$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: JDpDlu+zdHwRZj83VxMfraDMgQwdhmwJnYVcB/sn020= Subject key identifier: DA:69:8B:AF:FD:D3:91:34:98:8D:2C:88:11:64:63:EE:F1:86:12:2C Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0B47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 13FF Signing time: Sun 02 Nov 2025 19:12:44 +0000 Manifest this update: Sun 02 Nov 2025 19:12:44 +0000 Manifest next update: Sun 09 Nov 2025 19:12:44 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: aBrmSsaDEC2RX8wgL9JrjSE0HXYJdbxa3msbDO1MUvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2887 (0xb47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Nov 2 19:12:44 2025 GMT Not After : Nov 9 19:12:44 2025 GMT Subject: CN=6907ad2c-357d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:82:b1:dd:8f:1a:35:8a:b0:01:a9:f1:8e: d1:d8:84:72:b8:9b:e5:a6:03:66:4a:fb:72:ed:00: 87:d1:ca:c8:7a:d1:c4:47:66:34:5f:d7:6a:1a:97: ec:d1:df:4a:72:ba:a7:31:7b:82:49:9b:7c:b2:5a: d2:af:e4:d4:55:7f:23:8d:44:83:5c:a6:53:67:73: 64:c3:47:2a:e9:35:ca:0a:77:4c:dd:2c:61:73:1d: 8b:98:e5:f1:a6:75:26:a9:bd:6d:44:93:56:3a:74: 7b:38:cb:8f:47:6b:ff:4f:7b:45:e9:62:37:4a:99: 6d:31:1b:52:49:19:0d:4b:0c:dc:f8:b2:08:b8:22: 81:34:d7:3f:c0:6b:fa:68:d5:18:81:bc:7e:32:52: e9:25:b1:00:98:f1:12:d7:4a:c6:cf:07:45:f5:3d: c7:be:5f:27:e9:19:05:74:87:93:0d:fe:56:42:47: 8f:10:79:de:ac:67:83:5d:9d:06:e3:57:6f:62:94: 04:39:b5:aa:77:3f:60:84:d1:ae:4c:75:ca:75:fe: ce:25:a3:c0:fa:0e:10:06:ac:f1:8d:b4:8b:96:11: 21:aa:74:11:03:a8:60:3c:05:a9:32:4e:2f:2e:a0: 79:2e:26:b2:fb:ab:15:b7:fb:e9:2e:37:55:80:4c: 6b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:69:8B:AF:FD:D3:91:34:98:8D:2C:88:11:64:63:EE:F1:86:12:2C X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:67:eb:7f:f1:2b:96:73:e5:5d:65:6b:37:11:90:77:84:4b: a4:90:dc:4b:92:2f:a1:1c:85:f9:d5:4c:58:4d:51:1f:fb:bb: f5:f5:6e:4d:58:b4:b1:51:9a:76:e1:dd:1e:3a:a2:db:f6:12: c6:74:02:ee:e4:74:77:19:64:8b:91:5b:c1:0f:c5:7b:80:64: 0e:fb:2d:8d:e5:80:f0:5a:94:5d:56:ac:e3:49:22:3b:dd:49: 83:69:af:1e:4c:90:12:51:c4:80:ac:2b:09:39:f5:40:f5:9a: cb:f4:f4:4b:e1:1d:57:1a:a7:c4:05:27:67:ce:8d:5a:05:1a: 0d:5c:fd:e1:5d:cc:9a:de:64:5b:cd:1f:6a:11:99:b2:7f:68: 64:5a:76:b2:42:1b:66:24:ec:b1:a6:e1:57:db:76:91:a4:7b: e1:1a:42:17:01:4f:c5:ca:29:fa:d7:81:69:b4:08:7e:13:e2: 1b:c1:22:16:87:9c:69:4d:9d:b4:ae:56:50:8a:0d:55:9c:ed: 54:f9:13:4f:4c:f0:6d:b2:95:a8:a2:f7:3e:20:ce:aa:cf:a6: 84:81:8c:d7:f6:3a:cc:96:89:7b:29:dc:04:d9:e0:74:ab:ec: 0a:5d:8e:6d:c5:7d:f8:bd:c5:cc:c3:be:fb:c3:1b:b8:36:82: 0d:a0:10:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjUxMTAyMTkxMjQ0WhcNMjUxMTA5MTkxMjQ0WjAYMRYwFAYD VQQDEw02OTA3YWQyYy0zNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3WCsd2PGjWKsAGp8Y7R2IRyuJvlpgNmSvty7QCH0crIetHER2Y0X9dqGpfs 0d9KcrqnMXuCSZt8slrSr+TUVX8jjUSDXKZTZ3Nkw0cq6TXKCndM3Sxhcx2LmOXx pnUmqb1tRJNWOnR7OMuPR2v/T3tF6WI3SpltMRtSSRkNSwzc+LIIuCKBNNc/wGv6 aNUYgbx+MlLpJbEAmPES10rGzwdF9T3Hvl8n6RkFdIeTDf5WQkePEHnerGeDXZ0G 41dvYpQEObWqdz9ghNGuTHXKdf7OJaPA+g4QBqzxjbSLlhEhqnQRA6hgPAWpMk4v LqB5Liay+6sVt/vpLjdVgExrFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNppi6/9 05E0mI0siBFkY+7xhhIsMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZZ+t/8SuWc+VdZWs3EZB3hEukkNxLki+hHIX51UxYTVEf+7v19W5N WLSxUZp24d0eOqLb9hLGdALu5HR3GWSLkVvBD8V7gGQO+y2N5YDwWpRdVqzjSSI7 3UmDaa8eTJASUcSArCsJOfVA9ZrL9PRL4R1XGqfEBSdnzo1aBRoNXP3hXcya3mRb zR9qEZmyf2hkWnayQhtmJOyxpuFX23aRpHvhGkIXAU/Fyin614FptAh+E+IbwSIW h5xpTZ20rlZQig1VnO1U+RNPTPBtspWoovc+IM6qz6aEgYzX9jrMlol7KdwE2eB0 q+wKXY5txX34vcXMw777wxu4NoINoBAf -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:17 2025 by rpki-client