$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: KgpsJ63PIQGrB7MTJ0NqqwJSTXjurUWLdaMZXlcjJOo= Subject key identifier: 16:89:35:C1:F3:CB:A0:92:A3:EF:49:38:42:12:85:D9:97:71:64:5E Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 016E Signing time: Mon 03 Nov 2025 04:00:05 +0000 Manifest this update: Mon 03 Nov 2025 04:00:04 +0000 Manifest next update: Mon 10 Nov 2025 04:00:04 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: d+D7hbWi8Gf8nnba1SiWo8mH7fcaH/dLowXueB5r1lY=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Nov 3 04:00:04 2025 GMT Not After : Nov 10 04:00:04 2025 GMT Subject: CN=690828c4-b81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:20:14:8d:4e:ce:9d:f5:13:78:16:de:54: bb:da:e9:2b:2f:00:f9:db:d0:20:a7:58:05:5c:36: 98:0f:15:a7:8b:7a:e0:52:81:d9:cc:24:f1:6e:f4: e5:c3:87:cf:15:bf:b9:83:76:b0:64:71:28:a4:8f: 55:00:3e:c4:a2:a3:c0:b0:43:ce:d4:73:cf:1e:57: 8f:2c:2c:0e:5e:b4:41:bb:77:2f:fc:af:6e:5d:79: 0a:b2:85:31:20:3b:cb:40:25:44:ce:e0:40:c2:62: 74:90:a1:25:be:77:21:6c:21:a3:a9:a3:59:96:c2: 5d:30:b5:4b:74:a3:25:42:43:1c:28:11:49:4e:3e: 97:fa:33:60:86:15:ba:65:13:35:ac:02:f9:4c:e6: 60:9c:1f:51:55:81:5c:bf:81:2a:27:2e:92:41:45: 4f:25:a3:cf:a2:02:83:ba:4c:64:72:a8:35:f2:a3: 10:1b:1e:89:b8:27:a6:19:fe:4f:a0:f3:9f:a3:08: 66:d4:47:38:2d:f4:2d:95:ac:f9:60:93:a4:ac:05: ef:30:b2:4d:ad:08:8b:ad:57:b9:3b:79:86:20:d4: 3d:88:8a:85:53:df:25:d4:37:91:da:cd:89:d3:c6: 32:a1:5c:1f:ae:c7:0b:34:3f:8d:76:23:88:18:0c: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:89:35:C1:F3:CB:A0:92:A3:EF:49:38:42:12:85:D9:97:71:64:5E X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6a:c3:6c:2a:49:2a:80:a4:29:3d:fe:2c:f8:08:58:5a:11: 9c:75:56:73:f0:25:3a:72:ba:e1:d0:23:d9:2c:5d:e0:4d:23: ba:79:37:7a:a5:58:83:1a:45:d2:ef:10:ed:e1:84:a7:03:df: 1a:9b:82:28:40:b3:98:5b:2c:55:4c:8f:4e:f5:9a:f2:05:eb: 8e:59:f6:68:f8:75:18:6a:b9:2f:f0:f1:b7:30:ba:ea:b6:6c: f6:0f:33:7c:ef:4e:90:72:2e:f1:51:a6:89:cf:c4:aa:c6:c4: 0a:71:5a:2f:2f:94:70:7b:5c:ec:a5:2e:d8:05:e2:73:b0:9b: 7c:cb:54:70:83:95:b6:67:55:5c:6c:0c:4a:20:39:62:70:9a: be:70:01:28:1b:bb:6e:7d:78:58:6b:57:0c:cb:1a:a4:b7:2f: 52:86:66:0f:b7:d6:02:3d:a6:ce:e8:21:7e:b2:f5:78:84:93: 08:65:dd:9b:f8:67:e7:67:99:00:7a:09:e3:11:fd:7b:70:38: c4:d3:03:98:f3:40:1d:b1:8d:d4:31:6b:62:ac:33:6a:57:98: d2:cb:40:84:9c:06:c0:57:84:58:a2:2e:c0:88:bd:ef:98:59: 57:0e:84:1e:d7:d6:ff:8c:bb:71:3b:44:c9:59:57:b2:e0:b4: 0b:3f:36:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUxMTAzMDQwMDA0WhcNMjUxMTEwMDQwMDA0WjAYMRYwFAYD VQQDEw02OTA4MjhjNC1iODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fIgFI1Ozp31E3gW3lS72ukrLwD529Agp1gFXDaYDxWni3rgUoHZzCTxbvTl w4fPFb+5g3awZHEopI9VAD7EoqPAsEPO1HPPHlePLCwOXrRBu3cv/K9uXXkKsoUx IDvLQCVEzuBAwmJ0kKElvnchbCGjqaNZlsJdMLVLdKMlQkMcKBFJTj6X+jNghhW6 ZRM1rAL5TOZgnB9RVYFcv4EqJy6SQUVPJaPPogKDukxkcqg18qMQGx6JuCemGf5P oPOfowhm1Ec4LfQtlaz5YJOkrAXvMLJNrQiLrVe5O3mGINQ9iIqFU98l1DeR2s2J 08YyoVwfrscLND+NdiOIGAzSjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaJNcHz y6CSo+9JOEIShdmXcWReMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQasNsKkkqgKQpPf4s+AhYWhGcdVZz8CU6crrh0CPZLF3gTSO6eTd6 pViDGkXS7xDt4YSnA98am4IoQLOYWyxVTI9O9ZryBeuOWfZo+HUYarkv8PG3MLrq tmz2DzN8706Qci7xUaaJz8SqxsQKcVovL5Rwe1zspS7YBeJzsJt8y1Rwg5W2Z1Vc bAxKIDlicJq+cAEoG7tufXhYa1cMyxqkty9ShmYPt9YCPabO6CF+svV4hJMIZd2b +GfnZ5kAegnjEf17cDjE0wOY80AdsY3UMWtirDNqV5jSy0CEnAbAV4RYoi7AiL3v mFlXDoQe19b/jLtxO0TJWVey4LQLPzY/ -----END CERTIFICATE-----Generated at Tue Nov 4 00:51:11 2025 by rpki-client