$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: pv77/flOrDXhJMr948jV9JxYa3NTR8TX28FCun0O38I= Subject key identifier: 77:30:BB:82:73:F9:0C:E6:92:5C:27:83:C9:C8:13:FA:46:76:46:A5 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 036B Signing time: Mon 03 Nov 2025 00:55:01 +0000 Manifest this update: Mon 03 Nov 2025 00:55:01 +0000 Manifest next update: Mon 10 Nov 2025 00:55:01 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: AnJziJZeELKHkhaDT5Ft9fVPCk1fxbKqoBK2exncfcE=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: 4/rySl/r5Eo+RCE6z8XYayPr6ezbIDIspCcJrRM4VBA=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 0wTMHozntDRRL6WlF/g074Q+r6/Lm6ac7roKHdDstY4=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 0K1MrQSQm8pKMHQMtu2VIbqhJP366PQFOjPnnF6bEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Nov 3 00:55:01 2025 GMT Not After : Nov 10 00:55:01 2025 GMT Subject: CN=6907fd65-e857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:df:12:aa:fc:a4:66:0f:46:1c:40:a9:a9:9b: 10:83:37:a6:41:19:32:d6:50:11:96:96:b2:b1:dd: 3f:43:36:70:f0:ce:f2:43:22:96:98:fb:93:85:9d: 8a:69:ef:e4:2f:1c:3a:78:43:0a:47:a5:5f:16:39: 8b:54:f4:e0:cf:24:5b:f9:70:9d:55:5e:ce:42:92: 69:f2:e9:01:b7:b8:3a:fe:67:f0:22:b9:b7:ca:e4: 76:1f:d5:16:cf:6a:8b:f3:58:da:b1:3c:81:13:c2: 03:b9:ae:ee:80:f0:67:a6:37:bf:be:67:78:28:49: 26:f2:48:bf:51:95:44:45:b7:8e:ec:96:17:57:be: 4f:46:21:62:42:08:df:cd:73:c9:6b:1f:50:20:07: 30:73:9b:e6:7d:26:2f:94:16:16:46:f4:52:e9:5c: f3:5c:a3:b9:fd:fa:53:10:0f:88:0b:cb:b9:88:ad: 3c:49:e9:2e:0e:61:ee:46:87:17:f0:ff:4f:a3:55: 85:0e:a4:6a:1c:17:e3:7e:5a:78:09:f7:39:0c:c4: 13:82:45:18:26:2f:c4:b1:2d:7f:7f:c1:27:d1:a1: 45:a6:1d:fa:24:63:9d:7d:7c:df:8e:43:23:dd:d9: f1:a4:58:dc:e7:16:82:70:14:b9:bc:50:e1:3b:7b: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:30:BB:82:73:F9:0C:E6:92:5C:27:83:C9:C8:13:FA:46:76:46:A5 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:de:9f:d1:16:39:e8:ae:e1:2c:bb:a7:1e:4f:cc:4d:43:43: f9:d5:bd:b6:82:a0:c1:74:8a:fd:24:94:5a:6a:ec:59:89:d3: 4e:ea:33:a9:90:a9:7d:f7:f2:85:d1:11:91:f3:29:19:8e:b5: f0:1e:d4:8e:24:d4:23:26:93:35:e9:91:e2:ba:71:55:c3:5d: 37:45:86:95:27:fa:d0:49:7c:33:57:42:e0:6f:3f:9a:6e:72: fc:b5:6c:a5:65:fb:18:2d:42:02:77:b8:e0:f3:88:d5:d4:25: 88:8c:17:4c:b1:77:05:a1:ca:9e:c0:20:74:63:86:a4:20:2c: 32:6d:1e:42:55:f8:fa:df:bc:cb:ef:69:88:21:fa:05:d0:d9: d0:1e:8d:28:74:22:36:2f:8e:21:6c:8f:f1:a8:19:91:82:15: 0c:bc:57:f0:12:29:35:76:5c:dc:35:6d:c1:27:00:41:e2:c3: 8f:23:48:12:5d:54:b4:23:fd:16:fb:ae:ef:44:c6:4d:8e:22: 88:5a:78:65:e6:a4:19:1b:8f:16:6d:21:42:3c:e5:8f:a4:cd: 98:0b:bf:2e:21:a8:2e:0c:b8:7c:36:0d:9d:23:89:c6:6a:76: 8e:07:c4:b6:3a:a6:51:21:b9:b9:5e:b2:32:24:7f:78:56:32: 60:0b:9f:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjUxMTAzMDA1NTAxWhcNMjUxMTEwMDA1NTAxWjAYMRYwFAYD VQQDEw02OTA3ZmQ2NS1lODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAod8SqvykZg9GHECpqZsQgzemQRky1lARlpaysd0/QzZw8M7yQyKWmPuThZ2K ae/kLxw6eEMKR6VfFjmLVPTgzyRb+XCdVV7OQpJp8ukBt7g6/mfwIrm3yuR2H9UW z2qL81jasTyBE8IDua7ugPBnpje/vmd4KEkm8ki/UZVERbeO7JYXV75PRiFiQgjf zXPJax9QIAcwc5vmfSYvlBYWRvRS6VzzXKO5/fpTEA+IC8u5iK08SekuDmHuRocX 8P9Po1WFDqRqHBfjflp4Cfc5DMQTgkUYJi/EsS1/f8En0aFFph36JGOdfXzfjkMj 3dnxpFjc5xaCcBS5vFDhO3sR2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcwu4Jz +Qzmklwng8nIE/pGdkalMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC33p/RFjnoruEsu6ceT8xNQ0P51b22gqDBdIr9JJRaauxZidNO6jOp kKl99/KF0RGR8ykZjrXwHtSOJNQjJpM16ZHiunFVw103RYaVJ/rQSXwzV0Lgbz+a bnL8tWylZfsYLUICd7jg84jV1CWIjBdMsXcFocqewCB0Y4akICwybR5CVfj637zL 72mIIfoF0NnQHo0odCI2L44hbI/xqBmRghUMvFfwEik1dlzcNW3BJwBB4sOPI0gS XVS0I/0W+67vRMZNjiKIWnhl5qQZG48WbSFCPOWPpM2YC78uIaguDLh8Ng2dI4nG anaOB8S2OqZRIbm5XrIyJH94VjJgC580 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:00 2025 by rpki-client