$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: oBrhfPKAu9bx6XEWt5knn2NRrTtI+RXrjqyAlAH5/Ic= Subject key identifier: B0:46:8A:02:8F:97:0C:75:E6:FF:97:DB:15:35:47:EB:A6:92:F1:16 Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: AC Signing time: Wed 05 Nov 2025 05:23:39 +0000 Manifest this update: Wed 05 Nov 2025 05:23:39 +0000 Manifest next update: Wed 12 Nov 2025 05:23:39 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: cOQMgg9YUEahWyCBgKEr5ZWeYy1jxmrZ7ZlK0jJ6Nlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Nov 5 05:23:39 2025 GMT Not After : Nov 12 05:23:39 2025 GMT Subject: CN=690adf5b-4fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:80:57:ef:70:b9:56:19:21:35:ff:cc:65: 5a:40:e1:4b:c5:0f:4f:e4:8e:5a:59:bc:8d:92:03: 98:62:01:56:d7:32:b8:6c:79:0e:3d:71:95:15:e2: bf:4e:51:10:1a:e1:f3:c2:ce:c8:65:2d:c4:3d:68: f1:79:d2:98:db:d4:2d:6c:35:33:56:0b:4f:44:0f: 7d:19:58:d9:69:a0:52:60:dd:9c:41:0d:d3:25:7e: ff:e9:57:2b:fa:7c:83:2a:8d:5f:7d:3f:ac:33:33: 6e:e3:ea:fc:9b:56:e0:96:81:02:d8:53:b2:65:78: 0b:e9:ba:54:43:21:2d:30:3a:d7:66:df:b0:5f:e1: 3a:38:7a:87:4c:f2:99:85:d5:c9:49:7a:27:44:32: 1c:e7:37:e4:5f:2c:8a:b4:be:23:d6:15:92:70:74: 8d:86:e0:4d:18:8b:dc:39:1e:e7:a5:50:c3:24:da: 06:ea:bb:ed:f6:fb:62:0f:15:54:b7:96:40:6f:8a: 51:2b:28:5f:20:51:96:c9:63:22:e9:10:ac:08:ff: f9:77:97:b2:ce:fe:dc:58:ae:9a:f4:af:fe:df:9a: b6:9c:d8:48:79:4a:f4:06:d4:32:70:16:39:50:e0: 56:92:a4:e8:0c:27:74:e5:61:58:d5:19:dc:0c:37: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:46:8A:02:8F:97:0C:75:E6:FF:97:DB:15:35:47:EB:A6:92:F1:16 X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:27:c6:7d:0c:56:e5:77:89:e1:4e:11:ad:19:3b:2d:aa:f2: 90:72:68:9b:35:44:4d:4b:f3:0b:fa:b2:6d:45:98:2c:db:9f: c3:62:91:b6:46:d6:15:57:a2:11:3c:53:d2:12:5f:09:70:34: a9:0a:6f:e1:0f:96:82:ed:6a:f6:3e:9e:ff:e1:49:d5:6b:e8: 6d:a0:fa:3d:ec:ed:62:d6:ad:80:57:e0:84:3f:78:f0:42:02: f2:b6:53:09:8e:53:85:dc:3f:1f:ee:78:33:96:bb:a9:22:7b: 1a:13:8e:46:4e:09:9d:b6:0b:77:23:89:e3:9e:71:72:3a:36: d8:60:2a:00:39:a0:d6:39:b7:c7:31:0d:af:a4:3b:3f:0c:17: 1f:00:5a:d1:02:55:38:c8:9f:1c:1b:57:81:20:88:19:19:ec: 0b:b2:88:55:58:98:dc:c6:10:24:2f:69:e7:d2:3b:b5:ed:c2: c4:57:3a:d2:89:c3:c6:17:dd:5f:0f:f3:42:4c:98:65:70:25: 1a:0a:e4:a2:f5:16:1c:b4:12:5c:de:0f:12:bc:43:cf:7c:da: 81:da:f4:b8:89:bf:6a:cf:a2:13:0a:05:ab:78:cc:18:e7:f9: 51:dd:a4:ed:cb:d0:9a:b0:63:9c:cf:b2:89:7c:2c:e8:cf:ac: 5c:63:a9:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKDVFRjVFMUE1ODVDNDhFMkJDNDUwQkE3MkY0QzMxMzQ2 ODBFNTJCMEQwHhcNMjUxMTA1MDUyMzM5WhcNMjUxMTEyMDUyMzM5WjAYMRYwFAYD VQQDEw02OTBhZGY1Yi00ZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0eAV+9wuVYZITX/zGVaQOFLxQ9P5I5aWbyNkgOYYgFW1zK4bHkOPXGVFeK/ TlEQGuHzws7IZS3EPWjxedKY29QtbDUzVgtPRA99GVjZaaBSYN2cQQ3TJX7/6Vcr +nyDKo1ffT+sMzNu4+r8m1bgloEC2FOyZXgL6bpUQyEtMDrXZt+wX+E6OHqHTPKZ hdXJSXonRDIc5zfkXyyKtL4j1hWScHSNhuBNGIvcOR7npVDDJNoG6rvt9vtiDxVU t5ZAb4pRKyhfIFGWyWMi6RCsCP/5d5eyzv7cWK6a9K/+35q2nNhIeUr0BtQycBY5 UOBWkqToDCd05WFY1RncDDe3CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBGigKP lwx15v+X2xU1R+umkvEWMB8GA1UdIwQYMBaAFF714aWFxI4rxFC6cvTDE0aA5SsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS9FMUFFNTQ3Q0Ix MzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWppdkVVTHB5OU1NVFJvRGxL dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS9FMUFFNTQ3Q0IxMzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWpp dkVVTHB5OU1NVFJvRGxLdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApJ8Z9DFbld4nhThGtGTstqvKQcmibNURNS/ML+rJtRZgs25/DYpG2 RtYVV6IRPFPSEl8JcDSpCm/hD5aC7Wr2Pp7/4UnVa+htoPo97O1i1q2AV+CEP3jw QgLytlMJjlOF3D8f7ngzlrupInsaE45GTgmdtgt3I4njnnFyOjbYYCoAOaDWObfH MQ2vpDs/DBcfAFrRAlU4yJ8cG1eBIIgZGewLsohVWJjcxhAkL2nn0ju17cLEVzrS icPGF91fD/NCTJhlcCUaCuSi9RYctBJc3g8SvEPPfNqB2vS4ib9qz6ITCgWreMwY 5/lR3aTty9CasGOcz7KJfCzoz6xcY6nh -----END CERTIFICATE-----Generated at Wed Nov 5 16:49:04 2025 by rpki-client