$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: TYmRxDXOnDGqP/Rdpphrx2y5/lQDvaT+uW27qebS6X4= Subject key identifier: D4:4F:31:7B:AC:61:3D:BD:E2:30:5E:9C:FC:9A:3D:8D:90:E7:74:2E Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: 84 Signing time: Sat 25 Oct 2025 10:40:42 +0000 Manifest this update: Sat 25 Oct 2025 10:40:41 +0000 Manifest next update: Sat 01 Nov 2025 10:40:41 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: s9vXNhqeLWTw4ZPE+ymtSF5dPPDWIatmho9OvlOYlpQ=) 2: D2E899F86EB511F0A3A63A59C4F9AE02.roa (hash: 0dFbZ0ducL2EHPg1wlqAHlDGhzD129B1kp1qJTYRuTU=) 3: 2C0E544C6EB511F094E66857C4F9AE02.roa (hash: MFMadZ9hIQ4pKDfnggH43mNknioivrdN+SzVsH0zBtQ=) 4: 917D3A184BED11F0A2F7CC21C4F9AE02.roa (hash: IYpTiwoDdKk+DKwv65zZ7BTxOeFfDIMdePJWFd5JpGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 10:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: Oct 25 10:40:41 2025 GMT Not After : Nov 1 10:40:41 2025 GMT Subject: CN=68fca92a-7478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d8:64:cd:7f:43:eb:15:30:0c:77:c4:7d:d1: 92:e7:19:cd:e9:fc:f6:9b:ff:91:8c:96:53:96:46: 04:cc:b7:31:71:53:9f:70:4e:8a:dd:5b:bc:7f:34: 05:b8:43:9f:4e:f4:3c:9f:b8:c5:d4:54:9b:1f:db: 67:1a:c3:82:af:da:97:b9:52:f8:23:38:e4:3b:62: 96:ab:f7:05:b5:20:fd:71:ae:df:47:fa:da:7d:cd: ae:64:6a:74:28:2e:31:c3:0f:01:af:1f:a5:e8:99: ae:41:3d:3d:7b:f0:9a:c2:d6:c9:cc:34:8a:1b:47: db:24:46:9b:83:fd:d9:68:f9:ea:12:eb:3b:90:9f: 74:bb:39:24:1d:6d:39:96:e3:db:fe:68:2c:3e:fd: 36:49:82:88:90:c2:a2:f6:64:97:3c:60:4d:94:fa: 9c:79:3f:ae:cc:ab:a8:44:5d:08:8e:27:1e:d2:9e: a1:cd:2c:6f:3d:c1:f2:a1:5e:8b:78:ce:63:c7:e9: 5d:bd:d6:6d:2a:50:7e:ab:7d:b3:52:d8:18:c7:2c: 2a:b2:40:12:ae:3e:82:bf:12:69:90:65:3b:37:cd: 89:f7:bf:b9:68:d0:38:55:ea:d0:c5:e6:99:30:d1: a2:fd:ef:f8:49:b8:38:8d:fe:83:a0:16:92:e4:ba: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4F:31:7B:AC:61:3D:BD:E2:30:5E:9C:FC:9A:3D:8D:90:E7:74:2E X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a9:7d:a1:05:d9:de:ee:42:9a:09:ac:0d:5a:4f:fc:59:46: a2:3e:6c:95:3e:b2:91:56:ae:f6:12:e1:5a:e8:ad:4c:e3:3d: 6b:67:59:c2:a5:39:86:03:df:3f:89:6b:d0:90:f7:83:c2:a0: ff:fe:fb:12:04:40:3a:cf:73:0f:19:a5:58:d0:39:81:d0:67: e0:bb:08:0d:32:d1:53:80:5f:a1:8b:a0:7a:c0:fe:91:7b:8f: 7d:32:02:94:1d:f9:1c:d1:83:d0:0b:ab:e5:6c:b6:3c:90:8c: 1b:b0:e4:62:d6:20:15:37:72:83:27:a6:19:2a:6e:16:4e:c4: c7:29:28:7d:ad:00:5a:58:6a:ff:f9:8b:fc:bc:f2:00:9c:1f: bc:f5:59:bd:77:60:fa:76:cc:30:f1:58:60:59:f6:09:cc:43: c1:0a:d0:34:c0:df:b6:68:a7:1b:3c:16:af:fb:df:c1:a0:f7: 5e:0a:c5:09:be:ad:3e:82:74:8a:31:54:0b:47:41:bc:85:b6: 6f:e0:eb:ff:6c:94:86:13:87:12:ff:4f:ca:c2:ab:94:e0:ea: db:f9:1d:31:a3:ab:98:43:57:31:0b:b0:3d:54:09:0e:77:1c: 96:89:d5:a3:d6:63:3a:5f:e9:13:d9:95:2d:22:48:d3:5d:1f: 0e:3d:05:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThERjUxMTAvBgNVBAUTKEM2Rjc1OEVDRERDNEM5QjBGNzJGMDY1QzM1QUQ1NDY5 NzQzMjcxMUIwHhcNMjUxMDI1MTA0MDQxWhcNMjUxMTAxMTA0MDQxWjAYMRYwFAYD VQQDEw02OGZjYTkyYS03NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39hkzX9D6xUwDHfEfdGS5xnN6fz2m/+RjJZTlkYEzLcxcVOfcE6K3Vu8fzQF uEOfTvQ8n7jF1FSbH9tnGsOCr9qXuVL4IzjkO2KWq/cFtSD9ca7fR/rafc2uZGp0 KC4xww8Brx+l6JmuQT09e/CawtbJzDSKG0fbJEabg/3ZaPnqEus7kJ90uzkkHW05 luPb/mgsPv02SYKIkMKi9mSXPGBNlPqceT+uzKuoRF0Ijice0p6hzSxvPcHyoV6L eM5jx+ldvdZtKlB+q32zUtgYxywqskASrj6CvxJpkGU7N82J97+5aNA4VerQxeaZ MNGi/e/4Sbg4jf6DoBaS5LoDAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRPMXus YT294jBenPyaPY2Q53QuMB8GA1UdIwQYMBaAFMb3WOzdxMmw9y8GXDWtVGl0MnEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOERGNS8zMUUwRjE2QUY5 NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi94dmRZN04zRXliRDNMd1pjTmExVWFYUXlj UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OERGNS8zMUUwRjE2QUY5NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi94dmRZN04zRXli RDNMd1pjTmExVWFYUXljUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsqX2hBdne7kKaCawNWk/8WUaiPmyVPrKRVq72EuFa6K1M4z1rZ1nC pTmGA98/iWvQkPeDwqD//vsSBEA6z3MPGaVY0DmB0GfguwgNMtFTgF+hi6B6wP6R e499MgKUHfkc0YPQC6vlbLY8kIwbsORi1iAVN3KDJ6YZKm4WTsTHKSh9rQBaWGr/ +Yv8vPIAnB+89Vm9d2D6dsww8VhgWfYJzEPBCtA0wN+2aKcbPBav+9/BoPdeCsUJ vq0+gnSKMVQLR0G8hbZv4Ov/bJSGE4cS/0/KwquU4Orb+R0xo6uYQ1cxC7A9VAkO dxyWidWj1mM6X+kT2ZUtIkjTXR8OPQXh -----END CERTIFICATE-----Generated at Sat Oct 25 17:42:00 2025 by rpki-client