$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: LbB1WEnZ0J1LoEnqvi5IPNwtT0lbIOcR1QotjbEORfw= Subject key identifier: DE:0C:14:D7:2B:24:79:83:1E:32:CC:24:ED:5B:A2:A2:0B:70:3C:70 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 13BA Signing time: Thu 18 Sep 2025 19:29:26 +0000 Manifest this update: Thu 18 Sep 2025 19:29:26 +0000 Manifest next update: Thu 25 Sep 2025 19:29:26 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: 9FDOBASfE8QVMmW1zFwqBgVMAJz2hMW/KbecL8gxWSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2864 (0xb30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Sep 18 19:29:26 2025 GMT Not After : Sep 25 19:29:26 2025 GMT Subject: CN=68cc5d96-c422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:44:8b:60:85:5a:84:67:ea:b7:e6:a9:ee:db: f6:b2:08:63:e4:c7:5f:88:57:e0:e0:a8:51:88:d3: da:30:f9:5c:9e:17:18:c0:23:3d:2f:30:5d:46:a7: f3:b0:ac:70:ea:1e:7e:77:8d:f5:6a:bd:8d:0b:27: 22:74:06:9b:96:cf:b6:7d:60:b4:08:be:4c:71:86: 23:7b:72:86:3e:0c:14:ce:f6:68:c7:5e:97:cc:cd: 8b:d1:0e:a3:4c:1d:e8:24:c9:20:14:1f:4f:7c:79: 9e:31:34:bc:54:75:6c:46:be:27:f7:d1:a8:0e:e8: 05:d2:eb:da:d1:83:ed:06:fa:a8:df:66:31:80:65: 23:47:f8:da:b8:c1:dd:a5:80:8a:ca:4e:8d:ff:d7: 00:8a:2a:18:36:fc:9e:47:12:c5:16:64:f3:6c:1b: 41:4d:60:1a:bd:62:16:b7:fb:dd:e7:69:58:79:a1: 0d:bd:84:0b:76:ba:a8:d5:99:8d:7b:4a:10:19:b3: 0a:4e:6d:b5:44:65:de:0a:0d:de:85:20:0f:d1:73: cd:ca:71:86:a3:dd:e6:89:c9:96:2f:5d:bd:84:b3: 30:38:e3:42:91:2f:0c:37:e7:99:65:cd:5d:79:12: 37:78:af:c5:4b:fa:62:4c:72:30:a3:59:fd:89:3a: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0C:14:D7:2B:24:79:83:1E:32:CC:24:ED:5B:A2:A2:0B:70:3C:70 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:49:ad:9d:53:45:01:c7:ca:6b:ac:4a:e8:eb:96:cb:1d:72: 4f:2c:dc:11:8e:88:ef:f9:4c:17:66:1d:0e:f8:62:55:c9:51: 06:8c:c7:f7:ec:3d:1c:6d:41:df:ca:65:43:94:6e:30:ae:74: 94:90:fd:49:2e:8d:d7:61:7b:82:c2:f3:d7:3e:ed:f7:14:9b: 69:e0:65:99:ae:0d:60:c2:68:b9:dd:4e:3c:c5:20:13:52:8e: e2:e5:bd:e1:72:a0:8e:2f:ba:8c:65:c3:a2:47:dc:3c:c0:04: e6:07:5e:ce:d0:1c:c4:68:9f:93:29:29:b2:ed:40:40:44:6b: 2b:24:59:90:9b:6f:f3:ba:42:74:15:bb:24:c0:92:08:04:3e: e2:ca:09:68:34:58:d2:e8:07:1d:d1:e3:d7:d6:4a:2f:99:fb: 58:f9:63:2b:8f:c7:d4:e8:aa:c8:23:ee:61:8a:e1:d5:6c:58: 5c:91:4f:90:87:06:81:f9:78:34:88:f5:7d:82:e6:1b:d7:0e: f4:f5:ed:08:b4:7c:e7:6c:c5:fb:5d:63:ab:f2:3d:fc:db:87: 4f:f1:57:c9:77:ef:29:3b:51:c3:3e:9f:5d:27:7b:85:5f:2f: 3d:95:8e:0e:74:02:fd:cd:d2:e1:89:24:aa:58:f1:33:ea:67: 88:5e:aa:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjUwOTE4MTkyOTI2WhcNMjUwOTI1MTkyOTI2WjAYMRYwFAYD VQQDEw02OGNjNWQ5Ni1jNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10SLYIVahGfqt+ap7tv2sghj5MdfiFfg4KhRiNPaMPlcnhcYwCM9LzBdRqfz sKxw6h5+d431ar2NCycidAabls+2fWC0CL5McYYje3KGPgwUzvZox16XzM2L0Q6j TB3oJMkgFB9PfHmeMTS8VHVsRr4n99GoDugF0uva0YPtBvqo32YxgGUjR/jauMHd pYCKyk6N/9cAiioYNvyeRxLFFmTzbBtBTWAavWIWt/vd52lYeaENvYQLdrqo1ZmN e0oQGbMKTm21RGXeCg3ehSAP0XPNynGGo93micmWL129hLMwOONCkS8MN+eZZc1d eRI3eK/FS/piTHIwo1n9iTo9aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4MFNcr JHmDHjLMJO1boqILcDxwMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnSa2dU0UBx8prrEro65bLHXJPLNwRjojv+UwXZh0O+GJVyVEGjMf3 7D0cbUHfymVDlG4wrnSUkP1JLo3XYXuCwvPXPu33FJtp4GWZrg1gwmi53U48xSAT Uo7i5b3hcqCOL7qMZcOiR9w8wATmB17O0BzEaJ+TKSmy7UBARGsrJFmQm2/zukJ0 FbskwJIIBD7iygloNFjS6Acd0ePX1kovmftY+WMrj8fU6KrII+5hiuHVbFhckU+Q hwaB+Xg0iPV9guYb1w709e0ItHznbMX7XWOr8j3824dP8VfJd+8pO1HDPp9dJ3uF Xy89lY4OdAL9zdLhiSSqWPEz6meIXqpJ -----END CERTIFICATE-----Generated at Fri Sep 19 08:28:19 2025 by rpki-client