$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: uP5HXERoXau16qhGqxhHjubigvjsZ+JF1Uz8gber/Ms= Subject key identifier: 33:9C:DE:FD:4B:A9:B5:A0:83:BE:34:88:B9:0D:7C:0F:5A:42:25:F7 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 0146 Signing time: Mon 03 Nov 2025 04:18:09 +0000 Manifest this update: Mon 03 Nov 2025 04:18:08 +0000 Manifest next update: Mon 10 Nov 2025 04:18:08 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: wo/WLdr55MuIHkc2BDgMKLfnD9oytYoJ6/zIM7Az+bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Nov 3 04:18:08 2025 GMT Not After : Nov 10 04:18:08 2025 GMT Subject: CN=69082d01-6c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:f0:cb:c2:33:2a:dd:8b:ca:97:d8:9b:f2: f1:cc:03:5d:ed:70:07:bb:96:70:1b:7e:41:ee:33: e6:23:4f:b3:66:c0:d8:15:a9:e1:e5:05:de:b2:a4: 5b:0a:77:23:47:57:ee:72:e1:29:54:a5:46:11:5e: f3:f2:76:7a:da:1f:35:ac:e0:4a:67:20:47:0a:fa: 41:6e:55:b6:7a:b9:c1:8d:d1:4a:25:12:88:3f:cb: 1f:eb:0f:48:82:db:db:e1:d5:2e:0c:df:e8:21:62: b2:61:2e:ac:14:8f:5b:08:71:1d:4a:a0:4b:8b:63: 9c:11:ae:1c:81:46:c7:e0:aa:ca:89:d0:c5:91:e9: a1:e5:76:62:bf:b1:90:fe:3b:14:c5:85:4f:49:00: 21:e0:9d:26:c6:64:d6:46:c4:e8:4c:24:75:c8:a7: 1d:7f:d0:9d:d9:a8:03:67:fd:80:42:d4:c4:c6:ca: c9:ae:bd:a8:1e:d8:45:8a:86:6d:b6:89:24:0b:58: ef:9e:9f:00:c9:38:8a:52:75:ce:17:57:58:6d:20: d0:d2:6b:44:f7:58:37:0d:c4:01:49:36:51:a0:5d: e7:05:3d:4e:49:d4:92:18:db:83:1f:7c:66:c6:7b: c7:03:23:8b:2d:d8:40:51:b5:b9:90:25:17:31:4c: e8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9C:DE:FD:4B:A9:B5:A0:83:BE:34:88:B9:0D:7C:0F:5A:42:25:F7 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:13:32:3a:db:0b:9f:3e:b9:b6:6b:a7:c7:dd:ff:da:b5:aa: db:96:d8:f0:e9:5e:d0:a3:33:db:78:01:40:22:e7:9b:5c:78: 01:0a:ce:51:d6:21:55:b9:71:6d:6f:89:f3:8f:0f:0d:6d:92: 53:95:18:9f:eb:64:c3:95:cb:cc:02:04:1e:f1:d7:18:4d:00: c6:2b:5e:68:5c:af:18:6b:fc:33:5d:f4:dc:17:61:19:bc:90: 58:8c:b8:96:e6:70:67:b2:31:ad:d6:e1:3e:63:d0:93:63:3f: 85:49:7a:78:4a:75:19:d5:f7:4c:75:d1:37:c8:c9:46:f7:c2: f9:90:83:37:b7:28:a7:82:d3:aa:70:46:3f:90:6b:f8:da:76: 7b:ff:c8:13:1d:13:0b:57:0a:5b:8b:92:a1:8c:42:66:de:8a: 26:ec:81:e8:74:1a:45:8b:e2:5d:5e:2c:e3:6a:30:84:f1:f0: 5c:0d:8c:68:d8:e8:c1:8b:dc:49:41:75:aa:c4:42:d1:94:86: 89:d9:c6:b7:fc:b5:a7:bc:c0:c0:1a:aa:ac:df:67:92:15:63: e0:e1:93:e3:c4:32:f9:7d:9c:bf:bf:8b:34:8a:2f:62:1c:2d: 4d:65:c8:dc:a0:70:40:ed:c4:c4:90:40:06:ee:1e:6f:44:6a: fb:7f:ca:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUxMTAzMDQxODA4WhcNMjUxMTEwMDQxODA4WjAYMRYwFAYD VQQDEw02OTA4MmQwMS02YzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0A/wy8IzKt2LypfYm/LxzANd7XAHu5ZwG35B7jPmI0+zZsDYFanh5QXesqRb CncjR1fucuEpVKVGEV7z8nZ62h81rOBKZyBHCvpBblW2ernBjdFKJRKIP8sf6w9I gtvb4dUuDN/oIWKyYS6sFI9bCHEdSqBLi2OcEa4cgUbH4KrKidDFkemh5XZiv7GQ /jsUxYVPSQAh4J0mxmTWRsToTCR1yKcdf9Cd2agDZ/2AQtTExsrJrr2oHthFioZt tokkC1jvnp8AyTiKUnXOF1dYbSDQ0mtE91g3DcQBSTZRoF3nBT1OSdSSGNuDH3xm xnvHAyOLLdhAUbW5kCUXMUzokwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOc3v1L qbWgg740iLkNfA9aQiX3MB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6EzI62wufPrm2a6fH3f/atarbltjw6V7QozPbeAFAIuebXHgBCs5R 1iFVuXFtb4nzjw8NbZJTlRif62TDlcvMAgQe8dcYTQDGK15oXK8Ya/wzXfTcF2EZ vJBYjLiW5nBnsjGt1uE+Y9CTYz+FSXp4SnUZ1fdMddE3yMlG98L5kIM3tyingtOq cEY/kGv42nZ7/8gTHRMLVwpbi5KhjEJm3oom7IHodBpFi+JdXizjajCE8fBcDYxo 2OjBi9xJQXWqxELRlIaJ2ca3/LWnvMDAGqqs32eSFWPg4ZPjxDL5fZy/v4s0ii9i HC1NZcjcoHBA7cTEkEAG7h5vRGr7f8qW -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:45 2025 by rpki-client