a8:a8:fc:1b:c4: 06:bb:c9:eb:e9:f0:48:fe:b8:17:36:55:3d:d4:0f: ec:b6:17:9a:23:89:3d:c2:7d:5c:5d:64:ba:a4:f6: d1:fe:e3:ab:d7:5e:88:11:50:47:40:c1:f8:66:0e: f8:61:93:38:c7:23:0d:6e:d4:c5:fb:95:6a:fa:00: 28:90:0e:5f:38:09:58:51:bd:77:dc:cb:01:b2:12: ec:e0:10:d5:9d:28:5d:5c:51:01:52:8a:60:f9:80: 6a:1d:07:36:f8:79:e9:69:a5:8d:3b:0b:ec:e2:17: d1:c6:6a:90:d8:c3:bb:f5:ce:91:e4:12:83:b7:2a: 17:b8:79:fd:e3:48:df:dc:c9:7f:72:a5:75:aa:ba: d5:64:e2:b1:88:af:e9:e3:d8:d7:06:79:23:a2:59: 4f:35:07:e1:f4:9d:7f:ab:25:de:64:2a:71:88:ff: 32:f8:6d:7a:4d:13:ed:a2:54:7a:30:8e:e1:ca:68: dc:70:bf:30:31:44:dc:90:6e:82:87:b5:b9:7d:ef: 3a:34:91:93:21:82:3e:eb:92:09:89:3f:f6:78:62: fd:03:18:a6:dc:e6:c9:6c:3d:a4:7b:e0:54:f8:d3: ae:7b:5d:de:7a:28:0a:bd:27:c8:e6:57:5d:fb:b4: 62:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8B:5F:96:58:27:37:F8:2B:41:B7:61:24:95:01:02:A8:C1:AE:FB X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e5:30:33:09:a1:c8:2b:a2:e1:d0:89:ea:de:d3:b0:94:cd: 13:f4:2f:f3:72:9c:2c:81:7c:69:5b:a5:82:fc:0c:2d:22:49: 45:1c:c9:fd:bf:bc:8d:61:1a:0d:00:f9:37:60:0d:11:b2:0b: ba:0f:75:9d:4d:81:05:02:2f:69:52:23:00:9b:f3:7e:0b:1f: af:c5:9f:55:3c:5e:72:3e:0f:1b:77:be:51:c9:e5:4a:0b:8c: 32:c1:0a:c9:83:d8:d0:93:11:cb:42:4a:26:75:4e:ee:bd:53: 8a:3b:db:88:25:8c:ac:ed:4f:3c:ce:11:6f:4f:e1:eb:50:04: 63:e7:36:38:5e:55:49:ef:02:49:b7:64:cf:83:5a:a0:02:17: e7:32:b6:36:18:7b:53:21:cf:3c:66:1a:70:60:11:6d:a7:f3: 9a:c7:ed:3c:c6:a6:54:9c:ea:94:84:df:b5:e1:6c:da:66:67: 29:57:e5:5a:98:26:a1:da:44:70:f8:f0:3b:82:f5:43:61:a8: 0c:a0:dc:8d:26:38:47:0f:21:62:e8:4b:32:cb:62:6d:48:96: 3a:e2:56:33:2b:a9:5e:42:16:2f:3b:b2:85:bc:c8:72:0e:1f: a0:32:4b:c4:3e:6d:59:f2:e2:79:a6:8c:c6:4e:6c:f7:a6:97: f9:b8:b5:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjUxMTAyMjIyNDM1WhcNMjUxMTA5MjIyNDM1WjAYMRYwFAYD VQQDEw02OTA3ZGEyMy02ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAhQdP9zGFstqKj8G8QGu8nr6fBI/rgXNlU91A/stheaI4k9wn1cXWS6pPbR /uOr116IEVBHQMH4Zg74YZM4xyMNbtTF+5Vq+gAokA5fOAlYUb133MsBshLs4BDV nShdXFEBUopg+YBqHQc2+HnpaaWNOwvs4hfRxmqQ2MO79c6R5BKDtyoXuHn940jf 3Ml/cqV1qrrVZOKxiK/p49jXBnkjollPNQfh9J1/qyXeZCpxiP8y+G16TRPtolR6 MI7hymjccL8wMUTckG6Ch7W5fe86NJGTIYI+65IJiT/2eGL9Axim3ObJbD2ke+BU +NOue13eeigKvSfI5ldd+7RigwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiLX5ZY Jzf4K0G3YSSVAQKowa77MB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR eEJGa281SHVrRHRONVUzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK5TAzCaHIK6Lh0Inq3tOwlM0T9C/zcpwsgXxpW6WC/AwtIklFHMn9 v7yNYRoNAPk3YA0Rsgu6D3WdTYEFAi9pUiMAm/N+Cx+vxZ9VPF5yPg8bd75RyeVK C4wywQrJg9jQkxHLQkomdU7uvVOKO9uIJYys7U88zhFvT+HrUARj5zY4XlVJ7wJJ t2TPg1qgAhfnMrY2GHtTIc88ZhpwYBFtp/Oax+08xqZUnOqUhN+14WzaZmcpV+Va mCah2kRw+PA7gvVDYagMoNyNJjhHDyFi6Esyy2JtSJY64lYzK6leQhYvO7KFvMhy Dh+gMkvEPm1Z8uJ5pozGTmz3ppf5uLU5 -----END CERTIFICATE-----Generated at Tue Nov 4 07:19:23 2025 by rpki-client