$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: +m099e+QG+5MjK5LPHrjvwf4dDf1nr6ryegMeY5xdes= Subject key identifier: EF:A6:2F:9B:93:87:AC:B1:67:1B:0A:66:B1:95:84:68:12:EA:A2:CD Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 044B Signing time: Wed 22 Oct 2025 03:50:53 +0000 Manifest this update: Wed 22 Oct 2025 03:50:50 +0000 Manifest next update: Wed 29 Oct 2025 03:50:50 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: GjXVXIzVsqldUaRK2gp2EZE6bVtQCXrkqiClKfw1eGw=) 2: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: JDhvBxRe3WYJ1iKQKnxqCUD2z2C21JJ9nqsXsWXBpYM=) 3: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: QNRRPIEXpBXbzOjvogyb/5EofzlDIH5pOqmalYkDTHw=) 4: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: pOC7yi76swQlUgILehboMwNcNI7fxV+UlNvd0wZTls0=) 5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: QSRbYccf6zSEHa0HsQVgKCVz5nS1O8L5U8Elot2Xz40=) 6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: R3jOsVUDlgPUNcLVjE2JxsnxeughPhg0TvY+Ytf4478=) 7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: 8STPYAJJhsqxveLpZRzmdl9yhMuww2dhMQO1WbQeNbU=) 8: 5F14A15442D111EF8424E65BC4F9AE02.roa (hash: +sir/1Ip5eUjrTrKzP4T0efIjhcNSv/WtmTYay9OtXs=) 9: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: 7KI+xGonwsZRICria/4CZwlDNlRIuXU/wVts22Crf9U=) 10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: fPCfFsxMUqOAvLJmkWjc+RPsiCNLjQ233XGNCqOiY/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 03:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Oct 22 03:50:50 2025 GMT Not After : Oct 29 03:50:50 2025 GMT Subject: CN=68f8549c-09b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:fb:25:cb:7d:66:d3:f3:1d:40:e2:70:e8: 83:67:c2:0f:88:6f:72:4f:dd:07:61:39:7b:61:b0: 47:a4:b3:e6:8f:12:d0:ba:23:a4:d4:6a:e7:35:9f: 6f:d6:a4:8d:79:25:73:1f:c7:7a:e1:12:0c:f2:c6: 35:46:79:c6:78:72:98:9d:2b:55:15:89:bc:77:38: 44:78:96:93:00:48:38:72:2a:84:c2:1b:09:bd:03: 99:2b:f1:7c:c4:6c:d2:53:0d:14:43:61:fa:35:ee: 1e:cf:8d:f8:33:38:66:7b:83:b6:34:99:8d:d3:12: 5d:f9:62:28:84:b3:cb:0b:19:06:80:f7:ae:d3:a5: be:73:6f:07:cd:e7:c7:f7:84:89:dc:5e:cf:79:14: 68:5a:cd:35:41:6c:5e:7f:46:21:c1:b4:2c:e1:d2: fe:54:0d:9e:dc:67:b3:45:20:a3:02:50:49:bb:bb: c4:93:68:b5:91:72:5d:21:6f:df:5c:31:6d:e0:d8: ce:4d:be:59:03:f2:84:1e:64:d8:44:2a:fe:88:87: db:ff:bf:f4:5a:8b:58:79:cd:21:c2:f3:8c:24:8e: cf:af:44:d7:f4:49:a0:76:de:e2:64:dd:9a:53:e8: 38:f5:1e:85:51:02:1e:66:9e:2f:01:7f:81:16:db: 7c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A6:2F:9B:93:87:AC:B1:67:1B:0A:66:B1:95:84:68:12:EA:A2:CD X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:10:8c:ec:dd:80:39:42:e7:c8:57:41:19:f4:91:a2:eb:52: 2d:95:2a:70:d9:92:ba:2f:f2:a8:d8:fc:e1:7c:f0:9f:af:ae: 10:67:48:d6:2e:7d:65:e4:94:a7:95:cd:0d:08:5e:45:ef:ee: ab:22:d5:ca:6d:7d:be:1f:53:99:9a:ea:88:aa:63:ad:20:14: fb:aa:5a:5e:6d:4d:67:1a:b4:ab:3d:a8:d6:f4:fe:07:77:b4: a0:01:fa:b9:f3:7d:86:4e:de:e7:58:b5:b4:cb:1f:21:68:32: 82:9a:40:82:90:f6:ae:93:6b:6b:7e:03:da:9f:2a:9c:70:7a: 38:af:22:bf:70:54:f8:e8:0f:0a:fa:d7:fb:c6:9a:08:1b:c7: 9d:3f:78:26:d1:a6:6a:c7:a1:ba:b4:17:d3:e6:30:95:35:d4: fc:61:51:4a:71:1c:b3:11:92:96:9e:78:db:9b:a7:74:dd:f2: 42:ac:34:5e:26:78:83:47:ea:71:d7:7a:5f:b9:c1:1a:b0:ec: 4c:a5:4f:c0:ec:e0:9e:5b:6d:01:dd:3d:17:e7:c1:4d:6f:d6: 83:f7:f8:ea:e4:1e:21:47:5b:74:74:ee:67:a9:e3:3c:48:2a: f1:0d:d9:6a:8f:a3:e9:26:1f:92:e6:00:05:79:3a:d9:da:9e: 3a:a0:91:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjUxMDIyMDM1MDUwWhcNMjUxMDI5MDM1MDUwWjAYMRYwFAYD VQQDEw02OGY4NTQ5Yy0wOWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArM77Jct9ZtPzHUDicOiDZ8IPiG9yT90HYTl7YbBHpLPmjxLQuiOk1GrnNZ9v 1qSNeSVzH8d64RIM8sY1RnnGeHKYnStVFYm8dzhEeJaTAEg4ciqEwhsJvQOZK/F8 xGzSUw0UQ2H6Ne4ez434Mzhme4O2NJmN0xJd+WIohLPLCxkGgPeu06W+c28HzefH 94SJ3F7PeRRoWs01QWxef0YhwbQs4dL+VA2e3GezRSCjAlBJu7vEk2i1kXJdIW/f XDFt4NjOTb5ZA/KEHmTYRCr+iIfb/7/0WotYec0hwvOMJI7Pr0TX9Emgdt7iZN2a U+g49R6FUQIeZp4vAX+BFtt8gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+mL5uT h6yxZxsKZrGVhGgS6qLNMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7EIzs3YA5QufIV0EZ9JGi61ItlSpw2ZK6L/Ko2PzhfPCfr64QZ0jW Ln1l5JSnlc0NCF5F7+6rItXKbX2+H1OZmuqIqmOtIBT7qlpebU1nGrSrPajW9P4H d7SgAfq5832GTt7nWLW0yx8haDKCmkCCkPauk2trfgPanyqccHo4ryK/cFT46A8K +tf7xpoIG8edP3gm0aZqx6G6tBfT5jCVNdT8YVFKcRyzEZKWnnjbm6d03fJCrDRe JniDR+px13pfucEasOxMpU/A7OCeW20B3T0X58FNb9aD9/jq5B4hR1t0dO5nqeM8 SCrxDdlqj6PpJh+S5gAFeTrZ2p46oJER -----END CERTIFICATE-----Generated at Wed Oct 22 21:37:02 2025 by rpki-client