$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: OUkRcBzmS4biJX6co+uef1Bqr4bprJV0JAioTBO8c3M= Subject key identifier: 02:86:38:84:8E:E1:43:B6:C0:9C:06:66:3D:CE:B8:37:F3:45:86:53 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 1942 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 16C9 Signing time: Wed 22 Oct 2025 03:51:57 +0000 Manifest this update: Wed 22 Oct 2025 03:51:55 +0000 Manifest next update: Wed 29 Oct 2025 03:51:55 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: 6znMSX6udpvuu0Nydb1jmZ46Ah87hUYtaC3dYUF360c=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: Ju8go9OBKML8ykj6qnfvaBG6KjObv0i9KK2dLnaHCbM=) 4: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 5: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 6: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 7: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 8: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 10: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 11: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 12: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 14: 4A1187B26E7811F09E744A82C4F9AE02.roa (hash: OQY4xPdf9rHdF59/a70j65T2nG8AtOe+ff57jJsTx9k=) 15: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 16: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 20: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: CMTbivAHiLt7IGuG9Zl/8u4+Wi8bG4wbS4CS9kYqibQ=) 21: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 22: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 23: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 24: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 25: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 26: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 27: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 03:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6466 (0x1942) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Oct 22 03:51:55 2025 GMT Not After : Oct 29 03:51:55 2025 GMT Subject: CN=68f854db-6652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:90:cc:3a:98:07:3a:f9:b7:f1:1f:a4:cf: 6f:07:35:a3:3c:70:b5:24:c8:35:1c:81:7b:2e:2a: 26:25:f4:51:68:36:32:5a:be:0b:ea:37:3d:4d:88: c8:15:75:d9:35:62:45:b1:fc:67:b3:fc:71:25:a9: f9:df:7a:2c:21:4d:47:73:70:7b:85:9a:aa:ab:59: 59:13:2a:20:d3:cc:ce:be:a0:86:0e:93:38:f0:ae: 7b:d6:49:ad:ca:4f:01:37:67:83:c6:38:cb:88:da: 89:b3:ad:47:45:e2:4a:a5:88:d0:6b:ab:e2:9a:ad: 71:f3:c0:dd:10:cc:64:ad:80:9e:5c:51:7f:b6:c1: 1b:2f:99:6b:c5:06:9a:c5:ba:a3:be:34:33:a0:f7: 27:7a:0b:4b:b5:41:24:d3:f8:13:2e:51:df:5b:4f: 98:da:97:87:87:99:b1:0f:77:65:ce:ca:b1:23:95: c3:9e:dd:63:12:cb:cc:21:81:ca:5f:c5:f2:9c:f1: 0b:af:d5:8e:fd:88:50:5d:e9:93:f5:d1:aa:12:58: b2:28:28:9b:4d:fd:3f:54:3c:21:7d:84:96:cb:23: f6:b5:46:7f:51:22:dd:60:63:b1:c8:e4:e6:99:94: cd:da:02:b9:44:94:69:ed:38:8f:ee:c2:c6:b2:d2: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:86:38:84:8E:E1:43:B6:C0:9C:06:66:3D:CE:B8:37:F3:45:86:53 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d1:c9:1b:8f:0d:ed:bb:7e:9f:0e:9b:e8:f6:3f:46:00:79: 3d:21:10:50:90:03:43:25:7a:35:47:3a:8d:3f:2e:50:af:3f: d0:c0:83:1a:af:69:b1:a4:52:ea:e3:df:90:3f:3c:06:7b:42: 72:2b:26:78:6a:0e:20:ee:aa:f1:7b:66:6e:51:04:d0:f6:40: bf:b8:50:5a:ad:d5:bf:7a:bc:08:2a:bf:c1:98:aa:f4:e9:36: a2:6e:32:2e:54:a9:b6:b1:5c:d8:7d:fc:bb:c5:a2:86:0e:6a: 5f:34:4f:cb:24:54:4d:59:64:ba:3a:da:5e:2e:88:32:88:97: 72:fa:3c:00:8e:fa:9b:8c:91:f3:ac:59:da:3a:20:99:4f:18: 53:6e:8f:f3:b0:40:06:b0:b1:0f:98:2a:92:5b:83:66:a4:e1: 29:d2:03:81:75:b8:b5:a4:3d:17:f7:89:56:36:22:94:d2:9a: 43:b6:5a:41:b3:c1:d0:57:93:38:17:d3:aa:05:e7:a8:0f:f4: 1a:1a:7a:c2:6f:63:78:40:68:f6:be:f1:fe:cf:2c:0b:1f:69: 47:4e:cd:1f:23:d0:e2:98:f0:a1:92:14:e3:6a:8c:ee:33:de: 3d:23:1a:38:bc:a8:9f:4b:2d:72:a0:08:53:fd:66:05:06:1c: 18:92:5e:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUxMDIyMDM1MTU1WhcNMjUxMDI5MDM1MTU1WjAYMRYwFAYD VQQDEw02OGY4NTRkYi02NjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4KQzDqYBzr5t/EfpM9vBzWjPHC1JMg1HIF7LiomJfRRaDYyWr4L6jc9TYjI FXXZNWJFsfxns/xxJan533osIU1Hc3B7hZqqq1lZEyog08zOvqCGDpM48K571kmt yk8BN2eDxjjLiNqJs61HReJKpYjQa6vimq1x88DdEMxkrYCeXFF/tsEbL5lrxQaa xbqjvjQzoPcnegtLtUEk0/gTLlHfW0+Y2peHh5mxD3dlzsqxI5XDnt1jEsvMIYHK X8XynPELr9WO/YhQXemT9dGqEliyKCibTf0/VDwhfYSWyyP2tUZ/USLdYGOxyOTm mZTN2gK5RJRp7TiP7sLGstIWKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKGOISO 4UO2wJwGZj3OuDfzRYZTMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX0ckbjw3tu36fDpvo9j9GAHk9IRBQkANDJXo1RzqNPy5Qrz/QwIMa r2mxpFLq49+QPzwGe0JyKyZ4ag4g7qrxe2ZuUQTQ9kC/uFBardW/erwIKr/BmKr0 6TaibjIuVKm2sVzYffy7xaKGDmpfNE/LJFRNWWS6OtpeLogyiJdy+jwAjvqbjJHz rFnaOiCZTxhTbo/zsEAGsLEPmCqSW4NmpOEp0gOBdbi1pD0X94lWNiKU0ppDtlpB s8HQV5M4F9OqBeeoD/QaGnrCb2N4QGj2vvH+zywLH2lHTs0fI9DimPChkhTjaozu M949Ixo4vKifSy1yoAhT/WYFBhwYkl5p -----END CERTIFICATE-----Generated at Wed Oct 22 17:50:59 2025 by rpki-client